last executing test programs: 2.505514382s ago: executing program 4 (id=1355): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x7, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x3ff, 0x7, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0xfffe, 0xfffe, 0x0, 0x1, 0xfffe]}}}) 2.362633443s ago: executing program 4 (id=1357): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) 2.077551122s ago: executing program 4 (id=1361): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000005c0)='./file0\x00', 0x2200000, &(0x7f0000000600)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid}, {}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.928057719s ago: executing program 2 (id=1364): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000080)=[{r0, 0x80c0}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) 1.831907777s ago: executing program 4 (id=1366): r0 = syz_open_dev$video(&(0x7f00000017c0), 0x7, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0) 1.639201206s ago: executing program 2 (id=1369): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 1.433734233s ago: executing program 4 (id=1372): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c) 1.416973145s ago: executing program 3 (id=1373): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x8083) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x6}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4cd, 0x100, 0x0, 0xdd, 0x0, 0x0, 0x8100000000, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0, 0xfffffffffffffffd, 0xff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff]}) 1.354064073s ago: executing program 1 (id=1374): r0 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) 1.254775638s ago: executing program 0 (id=1375): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f00000002c0)) 1.148338627s ago: executing program 2 (id=1376): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000161401"], 0x18}}, 0x0) 1.147621209s ago: executing program 3 (id=1377): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1.098841606s ago: executing program 1 (id=1378): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000000)=0x1ca3) 966.659091ms ago: executing program 0 (id=1379): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x31f, "13f20afd86c17f9dfa507069d57c6684154bc7ec29052b9ec48e707a4f251dd9", 0x0, 0x0, 0x0, 0x0, 0x8}) 925.300949ms ago: executing program 3 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x1, 0x0, {0xa, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4048014) 857.601852ms ago: executing program 1 (id=1381): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) eventfd2(0x5, 0x800) 825.010622ms ago: executing program 2 (id=1382): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@mmap={0xfffffc01, 0x2, 0x4, 0x10, 0x0, {0x77359400}, {0x1, 0x1, 0x2, 0x7, 0x6, 0xb, "92b9e163"}, 0x7, 0x1, {}, 0x5}) 719.352735ms ago: executing program 3 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) 682.177549ms ago: executing program 0 (id=1384): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) 658.122077ms ago: executing program 2 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070800000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001e0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000140003801000008008000340000001"], 0xc4}}, 0x0) 657.464937ms ago: executing program 1 (id=1386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000300)={0x89, 0xc}, 0x8) 493.21026ms ago: executing program 3 (id=1387): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) 457.716438ms ago: executing program 0 (id=1388): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000100)='\nY', 0x2}], 0x1) 440.501669ms ago: executing program 1 (id=1389): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) 330.551128ms ago: executing program 2 (id=1390): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) 217.476607ms ago: executing program 1 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47d78}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd146}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) 188.101047ms ago: executing program 3 (id=1392): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 187.378887ms ago: executing program 0 (id=1393): ioperm(0x0, 0x4, 0x1) nanosleep(&(0x7f00000000c0)={0x0, 0xfffffffffffffff7}, 0x0) 601.013µs ago: executing program 4 (id=1394): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 0s ago: executing program 0 (id=1395): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x5, 0x3) kernel console output (not intermixed with test programs): present! [ 95.208355][ T5836] Cannot create hsr debugfs directory [ 95.280072][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.287059][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.313634][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.326799][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.334521][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.361504][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.463112][ T5837] hsr_slave_0: entered promiscuous mode [ 95.469957][ T5837] hsr_slave_1: entered promiscuous mode [ 95.476105][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.483920][ T5837] Cannot create hsr debugfs directory [ 95.541120][ T5843] hsr_slave_0: entered promiscuous mode [ 95.547506][ T5843] hsr_slave_1: entered promiscuous mode [ 95.554117][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.563023][ T5843] Cannot create hsr debugfs directory [ 95.659518][ T5844] hsr_slave_0: entered promiscuous mode [ 95.666171][ T5844] hsr_slave_1: entered promiscuous mode [ 95.672979][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.680647][ T5844] Cannot create hsr debugfs directory [ 96.148717][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.162497][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.173733][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.195420][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.262413][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.277079][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.306666][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.317571][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.395520][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.414931][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.441629][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.471454][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.558777][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.581796][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.595774][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.610171][ T5842] Bluetooth: hci2: command tx timeout [ 96.610190][ T5855] Bluetooth: hci1: command tx timeout [ 96.615635][ T5842] Bluetooth: hci0: command tx timeout [ 96.636218][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.690416][ T5842] Bluetooth: hci4: command tx timeout [ 96.690457][ T5855] Bluetooth: hci3: command tx timeout [ 96.724531][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.747055][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.760868][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.780619][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.857892][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.927230][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.963388][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.993770][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.013078][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.020401][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.052524][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.059724][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.069766][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.076901][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.095804][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.118052][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.125267][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.160819][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.205795][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.213000][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.253763][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.260936][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.330494][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.384616][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.471492][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.495049][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.563792][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.571128][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.610032][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.617236][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.654014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.661254][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.697139][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.704394][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.985675][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.061743][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.092989][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.218475][ T5836] veth0_vlan: entered promiscuous mode [ 98.277691][ T5836] veth1_vlan: entered promiscuous mode [ 98.324006][ T5837] veth0_vlan: entered promiscuous mode [ 98.366197][ T5837] veth1_vlan: entered promiscuous mode [ 98.468412][ T5836] veth0_macvtap: entered promiscuous mode [ 98.502025][ T5836] veth1_macvtap: entered promiscuous mode [ 98.574474][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.601431][ T5837] veth0_macvtap: entered promiscuous mode [ 98.613906][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.625503][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.641704][ T5837] veth1_macvtap: entered promiscuous mode [ 98.665969][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.691357][ T5855] Bluetooth: hci1: command tx timeout [ 98.691449][ T5842] Bluetooth: hci2: command tx timeout [ 98.702542][ T5855] Bluetooth: hci0: command tx timeout [ 98.733039][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.743704][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753253][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.762766][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.771625][ T5842] Bluetooth: hci3: command tx timeout [ 98.780359][ T5842] Bluetooth: hci4: command tx timeout [ 98.792934][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.837342][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.880403][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.889144][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.898300][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.907275][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.936770][ T5844] veth0_vlan: entered promiscuous mode [ 98.968473][ T5843] veth0_vlan: entered promiscuous mode [ 99.022057][ T5845] veth0_vlan: entered promiscuous mode [ 99.033265][ T5844] veth1_vlan: entered promiscuous mode [ 99.041036][ T5843] veth1_vlan: entered promiscuous mode [ 99.106619][ T5845] veth1_vlan: entered promiscuous mode [ 99.128168][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.137205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.214615][ T5843] veth0_macvtap: entered promiscuous mode [ 99.248435][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.271294][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.283349][ T5843] veth1_macvtap: entered promiscuous mode [ 99.293135][ T5844] veth0_macvtap: entered promiscuous mode [ 99.304457][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.314957][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.332109][ T5844] veth1_macvtap: entered promiscuous mode [ 99.363263][ T5845] veth0_macvtap: entered promiscuous mode [ 99.391335][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.423083][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.432579][ T5845] veth1_macvtap: entered promiscuous mode [ 99.456621][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.469061][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.486458][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.487081][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.496217][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.513871][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.523265][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.546672][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.604115][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.663669][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.679658][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688477][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.698061][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.706899][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.757507][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.823850][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.840906][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.852529][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.861683][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.900018][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.061617][ T24] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 100.081299][ T5961] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7'. [ 100.094455][ T5961] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7'. [ 100.104640][ T5961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7'. [ 100.118057][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.120347][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.129594][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.154500][ T24] usb 1-1: Product: syz [ 100.158827][ T24] usb 1-1: Manufacturer: syz [ 100.169068][ T24] usb 1-1: SerialNumber: syz [ 100.169717][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.185575][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.221924][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.241456][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.281411][ T5904] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.398092][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.418171][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.476204][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.499988][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.553988][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.579999][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.734205][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.762160][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.775380][ T5842] Bluetooth: hci0: command tx timeout [ 100.775402][ T5855] Bluetooth: hci1: command tx timeout [ 100.786434][ T5152] Bluetooth: hci2: command tx timeout [ 100.836839][ T976] usb 1-1: USB disconnect, device number 2 [ 100.860934][ T5855] Bluetooth: hci4: command tx timeout [ 100.860987][ T5152] Bluetooth: hci3: command tx timeout [ 101.115684][ T5971] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 101.163921][ T5969] loop3: detected capacity change from 0 to 4096 [ 101.171316][ T5971] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 101.231337][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 101.294032][ T5973] loop4: detected capacity change from 0 to 512 [ 101.412871][ T5904] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 101.485865][ T5904] ath9k_htc: Failed to initialize the device [ 101.524030][ T5973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.540478][ T5969] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000 [ 101.553507][ T5978] loop0: detected capacity change from 0 to 128 [ 101.580477][ T5973] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.596208][ T976] usb 1-1: ath9k_htc: USB layer deinitialized [ 101.609937][ T5969] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 101.619881][ T5978] befs: (loop0): invalid magic header [ 101.713224][ T5963] loop1: detected capacity change from 0 to 32768 [ 101.786780][ T5963] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8 (5963) [ 101.955744][ T5963] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.040717][ T5963] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 102.068098][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.084645][ T5984] loop2: detected capacity change from 0 to 256 [ 102.098353][ T5963] BTRFS info (device loop1): using free-space-tree [ 102.135185][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13'. [ 102.207936][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13'. [ 102.295890][ T5986] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13'. [ 102.355195][ T5984] FAT-fs (loop2): Directory bread(block 64) failed [ 102.431102][ T5984] FAT-fs (loop2): Directory bread(block 65) failed [ 102.473351][ T5984] FAT-fs (loop2): Directory bread(block 66) failed [ 102.489514][ T5984] FAT-fs (loop2): Directory bread(block 67) failed [ 102.536177][ T5984] FAT-fs (loop2): Directory bread(block 68) failed [ 102.543939][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15'. [ 102.556531][ T5984] FAT-fs (loop2): Directory bread(block 69) failed [ 102.581849][ T6005] netlink: 84 bytes leftover after parsing attributes in process `syz.4.15'. [ 102.605039][ T5984] FAT-fs (loop2): Directory bread(block 70) failed [ 102.658614][ T5984] FAT-fs (loop2): Directory bread(block 71) failed [ 102.691111][ T5984] FAT-fs (loop2): Directory bread(block 72) failed [ 102.697717][ T5984] FAT-fs (loop2): Directory bread(block 73) failed [ 102.857176][ T5837] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.931780][ T6015] netlink: 'syz.0.19': attribute type 5 has an invalid length. [ 103.180864][ T6021] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 103.220313][ T6021] veth1_vlan: entered allmulticast mode [ 103.286034][ T6021] team0: Device veth1_vlan failed to register rx_handler [ 103.383795][ T6021] syz.0.22 (6021) used greatest stack depth: 19800 bytes left [ 103.437155][ T6025] loop3: detected capacity change from 0 to 512 [ 103.501884][ T6025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.624047][ T6025] EXT4-fs (loop3): 1 orphan inode deleted [ 103.639902][ T13] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.661851][ T13] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 103.682751][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.786993][ T6025] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.026772][ T6043] loop0: detected capacity change from 0 to 256 [ 104.036592][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.074503][ T6043] ======================================================= [ 104.074503][ T6043] WARNING: The mand mount option has been deprecated and [ 104.074503][ T6043] and is ignored by this kernel. Remove the mand [ 104.074503][ T6043] option from the mount to silence this warning. [ 104.074503][ T6043] ======================================================= [ 104.134974][ T6040] loop2: detected capacity change from 0 to 4096 [ 104.201291][ T6047] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 104.266561][ T6043] FAT-fs (loop0): Directory bread(block 64) failed [ 104.302152][ T6043] FAT-fs (loop0): Directory bread(block 65) failed [ 104.308841][ T6043] FAT-fs (loop0): Directory bread(block 66) failed [ 104.348384][ T6043] FAT-fs (loop0): Directory bread(block 67) failed [ 104.381246][ T6043] FAT-fs (loop0): Directory bread(block 68) failed [ 104.387930][ T6043] FAT-fs (loop0): Directory bread(block 69) failed [ 104.444674][ T6043] FAT-fs (loop0): Directory bread(block 70) failed [ 104.473632][ T6043] FAT-fs (loop0): Directory bread(block 71) failed [ 104.522331][ T6043] FAT-fs (loop0): Directory bread(block 72) failed [ 104.550207][ T6043] FAT-fs (loop0): Directory bread(block 73) failed [ 104.958518][ T6061] loop4: detected capacity change from 0 to 4096 [ 105.000715][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.124750][ T6061] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 105.161293][ T6061] ntfs3(loop4): Failed to load $Extend (-22). [ 105.167549][ T6061] ntfs3(loop4): Failed to initialize $Extend. [ 105.179401][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 105.220345][ T5952] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 105.228403][ T5952] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 105.289955][ T5952] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 105.318069][ T5952] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 105.343614][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.388468][ T5952] usb 4-1: Product: syz [ 105.399192][ T5952] usb 4-1: Manufacturer: syz [ 105.421546][ T5952] usb 4-1: SerialNumber: syz [ 105.468361][ T5952] cdc_acm 4-1:2.1: probe with driver cdc_acm failed with error -22 [ 105.468547][ T6073] loop0: detected capacity change from 0 to 64 [ 105.543885][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 105.589690][ T6078] loop2: detected capacity change from 0 to 16 [ 105.596156][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 105.648610][ T6078] erofs (device loop2): mounted with root inode @ nid 36. [ 105.704012][ T6079] batadv1: entered promiscuous mode [ 105.718584][ T5952] usb 4-1: USB disconnect, device number 2 [ 105.749215][ T5152] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000] [ 105.770032][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.782785][ T6078] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 105.884631][ T6078] erofs (device loop2): read error -117 @ 1 of nid 89 [ 105.918532][ T30] audit: type=1800 audit(1750081605.062:2): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.50" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 106.846873][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.918000][ T6117] autofs: Bad value for 'fd' [ 107.012653][ T6119] loop3: detected capacity change from 0 to 16 [ 107.045718][ T6119] erofs (device loop3): mounted with root inode @ nid 36. [ 107.116696][ T6123] netlink: 'syz.1.72': attribute type 3 has an invalid length. [ 107.167575][ T6127] netlink: 'syz.4.73': attribute type 1 has an invalid length. [ 107.521561][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 107.622316][ T6145] kernel read not supported for file /  (pid: 6145 comm: syz.3.82) [ 107.636068][ T30] audit: type=1800 audit(1750081606.782:3): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.82" name=200120 dev="mqueue" ino=8272 res=0 errno=0 [ 107.874699][ T6150] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 107.887615][ T6150] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'. [ 108.046863][ T6155] syz.3.86 uses obsolete (PF_INET,SOCK_PACKET) [ 108.274897][ T6159] warning: `syz.1.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.399080][ T6134] loop0: detected capacity change from 0 to 32768 [ 108.445147][ T6134] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.77 (6134) [ 108.513574][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.560685][ T6134] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.627288][ T6134] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 108.808167][ T6134] BTRFS info (device loop0): rebuilding free space tree [ 108.902691][ T6191] loop3: detected capacity change from 0 to 512 [ 108.911697][ T43] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 108.960224][ T6134] BTRFS info (device loop0): disabling free space tree [ 108.976823][ T6134] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.997647][ T6134] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.998536][ T6191] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 109.096848][ T6197] loop4: detected capacity change from 0 to 1764 [ 109.111617][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.119567][ T6191] EXT4-fs (loop3): 1 truncate cleaned up [ 109.140202][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.165623][ T43] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 109.182461][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 30062, setting to 64 [ 109.201185][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.216895][ T5836] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.271394][ T43] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 109.311717][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.362873][ T6172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.378107][ T6191] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.97: Logical block already allocated [ 109.403069][ T43] hub 3-1:1.0: bad descriptor, ignoring hub [ 109.409058][ T43] hub 3-1:1.0: probe with driver hub failed with error -5 [ 109.462303][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 109.477299][ T6191] EXT4-fs (loop3): Remounting filesystem read-only [ 109.490520][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 109.496126][ T43] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 109.693090][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.714122][ T43] usb 3-1: USB disconnect, device number 2 [ 109.799500][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.986398][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 109.995043][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.013821][ T9] usb 1-1: config 0 has no interface number 0 [ 110.031574][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 110.044359][ T6212] loop3: detected capacity change from 0 to 4096 [ 110.060153][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.069403][ T6212] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 110.080503][ T6215] loop1: detected capacity change from 0 to 512 [ 110.094335][ T6215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.116567][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 110.128175][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.146793][ T9] usb 1-1: Product: syz [ 110.188171][ T6215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.220681][ T9] usb 1-1: Manufacturer: syz [ 110.225380][ T9] usb 1-1: SerialNumber: syz [ 110.277586][ T6215] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.338285][ T9] usb 1-1: config 0 descriptor?? [ 110.593564][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.628040][ T6227] loop4: detected capacity change from 0 to 64 [ 110.819197][ T43] usb 1-1: USB disconnect, device number 3 [ 111.213458][ T6240] loop1: detected capacity change from 0 to 4096 [ 111.321261][ T6240] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 111.349915][ T6240] ntfs3(loop1): Failed to load $Extend (-22). [ 111.356053][ T6240] ntfs3(loop1): Failed to initialize $Extend. [ 111.453198][ T6240] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 111.605387][ T6255] netlink: 'syz.0.126': attribute type 10 has an invalid length. [ 111.636212][ T6254] netlink: 136 bytes leftover after parsing attributes in process `syz.3.125'. [ 111.654039][ T6257] loop4: detected capacity change from 0 to 512 [ 111.706960][ T6257] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.737249][ T6254] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 111.787891][ T6255] team0: Device veth1_macvtap failed to register rx_handler [ 111.978769][ T5845] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 111.997288][ T6264] loop3: detected capacity change from 0 to 16 [ 112.050413][ T6246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.090466][ T6264] erofs (device loop3): mounted with root inode @ nid 36. [ 112.296403][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'. [ 112.379719][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.573551][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 112.622301][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.641835][ T30] audit: type=1326 audit(1750081611.792:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 112.650942][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 112.694085][ T30] audit: type=1326 audit(1750081611.832:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 112.717870][ T30] audit: type=1326 audit(1750081611.832:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 112.776936][ T30] audit: type=1326 audit(1750081611.842:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 112.780646][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 112.859373][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.881616][ T30] audit: type=1326 audit(1750081611.842:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.3.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 112.885993][ T9] usb 5-1: config 0 descriptor?? [ 112.977649][ T6270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.020600][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 113.137667][ T6299] netlink: 76 bytes leftover after parsing attributes in process `syz.1.147'. [ 113.165101][ T6299] netlink: 76 bytes leftover after parsing attributes in process `syz.1.147'. [ 113.230381][ T9] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 113.249562][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.260931][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.268172][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 113.347838][ T6301] loop3: detected capacity change from 0 to 2048 [ 113.429500][ T9] usb 5-1: USB disconnect, device number 2 [ 113.500113][ T6301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.016669][ T6312] loop3: detected capacity change from 0 to 4096 [ 114.029530][ T6316] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 114.109396][ T6312] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 114.189882][ T6320] netlink: 52 bytes leftover after parsing attributes in process `syz.4.157'. [ 114.233757][ T6320] netlink: 52 bytes leftover after parsing attributes in process `syz.4.157'. [ 114.937380][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 114.996137][ T6340] loop1: detected capacity change from 0 to 4096 [ 115.020237][ T6340] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 115.717751][ T6366] loop2: detected capacity change from 0 to 256 [ 115.770545][ T6366] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.828518][ T6366] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 115.864116][ T6366] FAT-fs (loop2): Filesystem has been set read-only [ 115.886911][ T6366] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 116.133626][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 116.319468][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.351772][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 116.460881][ T6353] loop0: detected capacity change from 0 to 32768 [ 116.488573][ T43] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.512769][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.558840][ T43] usb 4-1: config 0 descriptor?? [ 116.607607][ T6393] netlink: 128 bytes leftover after parsing attributes in process `syz.4.191'. [ 116.786240][ T43] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 116.803330][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 116.814213][ T6397] loop2: detected capacity change from 0 to 512 [ 116.830241][ T6397] EXT4-fs: Ignoring removed i_version option [ 116.839381][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 116.844631][ T6353] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 116.853054][ T6397] EXT4-fs: Ignoring removed nobh option [ 116.928769][ T6353] allowing incompatible features above 0.0: (unknown version) [ 116.958917][ T6353] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 116.995742][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 117.023300][ T6353] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 117.090081][ T6353] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 117.096125][ T43] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 117.115133][ T43] [drm] Initialized udl on minor 2 [ 117.131267][ T43] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.134672][ T6397] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.143800][ T43] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 117.162132][ T5967] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 117.170719][ T5967] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 117.180950][ T43] usb 4-1: USB disconnect, device number 3 [ 117.190862][ T6353] bcachefs (loop0): Version upgrade required: [ 117.190862][ T6353] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 117.190862][ T6353] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 117.190862][ T6353] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 117.268596][ T6397] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.359411][ T6353] bcachefs (loop0): dropping and reconstructing all alloc info [ 117.376013][ T6397] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 3: comm syz.2.193: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 117.442300][ T6397] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 117.484873][ T6353] bcachefs (loop0): accounting_read... done [ 117.503111][ T6353] bcachefs (loop0): alloc_read... done [ 117.511526][ T6353] bcachefs (loop0): snapshots_read... done [ 117.529854][ T6353] bcachefs (loop0): check_allocations... [ 117.584712][ T5844] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 117.586477][ T6353] done [ 117.654549][ T6353] bcachefs (loop0): going read-write [ 117.751943][ T6423] loop2: detected capacity change from 0 to 8 [ 117.759189][ T6423] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 117.808605][ T6207] udevd[6207]: incorrect cramfs checksum on /dev/loop2 [ 117.821868][ T6353] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 117.821868][ T6353] rw journal devs: [ 117.956715][ T6353] bcachefs (loop0): done starting filesystem [ 117.982169][ T6207] udevd[6207]: incorrect cramfs checksum on /dev/loop2 [ 118.019114][ T6434] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 118.338966][ T5836] bcachefs (loop0): shutting down [ 118.342304][ T6443] loop3: detected capacity change from 0 to 256 [ 118.355138][ T5836] bcachefs (loop0): going read-only [ 118.381003][ T5836] bcachefs (loop0): finished waiting for writes to stop [ 118.411093][ T5836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 118.429825][ T5836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 118.432996][ T6443] exfat: Deprecated parameter 'namecase' [ 118.459716][ T5836] bcachefs (loop0): unclean shutdown complete, journal seq 10 [ 118.498122][ T6443] exfat: Deprecated parameter 'namecase' [ 118.525216][ T5836] bcachefs (loop0): done going read-only, filesystem not clean [ 118.625988][ T6443] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 118.691572][ T6457] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 118.723374][ T5836] bcachefs (loop0): shutdown complete [ 118.859568][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.213'. [ 119.203390][ T30] audit: type=1326 audit(1750081618.352:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097fd8e929 code=0x7ffc0000 [ 119.225866][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.302523][ T6466] loop3: detected capacity change from 0 to 4096 [ 119.309421][ T30] audit: type=1326 audit(1750081618.382:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097fd8e929 code=0x7ffc0000 [ 119.375255][ T6466] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 119.384430][ T30] audit: type=1326 audit(1750081618.402:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f097fd8e929 code=0x7ffc0000 [ 119.384494][ T30] audit: type=1326 audit(1750081618.402:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097fd8e929 code=0x7ffc0000 [ 119.384540][ T30] audit: type=1326 audit(1750081618.402:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097fd8e929 code=0x7ffc0000 [ 120.725659][ T6510] loop3: detected capacity change from 0 to 256 [ 120.965305][ T6510] FAT-fs (loop3): Directory bread(block 64) failed [ 120.996827][ T6510] FAT-fs (loop3): Directory bread(block 65) failed [ 121.027309][ T6510] FAT-fs (loop3): Directory bread(block 66) failed [ 121.049366][ T6510] FAT-fs (loop3): Directory bread(block 67) failed [ 121.056045][ T6510] FAT-fs (loop3): Directory bread(block 68) failed [ 121.103392][ T6510] FAT-fs (loop3): Directory bread(block 69) failed [ 121.117516][ T6493] loop2: detected capacity change from 0 to 32768 [ 121.129466][ T6510] FAT-fs (loop3): Directory bread(block 70) failed [ 121.146623][ T6510] FAT-fs (loop3): Directory bread(block 71) failed [ 121.177825][ T6510] FAT-fs (loop3): Directory bread(block 72) failed [ 121.195352][ T6510] FAT-fs (loop3): Directory bread(block 73) failed [ 121.233834][ T6493] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 121.233834][ T6493] [ 121.288580][ T6493] ERROR: (device loop2): remounting filesystem as read-only [ 121.320049][ T6493] ERROR: (device loop2): jfs_rename: [ 121.320049][ T6493] [ 121.425040][ T5844] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 121.425040][ T5844] [ 121.451140][ T6512] loop0: detected capacity change from 0 to 1764 [ 121.507912][ T6502] loop1: detected capacity change from 0 to 32768 [ 121.546250][ T6512] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 121.671928][ T6502] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.932897][ T6526] loop3: detected capacity change from 0 to 256 [ 121.952497][ T6528] trusted_key: encrypted_key: keyword 'lod' not recognized [ 122.080998][ T6526] FAT-fs (loop3): Directory bread(block 64) failed [ 122.119496][ T6526] FAT-fs (loop3): Directory bread(block 65) failed [ 122.126342][ T6526] FAT-fs (loop3): Directory bread(block 66) failed [ 122.146997][ T6508] loop4: detected capacity change from 0 to 32768 [ 122.151499][ T6502] XFS (loop1): Ending clean mount [ 122.189500][ T6526] FAT-fs (loop3): Directory bread(block 67) failed [ 122.222510][ T6502] XFS (loop1): Quotacheck needed: Please wait. [ 122.229505][ T6526] FAT-fs (loop3): Directory bread(block 68) failed [ 122.236350][ T6526] FAT-fs (loop3): Directory bread(block 69) failed [ 122.244147][ T6526] FAT-fs (loop3): Directory bread(block 70) failed [ 122.253211][ T6526] FAT-fs (loop3): Directory bread(block 71) failed [ 122.260269][ T6526] FAT-fs (loop3): Directory bread(block 72) failed [ 122.267513][ T6526] FAT-fs (loop3): Directory bread(block 73) failed [ 122.291870][ T6508] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.390296][ T6542] nftables ruleset with unbound set [ 122.409391][ T6502] XFS (loop1): Quotacheck: Done. [ 122.504515][ T30] audit: type=1800 audit(1750081621.642:14): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.241" name="bus" dev="loop3" ino=1048605 res=0 errno=0 [ 122.536766][ T6508] XFS (loop4): Ending clean mount [ 122.610375][ T6547] loop2: detected capacity change from 0 to 1024 [ 122.620840][ T6547] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.665220][ T6547] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 122.729910][ T6547] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.747809][ T5837] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.810721][ T6547] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.247: Invalid inode table block 0 in block_group 0 [ 122.854214][ T5845] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.866042][ T6547] EXT4-fs (loop2): Remounting filesystem read-only [ 122.945631][ T6547] Quota error (device loop2): write_blk: dquota write failed [ 122.945753][ T6547] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 122.945862][ T6547] EXT4-fs (loop2): 1 truncate cleaned up [ 122.975625][ T6547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.174291][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.663038][ T6569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.702955][ T6563] loop3: detected capacity change from 0 to 4096 [ 124.629457][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 124.726842][ T6608] netlink: 'syz.4.275': attribute type 1 has an invalid length. [ 124.808384][ T6611] loop3: detected capacity change from 0 to 8 [ 124.843882][ T6611] cramfs: empty filesystem [ 124.949182][ T6207] udevd[6207]: incorrect cramfs checksum on /dev/loop3 [ 124.993071][ T6615] loop1: detected capacity change from 0 to 2048 [ 125.159381][ T6625] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.162404][ T6623] raw_sendmsg: syz.2.282 forgot to set AF_INET. Fix it! [ 125.237878][ T6615] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32528, name_len=0 [ 125.369667][ T6615] Remounting filesystem read-only [ 125.629832][ T6639] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 125.669135][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 125.844906][ T6647] futex_wake_op: syz.0.293 tries to shift op by 36; fix this program [ 126.442816][ T6667] loop2: detected capacity change from 0 to 256 [ 126.668517][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 126.744697][ T6667] FAT-fs (loop2): Directory bread(block 64) failed [ 126.771061][ T6667] FAT-fs (loop2): Directory bread(block 65) failed [ 126.792235][ T6667] FAT-fs (loop2): Directory bread(block 66) failed [ 126.828541][ T6667] FAT-fs (loop2): Directory bread(block 67) failed [ 126.869608][ T6667] FAT-fs (loop2): Directory bread(block 68) failed [ 126.896694][ T6643] loop1: detected capacity change from 0 to 32768 [ 126.906197][ T6667] FAT-fs (loop2): Directory bread(block 69) failed [ 126.923207][ T6667] FAT-fs (loop2): Directory bread(block 70) failed [ 126.950250][ T6643] btrfs: Deprecated parameter 'usebackuproot' [ 126.957478][ T6643] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 126.971999][ T6667] FAT-fs (loop2): Directory bread(block 71) failed [ 126.981698][ T6667] FAT-fs (loop2): Directory bread(block 72) failed [ 126.988309][ T6667] FAT-fs (loop2): Directory bread(block 73) failed [ 127.007875][ T6643] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.288 (6643) [ 127.039981][ T5967] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 127.146865][ T6643] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 127.193471][ T6643] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 127.221253][ T6643] BTRFS info (device loop1): using free-space-tree [ 127.264986][ T5967] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 127.291028][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.309480][ T5952] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.341244][ T5967] usb 1-1: config 0 descriptor?? [ 127.434553][ T5967] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 127.446569][ T6643] BTRFS info (device loop1): rebuilding free space tree [ 127.469465][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 127.490458][ T5952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.522272][ T5952] usb 5-1: config 0 has no interface number 0 [ 127.543370][ T6643] BTRFS info (device loop1): checking UUID tree [ 127.563443][ T5952] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 127.589384][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.618594][ T5952] usb 5-1: Product: syz [ 127.642943][ T5952] usb 5-1: Manufacturer: syz [ 127.671563][ T5952] usb 5-1: SerialNumber: syz [ 127.682943][ T5952] usb 5-1: config 0 descriptor?? [ 127.692127][ T6643] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 127.713296][ T5952] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 127.749898][ T5952] usb 5-1: selecting invalid altsetting 1 [ 127.757028][ T5952] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 127.790451][ T5967] gp8psk: usb in 137 operation failed. [ 127.799058][ T5952] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.829367][ T5967] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 127.858227][ T5952] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 127.866036][ T5967] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 127.916044][ T5952] usb 5-1: media controller created [ 127.923702][ T5967] usb 1-1: USB disconnect, device number 4 [ 128.041102][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.163461][ T5952] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 128.207404][ T5952] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 128.319466][ T6715] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.447220][ T5952] DVB: Unable to find symbol mxl5005s_attach() [ 128.499949][ T5952] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 128.552244][ T6719] netlink: 'syz.0.319': attribute type 2 has an invalid length. [ 128.669248][ T6719] : entered promiscuous mode [ 128.702696][ T5952] usb 5-1: USB disconnect, device number 3 [ 128.823843][ T6723] netlink: 56 bytes leftover after parsing attributes in process `syz.2.321'. [ 128.857564][ T6723] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 128.899480][ T6723] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 129.244051][ T6709] loop3: detected capacity change from 0 to 32768 [ 129.276556][ T6709] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.315 (6709) [ 129.306727][ T6735] syz.0.327 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 129.382386][ T6709] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 129.435116][ T6709] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 129.469249][ T6709] BTRFS info (device loop3): disk space caching is enabled [ 129.506057][ T6709] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 129.527346][ T6741] No such timeout policy "syz1" [ 129.631168][ T6749] loop2: detected capacity change from 0 to 8 [ 129.834124][ T6709] BTRFS info (device loop3): rebuilding free space tree [ 129.944335][ T6709] BTRFS info (device loop3): disabling free space tree [ 129.961561][ T6709] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.992464][ T6709] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.158093][ T6709] BTRFS info (device loop3): balance: start -sprofiles=NONE,usage=1..511 [ 130.185559][ T6709] BTRFS info (device loop3): balance: ended with status: 0 [ 130.313323][ T6775] netlink: 'syz.4.338': attribute type 1 has an invalid length. [ 130.416499][ T5843] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.480845][ T6777] xt_hashlimit: max too large, truncated to 1048576 [ 130.849903][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.858783][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 130.901720][ T6739] loop1: detected capacity change from 0 to 32768 [ 130.936103][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 131.069719][ T6739] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 131.069719][ T6739] [ 131.096888][ T6794] xt_TCPMSS: Only works on TCP SYN packets [ 131.381325][ T6802] loop0: detected capacity change from 0 to 512 [ 131.437862][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.480061][ T6802] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.556267][ T6806] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 131.683867][ T6810] No such timeout policy "syz0" [ 131.711447][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.934472][ T6813] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 132.267477][ T6820] loop4: detected capacity change from 0 to 4096 [ 132.308936][ T6820] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 132.424636][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 132.431222][ T6832] loop3: detected capacity change from 0 to 512 [ 132.443272][ T6835] loop2: detected capacity change from 0 to 512 [ 132.495870][ T6820] ntfs3(loop4): ino=19, mi_enum_attr [ 132.530985][ T6832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.557732][ T6820] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 132.628884][ T6835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.682968][ T6832] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.731638][ T6835] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.743211][ T6836] loop1: detected capacity change from 0 to 32768 [ 132.753829][ T6836] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.367 (6836) [ 132.830704][ T6820] ntfs3(loop4): failed to convert "c46c" to iso8859-13 [ 132.855715][ T6820] ntfs3(loop4): ino=20, mi_enum_attr [ 132.865592][ T6836] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 132.931150][ T6836] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 132.941011][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.945321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962055][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.987188][ T6836] BTRFS info (device loop1): disk space caching is enabled [ 133.007970][ T6836] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 133.054553][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.286235][ T6836] BTRFS info (device loop1): rebuilding free space tree [ 133.380509][ T6836] BTRFS info (device loop1): disabling free space tree [ 133.387495][ T6836] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.459415][ T6836] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.902791][ T5837] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 133.912231][ T6878] loop4: detected capacity change from 0 to 512 [ 133.936670][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 133.945888][ T6878] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.042808][ T6878] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.379: iget: bad i_size value: -6917529027641081756 [ 134.082074][ T6878] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.379: couldn't read orphan inode 17 (err -117) [ 134.178472][ T6878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.396025][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.584046][ T6894] netlink: 'syz.4.385': attribute type 7 has an invalid length. [ 134.627092][ T6894] : entered promiscuous mode [ 134.989602][ T6910] netlink: 'syz.3.391': attribute type 2 has an invalid length. [ 135.220960][ T6912] xt_cgroup: xt_cgroup: no path or classid specified [ 135.500254][ T6924] netlink: 830 bytes leftover after parsing attributes in process `syz.0.401'. [ 135.661124][ T6928] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.727497][ T6887] loop2: detected capacity change from 0 to 32768 [ 135.728000][ T6932] loop0: detected capacity change from 0 to 1024 [ 135.774963][ T6934] loop3: detected capacity change from 0 to 512 [ 135.824842][ T6887] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.857199][ T6934] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.895150][ T6934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.405: bg 0: block 248: padding at end of block bitmap is not set [ 136.013680][ T6934] Quota error (device loop3): write_blk: dquota write failed [ 136.050323][ T6887] XFS (loop2): Ending clean mount [ 136.064144][ T6934] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 136.076145][ T6934] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.405: Failed to acquire dquot type 1 [ 136.127396][ T6934] EXT4-fs (loop3): 1 truncate cleaned up [ 136.181904][ T6934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.301331][ T5844] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.313108][ T6953] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 136.453998][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.964593][ T6973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.114473][ T6978] netlink: 'syz.2.422': attribute type 4 has an invalid length. [ 137.698575][ T7000] loop2: detected capacity change from 0 to 256 [ 137.726405][ T7000] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.516058][ T7026] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 138.555376][ T7029] loop2: detected capacity change from 0 to 256 [ 138.582122][ T6986] loop3: detected capacity change from 0 to 32768 [ 138.640054][ T6986] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.425 (6986) [ 138.730705][ T6986] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 138.758331][ T7032] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 138.782097][ T7032] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 138.804935][ T6986] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 138.821104][ T7032] netlink: 224 bytes leftover after parsing attributes in process `syz.1.449'. [ 138.839549][ T6986] BTRFS info (device loop3): using free-space-tree [ 139.120983][ T7052] loop1: detected capacity change from 0 to 1024 [ 139.332656][ T5843] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 139.368434][ T30] audit: type=1326 audit(1750081638.512:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 139.478491][ T30] audit: type=1326 audit(1750081638.512:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 139.546400][ T30] audit: type=1326 audit(1750081638.552:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 139.722449][ T30] audit: type=1326 audit(1750081638.552:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 139.827164][ T30] audit: type=1326 audit(1750081638.552:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7061 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 140.546559][ T7101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.475'. [ 140.746489][ T7106] loop0: detected capacity change from 0 to 64 [ 140.796787][ T7110] loop3: detected capacity change from 0 to 64 [ 140.810290][ T7106] Trying to free block not in datazone [ 140.839652][ T7106] Trying to free block not in datazone [ 140.845178][ T7106] Trying to free block not in datazone [ 140.892458][ T7112] loop1: detected capacity change from 0 to 512 [ 140.899468][ T7106] Trying to free block not in datazone [ 140.915224][ T7106] minix_free_block (loop0:6): bit already cleared [ 140.939554][ T7106] Trying to free block not in datazone [ 140.958629][ T7106] Trying to free block not in datazone [ 140.959770][ T7112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.115462][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.169766][ T7112] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.342971][ T7112] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.481: Abort forced by user [ 141.409594][ T7112] EXT4-fs (loop1): Remounting filesystem read-only [ 141.416178][ T7112] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.448740][ T7086] loop2: detected capacity change from 0 to 32768 [ 141.503673][ T7086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.469 (7086) [ 141.585632][ T7086] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.602045][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.632190][ T7086] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 141.679417][ T7086] BTRFS info (device loop2): using free-space-tree [ 141.772696][ T7140] loop3: detected capacity change from 0 to 64 [ 142.080639][ T5844] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.299613][ T7159] !: renamed from dummy0 (while UP) [ 142.496379][ T7167] netlink: 'syz.2.495': attribute type 21 has an invalid length. [ 142.759212][ T7175] program syz.4.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.938453][ T7181] syz.3.506 (7181): /proc/7179/oom_adj is deprecated, please use /proc/7179/oom_score_adj instead. [ 143.241888][ T7189] loop0: detected capacity change from 0 to 1024 [ 143.425727][ T12] hfsplus: b-tree write err: -5, ino 4 [ 143.531601][ T7201] binder: 7200:7201 ioctl c0306201 200000000780 returned -14 [ 143.730968][ T7207] loop2: detected capacity change from 0 to 1024 [ 143.888658][ T7209] loop4: detected capacity change from 0 to 4096 [ 143.956186][ T7209] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 143.999625][ T7209] UDF-fs: Scanning with blocksize 512 failed [ 144.107990][ T7209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.188548][ T7209] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 144.765087][ T7241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.536'. [ 144.806042][ T7241] netlink: 'syz.3.536': attribute type 2 has an invalid length. [ 144.853208][ T7243] loop0: detected capacity change from 0 to 1024 [ 144.953171][ T7249] netlink: 124 bytes leftover after parsing attributes in process `syz.4.539'. [ 145.027413][ T36] hfsplus: b-tree write err: -5, ino 4 [ 145.234868][ T5152] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 145.697856][ T7275] netlink: 400 bytes leftover after parsing attributes in process `syz.3.554'. [ 145.938402][ T7287] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 146.013579][ T7286] loop3: detected capacity change from 0 to 2048 [ 146.157766][ T7294] loop4: detected capacity change from 0 to 64 [ 146.166002][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.318892][ T7286] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.557: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 146.515077][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.733817][ T7306] netlink: 'syz.3.566': attribute type 30 has an invalid length. [ 146.834576][ T7288] loop0: detected capacity change from 0 to 32768 [ 146.858942][ T7288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.558 (7288) [ 146.944669][ T7310] loop1: detected capacity change from 0 to 2048 [ 146.996248][ T7288] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.046833][ T7288] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 147.070529][ T7310] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 147.081325][ T7313] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.119497][ T7288] BTRFS info (device loop0): disk space caching is enabled [ 147.145019][ T7288] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 147.163103][ T7310] Remounting filesystem read-only [ 147.189783][ T7310] NILFS (loop1): the device already has a read-only mount. [ 147.442060][ T7288] BTRFS info (device loop0): rebuilding free space tree [ 147.530283][ T7288] BTRFS info (device loop0): disabling free space tree [ 147.547990][ T7339] No source specified [ 147.573552][ T7288] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.606780][ T7288] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.635257][ T7300] loop2: detected capacity change from 0 to 32768 [ 147.832643][ T7300] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 147.978886][ T7300] (syz.2.564,7300,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 148.054097][ T7300] (syz.2.564,7300,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 148.076277][ T5836] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.107430][ T7300] (syz.2.564,7300,1):ocfs2_mknod:298 ERROR: status = -2 [ 148.143248][ T7300] (syz.2.564,7300,1):ocfs2_mknod:502 ERROR: status = -2 [ 148.193930][ T7300] (syz.2.564,7300,1):ocfs2_create:675 ERROR: status = -2 [ 148.221829][ T7333] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 148.366037][ T7357] usb usb8: usbfs: process 7357 (syz.0.581) did not claim interface 0 before use [ 148.509974][ T30] audit: type=1326 audit(1750081647.652:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 148.521339][ T5844] ocfs2: Unmounting device (7,2) on (node local) [ 148.629651][ T30] audit: type=1326 audit(1750081647.652:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 148.765970][ T30] audit: type=1326 audit(1750081647.712:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 148.850550][ C1] sd 0:0:1:0: [sda] tag#1129 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 148.861099][ C1] sd 0:0:1:0: [sda] tag#1129 CDB: Read(6) 08 00 9f d1 fe de [ 148.899382][ T30] audit: type=1326 audit(1750081647.712:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 149.030329][ T30] audit: type=1326 audit(1750081647.712:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.4.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 149.493069][ T5152] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.571836][ T7388] loop3: detected capacity change from 0 to 64 [ 149.968719][ T7398] loop0: detected capacity change from 0 to 256 [ 150.069594][ T7398] FAT-fs (loop0): Directory bread(block 64) failed [ 150.117709][ T7398] FAT-fs (loop0): Directory bread(block 65) failed [ 150.158682][ T7398] FAT-fs (loop0): Directory bread(block 66) failed [ 150.165760][ T7398] FAT-fs (loop0): Directory bread(block 67) failed [ 150.197713][ T7398] FAT-fs (loop0): Directory bread(block 68) failed [ 150.214176][ T7398] FAT-fs (loop0): Directory bread(block 69) failed [ 150.258751][ T7398] FAT-fs (loop0): Directory bread(block 70) failed [ 150.295106][ T7398] FAT-fs (loop0): Directory bread(block 71) failed [ 150.342376][ T7398] FAT-fs (loop0): Directory bread(block 72) failed [ 150.348981][ T7398] FAT-fs (loop0): Directory bread(block 73) failed [ 150.512603][ T7406] overlay: Bad value for 'upperdir' [ 150.771966][ T7414] loop2: detected capacity change from 0 to 512 [ 150.845333][ T7414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.972612][ T7414] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.994858][ T7392] loop4: detected capacity change from 0 to 40427 [ 151.017729][ T7392] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 151.044196][ T7414] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 151.069414][ T7392] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 151.078065][ T7425] netlink: 228 bytes leftover after parsing attributes in process `syz.1.613'. [ 151.108147][ T7414] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 151.137409][ T7414] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.611: Failed to acquire dquot type 0 [ 151.155785][ T7392] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 151.370817][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.649897][ T7392] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 151.662425][ T7442] loop2: detected capacity change from 0 to 128 [ 151.675196][ T7392] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 151.761547][ T7442] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 151.794097][ T7442] FAT-fs (loop2): Filesystem has been set read-only [ 151.855590][ T30] audit: type=1800 audit(1750081651.002:25): pid=7392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.599" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 152.148078][ T7459] netlink: 666 bytes leftover after parsing attributes in process `syz.0.630'. [ 152.158016][ T7453] loop3: detected capacity change from 0 to 1024 [ 152.190414][ T7453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.240112][ T7453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.322379][ T7453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.414350][ T7462] loop0: detected capacity change from 0 to 8 [ 152.589771][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.019531][ T7480] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 153.074826][ T7480] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 153.711575][ T7508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.653'. [ 153.882801][ T7513] can0: slcan on ttyS3. [ 153.959901][ T5904] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.977833][ T7517] netlink: 'syz.3.657': attribute type 32 has an invalid length. [ 153.986194][ T7512] can0 (unregistered): slcan off ttyS3. [ 154.022586][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 154.054222][ T7517] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 154.153994][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 154.162277][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 154.172199][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 154.187144][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 154.204764][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.215165][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 154.227100][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 154.238613][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 154.253426][ T5904] usb 3-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 154.269399][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.277450][ T5904] usb 3-1: Product: syz [ 154.295582][ T5904] usb 3-1: Manufacturer: syz [ 154.312370][ T5904] usb 3-1: SerialNumber: syz [ 154.333117][ T5904] usb 3-1: config 0 descriptor?? [ 154.614186][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.844396][ T5904] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 154.909696][ T5904] usb 3-1: USB disconnect, device number 3 [ 155.046920][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.119766][ T7550] loop0: detected capacity change from 0 to 128 [ 155.128462][ T7547] loop1: detected capacity change from 0 to 2048 [ 155.149668][ T7550] FAT-fs (loop0): bogus number of reserved sectors [ 155.189359][ T7550] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 155.219860][ T7550] FAT-fs (loop0): Can't find a valid FAT filesystem [ 155.233653][ T7551] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.511902][ T7558] netlink: 'syz.0.676': attribute type 29 has an invalid length. [ 155.537050][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 155.675098][ T7562] x_tables: unsorted underflow at hook 3 [ 155.943102][ T7570] xt_connbytes: Forcing CT accounting to be enabled [ 155.965397][ T7573] loop1: detected capacity change from 0 to 128 [ 156.027990][ T7573] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 156.102228][ T7544] loop4: detected capacity change from 0 to 32768 [ 156.226255][ T7544] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 156.226255][ T7544] [ 156.306396][ T7579] loop0: detected capacity change from 0 to 2048 [ 156.414349][ T7584] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.454664][ T36] read_mapping_page failed! [ 156.489675][ T36] ERROR: (device loop4): txCommit: [ 156.489675][ T36] [ 156.497142][ T36] jfs_write_inode: jfs_commit_inode failed! [ 156.558575][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.672827][ T7579] Remounting filesystem read-only [ 156.679801][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.738693][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.761214][ T7590] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 156.805603][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.853976][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.913627][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 156.966134][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 157.019402][ T7598] sock: sock_timestamping_bind_phc: sock not bind to device [ 157.040289][ T7579] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 157.111948][ T7604] loop1: detected capacity change from 0 to 47 [ 157.120270][ T30] audit: type=1800 audit(1750081656.262:26): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.686" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 157.553672][ T7612] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 157.702595][ T7620] loop0: detected capacity change from 0 to 1024 [ 157.851984][ T7628] loop1: detected capacity change from 0 to 16 [ 157.855506][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.876231][ T7628] erofs (device loop1): mounted with root inode @ nid 36. [ 157.942085][ T7620] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.955847][ T7628] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 158.008490][ T7628] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 158.032727][ T7628] erofs (device loop1): readahead error at folio 0 @ nid 89 [ 158.052101][ T7620] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.706: corrupted xattr block 128: bad e_name length [ 158.073200][ T7628] syz.1.708: attempt to access beyond end of device [ 158.073200][ T7628] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 158.130059][ T7628] erofs (device loop1): read error -117 @ 0 of nid 89 [ 158.144001][ T7620] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.706: corrupted xattr block 128: bad e_name length [ 158.145917][ T30] audit: type=1800 audit(1750081657.292:27): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.706" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 158.237496][ T7641] x_tables: duplicate underflow at hook 1 [ 158.244231][ T7620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.706: bg 0: block 273: padding at end of block bitmap is not set [ 158.279350][ T30] audit: type=1800 audit(1750081657.332:28): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.708" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 158.332755][ T7620] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 158.470363][ T7647] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 158.566058][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.720930][ T7647] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.949922][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 159.064358][ T7666] netlink: 'syz.4.727': attribute type 5 has an invalid length. [ 159.550443][ T7651] loop3: detected capacity change from 0 to 32768 [ 159.629756][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.644914][ T7651] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 159.703366][ T7687] loop2: detected capacity change from 0 to 512 [ 159.710844][ T7687] EXT4-fs: Ignoring removed nobh option [ 159.724727][ T7651] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.756096][ T7687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.804968][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.805002][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.807364][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.807393][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.807415][ T9] usb 5-1: Product: syz [ 159.807431][ T9] usb 5-1: Manufacturer: syz [ 159.807447][ T9] usb 5-1: SerialNumber: syz [ 159.815782][ T9] usb 5-1: config 0 descriptor?? [ 159.835785][ T9] usb 5-1: selecting invalid altsetting 0 [ 159.845624][ T7651] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923116032 [ 159.845737][ T7651] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 159.845752][ T7651] OCFS2: File system is now read-only. [ 159.845773][ T7651] (syz.3.720,7651,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 159.845843][ T7651] (syz.3.720,7651,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 159.845873][ T7651] (syz.3.720,7651,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 159.845897][ T7651] (syz.3.720,7651,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 159.845921][ T7651] (syz.3.720,7651,0):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 159.845944][ T7651] (syz.3.720,7651,0):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 159.845966][ T7651] (syz.3.720,7651,0):ocfs2_mknod_locked:638 ERROR: status = -30 [ 159.845989][ T7651] (syz.3.720,7651,0):ocfs2_mknod:385 ERROR: status = -30 [ 159.847152][ T7651] (syz.3.720,7651,0):ocfs2_mknod:502 ERROR: status = -30 [ 159.847212][ T7651] (syz.3.720,7651,0):ocfs2_create:675 ERROR: status = -30 [ 159.988056][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.010927][ T5843] ocfs2: Unmounting device (7,3) on (node local) [ 160.087789][ T5904] usb 5-1: USB disconnect, device number 4 [ 160.194308][ T7698] capability: warning: `syz.3.741' uses deprecated v2 capabilities in a way that may be insecure [ 160.668039][ T7711] netlink: 132 bytes leftover after parsing attributes in process `syz.0.748'. [ 160.806723][ T7714] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 161.184170][ T7725] loop3: detected capacity change from 0 to 1024 [ 161.299736][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.661065][ T7744] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 161.670895][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.704356][ T7744] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 161.939505][ T30] audit: type=1400 audit(1750081661.082:29): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7750 comm="syz.1.767" [ 162.030699][ T7756] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 162.471905][ T7764] loop0: detected capacity change from 0 to 4096 [ 162.519810][ T7764] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 162.673665][ T7775] Invalid option length (1048125) for dns_resolver key [ 162.734651][ T7764] ntfs3(loop0): ino=19, mi_enum_attr [ 162.751755][ T7764] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 162.809566][ T7764] ntfs3(loop0): failed to convert "c46c" to koi8-u [ 162.864373][ T7764] ntfs3(loop0): ino=20, mi_enum_attr [ 162.867190][ T7743] loop4: detected capacity change from 0 to 32768 [ 162.936598][ T7743] (syz.4.762,7743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.987323][ T7743] (syz.4.762,7743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 163.115606][ T7743] JBD2: Ignoring recovery information on journal [ 163.313980][ T7792] xt_hashlimit: max too large, truncated to 1048576 [ 163.335350][ T7743] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.413059][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 163.600438][ T7801] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 163.611744][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 163.631577][ T7801] : entered promiscuous mode [ 163.645352][ T7805] loop0: detected capacity change from 0 to 512 [ 163.689214][ T7805] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.787934][ T7805] EXT4-fs (loop0): 1 truncate cleaned up [ 163.827391][ T7805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.837494][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 163.873551][ T5845] ocfs2: Unmounting device (7,4) on (node local) [ 163.923476][ T7805] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:298: inode #15: comm syz.0.792: verity file has no extents [ 163.946650][ T7814] netlink: 248 bytes leftover after parsing attributes in process `syz.3.796'. [ 164.007237][ T7805] EXT4-fs (loop0): Remounting filesystem read-only [ 164.039658][ T7805] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 164.237873][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.513911][ T7829] 9pnet_fd: Insufficient options for proto=fd [ 165.197134][ T7849] xt_CT: No such helper "syz1" [ 165.239538][ T7859] netlink: 248 bytes leftover after parsing attributes in process `syz.2.815'. [ 165.423883][ T7865] netlink: 'syz.1.817': attribute type 27 has an invalid length. [ 165.454515][ T7865] netlink: 'syz.1.817': attribute type 3 has an invalid length. [ 165.501154][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.817'. [ 165.689415][ T5904] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.883013][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 165.933576][ T5904] usb 4-1: config index 0 descriptor too short (expected 4096, got 18) [ 165.949483][ T5904] usb 4-1: config 0 has too many interfaces: 72, using maximum allowed: 32 [ 165.985125][ T5904] usb 4-1: config 0 has an invalid interface descriptor of length 4, skipping [ 166.039393][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.077175][ T5904] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 72 [ 166.119377][ T5904] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 166.128489][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.184155][ T5904] usb 4-1: config 0 descriptor?? [ 166.390253][ T7898] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 166.398171][ T7898] netlink: 240 bytes leftover after parsing attributes in process `syz.4.828'. [ 166.418077][ T5904] usb 4-1: string descriptor 0 read error: -71 [ 166.444049][ T5904] usb 4-1: USB disconnect, device number 4 [ 166.471690][ T7900] netlink: 92 bytes leftover after parsing attributes in process `syz.2.830'. [ 166.802129][ T7910] gretap1: entered allmulticast mode [ 166.972263][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.053838][ T7921] loop2: detected capacity change from 0 to 512 [ 167.079178][ T7921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.115777][ T7925] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 167.134655][ T7921] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 167.164303][ T7921] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 167.177041][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.190835][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.208324][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.216621][ T9] usb 1-1: Product: syz [ 167.220947][ T9] usb 1-1: Manufacturer: syz [ 167.225572][ T9] usb 1-1: SerialNumber: syz [ 167.246296][ T9] cdc_ether 1-1:1.0: skipping garbage [ 167.252102][ T7921] EXT4-fs (loop2): 1 truncate cleaned up [ 167.269018][ T9] usb 1-1: bad CDC descriptors [ 167.282981][ T7921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.496349][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.540987][ T9] usb 1-1: USB disconnect, device number 5 [ 167.749886][ T976] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.853055][ T7949] mmap: syz.3.847 (7949): VmData 121331712 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 167.933642][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 167.941038][ T976] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 167.959413][ T976] usb 5-1: config 0 has no interface number 0 [ 167.965587][ T976] usb 5-1: config 0 interface 183 altsetting 218 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.038100][ T976] usb 5-1: config 0 interface 183 has no altsetting 0 [ 168.117807][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 168.157337][ T976] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 168.203981][ T976] usb 5-1: Product: syz [ 168.208218][ T976] usb 5-1: Manufacturer: syz [ 168.218048][ T976] usb 5-1: SerialNumber: syz [ 168.259907][ T976] usb 5-1: config 0 descriptor?? [ 168.316281][ T976] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 168.516827][ T976] gspca_zc3xx: reg_w_i err -71 [ 168.532234][ T976] gspca_zc3xx 5-1:0.183: probe with driver gspca_zc3xx failed with error -71 [ 168.642721][ T976] usb 5-1: USB disconnect, device number 5 [ 169.237661][ T7988] netlink: 'syz.4.863': attribute type 10 has an invalid length. [ 169.424400][ T7988] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.528134][ T30] audit: type=1326 audit(1750081668.672:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 169.610789][ T7951] loop2: detected capacity change from 0 to 40427 [ 169.628037][ T30] audit: type=1326 audit(1750081668.672:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 169.676942][ T7951] F2FS-fs (loop2): invalid crc value [ 169.750204][ T30] audit: type=1326 audit(1750081668.712:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 169.865071][ T30] audit: type=1326 audit(1750081668.712:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 169.958296][ T30] audit: type=1326 audit(1750081668.712:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45798e929 code=0x7ffc0000 [ 170.102045][ T7951] F2FS-fs (loop2): Start checkpoint disabled! [ 170.112388][ T7951] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 170.411954][ T7982] loop0: detected capacity change from 0 to 32768 [ 170.456753][ T7982] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.861 (7982) [ 170.590670][ T7982] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 170.633984][ T7982] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.673115][ T7982] BTRFS info (device loop0): disk space caching is enabled [ 170.719537][ T7982] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 170.776281][ T8028] loop1: detected capacity change from 0 to 1024 [ 171.040179][ T7982] BTRFS info (device loop0): rebuilding free space tree [ 171.088277][ T13] hfsplus: b-tree write err: -5, ino 4 [ 171.150784][ T7982] BTRFS info (device loop0): disabling free space tree [ 171.166894][ T7982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.189429][ T7982] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.391360][ T7982] BTRFS info (device loop0): balance: start -sprofiles=NONE,usage=1..511 [ 171.410485][ T7982] BTRFS info (device loop0): balance: ended with status: 0 [ 171.673960][ T5836] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 171.955010][ T8065] loop3: detected capacity change from 0 to 4096 [ 172.018043][ T8065] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 172.198101][ T8081] loop4: detected capacity change from 0 to 256 [ 172.395355][ T8085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.892'. [ 172.449519][ T8085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.892'. [ 172.985600][ T8091] loop0: detected capacity change from 0 to 512 [ 173.102885][ T8096] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 173.140327][ T8091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.159876][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 173.179718][ T8091] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.233067][ T8096] openvswitch: netlink: Flow key attr not present in new flow. [ 173.355239][ T8091] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz.0.896: invalid size [ 173.597991][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.822659][ T8115] loop4: detected capacity change from 0 to 128 [ 173.952572][ T8115] FAT-fs (loop4): Directory bread(block 162) failed [ 173.992525][ T8115] FAT-fs (loop4): Directory bread(block 163) failed [ 174.025180][ T8115] FAT-fs (loop4): Directory bread(block 164) failed [ 174.060218][ T8115] FAT-fs (loop4): Directory bread(block 165) failed [ 174.084131][ T8115] FAT-fs (loop4): Directory bread(block 166) failed [ 174.109353][ T8115] FAT-fs (loop4): Directory bread(block 167) failed [ 174.131378][ T8115] FAT-fs (loop4): Directory bread(block 168) failed [ 174.156213][ T8115] FAT-fs (loop4): Directory bread(block 169) failed [ 174.234205][ T8115] FAT-fs (loop4): Directory bread(block 162) failed [ 174.280800][ T8115] FAT-fs (loop4): Directory bread(block 163) failed [ 174.308325][ T8115] syz.4.903: attempt to access beyond end of device [ 174.308325][ T8115] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 174.336660][ T8115] syz.4.903: attempt to access beyond end of device [ 174.336660][ T8115] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 174.416245][ T8124] loop1: detected capacity change from 0 to 256 [ 174.448581][ T8106] loop2: detected capacity change from 0 to 32768 [ 174.505253][ T8106] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.898 (8106) [ 174.565159][ T8106] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 174.608325][ T8106] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 174.633949][ T8106] BTRFS info (device loop2): disk space caching is enabled [ 174.697338][ T8106] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 174.939792][ T8106] BTRFS info (device loop2): rebuilding free space tree [ 174.998925][ T8148] loop1: detected capacity change from 0 to 1024 [ 175.003463][ T8106] BTRFS info (device loop2): disabling free space tree [ 175.033186][ T8106] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.051512][ T8148] EXT4-fs: Ignoring removed nobh option [ 175.077280][ T8106] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.111999][ T8148] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 175.168566][ T8152] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 175.180137][ T8148] Non-string source [ 175.234567][ T8152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.270716][ T8106] BTRFS info (device loop2): balance: start -sprofiles=NONE,usage=1..511 [ 175.308782][ T8106] BTRFS info (device loop2): balance: ended with status: 0 [ 175.496262][ T8156] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 175.524522][ T5844] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.734810][ T8122] loop0: detected capacity change from 0 to 32768 [ 175.780453][ T8122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.906 (8122) [ 175.909175][ T8122] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.954086][ T8122] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 175.999670][ T8122] BTRFS info (device loop0): using free-space-tree [ 176.025267][ T8171] dlm: no locking on control device [ 176.562226][ T5836] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.544160][ T8221] loop4: detected capacity change from 0 to 4096 [ 177.617729][ T8227] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.661860][ T8221] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 177.681695][ T8229] SET target dimension over the limit! [ 177.716568][ T8221] Remounting filesystem read-only [ 177.759420][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.762309][ T8197] loop3: detected capacity change from 0 to 32768 [ 177.921295][ T5904] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 177.930660][ T5904] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 177.941977][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.953013][ T5904] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.00 [ 177.962229][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.005980][ T5904] usb 1-1: config 0 descriptor?? [ 178.024158][ T5904] ttusbir 1-1:0.0: cannot find expected altsetting [ 178.085027][ T5904] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.111743][ T8197] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 178.111770][ T8197] allowing incompatible features above 0.0: (unknown version) [ 178.111783][ T8197] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 178.236443][ T8197] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 178.255743][ T5904] usb 1-1: USB disconnect, device number 6 [ 178.266862][ T8197] bcachefs (loop3): initializing new filesystem [ 178.330683][ T8197] bcachefs (loop3): going read-write [ 178.471690][ T8197] bcachefs (loop3): marking superblocks [ 178.575742][ T8197] bcachefs (loop3): initializing freespace [ 178.657690][ T8197] bcachefs (loop3): done initializing freespace [ 178.692085][ T8197] bcachefs (loop3): reading snapshots table [ 178.708383][ T8197] bcachefs (loop3): reading snapshots done [ 178.774998][ T8197] bcachefs (loop3): loop3: Superblock write was silently dropped! (seq 0 expected 42) [ 178.802159][ T8197] bcachefs (loop3): done starting filesystem [ 179.249942][ T8197] syz.3.927 (8197) used greatest stack depth: 17640 bytes left [ 179.278376][ T5843] bcachefs (loop3): shutting down [ 179.289613][ T5843] bcachefs (loop3): going read-only [ 179.299700][ T5843] bcachefs (loop3): finished waiting for writes to stop [ 179.329162][ T5843] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 179.357057][ T8279] loop1: detected capacity change from 0 to 256 [ 179.497782][ T5843] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 179.559382][ T5843] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 179.578318][ T5843] bcachefs (loop3): marking filesystem clean [ 179.670683][ T8257] loop4: detected capacity change from 0 to 32768 [ 179.724147][ T5843] bcachefs (loop3): shutdown complete [ 179.775741][ T8257] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.792620][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 179.831690][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.965'. [ 179.943338][ T8257] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 179.992207][ T8257] XFS (loop4): Unmount and run xfs_repair [ 180.079635][ T8257] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 180.087089][ T8257] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00 XAGF............ [ 180.151838][ T8257] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 180.200187][ T8303] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 180.219387][ T8257] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 180.228312][ T8257] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 180.288948][ T8257] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 180.349467][ T8257] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 180.368506][ T8257] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 180.399327][ T8257] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 180.425889][ T8257] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 180.458019][ T8257] XFS (loop4): Error -117 reserving per-AG metadata reserve pool. [ 180.466829][ T8257] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:566). Shutting down filesystem. [ 180.534528][ T8257] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 180.554075][ T8257] XFS (loop4): Ending clean mount [ 180.575639][ T8257] XFS (loop4): Failed to initialize disk quotas, err -5. [ 180.685170][ T8257] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 180.796237][ T8295] loop1: detected capacity change from 0 to 32768 [ 180.797830][ T5845] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.891172][ T8295] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.127086][ T8295] XFS (loop1): Ending clean mount [ 181.300876][ T5837] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 181.608567][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 181.917977][ T8340] loop4: detected capacity change from 0 to 2048 [ 181.967847][ T8340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.056207][ T8322] loop2: detected capacity change from 0 to 32768 [ 182.166441][ T8322] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.390627][ T8322] XFS (loop2): Ending clean mount [ 182.402886][ T8362] loop4: detected capacity change from 0 to 1024 [ 182.457656][ T8322] XFS (loop2): Quotacheck needed: Please wait. [ 182.479647][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'. [ 182.554281][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 182.639829][ T8322] XFS (loop2): Quotacheck: Done. [ 182.880075][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.390392][ T8392] netlink: 'syz.3.1004': attribute type 39 has an invalid length. [ 183.502949][ T8392] veth0_macvtap: left promiscuous mode [ 183.583905][ T8398] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 183.641610][ T8398] overlayfs: conflicting options: userxattr,redirect_dir=on [ 183.938241][ T8405] loop2: detected capacity change from 0 to 4096 [ 183.955822][ T8410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.979444][ T8405] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 184.087773][ T8405] ntfs3(loop2): ino=19, mi_enum_attr [ 184.112569][ T8405] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 184.475514][ T8422] loop1: detected capacity change from 0 to 1024 [ 184.611949][ T8422] hfsplus: keylen 65060 too large [ 184.676234][ T8430] loop3: detected capacity change from 0 to 2048 [ 184.797644][ T8430] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 184.863787][ T8430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.083275][ T8402] loop4: detected capacity change from 0 to 32768 [ 185.132767][ T8402] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1009 (8402) [ 185.529999][ T8402] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 185.583388][ T8402] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.883582][ T8402] BTRFS info (device loop4): rebuilding free space tree [ 185.963454][ T8402] BTRFS info (device loop4): disabling free space tree [ 185.964827][ T8479] loop1: detected capacity change from 0 to 256 [ 186.016028][ T8402] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.049722][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.056638][ T8402] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.139203][ T8479] FAT-fs (loop1): Directory bread(block 64) failed [ 186.147043][ T8479] FAT-fs (loop1): Directory bread(block 65) failed [ 186.169621][ T8479] FAT-fs (loop1): Directory bread(block 66) failed [ 186.198548][ T8483] loop3: detected capacity change from 0 to 2048 [ 186.205551][ T8479] FAT-fs (loop1): Directory bread(block 67) failed [ 186.226186][ T8479] FAT-fs (loop1): Directory bread(block 68) failed [ 186.241847][ T8479] FAT-fs (loop1): Directory bread(block 69) failed [ 186.265328][ T8479] FAT-fs (loop1): Directory bread(block 70) failed [ 186.283024][ T8483] udf: Unknown parameter 'uidQLrk<+iocha(set' [ 186.289903][ T24] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 186.301089][ T8479] FAT-fs (loop1): Directory bread(block 71) failed [ 186.307754][ T8479] FAT-fs (loop1): Directory bread(block 72) failed [ 186.316683][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.339224][ T24] usb 3-1: Product: syz [ 186.345031][ T8483] Invalid source name [ 186.350066][ T5845] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 186.370006][ T24] usb 3-1: Manufacturer: syz [ 186.374752][ T24] usb 3-1: SerialNumber: syz [ 186.379638][ T8479] FAT-fs (loop1): Directory bread(block 73) failed [ 186.389913][ T8483] UBIFS error (pid: 8483): cannot open "uidQLrk<+iocha(set=cp865,gid=00000000000000000000,gid=ignore,shortad,unhide,rootdir=00000000000000000512,dmode=00000000000000000000007,undelete,uid=ignore,", error -22 [ 186.440379][ T24] usb 3-1: config 0 descriptor?? [ 186.762966][ T24] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 186.972341][ T5952] usb 3-1: USB disconnect, device number 4 [ 187.005261][ T8501] loop0: detected capacity change from 0 to 1024 [ 187.508663][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'. [ 187.818829][ T8521] loop3: detected capacity change from 0 to 4096 [ 187.937555][ T8530] loop0: detected capacity change from 0 to 2048 [ 187.989386][ T8533] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.013918][ T8530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.036010][ T8521] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 188.053750][ T8534] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 188.092577][ T8521] Remounting filesystem read-only [ 188.410595][ T8539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1054'. [ 188.523331][ T8539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1054'. [ 188.588586][ T8539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1054'. [ 189.077485][ T8565] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1062'. [ 189.232221][ T8531] loop1: detected capacity change from 0 to 32768 [ 189.286583][ T8568] loop3: detected capacity change from 0 to 2048 [ 189.321776][ T8531] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1052 (8531) [ 189.332563][ T8572] ipt_REJECT: TCP_RESET invalid for non-tcp [ 189.369883][ T8568] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.382109][ T8531] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 189.422391][ T8531] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 189.459506][ T8531] BTRFS info (device loop1): disk space caching is enabled [ 189.495609][ T8568] syz.3.1065: attempt to access beyond end of device [ 189.495609][ T8568] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 189.500514][ T8576] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.537392][ T8531] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 189.559682][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 189.656983][ T8568] syz.3.1065: attempt to access beyond end of device [ 189.656983][ T8568] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 189.757332][ T8568] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 189.836691][ T8568] NILFS (loop3): error -5 reading inode: ino=12 [ 189.907718][ T8531] BTRFS info (device loop1): rebuilding free space tree [ 190.000215][ T8531] BTRFS info (device loop1): disabling free space tree [ 190.032065][ T8531] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.059553][ T8531] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.139395][ T8609] binder: 8608:8609 ioctl c0306201 0 returned -14 [ 190.280446][ T8531] BTRFS error: failed to open device for path !<ϴ?iҟ=Ac [ 190.280446][ T8531] $E8]MFqҭo&SfU[QnAw62\dH=5n\m;R6aL [ 190.280446][ T8531] '{$Fў(718WXkS?#MqCa>!10 J with flags 0x1: -2 [ 190.448618][ T5837] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 190.586405][ T8613] loop0: detected capacity change from 0 to 4096 [ 190.626103][ T8613] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 190.754483][ T8613] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 190.909512][ T8629] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1086'. [ 190.918548][ T8629] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 191.067139][ T8633] Invalid source name [ 191.076645][ T8633] UBIFS error (pid: 8633): cannot open "./file0", error -22 [ 191.314451][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 192.352203][ T8672] loop2: detected capacity change from 0 to 4096 [ 192.376663][ T8672] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 192.590227][ T8672] ntfs3(loop2): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 193.000890][ T8696] loop3: detected capacity change from 0 to 16 [ 193.067151][ T8696] erofs (device loop3): mounted with root inode @ nid 36. [ 193.218364][ T8700] loop2: detected capacity change from 0 to 1024 [ 193.391983][ T8704] loop3: detected capacity change from 0 to 64 [ 193.493475][ T36] hfsplus: b-tree write err: -5, ino 4 [ 193.899222][ T8688] loop1: detected capacity change from 0 to 32768 [ 193.945059][ T8676] loop0: detected capacity change from 0 to 40427 [ 193.995800][ T8676] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 194.023879][ T8688] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 194.039867][ T8676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 194.073192][ T8712] loop2: detected capacity change from 0 to 4096 [ 194.086119][ T8676] F2FS-fs (loop0): invalid crc value [ 194.121214][ T8688] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.371713][ T8712] ntfs3(loop2): ino=9, attr_set_size [ 194.377893][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.395240][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.535105][ T5837] ocfs2: Unmounting device (7,1) on (node local) [ 194.679680][ T8676] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.686791][ T8676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.797424][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1133'. [ 195.104391][ T8744] libceph: resolve '4.' (ret=-3): failed [ 195.379530][ T8755] loop1: detected capacity change from 0 to 256 [ 195.392295][ T8755] exfat: Deprecated parameter 'namecase' [ 195.436295][ T8755] exfat: Deprecated parameter 'utf8' [ 195.475186][ T8755] exfat: Deprecated parameter 'namecase' [ 195.507613][ T8758] binder: 8757:8758 ioctl c018620c 200000000100 returned -1 [ 195.551452][ T8755] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 195.714037][ T8762] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1146'. [ 196.069484][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 196.835820][ T8804] nfs: Deprecated parameter 'nointr' [ 197.067024][ T8812] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 197.678607][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1181'. [ 197.754878][ T8837] loop4: detected capacity change from 0 to 4096 [ 197.789659][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.893989][ T8837] ntfs3(loop4): ino=b, mi_enum_attr [ 197.914312][ T8837] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 197.955118][ T8837] ntfs3(loop4): Failed to load $Extend (-22). [ 197.975067][ T8837] ntfs3(loop4): Failed to initialize $Extend. [ 197.985763][ T43] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 198.008657][ T43] usb 2-1: config 0 has no interface number 1 [ 198.016392][ T43] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 198.076015][ T8837] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 198.085683][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.117142][ T43] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 198.138583][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.164700][ T43] usb 2-1: SerialNumber: syz [ 198.208905][ T43] usb 2-1: config 0 descriptor?? [ 198.314819][ T8851] netlink: 'syz.3.1187': attribute type 3 has an invalid length. [ 198.345086][ T8851] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1187'. [ 198.499579][ T43] usb 2-1: Found UVC 0.00 device (0002:0000) [ 198.509372][ T43] usb 2-1: No valid video chain found. [ 198.547189][ T43] usb 2-1: USB disconnect, device number 2 [ 198.701401][ T8859] netlink: 'syz.3.1191': attribute type 4 has an invalid length. [ 198.920935][ T8875] netlink: 'syz.4.1198': attribute type 21 has an invalid length. [ 198.930388][ T8875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1198'. [ 199.820623][ T8866] loop2: detected capacity change from 0 to 32768 [ 199.842349][ T8903] loop4: detected capacity change from 0 to 512 [ 199.871926][ T8866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1194 (8866) [ 199.895715][ T8903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.939363][ T8866] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 199.997944][ T8866] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 200.007005][ T8866] BTRFS info (device loop2): disk space caching is enabled [ 200.014611][ T8866] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 200.016618][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.124031][ T8903] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.253315][ T8866] BTRFS info (device loop2): rebuilding free space tree [ 200.343312][ T8866] BTRFS info (device loop2): disabling free space tree [ 200.380824][ T8866] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.413141][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.424106][ T8866] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.637323][ T5844] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.118236][ T8952] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 201.152315][ T8952] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 201.372207][ T8919] loop3: detected capacity change from 0 to 32768 [ 201.429336][ T8919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1215 (8919) [ 201.543618][ T8919] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.599540][ T8919] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 201.630101][ T8919] BTRFS info (device loop3): using free-space-tree [ 201.746705][ T8978] loop0: detected capacity change from 0 to 64 [ 201.787071][ T8963] loop1: detected capacity change from 0 to 4096 [ 201.834590][ T8963] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 202.263798][ T5843] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.841448][ T9012] loop4: detected capacity change from 0 to 22 [ 202.883868][ T9012] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 202.943512][ T9012] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 203.398549][ T9028] loop2: detected capacity change from 0 to 128 [ 203.592359][ T9035] xt_TCPMSS: Only works on TCP SYN packets [ 203.726754][ T9039] tmpfs: Bad value for 'mpol' [ 203.740958][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 203.774396][ T9043] loop3: detected capacity change from 0 to 2048 [ 203.881619][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.954937][ T9051] loop0: detected capacity change from 0 to 2048 [ 203.967935][ T9051] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 203.987691][ T9051] NILFS (loop0): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 204.148511][ T9051] kAFS: No cell specified [ 204.154496][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.449521][ T5952] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.626024][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 204.653055][ T5952] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 204.687987][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.719214][ T5952] usb 2-1: config 0 has no interface number 0 [ 204.766906][ T5952] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 204.808586][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.837160][ T5952] usb 2-1: Product: syz [ 204.841543][ T5952] usb 2-1: Manufacturer: syz [ 204.846262][ T5952] usb 2-1: SerialNumber: syz [ 204.870845][ T5952] usb 2-1: config 0 descriptor?? [ 205.102259][ T5952] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 205.108689][ T5952] usb 2-1: No valid video chain found. [ 205.311008][ T9] usb 2-1: USB disconnect, device number 3 [ 205.638047][ T9070] loop0: detected capacity change from 0 to 40427 [ 205.681704][ T9070] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 205.691553][ T9070] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.728105][ T9070] F2FS-fs (loop0): invalid crc value [ 205.805811][ T9076] loop3: detected capacity change from 0 to 32768 [ 205.871934][ T9076] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1278 (9076) [ 205.997808][ T9076] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 206.057157][ T9076] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.109416][ T9076] BTRFS info (device loop3): disk space caching is enabled [ 206.118002][ T9076] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 206.164243][ T9070] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 206.206828][ T9070] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.449014][ T9076] BTRFS info (device loop3): rebuilding free space tree [ 206.523303][ T9076] BTRFS info (device loop3): disabling free space tree [ 206.539505][ T9076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 206.549769][ T9076] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 206.721191][ T9139] netlink: 'syz.1.1300': attribute type 33 has an invalid length. [ 206.846090][ T5843] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 207.961871][ T9173] loop1: detected capacity change from 0 to 512 [ 208.017028][ T9171] loop2: detected capacity change from 0 to 2048 [ 208.155079][ T9171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.207216][ T9173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.231121][ T9173] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.278065][ T9173] tmpfs: Bad value for 'mpol' [ 208.315280][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.441162][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.542825][ T9195] ptrace attach of "./syz-executor exec"[5844] was attempted by ""[9195] [ 208.723575][ T9202] deleting an unspecified loop device is not supported. [ 209.449471][ T5952] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.632826][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 209.647744][ T9239] loop1: detected capacity change from 0 to 64 [ 209.657297][ T5952] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.668782][ T5952] usb 1-1: config 0 has no interface number 0 [ 209.685345][ T5952] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.703023][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.734114][ T5952] usb 1-1: Product: syz [ 209.738354][ T5952] usb 1-1: Manufacturer: syz [ 209.773626][ T5952] usb 1-1: SerialNumber: syz [ 209.816391][ T9243] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.838255][ T5952] usb 1-1: config 0 descriptor?? [ 209.880956][ T5952] smsc95xx v2.0.0 [ 209.884669][ T5952] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 209.963240][ T5952] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 210.131904][ T5904] usb 1-1: USB disconnect, device number 7 [ 210.730997][ T9265] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1359'. [ 210.809563][ T9267] loop4: detected capacity change from 0 to 64 [ 211.366865][ T9285] loop2: detected capacity change from 0 to 128 [ 211.444427][ T9285] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 211.542118][ T9285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.758339][ T9299] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1377'. [ 211.828517][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 212.290384][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 212.324413][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'. [ 212.500197][ T9323] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 212.607414][ T9289] loop4: detected capacity change from 0 to 32768 [ 212.790998][ T111] ------------[ cut here ]------------ [ 212.797245][ T111] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#0: jfsCommit/111 [ 212.806637][ T111] Modules linked in: [ 212.811178][ T111] CPU: 0 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 212.822614][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.833252][ T111] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 212.838423][ T111] Code: 5a ff ff ff e8 dd ed 81 fe eb 05 e8 d6 ed 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 bd ed 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 212.858639][ T111] RSP: 0018:ffffc900026a7988 EFLAGS: 00010293 [ 212.865284][ T111] RAX: ffffffff833e7c73 RBX: ffff8880794d3010 RCX: ffff88801e3dbc00 [ 212.873824][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 212.883677][ T111] RBP: 0000000000020056 R08: ffffea0001e534c7 R09: 1ffffd40003ca698 [ 212.892763][ T111] R10: dffffc0000000000 R11: fffff940003ca699 R12: ffff8880794d3018 [ 212.901446][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 212.909965][ T111] FS: 0000000000000000(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 212.919050][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.926223][ T111] CR2: 00002000000000c0 CR3: 0000000034e4a000 CR4: 00000000003526f0 [ 212.935136][ T111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.943734][ T111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 212.952328][ T111] Call Trace: [ 212.955754][ T111] [ 212.958736][ T111] ? __pfx_lock_metapage+0x10/0x10 [ 212.964334][ T111] dbJoin+0x238/0x300 [ 212.968729][ T111] ? do_read_cache_folio+0x4c6/0x590 [ 212.975227][ T111] dbFreeBits+0x4e1/0xdb0 [ 212.980484][ T111] dbFree+0x336/0x650 [ 212.984544][ T111] txFreeMap+0x7ff/0xde0 [ 212.988866][ T111] txUpdateMap+0x308/0x9c0 [ 212.993415][ T111] jfs_lazycommit+0x43f/0xa90 [ 212.998155][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 213.003500][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 213.009558][ T111] ? __kthread_parkme+0x7b/0x200 [ 213.014545][ T111] ? __kthread_parkme+0x1a1/0x200 [ 213.019700][ T111] kthread+0x711/0x8a0 [ 213.023836][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 213.029089][ T111] ? __pfx_kthread+0x10/0x10 [ 213.033810][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.039071][ T111] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.044414][ T111] ? __pfx_kthread+0x10/0x10 [ 213.049062][ T111] ret_from_fork+0x3fc/0x770 [ 213.053913][ T111] ? __pfx_ret_from_fork+0x10/0x10 [ 213.059182][ T111] ? __switch_to_asm+0x39/0x70 [ 213.064066][ T111] ? __switch_to_asm+0x33/0x70 [ 213.068873][ T111] ? __pfx_kthread+0x10/0x10 [ 213.074117][ T111] ret_from_fork_asm+0x1a/0x30 [ 213.079600][ T111] [ 213.082675][ T111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 213.090039][ T111] CPU: 0 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 213.101362][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.112418][ T111] Call Trace: [ 213.115738][ T111] [ 213.118721][ T111] dump_stack_lvl+0x99/0x250 [ 213.123469][ T111] ? __asan_memcpy+0x40/0x70 [ 213.128113][ T111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.133408][ T111] ? __pfx__printk+0x10/0x10 [ 213.138057][ T111] panic+0x2db/0x790 [ 213.142030][ T111] ? __pfx_panic+0x10/0x10 [ 213.146514][ T111] ? ret_from_fork_asm+0x1a/0x30 [ 213.151520][ T111] __warn+0x334/0x4c0 [ 213.155545][ T111] ? dbAdjTree+0x454/0x4e0 [ 213.160011][ T111] ? dbAdjTree+0x454/0x4e0 [ 213.164469][ T111] report_bug+0x2be/0x4f0 [ 213.168886][ T111] ? dbAdjTree+0x454/0x4e0 [ 213.173351][ T111] ? dbAdjTree+0x454/0x4e0 [ 213.177811][ T111] ? dbAdjTree+0x456/0x4e0 [ 213.182280][ T111] handle_bug+0x84/0x160 [ 213.186596][ T111] exc_invalid_op+0x1a/0x50 [ 213.191157][ T111] asm_exc_invalid_op+0x1a/0x20 [ 213.196048][ T111] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 213.201119][ T111] Code: 5a ff ff ff e8 dd ed 81 fe eb 05 e8 d6 ed 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 bd ed 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 213.220770][ T111] RSP: 0018:ffffc900026a7988 EFLAGS: 00010293 [ 213.227165][ T111] RAX: ffffffff833e7c73 RBX: ffff8880794d3010 RCX: ffff88801e3dbc00 [ 213.235182][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 213.243198][ T111] RBP: 0000000000020056 R08: ffffea0001e534c7 R09: 1ffffd40003ca698 [ 213.251194][ T111] R10: dffffc0000000000 R11: fffff940003ca699 R12: ffff8880794d3018 [ 213.259198][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 213.267209][ T111] ? dbAdjTree+0x453/0x4e0 [ 213.271672][ T111] ? dbAdjTree+0x453/0x4e0 [ 213.276115][ T111] ? __pfx_lock_metapage+0x10/0x10 [ 213.281258][ T111] dbJoin+0x238/0x300 [ 213.285259][ T111] ? do_read_cache_folio+0x4c6/0x590 [ 213.290586][ T111] dbFreeBits+0x4e1/0xdb0 [ 213.294949][ T111] dbFree+0x336/0x650 [ 213.298953][ T111] txFreeMap+0x7ff/0xde0 [ 213.303237][ T111] txUpdateMap+0x308/0x9c0 [ 213.307679][ T111] jfs_lazycommit+0x43f/0xa90 [ 213.312383][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 213.317596][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 213.323418][ T111] ? __kthread_parkme+0x7b/0x200 [ 213.328369][ T111] ? __kthread_parkme+0x1a1/0x200 [ 213.333408][ T111] kthread+0x711/0x8a0 [ 213.337501][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 213.342708][ T111] ? __pfx_kthread+0x10/0x10 [ 213.347319][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 213.352532][ T111] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.357744][ T111] ? __pfx_kthread+0x10/0x10 [ 213.362347][ T111] ret_from_fork+0x3fc/0x770 [ 213.366980][ T111] ? __pfx_ret_from_fork+0x10/0x10 [ 213.372230][ T111] ? __switch_to_asm+0x39/0x70 [ 213.377133][ T111] ? __switch_to_asm+0x33/0x70 [ 213.381922][ T111] ? __pfx_kthread+0x10/0x10 [ 213.387057][ T111] ret_from_fork_asm+0x1a/0x30 [ 213.391848][ T111] [ 213.395144][ T111] Kernel Offset: disabled [ 213.399520][ T111] Rebooting in 86400 seconds..