last executing test programs: 3.065698336s ago: executing program 2 (id=1374): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x1, &(0x7f0000001080)={[{@uid}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@uid}, {@part={'part', 0x3d, 0x400}}, {@codepage={'codepage', 0x3d, 'ascii'}}, {}, {}, {@creator={'creator', 0x3d, "b6b72a1e"}}, {@gid}], [{@flag='nolazytime'}]}, 0x4, 0x337, &(0x7f0000000540)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.792204887s ago: executing program 2 (id=1378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03030000000000000000030000000900010073797a300000000020000000000a01040000000000000000050000000900010073797a310000000014000000020a010100000000000000000000000020000000020a01"], 0x9c}}, 0x0) 2.581989019s ago: executing program 1 (id=1380): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) lseek(r0, 0x72e, 0x3) 2.552983455s ago: executing program 3 (id=1381): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) 2.436067478s ago: executing program 2 (id=1382): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xb22f7cddef1cddc4}}, 0x0, 0x0, 0x0}, 0x0) 2.257236146s ago: executing program 1 (id=1383): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 2.226713983s ago: executing program 3 (id=1384): symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cramfs\x00', 0x0, 0x0) 2.129406656s ago: executing program 1 (id=1386): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000011c0)={0x30, 0x0, 0x1c3a49af9a55c053, 0x0, 0xe4d1, 0x4, 0x5fe1, 0x0}) 1.914287655s ago: executing program 1 (id=1389): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0xf2d3, @loopback, 0x7}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)='kk,', 0x3}, {0x0, 0x33}], 0x2}}], 0x1, 0x4080) 1.821768956s ago: executing program 3 (id=1390): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x0, 0x443f, &(0x7f00000088c0)="$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") removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@known='user.incfs.id\x00') 1.620883152s ago: executing program 1 (id=1393): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c24779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d8100e6a0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c1242, 0x15c) 1.536146237s ago: executing program 0 (id=1394): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x0, [[0x0, 0x300]]}) 1.301812213s ago: executing program 0 (id=1395): creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) 1.230907469s ago: executing program 4 (id=1396): timer_create(0x7, &(0x7f0000002c40)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000002c80)=0x0) timer_gettime(r0, &(0x7f0000002cc0)) 1.037012633s ago: executing program 0 (id=1397): r0 = openat$ptp0(0xffffff9c, &(0x7f0000000300), 0x101080, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000340)) 953.722447ms ago: executing program 4 (id=1398): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0xfffff88e, 0x4) 841.348501ms ago: executing program 0 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}}, 0x40004) 815.328746ms ago: executing program 4 (id=1400): r0 = socket(0x1e, 0x1, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000000c0)) 711.979642ms ago: executing program 4 (id=1401): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tcx={@void, @value}}, 0x40) landlock_create_ruleset(&(0x7f0000000180), 0x17, 0x0) 711.088748ms ago: executing program 3 (id=1402): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) 607.142708ms ago: executing program 2 (id=1403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 469.807799ms ago: executing program 4 (id=1404): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208001e0000000401a8e607000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b147c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d54092a92954b43370e97019dc0adff5264f1e446", 0xd8}], 0x1}, 0x20000000) 434.552287ms ago: executing program 0 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c001480080007"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 387.837451ms ago: executing program 3 (id=1406): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x7, 0xfffffffffffffffe}, 0x10) 301.703264ms ago: executing program 2 (id=1407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1411, 0x1}, 0x10}}, 0x40) 155.33355ms ago: executing program 3 (id=1408): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="52a17e63fcd0a77d", 0x8}], 0x1}, 0x40) 135.596979ms ago: executing program 0 (id=1409): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5651, 0x5, 0xb5315258, 0x6, 0x88000002, 0xb, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x4}}) 135.107824ms ago: executing program 4 (id=1410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 32.140047ms ago: executing program 1 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69700000616300000005000400000000000900020073797a3000000000240007800400028008000640000000020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 0s ago: executing program 2 (id=1412): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x301, 0x0, 0xfffffffd, {0x0, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) kernel console output (not intermixed with test programs): cuous mode [ 101.592019][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.606401][ T5843] Cannot create hsr debugfs directory [ 101.615066][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.625240][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.661644][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.792299][ T5847] team0: Port device team_slave_0 added [ 101.801920][ T5847] team0: Port device team_slave_1 added [ 101.867950][ T5838] Bluetooth: hci3: command tx timeout [ 101.947680][ T5152] Bluetooth: hci1: command tx timeout [ 101.951372][ T5832] hsr_slave_0: entered promiscuous mode [ 101.961576][ T5846] Bluetooth: hci2: command tx timeout [ 101.974435][ T5838] Bluetooth: hci0: command tx timeout [ 101.975892][ T5832] hsr_slave_1: entered promiscuous mode [ 101.994273][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.002864][ T5832] Cannot create hsr debugfs directory [ 102.024614][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.033568][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.064919][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.115329][ T5835] hsr_slave_0: entered promiscuous mode [ 102.117663][ T5846] Bluetooth: hci4: command tx timeout [ 102.126944][ T5835] hsr_slave_1: entered promiscuous mode [ 102.140052][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.152395][ T5835] Cannot create hsr debugfs directory [ 102.180163][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.197021][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.237547][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.486372][ T5847] hsr_slave_0: entered promiscuous mode [ 102.496499][ T5847] hsr_slave_1: entered promiscuous mode [ 102.504808][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.515404][ T5847] Cannot create hsr debugfs directory [ 102.796148][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.812602][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.842612][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.905164][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.045004][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.058291][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.085501][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.112881][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.201550][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.245980][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.261450][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.294945][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.359672][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.388678][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.421016][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.435028][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.522775][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.632429][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.648438][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.685821][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.701814][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.723438][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.785320][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.794188][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.833793][ T3000] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.842149][ T3000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.881676][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.957933][ T5846] Bluetooth: hci3: command tx timeout [ 104.008169][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.028592][ T5846] Bluetooth: hci2: command tx timeout [ 104.029078][ T5838] Bluetooth: hci0: command tx timeout [ 104.041491][ T5152] Bluetooth: hci1: command tx timeout [ 104.082487][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.093506][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.117934][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.153191][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.187829][ T5838] Bluetooth: hci4: command tx timeout [ 104.202655][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.211577][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.240556][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.258293][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.350018][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.362294][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.422774][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.432787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.461991][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.490328][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.497849][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.538817][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.584554][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.593879][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.646593][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.752966][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.761173][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.774522][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.782883][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.850049][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.900892][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.230140][ T5833] veth0_vlan: entered promiscuous mode [ 105.304758][ T5833] veth1_vlan: entered promiscuous mode [ 105.406154][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.503313][ T5833] veth0_macvtap: entered promiscuous mode [ 105.554664][ T5833] veth1_macvtap: entered promiscuous mode [ 105.649096][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.698952][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.746385][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.799651][ T5843] veth0_vlan: entered promiscuous mode [ 105.828496][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.839739][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.856763][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.875465][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.894060][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.916784][ T5843] veth1_vlan: entered promiscuous mode [ 105.960050][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.029221][ T5838] Bluetooth: hci3: command tx timeout [ 106.108347][ T5838] Bluetooth: hci2: command tx timeout [ 106.116656][ T5838] Bluetooth: hci0: command tx timeout [ 106.127224][ T5152] Bluetooth: hci1: command tx timeout [ 106.251183][ T5835] veth0_vlan: entered promiscuous mode [ 106.273806][ T5838] Bluetooth: hci4: command tx timeout [ 106.333146][ T5835] veth1_vlan: entered promiscuous mode [ 106.366432][ T5843] veth0_macvtap: entered promiscuous mode [ 106.408741][ T5847] veth0_vlan: entered promiscuous mode [ 106.435356][ T5843] veth1_macvtap: entered promiscuous mode [ 106.449401][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.475208][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.560763][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.566817][ T5847] veth1_vlan: entered promiscuous mode [ 106.572775][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.614972][ T5835] veth0_macvtap: entered promiscuous mode [ 106.651521][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.711591][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.733973][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.762063][ T5835] veth1_macvtap: entered promiscuous mode [ 106.795812][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.807346][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.819441][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.829181][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.858330][ T5832] veth0_vlan: entered promiscuous mode [ 106.939058][ T5832] veth1_vlan: entered promiscuous mode [ 106.954462][ T5847] veth0_macvtap: entered promiscuous mode [ 106.970325][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.019099][ T5847] veth1_macvtap: entered promiscuous mode [ 107.061008][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.138291][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.162026][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.183058][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.194537][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.246205][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.285596][ T5832] veth0_macvtap: entered promiscuous mode [ 107.298756][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.392005][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.402314][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.414876][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.425666][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.452262][ T5832] veth1_macvtap: entered promiscuous mode [ 107.463131][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.484065][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.604974][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.621105][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.685806][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.717508][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.734029][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.749849][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802332][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.813130][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.816043][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.853157][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.933771][ T30] audit: type=1326 audit(1750081597.956:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 107.966562][ T30] audit: type=1326 audit(1750081597.956:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 108.011698][ T30] audit: type=1326 audit(1750081597.956:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 108.047209][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.055430][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.065419][ T30] audit: type=1326 audit(1750081597.956:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 108.161162][ T5966] loop0: detected capacity change from 0 to 256 [ 108.239529][ T5966] FAT-fs (loop0): Directory bread(block 64) failed [ 108.251377][ T5966] FAT-fs (loop0): Directory bread(block 65) failed [ 108.261356][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.281443][ T5966] FAT-fs (loop0): Directory bread(block 66) failed [ 108.304604][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.321004][ T5966] FAT-fs (loop0): Directory bread(block 67) failed [ 108.345196][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.360996][ T5966] FAT-fs (loop0): Directory bread(block 68) failed [ 108.376878][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.394677][ T5966] FAT-fs (loop0): Directory bread(block 69) failed [ 108.450369][ T5966] FAT-fs (loop0): Directory bread(block 70) failed [ 108.482147][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.484068][ T5966] FAT-fs (loop0): Directory bread(block 71) failed [ 108.525568][ T5966] FAT-fs (loop0): Directory bread(block 72) failed [ 108.531288][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.536903][ T5966] FAT-fs (loop0): Directory bread(block 73) failed [ 108.684098][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.697477][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.719079][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.917524][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 108.950378][ T5899] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 109.006429][ T5899] usb 4-1: config 0 has no interface number 0 [ 109.072307][ T5899] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=76.ff [ 109.114636][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.199915][ T5899] usb 4-1: config 0 descriptor?? [ 109.343131][ T5980] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5'. [ 109.628200][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.651311][ T5988] loop4: detected capacity change from 0 to 1024 [ 109.674506][ T5899] usb 4-1: f81604_write: reg: 105 data: 29 failed: -EPROTO [ 109.714979][ T5899] f81604 4-1:0.211: Setting termination of CH#0 failed: -EPROTO [ 109.735291][ T5899] f81604 4-1:0.211: probe with driver f81604 failed with error -71 [ 109.803591][ T5899] usb 4-1: USB disconnect, device number 2 [ 109.817428][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 109.843165][ T5939] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f [ 109.874847][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.906108][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 109.951865][ T5939] usb 1-1: Product: syz [ 109.968901][ T5939] usb 1-1: Manufacturer: syz [ 109.978373][ T5939] usb 1-1: SerialNumber: syz [ 110.000717][ T5939] usb 1-1: config 0 descriptor?? [ 110.041531][ T5939] usb-storage 1-1:0.0: USB Mass Storage device detected [ 110.134599][ T5939] usb-storage 1-1:0.0: Quirks match for vid 057b pid 0000: 1 [ 110.313702][ T5998] loop1: detected capacity change from 0 to 4096 [ 110.335188][ T5921] usb 1-1: USB disconnect, device number 2 [ 110.532195][ T5998] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 110.571239][ T5998] ntfs3(loop1): Failed to load $Extend (-22). [ 110.651148][ T5998] ntfs3(loop1): Failed to initialize $Extend. [ 111.116695][ T6010] netlink: 164 bytes leftover after parsing attributes in process `syz.2.27'. [ 111.184905][ T6010] netlink: 164 bytes leftover after parsing attributes in process `syz.2.27'. [ 111.224831][ T6010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.27'. [ 111.457401][ T6022] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.32'. [ 111.885428][ T6034] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.150762][ T6039] loop0: detected capacity change from 0 to 24 [ 112.227401][ T6039] ======================================================= [ 112.227401][ T6039] WARNING: The mand mount option has been deprecated and [ 112.227401][ T6039] and is ignored by this kernel. Remove the mand [ 112.227401][ T6039] option from the mount to silence this warning. [ 112.227401][ T6039] ======================================================= [ 112.486204][ T6045] syz.1.44: attempt to access beyond end of device [ 112.486204][ T6045] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 112.554944][ T6045] vxfs: unable to read disk superblock at 1 [ 112.605086][ T6045] syz.1.44: attempt to access beyond end of device [ 112.605086][ T6045] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 112.657255][ T6045] vxfs: unable to read disk superblock at 8 [ 112.730977][ T6045] vxfs: can't find superblock. [ 113.162276][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.49'. [ 113.180430][ T6056] loop1: detected capacity change from 0 to 512 [ 113.221277][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.49'. [ 113.249523][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.308173][ T6057] netlink: 52 bytes leftover after parsing attributes in process `syz.0.49'. [ 113.390835][ T6056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.585929][ T6056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.690006][ T6056] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.900505][ T6036] loop4: detected capacity change from 0 to 32768 [ 113.973100][ T6036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.38 (6036) [ 114.130509][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.172713][ T6036] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.257676][ T6036] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 114.296676][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 114.327349][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'. [ 114.334383][ T6036] BTRFS info (device loop4): using free-space-tree [ 114.494015][ T6069] kernel read not supported for file /  (pid: 6069 comm: syz.1.54) [ 114.557943][ T30] audit: type=1800 audit(1750081604.576:6): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name=200120 dev="mqueue" ino=7826 res=0 errno=0 [ 114.594333][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.898456][ T6085] loop1: detected capacity change from 0 to 16 [ 114.969408][ T6085] erofs (device loop1): mounted with root inode @ nid 36. [ 115.118230][ T6036] BTRFS error (device loop4): open_ctree failed: -4 [ 115.220545][ T6059] loop3: detected capacity change from 0 to 32768 [ 115.334055][ T6059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.51 (6059) [ 115.499277][ T6093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.59'. [ 115.534097][ T6059] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.602076][ T6091] loop2: detected capacity change from 0 to 4096 [ 115.618059][ T6059] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 115.667745][ T6098] loop1: detected capacity change from 0 to 8 [ 115.678141][ T6059] BTRFS info (device loop3): using free-space-tree [ 115.879809][ T6098] SQUASHFS error: Unable to read inode 0xa7 [ 116.133411][ T6118] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 116.147965][ T6091] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000 [ 116.170753][ T6118] veth1_vlan: entered allmulticast mode [ 116.187561][ T6091] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB [ 116.333391][ T6118] team0: Device veth1_vlan failed to register rx_handler [ 116.351875][ T5843] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.239451][ T6138] batadv1: entered promiscuous mode [ 117.297503][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.520787][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.76'. [ 117.866316][ T6154] netlink: 'syz.0.79': attribute type 32 has an invalid length. [ 118.001727][ T6158] loop4: detected capacity change from 0 to 512 [ 118.096181][ T6158] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.229247][ T5832] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 118.545674][ T6171] warning: `syz.2.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.699307][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.89'. [ 118.836266][ T6175] loop3: detected capacity change from 0 to 512 [ 118.894987][ T6175] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.944963][ T6179] loop2: detected capacity change from 0 to 16 [ 118.997735][ T6179] erofs (device loop2): mounted with root inode @ nid 36. [ 119.163854][ T6175] EXT4-fs (loop3): 1 orphan inode deleted [ 119.217495][ T1167] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 119.226802][ T6175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.257407][ T1167] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 119.324929][ T6175] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.337135][ T6190] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET) [ 119.549613][ T6163] loop0: detected capacity change from 0 to 32768 [ 119.600063][ T6163] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.84 (6163) [ 119.643967][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.693411][ T6163] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 119.758125][ T6163] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 119.770327][ T6196] loop1: detected capacity change from 0 to 16 [ 119.795232][ T6163] BTRFS info (device loop0): disk space caching is enabled [ 119.805596][ T6196] erofs (device loop1): mounted with root inode @ nid 36. [ 119.816300][ T6163] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 119.837803][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.851346][ T6198] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 119.876949][ T6198] netlink: 228 bytes leftover after parsing attributes in process `syz.2.101'. [ 120.029842][ T9] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 120.083022][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.137731][ T9] usb 5-1: config 0 descriptor?? [ 120.228062][ T6163] BTRFS info (device loop0): rebuilding free space tree [ 120.376444][ T9] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 120.415980][ T6163] BTRFS info (device loop0): disabling free space tree [ 120.457288][ T6163] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.489729][ T6163] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.578896][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 120.696070][ T9] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 120.737734][ T9] [drm] Initialized udl on minor 2 [ 120.806768][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 120.822561][ T5945] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.881389][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 120.926900][ T6230] loop1: detected capacity change from 0 to 4096 [ 120.949239][ T5833] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 120.950534][ T5921] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 121.008648][ T9] usb 5-1: USB disconnect, device number 2 [ 121.009165][ T6230] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 121.039527][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 121.054306][ T5921] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 121.065243][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.086908][ T5945] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.176293][ T5945] usb 3-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.297418][ T5945] usb 3-1: config 0 interface 0 has no altsetting 1 [ 121.334434][ T5945] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 121.381679][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.419129][ T6236] loop4: detected capacity change from 0 to 64 [ 121.427229][ T5945] usb 3-1: Product: syz [ 121.461744][ T5945] usb 3-1: Manufacturer: syz [ 121.466876][ T5945] usb 3-1: SerialNumber: syz [ 121.551127][ T5945] usb 3-1: config 0 descriptor?? [ 122.098990][ T5945] usb 3-1: USB disconnect, device number 2 [ 122.854561][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 122.940747][ T6263] loop2: detected capacity change from 0 to 512 [ 122.992965][ T6263] EXT4-fs: Ignoring removed i_version option [ 123.012329][ T6263] EXT4-fs: Ignoring removed nobh option [ 123.037178][ T5945] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.150761][ T6263] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.237332][ T6263] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.239436][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 123.340079][ T6263] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 3: comm syz.2.124: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 123.355437][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 123.437208][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.472957][ T6263] EXT4-fs error (device loop2) in ext4_delete_entry:2739: Corrupt filesystem [ 123.477110][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.517415][ T6279] netlink: 128 bytes leftover after parsing attributes in process `syz.1.129'. [ 123.558642][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 123.619380][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 123.627480][ T6281] netlink: 180 bytes leftover after parsing attributes in process `syz.0.131'. [ 123.676178][ T5945] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 123.718433][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.781876][ T5835] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 123.810994][ T5945] usb 5-1: config 0 descriptor?? [ 123.821376][ T6258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.957548][ T6286] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 124.058768][ T6286] team0: Device veth1_macvtap failed to register rx_handler [ 124.069597][ T6290] loop2: detected capacity change from 0 to 2048 [ 124.210718][ T6290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.385075][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 124.394113][ T5945] usb 5-1: USB disconnect, device number 3 [ 124.403670][ T6296] loop1: detected capacity change from 0 to 256 [ 124.756723][ T6302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.142'. [ 124.847298][ T6302] netlink: 52 bytes leftover after parsing attributes in process `syz.3.142'. [ 125.057421][ T6308] loop0: detected capacity change from 0 to 8 [ 125.099074][ T6308] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 125.165446][ T6310] loop2: detected capacity change from 0 to 1764 [ 125.178932][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop0 [ 125.315475][ T5850] udevd[5850]: incorrect cramfs checksum on /dev/loop0 [ 125.330247][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 125.356916][ T6310] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 125.546125][ T6318] loop4: detected capacity change from 0 to 256 [ 125.558201][ T6318] exfat: Deprecated parameter 'namecase' [ 125.565088][ T6318] exfat: Deprecated parameter 'namecase' [ 125.666455][ T6318] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 125.733465][ T30] audit: type=1326 audit(1750081615.766:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e18e929 code=0x7ffc0000 [ 125.828162][ T30] audit: type=1326 audit(1750081615.796:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e18e929 code=0x7ffc0000 [ 125.861967][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 125.965082][ T30] audit: type=1326 audit(1750081615.796:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ffa7e18e929 code=0x7ffc0000 [ 126.108399][ T30] audit: type=1326 audit(1750081615.796:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e18e929 code=0x7ffc0000 [ 126.183979][ T30] audit: type=1326 audit(1750081615.796:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7e18e929 code=0x7ffc0000 [ 126.216225][ T6333] netlink: 44 bytes leftover after parsing attributes in process `syz.3.157'. [ 126.625063][ T6345] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 126.975888][ T6358] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.252941][ T6369] capability: warning: `syz.4.171' uses 32-bit capabilities (legacy support in use) [ 127.851454][ T6349] loop0: detected capacity change from 0 to 32768 [ 127.879617][ T6384] loop1: detected capacity change from 0 to 1024 [ 127.943578][ T6384] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.978913][ T6349] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 127.978913][ T6349] [ 128.040132][ T6349] ERROR: (device loop0): remounting filesystem as read-only [ 128.060059][ T6349] ERROR: (device loop0): jfs_rename: [ 128.060059][ T6349] [ 128.077230][ T6384] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 128.079749][ T6384] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.130376][ T5833] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 128.130376][ T5833] [ 128.173948][ T6384] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.179: Invalid inode table block 0 in block_group 0 [ 128.209980][ T6384] EXT4-fs (loop1): Remounting filesystem read-only [ 128.210014][ T6384] Quota error (device loop1): write_blk: dquota write failed [ 128.210124][ T6384] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 128.210365][ T6384] EXT4-fs (loop1): 1 truncate cleaned up [ 128.238763][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.445183][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.909265][ T6408] loop4: detected capacity change from 0 to 8 [ 128.948541][ T6408] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 129.038941][ T6408] cramfs: Error -3 while decompressing! [ 129.061870][ T6412] netlink: 96 bytes leftover after parsing attributes in process `syz.3.191'. [ 129.069250][ T6408] cramfs: ffffffff99bcbba8(18)->ffff88807868a000(4096) [ 129.120376][ T6408] cramfs: Error -3 while decompressing! [ 129.126712][ T6408] cramfs: ffffffff99bcbba8(18)->ffff88807868a000(4096) [ 129.172238][ T30] audit: type=1800 audit(1750081619.186:12): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.188" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 129.477331][ T6424] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 129.498093][ T6426] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 129.515751][ T6424] netlink: 228 bytes leftover after parsing attributes in process `syz.0.194'. [ 129.766479][ T6432] netlink: 'syz.1.200': attribute type 287 has an invalid length. [ 129.834537][ T6436] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 130.122182][ T6446] loop0: detected capacity change from 0 to 1024 [ 130.428461][ T2991] hfsplus: b-tree write err: -5, ino 4 [ 130.705766][ T6461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.736418][ T6462] loop3: detected capacity change from 0 to 1024 [ 130.895261][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.012474][ T6474] loop2: detected capacity change from 0 to 8 [ 131.066114][ T6474] SQUASHFS error: lzo decompression failed, data probably corrupt [ 131.089102][ T6474] SQUASHFS error: Failed to read block 0x91: -5 [ 131.125871][ T6474] SQUASHFS error: Unable to read metadata cache entry [8f] [ 131.143514][ T6474] SQUASHFS error: Unable to read inode 0x11f [ 131.156865][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.224707][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 133.345245][ T6547] Device name not specified. [ 133.345245][ T6547] [ 133.376784][ T6543] loop3: detected capacity change from 0 to 4096 [ 133.476073][ T6549] raw_sendmsg: syz.1.254 forgot to set AF_INET. Fix it! [ 133.704233][ T6551] loop4: detected capacity change from 0 to 1024 [ 133.738962][ T6543] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000 [ 133.780966][ T6543] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB [ 133.825335][ T6553] nftables ruleset with unbound set [ 134.038609][ T6531] loop0: detected capacity change from 0 to 32768 [ 134.095009][ T6531] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.245 (6531) [ 134.196247][ T6531] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 134.199685][ T6534] loop2: detected capacity change from 0 to 32768 [ 134.275278][ T6531] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.350875][ T6531] BTRFS info (device loop0): disk space caching is enabled [ 134.359833][ T6531] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 134.487547][ T6534] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 134.647569][ T6531] BTRFS info (device loop0): rebuilding free space tree [ 134.686985][ T6534] (syz.2.247,6534,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 134.789827][ T6534] (syz.2.247,6534,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 134.802053][ T6531] BTRFS info (device loop0): disabling free space tree [ 134.810241][ T6534] (syz.2.247,6534,1):ocfs2_mknod:298 ERROR: status = -2 [ 134.827631][ T6531] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.857588][ T6534] (syz.2.247,6534,0):ocfs2_mknod:502 ERROR: status = -2 [ 134.865266][ T6534] (syz.2.247,6534,0):ocfs2_create:675 ERROR: status = -2 [ 134.899424][ T6531] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.020792][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 135.106095][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 135.194168][ T6531] BTRFS info (device loop0): balance: start -sprofiles=NONE,usage=1..511 [ 135.266825][ T6531] BTRFS info (device loop0): balance: ended with status: 0 [ 135.378071][ T6598] netlink: 'syz.2.266': attribute type 4 has an invalid length. [ 135.463981][ T6597] loop1: detected capacity change from 0 to 2048 [ 135.538853][ T5833] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.616242][ T6597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.226424][ T6613] xt_TCPMSS: Only works on TCP SYN packets [ 136.262306][ T6617] loop3: detected capacity change from 0 to 256 [ 136.321469][ T6617] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 136.976055][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 137.127363][ T6639] syz.0.288 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.316385][ T6641] loop4: detected capacity change from 0 to 256 [ 137.393486][ T6644] mmap: syz.3.292 (6644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.458824][ T6641] FAT-fs (loop4): Directory bread(block 64) failed [ 137.479915][ T6641] FAT-fs (loop4): Directory bread(block 65) failed [ 137.522375][ T6641] FAT-fs (loop4): Directory bread(block 66) failed [ 137.537533][ T6641] FAT-fs (loop4): Directory bread(block 67) failed [ 137.556532][ T6641] FAT-fs (loop4): Directory bread(block 68) failed [ 137.627371][ T6641] FAT-fs (loop4): Directory bread(block 69) failed [ 137.674981][ T6641] FAT-fs (loop4): Directory bread(block 70) failed [ 137.719414][ T6641] FAT-fs (loop4): Directory bread(block 71) failed [ 137.726657][ T6641] FAT-fs (loop4): Directory bread(block 72) failed [ 137.775723][ T6641] FAT-fs (loop4): Directory bread(block 73) failed [ 137.789238][ T6651] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 138.100621][ T6661] netlink: 'syz.1.300': attribute type 1 has an invalid length. [ 138.126315][ T6659] loop3: detected capacity change from 0 to 764 [ 138.218765][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.236835][ T6659] Symlink component flag not implemented [ 138.237951][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.259419][ T6663] loop2: detected capacity change from 0 to 512 [ 138.274875][ T6659] Symlink component flag not implemented (7) [ 138.366265][ T6663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.495374][ T6663] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.741235][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.102525][ T6692] loop3: detected capacity change from 0 to 512 [ 139.250081][ T6692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.307760][ T6692] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.324702][ T6703] loop2: detected capacity change from 0 to 16 [ 139.342124][ T6703] erofs (device loop2): mounted with root inode @ nid 36. [ 139.378412][ T6703] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 139.422374][ T6703] erofs (device loop2): failed to decompress -23 in[64, 4032] out[1851] [ 139.505017][ T6703] erofs (device loop2): read error -117 @ 43 of nid 36 [ 139.561622][ T6707] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 139.599292][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.666697][ T6709] No such timeout policy "syz1" [ 140.510752][ T6731] loop1: detected capacity change from 0 to 4096 [ 140.567356][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 140.618732][ T6739] kernel profiling enabled (shift: 7) [ 140.725542][ T6731] ntfs3(loop1): ino=1a, mi_enum_attr [ 140.738151][ T6731] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 140.770558][ T44] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 140.797352][ T44] usb 4-1: config 0 has no interface number 0 [ 140.845391][ T44] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 140.881348][ T44] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.916124][ T44] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 140.955095][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.985341][ T44] usb 4-1: Product: syz [ 140.996343][ T44] usb 4-1: Manufacturer: syz [ 141.007875][ T44] usb 4-1: SerialNumber: syz [ 141.031475][ T44] usb 4-1: config 0 descriptor?? [ 141.042385][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.089060][ T44] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 141.199964][ T44] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 141.313898][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 141.516943][ T44] usb 4-1: USB disconnect, device number 3 [ 141.565281][ T44] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 141.621904][ T6757] loop1: detected capacity change from 0 to 4096 [ 141.628862][ T44] cyberjack 4-1:0.69: device disconnected [ 141.865618][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 141.891311][ T6757] ntfs3(loop1): ino=21, The size of extended attributes must not exceed 64KiB [ 142.387752][ T6774] xt_hashlimit: max too large, truncated to 1048576 [ 142.440833][ T6776] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.463034][ T6774] Cannot find set identified by id 0 to match [ 142.700638][ T6753] loop2: detected capacity change from 0 to 32768 [ 142.728103][ T6753] btrfs: Deprecated parameter 'usebackuproot' [ 142.766012][ T6753] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 142.856282][ T6753] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.343 (6753) [ 142.957099][ T6753] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 143.010128][ T6753] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 143.099656][ T6753] BTRFS info (device loop2): using free-space-tree [ 143.321379][ T6808] loop4: detected capacity change from 0 to 4096 [ 143.325182][ T6795] loop0: detected capacity change from 0 to 1764 [ 143.436384][ T6753] BTRFS info (device loop2): rebuilding free space tree [ 143.524244][ T6753] BTRFS info (device loop2): checking UUID tree [ 143.607815][ T6753] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 144.044957][ T6778] loop3: detected capacity change from 0 to 32768 [ 144.490061][ T6778] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 144.490093][ T6778] allowing incompatible features above 0.0: (unknown version) [ 144.490106][ T6778] features: [ 144.518022][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.789765][ T6778] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 144.804564][ T6832] loop2: detected capacity change from 0 to 512 [ 144.837267][ T6778] bcachefs (loop3): initializing new filesystem [ 144.859198][ T6832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.917250][ T6778] bcachefs (loop3): going read-write [ 144.950523][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.075306][ T6832] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.191417][ T6832] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.372: Abort forced by user [ 145.200176][ T6778] bcachefs (loop3): marking superblocks [ 145.216168][ T6832] EXT4-fs (loop2): Remounting filesystem read-only [ 145.283599][ T6832] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.374014][ T6778] bcachefs (loop3): initializing freespace [ 145.431880][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.435304][ T6778] bcachefs (loop3): done initializing freespace [ 145.549377][ T6778] bcachefs (loop3): reading snapshots table [ 145.556798][ T6778] bcachefs (loop3): reading snapshots done [ 145.761737][ T6778] bcachefs (loop3): done starting filesystem [ 145.796433][ T6823] loop1: detected capacity change from 0 to 32768 [ 145.869630][ T6778] syz.3.354 (6778) used greatest stack depth: 14600 bytes left [ 145.914111][ T6823] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 145.914111][ T6823] [ 145.936221][ T5843] bcachefs (loop3): shutting down [ 145.978020][ T5843] bcachefs (loop3): going read-only [ 146.014899][ T5843] bcachefs (loop3): finished waiting for writes to stop [ 146.068545][ T6862] loop2: detected capacity change from 0 to 256 [ 146.097540][ T5843] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 146.136508][ T6843] loop4: detected capacity change from 0 to 32768 [ 146.220368][ T6862] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 146.309900][ T6843] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.360961][ T5843] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 146.428920][ T5843] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 146.448264][ T5843] bcachefs (loop3): marking filesystem clean [ 146.528640][ T5843] bcachefs (loop3): shutdown complete [ 146.647511][ T6843] XFS (loop4): Ending clean mount [ 146.703004][ T6843] XFS (loop4): Quotacheck needed: Please wait. [ 146.966259][ T6843] XFS (loop4): Quotacheck: Done. [ 147.242809][ T5832] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.519475][ T6892] loop0: detected capacity change from 0 to 64 [ 147.599102][ T6892] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 148.621795][ T6922] loop4: detected capacity change from 0 to 64 [ 148.747374][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 148.824690][ T6928] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 148.986283][ T6930] netlink: 'syz.0.411': attribute type 11 has an invalid length. [ 149.002919][ T6930] netlink: 'syz.0.411': attribute type 11 has an invalid length. [ 149.037283][ T6930] netlink: 224 bytes leftover after parsing attributes in process `syz.0.411'. [ 149.877671][ T6948] netlink: 52 bytes leftover after parsing attributes in process `syz.1.419'. [ 149.996469][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 150.273715][ T6932] loop2: detected capacity change from 0 to 32768 [ 150.295479][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.497621][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 150.543226][ T5921] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 150.560641][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.597119][ T5921] usb 5-1: Product: syz [ 150.620824][ T5921] usb 5-1: Manufacturer: syz [ 150.638230][ T6964] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.649522][ T5921] usb 5-1: SerialNumber: syz [ 150.694467][ T5921] usb 5-1: config 0 descriptor?? [ 150.762264][ T5921] gspca_main: se401-2.14.0 probing 047d:5003 [ 151.007816][ T6972] syz.1.430 (6972): /proc/6971/oom_adj is deprecated, please use /proc/6971/oom_score_adj instead. [ 151.149508][ T5921] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 151.182131][ T5921] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 151.225433][ T5921] usb 5-1: USB disconnect, device number 4 [ 151.685652][ T6986] loop3: detected capacity change from 0 to 512 [ 151.806843][ T6986] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.865366][ T6986] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.438: bg 0: block 248: padding at end of block bitmap is not set [ 151.997623][ T6986] Quota error (device loop3): write_blk: dquota write failed [ 152.038260][ T6986] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 152.099653][ T6986] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.438: Failed to acquire dquot type 1 [ 152.136150][ T6997] netlink: 'syz.1.443': attribute type 21 has an invalid length. [ 152.155823][ T6997] netlink: 'syz.1.443': attribute type 11 has an invalid length. [ 152.200558][ T6986] EXT4-fs (loop3): 1 truncate cleaned up [ 152.224483][ T6986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.443185][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.499945][ T7006] loop1: detected capacity change from 0 to 2048 [ 152.514497][ T6976] loop2: detected capacity change from 0 to 32768 [ 152.595810][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.666494][ T7006] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.446: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.900708][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.982352][ T6976] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 152.982381][ T6976] allowing incompatible features above 0.0: (unknown version) [ 152.982395][ T6976] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 153.218695][ T7025] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 153.218741][ T7025] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547521) [ 153.218764][ T7025] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 153.487107][ T6976] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 153.495553][ T6976] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 153.564261][ T6976] bcachefs (loop2): Version upgrade required: [ 153.564261][ T6976] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 153.564261][ T6976] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 153.564261][ T6976] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 153.733847][ T6976] bcachefs (loop2): dropping and reconstructing all alloc info [ 153.920674][ T6976] bcachefs (loop2): accounting_read... done [ 153.963296][ T6976] bcachefs (loop2): alloc_read... done [ 154.021154][ T6976] bcachefs (loop2): snapshots_read... done [ 154.065656][ T6976] bcachefs (loop2): done starting filesystem [ 154.164793][ T7048] loop0: detected capacity change from 0 to 512 [ 154.196305][ T7048] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.302985][ T7048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.357285][ T7048] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.470175][ T5835] bcachefs (loop2): shutting down [ 154.489452][ T7048] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.468: corrupted xattr block 33: overlapping e_value [ 154.613400][ T5835] bcachefs (loop2): shutdown complete [ 154.785764][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.014540][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 155.133874][ T7055] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 155.422836][ T7081] No source specified [ 155.544032][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 155.927678][ T7096] usb usb8: usbfs: process 7096 (syz.1.490) did not claim interface 0 before use [ 155.971201][ T7098] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 156.188999][ T7104] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 156.209660][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.4.494'. [ 156.240600][ T7107] binder: 7106:7107 ioctl c0306201 200000000780 returned -14 [ 156.276645][ T7104] batman_adv: batadv0: Adding interface: wlan0 [ 156.298414][ T7104] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.336953][ T7104] batman_adv: batadv0: Interface activated: wlan0 [ 156.427233][ T5152] Bluetooth: hci0: command 0x080f tx timeout [ 157.364943][ T7138] loop0: detected capacity change from 0 to 256 [ 157.417815][ T7143] netlink: 'syz.2.511': attribute type 7 has an invalid length. [ 157.425976][ T7143] netlink: 'syz.2.511': attribute type 8 has an invalid length. [ 157.478136][ T7138] FAT-fs (loop0): Directory bread(block 64) failed [ 157.506248][ T7138] FAT-fs (loop0): Directory bread(block 65) failed [ 157.524049][ T7138] FAT-fs (loop0): Directory bread(block 66) failed [ 157.535978][ T7138] FAT-fs (loop0): Directory bread(block 67) failed [ 157.602044][ T7138] FAT-fs (loop0): Directory bread(block 68) failed [ 157.667775][ T7138] FAT-fs (loop0): Directory bread(block 69) failed [ 157.687934][ T7138] FAT-fs (loop0): Directory bread(block 70) failed [ 157.743719][ T7138] FAT-fs (loop0): Directory bread(block 71) failed [ 157.775631][ T7138] FAT-fs (loop0): Directory bread(block 72) failed [ 157.820247][ T7138] FAT-fs (loop0): Directory bread(block 73) failed [ 157.947512][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.010881][ T7158] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 158.117817][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 158.148005][ T5921] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.156508][ T5921] usb 5-1: config 0 has no interface number 0 [ 158.217358][ T5921] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 158.257232][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.312247][ T5921] usb 5-1: Product: syz [ 158.322524][ T5921] usb 5-1: Manufacturer: syz [ 158.367092][ T5921] usb 5-1: SerialNumber: syz [ 158.386612][ T5921] usb 5-1: config 0 descriptor?? [ 158.421534][ T5921] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 158.477089][ T5921] usb 5-1: selecting invalid altsetting 1 [ 158.484387][ T5921] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 158.589024][ T5921] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.659265][ T5921] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 158.709343][ T5921] usb 5-1: media controller created [ 158.826882][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.865138][ T7180] overlayfs: workdir and upperdir must be separate subtrees [ 159.017432][ T5921] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 159.049987][ T5921] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 159.327442][ T5921] DVB: Unable to find symbol mxl5005s_attach() [ 159.405753][ T5921] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 159.636934][ T5921] usb 5-1: USB disconnect, device number 5 [ 159.791527][ T7204] loop3: detected capacity change from 0 to 8 [ 159.812058][ T7204] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.898152][ T7204] SQUASHFS error: Failed to read block 0x91: -5 [ 159.948792][ T7204] SQUASHFS error: Unable to read metadata cache entry [8f] [ 159.956937][ T7204] SQUASHFS error: Unable to read inode 0x11f [ 160.195346][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.249864][ T5921] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.447192][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 160.483657][ T7178] loop1: detected capacity change from 0 to 32768 [ 160.494093][ T5921] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.515561][ T5921] usb 4-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 160.551614][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 160.582044][ T5921] usb 4-1: config 0 has no interface number 0 [ 160.609572][ T7178] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 160.644344][ T7178] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 160.663251][ T5921] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 160.721909][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.777638][ T5921] usb 4-1: Product: syz [ 160.782053][ T5921] usb 4-1: Manufacturer: syz [ 160.801691][ T7178] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 160.826600][ T30] audit: type=1326 audit(1750081650.846:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839b8e929 code=0x7ffc0000 [ 160.869725][ T5921] usb 4-1: SerialNumber: syz [ 160.872084][ T5474] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 160.904984][ T5921] usb 4-1: config 0 descriptor?? [ 160.905087][ T5474] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 160.961291][ T5921] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 160.977149][ T30] audit: type=1326 audit(1750081650.846:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839b8e929 code=0x7ffc0000 [ 161.037182][ T5921] usb 4-1: No valid video chain found. [ 161.085756][ T30] audit: type=1326 audit(1750081650.856:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa839b8e929 code=0x7ffc0000 [ 161.177713][ T5920] usb 4-1: USB disconnect, device number 4 [ 161.234901][ T30] audit: type=1326 audit(1750081650.856:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa839b8e929 code=0x7ffc0000 [ 161.445084][ T5474] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 539ms [ 161.489175][ T5474] gfs2: fsid=syz:syz.0: jid=0: Done [ 161.506315][ T7178] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 161.792760][ T7178] gfs2: fsid=syz:syz.0: found 1 quota changes [ 161.995316][ T7256] loop3: detected capacity change from 0 to 1024 [ 162.829501][ T7280] loop2: detected capacity change from 0 to 47 [ 163.300588][ T30] audit: type=1326 audit(1750081653.326:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 163.324651][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.375984][ T7291] loop1: detected capacity change from 0 to 1024 [ 163.397390][ T30] audit: type=1326 audit(1750081653.326:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 163.421346][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.503311][ T30] audit: type=1326 audit(1750081653.326:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 163.519526][ T7291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.527080][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.529688][ T30] audit: type=1326 audit(1750081653.326:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 163.553062][ T7299] xt_connbytes: Forcing CT accounting to be enabled [ 163.577181][ T30] audit: type=1326 audit(1750081653.326:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 163.659150][ T7291] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.734102][ T7291] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.581: corrupted xattr block 128: bad e_name length [ 163.830597][ T7291] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.581: corrupted xattr block 128: bad e_name length [ 163.846676][ T30] audit: type=1800 audit(1750081653.856:22): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.581" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 163.870964][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.935920][ T7291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.581: bg 0: block 273: padding at end of block bitmap is not set [ 163.955146][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.061144][ T7291] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 164.285588][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.366036][ T7320] loop0: detected capacity change from 0 to 1024 [ 164.418837][ T7320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.469773][ T7320] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.566725][ T7320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.609636][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 164.690097][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.009800][ T7343] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 165.042451][ T7341] loop2: detected capacity change from 0 to 1024 [ 165.367910][ T12] hfsplus: b-tree write err: -5, ino 4 [ 165.440917][ T7351] loop0: detected capacity change from 0 to 128 [ 165.502928][ T7351] FAT-fs (loop0): bogus number of reserved sectors [ 165.511912][ T7353] loop4: detected capacity change from 0 to 8 [ 165.521250][ T7351] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 165.568762][ T7351] FAT-fs (loop0): Can't find a valid FAT filesystem [ 166.266539][ T7373] loop4: detected capacity change from 0 to 164 [ 166.336447][ T7335] loop1: detected capacity change from 0 to 32768 [ 166.344339][ T7376] loop3: detected capacity change from 0 to 128 [ 166.366137][ T7373] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 166.405519][ T7376] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 166.435735][ T7380] netlink: 9 bytes leftover after parsing attributes in process `syz.0.623'. [ 166.658135][ T7335] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 166.658165][ T7335] allowing incompatible features above 0.0: (unknown version) [ 166.658178][ T7335] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 166.825079][ T7386] can0: slcan on ttyS3. [ 166.873594][ T7335] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 166.925339][ T7335] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 166.993297][ T7335] bcachefs (loop1): Version upgrade required: [ 166.993297][ T7335] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 166.993297][ T7335] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 166.993297][ T7335] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 167.076872][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.151544][ T7335] bcachefs (loop1): dropping and reconstructing all alloc info [ 167.187874][ T7394] netlink: 'syz.0.630': attribute type 5 has an invalid length. [ 167.219585][ T7385] can0 (unregistered): slcan off ttyS3. [ 167.320791][ T7335] bcachefs (loop1): accounting_read... done [ 167.377256][ T7335] bcachefs (loop1): alloc_read... done [ 167.431566][ T7335] bcachefs (loop1): snapshots_read... done [ 167.465263][ T7335] bcachefs (loop1): done starting filesystem [ 167.666063][ T5847] bcachefs (loop1): shutting down [ 167.933925][ T5847] bcachefs (loop1): shutdown complete [ 168.300940][ T7424] loop3: detected capacity change from 0 to 64 [ 168.565622][ T7430] loop2: detected capacity change from 0 to 256 [ 169.131314][ T7438] loop2: detected capacity change from 0 to 1024 [ 169.203819][ T7415] loop0: detected capacity change from 0 to 32768 [ 169.217621][ T7438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.306615][ T7415] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.436305][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.649383][ T7415] XFS (loop0): Ending clean mount [ 169.679723][ T7415] XFS (loop0): Quotacheck needed: Please wait. [ 169.754765][ T7415] XFS (loop0): Quotacheck: Done. [ 169.864291][ T7458] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 169.928908][ T7458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.654'. [ 169.986359][ T5833] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.030024][ T7458] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.051894][ T7436] loop3: detected capacity change from 0 to 32768 [ 170.145619][ T7436] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 170.315961][ T30] audit: type=1800 audit(1750081660.336:23): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.652" name="bus" dev="loop3" ino=17058 res=0 errno=0 [ 170.500390][ T7466] netlink: 72 bytes leftover after parsing attributes in process `syz.2.660'. [ 170.557525][ T5843] (syz-executor,5843,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 76 [ 170.662398][ T5843] ocfs2: Unmounting device (7,3) on (node local) [ 170.767207][ T7470] netlink: 248 bytes leftover after parsing attributes in process `syz.1.663'. [ 170.784509][ T7472] capability: warning: `syz.2.664' uses deprecated v2 capabilities in a way that may be insecure [ 171.108314][ T7479] loop4: detected capacity change from 0 to 2048 [ 171.178157][ T7486] netlink: 'syz.2.666': attribute type 2 has an invalid length. [ 171.186657][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 171.397091][ T7490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.430732][ T7486] : entered promiscuous mode [ 171.546833][ T7495] loop0: detected capacity change from 0 to 256 [ 171.555801][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.618061][ T7495] MINIX-fs: mounting file system with errors, running fsck is recommended [ 171.653852][ T7479] Remounting filesystem read-only [ 171.727393][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.796458][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.855142][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.906700][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.947542][ T7479] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 172.018223][ T30] audit: type=1800 audit(1750081662.046:24): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.665" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 172.713439][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 172.778347][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 173.191395][ T7538] loop1: detected capacity change from 0 to 4096 [ 173.257750][ T7538] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 173.407730][ T5474] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 173.441060][ T7538] ntfs3(loop1): ino=19, mi_enum_attr [ 173.485137][ T7538] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 173.590456][ T7538] ntfs3(loop1): failed to convert "c46c" to koi8-u [ 173.632122][ T7538] ntfs3(loop1): ino=20, mi_enum_attr [ 173.657151][ T5474] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.684639][ T5474] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.726432][ T5474] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.757284][ T5474] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.808103][ T5474] usb 1-1: Product: syz [ 173.812505][ T5474] usb 1-1: Manufacturer: syz [ 173.828490][ T5474] usb 1-1: SerialNumber: syz [ 173.839276][ T7556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.850297][ T5474] usb 1-1: config 0 descriptor?? [ 173.892045][ T5474] usb 1-1: selecting invalid altsetting 0 [ 174.129980][ T7570] Cannot find add_set index 0 as target [ 174.157289][ T5474] usb 1-1: USB disconnect, device number 3 [ 174.410654][ T6246] udevd[6246]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.551978][ T7580] loop2: detected capacity change from 0 to 8 [ 174.669753][ T7580] SQUASHFS error: Failed to read block 0x1ec: -5 [ 174.676479][ T7580] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 175.248885][ T7594] dlm: no locking on control device [ 175.597091][ T7569] loop3: detected capacity change from 0 to 32768 [ 175.659901][ T7569] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.701 (7569) [ 175.660381][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 175.762126][ T7569] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.817448][ T7569] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.877469][ T7569] BTRFS info (device loop3): disk space caching is enabled [ 175.900838][ T7569] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 176.297905][ T7569] BTRFS info (device loop3): rebuilding free space tree [ 176.417893][ T7569] BTRFS info (device loop3): disabling free space tree [ 176.465393][ T7569] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.507250][ T7569] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.801321][ T7569] BTRFS info (device loop3): balance: start -sprofiles=NONE,usage=1..511 [ 176.863117][ T7569] BTRFS info (device loop3): balance: ended with status: 0 [ 176.945438][ T7651] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 177.080494][ T5843] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 177.106753][ T7651] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.859235][ T7670] 9pnet_fd: Insufficient options for proto=fd [ 177.941900][ T7672] tipc: Can't bind to reserved service type 0 [ 178.335166][ T7684] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 178.748084][ T7696] loop2: detected capacity change from 0 to 16 [ 178.784534][ T7696] erofs (device loop2): mounted with root inode @ nid 36. [ 178.894374][ T7700] loop1: detected capacity change from 0 to 512 [ 179.011429][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 179.040230][ T7700] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.145181][ T7700] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 179.208105][ T7700] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.299521][ T7700] EXT4-fs (loop1): 1 truncate cleaned up [ 179.338509][ T7700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.590174][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.755540][ T7725] netlink: 'syz.4.761': attribute type 5 has an invalid length. [ 179.795531][ T30] audit: type=1326 audit(1750081669.796:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 179.894804][ T7731] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 179.917516][ T30] audit: type=1326 audit(1750081669.806:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 180.036330][ T30] audit: type=1326 audit(1750081669.846:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 180.066181][ T7733] loop0: detected capacity change from 0 to 2048 [ 180.115195][ T7731] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.120689][ T7733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.162798][ T30] audit: type=1326 audit(1750081669.846:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 180.197617][ T7739] binder: 7737:7739 ioctl c0306201 2000000001c0 returned -22 [ 180.286446][ T30] audit: type=1326 audit(1750081669.846:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.3.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 180.508429][ T7741] loop3: detected capacity change from 0 to 2048 [ 180.583097][ T7749] netlink: 'syz.0.773': attribute type 10 has an invalid length. [ 180.583144][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 180.583164][ T7749] openvswitch: netlink: Flow key attr not present in new flow. [ 180.590651][ T7741] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 180.595827][ T7741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.934281][ T7755] program syz.3.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.687604][ T7743] loop4: detected capacity change from 0 to 32768 [ 181.700576][ T7743] (syz.4.769,7743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.729876][ T7743] (syz.4.769,7743,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.821659][ T7743] JBD2: Ignoring recovery information on journal [ 181.837139][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 181.953282][ T7743] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 182.048351][ T5921] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 182.058941][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 182.088545][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.149114][ T5921] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.00 [ 182.191151][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.233926][ T5832] ocfs2: Unmounting device (7,4) on (node local) [ 182.241035][ T5921] usb 3-1: config 0 descriptor?? [ 182.340141][ T5921] ttusbir 3-1:0.0: cannot find expected altsetting [ 182.368164][ T5921] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 182.454249][ T5921] usb 3-1: USB disconnect, device number 3 [ 182.675050][ T7802] loop1: detected capacity change from 0 to 256 [ 182.686716][ T7805] dlm: no locking on control device [ 183.107192][ T7813] loop0: detected capacity change from 0 to 2048 [ 183.165932][ T7818] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.235089][ T7813] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 183.273296][ T7813] Remounting filesystem read-only [ 183.416205][ T5833] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 183.453725][ T7827] loop3: detected capacity change from 0 to 256 [ 184.114948][ T7847] loop0: detected capacity change from 0 to 1024 [ 184.127171][ T7850] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 184.201539][ T7852] affs: No valid root block on device nbd3 [ 184.375926][ T12] hfsplus: b-tree write err: -5, ino 4 [ 184.926568][ T7874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.833'. [ 185.456119][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 185.987756][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 186.171772][ T7919] loop1: detected capacity change from 0 to 512 [ 186.204837][ T5899] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 186.245884][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.286129][ T5899] usb 3-1: Product: syz [ 186.298713][ T7919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.352066][ T5899] usb 3-1: Manufacturer: syz [ 186.387212][ T5899] usb 3-1: SerialNumber: syz [ 186.404731][ T7902] loop4: detected capacity change from 0 to 32768 [ 186.424286][ T7919] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.437798][ T7902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.846 (7902) [ 186.438429][ T5899] usb 3-1: config 0 descriptor?? [ 186.494163][ T7919] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.855: invalid size [ 186.529244][ T7902] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.571832][ T7902] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm [ 186.612142][ T7927] loop3: detected capacity change from 0 to 4096 [ 186.619301][ T7902] BTRFS info (device loop4): using free-space-tree [ 186.685592][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.760295][ T5899] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 187.001609][ T5899] usb 3-1: USB disconnect, device number 4 [ 187.226212][ T5832] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.733635][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 187.807396][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.868'. [ 188.315401][ T7991] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 188.851012][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 189.632655][ T8032] process 'syz.2.894' launched './file0' with NULL argv: empty string added [ 189.734024][ T8030] loop4: detected capacity change from 0 to 4096 [ 189.753885][ T7989] loop3: detected capacity change from 0 to 32768 [ 189.816300][ T8037] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.853371][ T8030] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 189.912213][ T8030] Remounting filesystem read-only [ 189.937315][ T5920] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 190.141362][ T5920] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 190.176934][ T5920] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 190.206014][ T5920] usb 2-1: Product: syz [ 190.225742][ T5920] usb 2-1: Manufacturer: syz [ 190.253866][ T5920] usb 2-1: SerialNumber: syz [ 190.270312][ T5920] usb 2-1: config 0 descriptor?? [ 190.620864][ T8053] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.686062][ T8053] overlayfs: conflicting options: userxattr,redirect_dir=on [ 190.756177][ T5920] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 190.797974][ T5920] asix 2-1:0.0: probe with driver asix failed with error -71 [ 190.849127][ T5920] usb 2-1: USB disconnect, device number 2 [ 190.859657][ T8057] loop4: detected capacity change from 0 to 64 [ 191.074997][ T8063] netlink: zone id is out of range [ 191.136135][ T8039] loop2: detected capacity change from 0 to 32768 [ 191.202803][ T8039] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.897 (8039) [ 191.324761][ T8039] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 191.411583][ T8039] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.604795][ T8039] BTRFS info (device loop2): rebuilding free space tree [ 191.717720][ T8039] BTRFS info (device loop2): disabling free space tree [ 191.735230][ T8039] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 191.751574][ T8039] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 192.045752][ T5835] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 192.045768][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 192.045950][ T8106] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 192.119989][ T8106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.268596][ T8111] xt_TCPMSS: Only works on TCP SYN packets [ 192.542255][ T8116] loop4: detected capacity change from 0 to 1024 [ 192.719338][ T8116] syz.4.927: attempt to access beyond end of device [ 192.719338][ T8116] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 192.785114][ T8116] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 192.877360][ T8116] hfsplus: unable to mark blocks free: error -5 [ 192.883861][ T8116] hfsplus: can't free extent [ 192.917349][ T8124] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 192.964787][ T8096] loop3: detected capacity change from 0 to 32768 [ 192.983974][ T8096] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.916 (8096) [ 193.028281][ T8127] loop0: detected capacity change from 0 to 2048 [ 193.074143][ T8127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.124429][ T8096] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 193.175325][ T8096] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 193.219298][ T8131] vlan1: entered allmulticast mode [ 193.246607][ T8096] BTRFS info (device loop3): disk space caching is enabled [ 193.254502][ T8131] veth0_vlan: entered allmulticast mode [ 193.293687][ T8096] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 193.631625][ T8096] BTRFS info (device loop3): rebuilding free space tree [ 193.766227][ T8096] BTRFS info (device loop3): disabling free space tree [ 193.812563][ T8096] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.860659][ T8096] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.223233][ T5843] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 194.717661][ T8133] loop4: detected capacity change from 0 to 32768 [ 194.767484][ T8133] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.935 (8133) [ 194.847933][ T8179] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 194.848577][ T8133] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 194.907869][ T8133] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 194.974834][ T30] audit: type=1326 audit(1750081684.996:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 194.997020][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.997083][ T8133] BTRFS info (device loop4): disk space caching is enabled [ 194.997105][ T8133] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 195.053143][ T8187] loop3: detected capacity change from 0 to 256 [ 195.161913][ T30] audit: type=1326 audit(1750081684.996:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 195.185026][ T30] audit: type=1326 audit(1750081685.066:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 195.209881][ T30] audit: type=1326 audit(1750081685.076:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 195.232003][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.238996][ T30] audit: type=1326 audit(1750081685.076:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 195.261334][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.498635][ T8133] BTRFS info (device loop4): rebuilding free space tree [ 195.555897][ T8133] BTRFS info (device loop4): disabling free space tree [ 195.577499][ T8133] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 195.654013][ T8133] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.728106][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.959'. [ 195.902930][ T8133] BTRFS error (device loop4): balance: invalid convert system profile raid1c4 [ 196.074333][ T5832] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 196.153749][ T8229] netlink: 'syz.2.964': attribute type 1 has an invalid length. [ 196.192724][ T8229] netlink: 244 bytes leftover after parsing attributes in process `syz.2.964'. [ 196.277289][ T5899] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.340032][ T8234] netlink: 72 bytes leftover after parsing attributes in process `syz.0.967'. [ 196.370073][ T8234] netlink: 'syz.0.967': attribute type 1 has an invalid length. [ 196.477222][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 196.492664][ T5899] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 196.537060][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.545169][ T5899] usb 4-1: Product: syz [ 196.566242][ T5899] usb 4-1: Manufacturer: syz [ 196.571535][ T5899] usb 4-1: SerialNumber: syz [ 196.606663][ T5899] r8152-cfgselector 4-1: Unknown version 0x0000 [ 196.644381][ T5899] r8152-cfgselector 4-1: config 0 descriptor?? [ 197.106806][ T5945] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 197.480653][ T8255] loop0: detected capacity change from 0 to 4096 [ 197.519339][ T8255] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 197.595258][ T8263] loop1: detected capacity change from 0 to 64 [ 197.655212][ T8267] netlink: 48 bytes leftover after parsing attributes in process `syz.4.980'. [ 197.678537][ T8255] ntfs3(loop0): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 198.107489][ T5945] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 198.263474][ T8279] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13) [ 198.292294][ T8281] loop1: detected capacity change from 0 to 128 [ 198.315707][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 198.348087][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.390328][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.417575][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 198.450086][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.506158][ T5945] hub 4-1:4.0: USB hub found [ 198.551616][ T8288] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 198.670992][ T8291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.994'. [ 198.709556][ T5945] hub 4-1:4.0: 16 ports detected [ 198.716798][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.994'. [ 198.737431][ T5945] usb 4-1: selecting invalid altsetting 1 [ 198.745052][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.994'. [ 198.775136][ T5945] hub 4-1:4.0: Using single TT (err -22) [ 198.791923][ T5945] hub 4-1:4.0: insufficient power available to use all downstream ports [ 198.916319][ T5945] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 198.947933][ T5945] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 199.028109][ T5945] usb 4-1: USB disconnect, device number 6 [ 199.078663][ T8302] netlink: 'syz.2.998': attribute type 39 has an invalid length. [ 199.138320][ T8302] veth0_macvtap: left promiscuous mode [ 199.399052][ T8312] loop0: detected capacity change from 0 to 764 [ 199.438636][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 199.463904][ T8312] rock: directory entry would overflow storage [ 199.491863][ T8312] rock: sig=0x4654, size=5, remaining=4 [ 199.638664][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.645471][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.035851][ T8328] loop2: detected capacity change from 0 to 4096 [ 200.143925][ T8343] Cannot find del_set index 4 as target [ 200.144147][ T8342] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.201833][ T8328] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 200.243705][ T8328] Remounting filesystem read-only [ 200.338369][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 200.467564][ T8349] loop1: detected capacity change from 0 to 16 [ 200.529371][ T8349] erofs (device loop1): mounted with root inode @ nid 36. [ 200.611485][ T8349] erofs (device loop1): xattr_isize 12 of nid 46 is not supported yet [ 200.847618][ T5474] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 201.045823][ T5474] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 201.075796][ T5474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.094520][ T5474] usb 5-1: Product: syz [ 201.104965][ T5474] usb 5-1: Manufacturer: syz [ 201.131866][ T5474] usb 5-1: SerialNumber: syz [ 201.168031][ T5474] usb 5-1: config 0 descriptor?? [ 201.268991][ T8371] Invalid source name [ 201.273058][ T8371] UBIFS error (pid: 8371): cannot open "./file0", error -22 [ 201.283516][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 201.575575][ T8353] loop2: detected capacity change from 0 to 32768 [ 201.606036][ T5474] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 201.626375][ T8353] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1021 (8353) [ 201.636865][ T5474] airspy 5-1:0.0: Could not detect board [ 201.653974][ T5474] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 201.684504][ T8353] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 201.693114][ T5474] usb 5-1: USB disconnect, device number 6 [ 201.709380][ T8383] random: crng reseeded on system resumption [ 201.747392][ T8353] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 201.779166][ T8353] BTRFS info (device loop2 state S): using free-space-tree [ 202.096525][ T5835] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 202.442973][ T8375] loop1: detected capacity change from 0 to 32768 [ 202.592471][ T8414] loop0: detected capacity change from 0 to 256 [ 202.819786][ T8375] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 202.819811][ T8375] allowing incompatible features above 0.0: (unknown version) [ 202.819824][ T8375] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 203.047543][ T8375] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 203.055800][ T8375] bcachefs (loop1): initializing new filesystem [ 203.217220][ T8375] bcachefs (loop1): going read-write [ 203.390694][ T8441] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.476312][ T8375] bcachefs (loop1): marking superblocks [ 203.585455][ T8375] bcachefs (loop1): initializing freespace [ 203.631066][ T8375] bcachefs (loop1): done initializing freespace [ 203.670277][ T8375] bcachefs (loop1): reading snapshots table [ 203.697503][ T8375] bcachefs (loop1): reading snapshots done [ 203.803890][ T8375] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 203.885776][ T8375] bcachefs (loop1): done starting filesystem [ 204.120245][ T5847] bcachefs (loop1): shutting down [ 204.125339][ T5847] bcachefs (loop1): going read-only [ 204.165385][ T5847] bcachefs (loop1): finished waiting for writes to stop [ 204.192234][ T8471] netlink: 'syz.0.1067': attribute type 3 has an invalid length. [ 204.240588][ T5847] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 204.274633][ T8471] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1067'. [ 204.382388][ T5847] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 204.442437][ T5847] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 204.468276][ T5847] bcachefs (loop1): marking filesystem clean [ 204.528365][ T8485] loop3: detected capacity change from 0 to 512 [ 204.585983][ T8485] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 204.636242][ T5847] bcachefs (loop1): shutdown complete [ 204.649273][ T8485] EXT4-fs: error: could not find journal device path [ 204.697994][ T8491] loop4: detected capacity change from 0 to 8 [ 204.785831][ T8491] SQUASHFS error: Failed to read block 0x738: -5 [ 204.843137][ T8491] SQUASHFS error: Unable to read metadata cache entry [736] [ 204.853720][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 204.929919][ T8495] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 204.940977][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1079'. [ 205.629393][ T8514] loop3: detected capacity change from 0 to 4096 [ 205.829662][ T8514] ntfs3(loop3): ino=b, mi_enum_attr [ 205.835138][ T8514] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 205.874117][ T8514] ntfs3(loop3): Failed to load $Extend (-22). [ 205.887128][ T8514] ntfs3(loop3): Failed to initialize $Extend. [ 205.941834][ T8514] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 206.014491][ T8524] loop2: detected capacity change from 0 to 4096 [ 206.182852][ T8524] ntfs3(loop2): ino=9, attr_set_size [ 206.401425][ T8538] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.535665][ T8536] netlink: 'syz.4.1099': attribute type 4 has an invalid length. [ 206.896036][ T8555] loop3: detected capacity change from 0 to 512 [ 206.961543][ T8555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.008583][ T8555] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.156591][ T8555] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1107: corrupted xattr block 33: invalid ea_ino [ 207.241713][ T8555] EXT4-fs (loop3): Remounting filesystem read-only [ 207.417393][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.447337][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.460123][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.484464][ T12] Quota error (device loop3): write_blk: dquota write failed [ 207.517089][ T12] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 207.536336][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.559714][ T12] Quota error (device loop3): write_blk: dquota write failed [ 207.578454][ T12] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 207.605197][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 207.625583][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 207.625951][ T12] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 207.639299][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.683842][ T5899] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 207.705291][ T5899] usb 3-1: config 8 has no interface number 0 [ 207.733093][ T5899] usb 3-1: config 8 interface 249 has no altsetting 0 [ 207.794359][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 207.796055][ T8577] loop0: detected capacity change from 0 to 512 [ 207.815009][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.844531][ T5899] usb 3-1: Product: syz [ 207.858036][ T5899] usb 3-1: Manufacturer: syz [ 207.862694][ T5899] usb 3-1: SerialNumber: syz [ 207.908404][ T8577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.970515][ T8577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.015027][ T8577] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.167252][ T5899] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 208.212733][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.255530][ T5899] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 208.269041][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 208.304142][ T5899] dib0700: firmware download failed at 7 with -8 [ 208.359029][ T5899] usb 3-1: USB disconnect, device number 5 [ 208.400594][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 208.457251][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 208.485301][ T5921] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 208.517082][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.541407][ T5921] usb 2-1: Product: syz [ 208.568364][ T5921] usb 2-1: Manufacturer: syz [ 208.574354][ T5921] usb 2-1: SerialNumber: syz [ 208.611877][ T5921] r8152-cfgselector 2-1: Unknown version 0x0000 [ 208.630213][ T5921] r8152-cfgselector 2-1: config 0 descriptor?? [ 208.912616][ T8611] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1132'. [ 208.932558][ T8611] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 209.061929][ T5921] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 209.382894][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 209.573367][ T8634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 211.890009][ T8675] loop2: detected capacity change from 0 to 40427 [ 211.965314][ T8675] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 211.985980][ T8675] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 212.041111][ T8675] F2FS-fs (loop2): invalid crc value [ 212.188948][ T5899] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 212.373845][ T5899] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 212.404267][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.465551][ T5899] usb 5-1: config 0 descriptor?? [ 212.473345][ T30] audit: type=1326 audit(1750081702.486:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 212.549049][ T5899] usb 5-1: invalid MIDI EP [ 212.550293][ T8675] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 212.577884][ T30] audit: type=1326 audit(1750081702.486:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 212.587061][ T5899] usb 5-1: snd-bcd2000: error during probing [ 212.617427][ T8675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.627133][ T30] audit: type=1326 audit(1750081702.526:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 212.679118][ T5899] snd-bcd2000 5-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 212.730017][ T30] audit: type=1326 audit(1750081702.526:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 212.827333][ T30] audit: type=1326 audit(1750081702.526:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8737 comm="syz.0.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b98e929 code=0x7ffc0000 [ 212.834708][ T5899] usb 5-1: USB disconnect, device number 7 [ 213.042075][ T8753] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1201'. [ 213.139142][ T8755] loop3: detected capacity change from 0 to 22 [ 213.157384][ T8755] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 213.192237][ T8755] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 213.225712][ T8757] loop0: detected capacity change from 0 to 128 [ 213.281566][ T8759] bridge0: port 3(netdevsim0) entered blocking state [ 213.301379][ T8759] bridge0: port 3(netdevsim0) entered disabled state [ 213.314227][ T8759] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 213.537446][ T5899] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 213.727063][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 213.744630][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58498, setting to 1024 [ 213.756309][ T8768] xt_TCPMSS: Only works on TCP SYN packets [ 213.776672][ T5899] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 213.811714][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.849559][ T5899] usb 1-1: config 0 descriptor?? [ 213.857653][ T8757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 213.883483][ T5899] usb 1-1: Found UVC 0.00 device (10c4:ea90) [ 213.914702][ T5899] usb 1-1: No valid video chain found. [ 213.997431][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 214.094782][ T5921] usb 1-1: USB disconnect, device number 4 [ 214.180993][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 214.270667][ T8785] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1216'. [ 214.377578][ T5899] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 214.386682][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.403405][ T5899] usb 3-1: Product: syz [ 214.442988][ T5899] usb 3-1: Manufacturer: syz [ 214.458403][ T5899] usb 3-1: SerialNumber: syz [ 214.475992][ T5899] usb 3-1: config 0 descriptor?? [ 214.492933][ T5899] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 214.506117][ T8792] loop1: detected capacity change from 0 to 1024 [ 214.573683][ T8792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.861399][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.899900][ T5899] gspca_sunplus: reg_w_riv err -71 [ 214.907476][ T5899] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 214.952927][ T5899] usb 3-1: USB disconnect, device number 6 [ 215.210927][ T8808] loop3: detected capacity change from 0 to 4096 [ 215.252541][ T8808] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 215.857381][ T8828] netlink: 'syz.3.1235': attribute type 5 has an invalid length. [ 216.498522][ T8852] netlink: 'syz.1.1248': attribute type 13 has an invalid length. [ 216.537597][ T8852] gretap0: refused to change device tx_queue_len [ 216.567615][ T8852] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.737114][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 216.833531][ T8861] netlink: 'syz.1.1253': attribute type 33 has an invalid length. [ 216.919708][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 216.945021][ T5920] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 216.958531][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.992917][ T5920] usb 3-1: Product: syz [ 217.010037][ T5920] usb 3-1: Manufacturer: syz [ 217.014703][ T5920] usb 3-1: SerialNumber: syz [ 217.033621][ T5920] r8152-cfgselector 3-1: Unknown version 0x0000 [ 217.044741][ T5920] r8152-cfgselector 3-1: config 0 descriptor?? [ 217.077158][ T5474] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.249319][ T5474] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 217.260258][ T8842] loop4: detected capacity change from 0 to 32768 [ 217.289762][ T5474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.348778][ T5474] usb 4-1: config 0 descriptor?? [ 217.451017][ T8842] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 217.451051][ T8842] allowing incompatible features above 0.0: (unknown version) [ 217.451066][ T8842] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 217.472703][ T8842] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 217.503316][ T8842] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 217.541838][ T5921] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 217.658538][ T8842] bcachefs (loop4): accounting_read... done [ 217.697917][ T8842] bcachefs (loop4): alloc_read... done [ 217.703901][ T8842] bcachefs (loop4): snapshots_read... done [ 217.743846][ T8842] bcachefs (loop4): journal_replay... done [ 217.763422][ T8842] bcachefs (loop4): resume_logged_ops... done [ 217.784117][ T8842] bcachefs (loop4): delete_dead_inodes... done [ 217.799863][ T5474] ath6kl: Failed to submit usb control message: -71 [ 217.817272][ T5474] ath6kl: unable to send the bmi data to the device: -71 [ 217.819462][ T8842] bcachefs (loop4): done starting filesystem [ 217.859971][ T5474] ath6kl: Unable to send get target info: -71 [ 217.896947][ T5474] ath6kl: Failed to init ath6kl core: -71 [ 217.906569][ T5474] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 217.938765][ T8882] loop1: detected capacity change from 0 to 64 [ 217.956427][ T5474] usb 4-1: USB disconnect, device number 7 [ 218.010709][ T8842] overlay: case-insensitive capable filesystem on . not supported [ 218.203784][ T5832] bcachefs (loop4): shutting down [ 218.324709][ T5832] bcachefs (loop4): shutdown complete [ 218.631240][ T8880] loop0: detected capacity change from 0 to 32768 [ 218.650221][ T8880] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1261 (8880) [ 218.702653][ T8880] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 218.727771][ T8880] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 218.755286][ T8880] BTRFS info (device loop0): disk space caching is enabled [ 218.774818][ T8880] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 218.957704][ T8880] BTRFS info (device loop0): rebuilding free space tree [ 219.007538][ T8880] BTRFS info (device loop0): disabling free space tree [ 219.027174][ T8880] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 219.036885][ T8880] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.177630][ T8880] BTRFS error: failed to open device for path !Àˆ§»<Ï´Ú?˜i ÒŸ=Aœc [ 219.177630][ T8880] $ÚE8]MFøq€Ò­o‹Õ&ö›ø¨»SfU[QñnA¯‚w6Š¦ÏÚàÙ2§\dHÄç=5n\mƒïÆÔ;«ÅR’6ìaL [ 219.177630][ T8880] '{$Ö£FÑž(ö7å1ñÑ8WXkS?ª#Mæ¡qC–a>½!10”° ±J with flags 0x1: -2 [ 219.361907][ T5833] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 219.487090][ T8928] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 219.542905][ T8928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.795829][ T8935] loop1: detected capacity change from 0 to 512 [ 219.899376][ T8935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.977427][ T8935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.997750][ T8935] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.114759][ T8935] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #12: comm syz.1.1280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 220.204593][ T8898] loop2: detected capacity change from 0 to 32768 [ 220.271219][ T8944] loop3: detected capacity change from 0 to 256 [ 220.321403][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.193742][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 221.696463][ T8987] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.817316][ T8993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1307'. [ 222.016851][ T8997] loop2: detected capacity change from 0 to 1764 [ 222.100783][ T8997] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 222.192810][ T5834] Bluetooth: hci0: command 0x080f tx timeout [ 222.199389][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 222.205500][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 222.211946][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 222.218161][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 222.607393][ T9025] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 222.617408][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.626001][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.745471][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.752819][ T9025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.761800][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.770022][ T9025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.841943][ T9030] loop1: detected capacity change from 0 to 512 [ 222.843503][ T9025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.854317][ T9031] loop0: detected capacity change from 0 to 512 [ 222.875941][ T9031] EXT4-fs: Ignoring removed nobh option [ 222.883261][ T9030] EXT4-fs: Ignoring removed i_version option [ 222.911933][ T9031] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 222.935026][ T9031] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1324: attempt to clear invalid blocks 2 len 1 [ 222.959952][ T9030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.040753][ T9031] EXT4-fs (loop0): Remounting filesystem read-only [ 223.058221][ T9031] EXT4-fs (loop0): 1 truncate cleaned up [ 223.064615][ T9030] ext4 filesystem being mounted at /258/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.111538][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.121814][ T9031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.297348][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 223.304997][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.315511][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.352001][ T5920] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.361629][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.370053][ T5920] usb 5-1: Product: syz [ 223.374367][ T5920] usb 5-1: Manufacturer: syz [ 223.381355][ T5920] usb 5-1: SerialNumber: syz [ 223.417809][ T5920] r8152-cfgselector 5-1: Unknown version 0x0000 [ 223.447118][ T5920] r8152-cfgselector 5-1: config 0 descriptor?? [ 223.887540][ T5920] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 223.964549][ T9066] loop3: detected capacity change from 0 to 128 [ 223.991230][ T9066] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 224.002788][ T9064] bridge1: entered promiscuous mode [ 224.049501][ T9066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.086374][ T9062] loop1: detected capacity change from 0 to 4096 [ 224.877380][ T5474] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 225.052663][ T5474] usb 5-1: config 0 has no interfaces? [ 225.095719][ T5474] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.129041][ T5474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.151102][ T5474] usb 5-1: Product: syz [ 225.155432][ T5474] usb 5-1: Manufacturer: syz [ 225.186135][ T5474] usb 5-1: SerialNumber: syz [ 225.196630][ T5474] usb 5-1: config 0 descriptor?? [ 225.307095][ T30] audit: type=1326 audit(1750081715.326:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 225.336396][ T30] audit: type=1326 audit(1750081715.326:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 225.358603][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.367525][ T5945] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 225.385656][ T30] audit: type=1326 audit(1750081715.326:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 225.407883][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.482819][ T30] audit: type=1326 audit(1750081715.326:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 225.505024][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.547619][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 225.549079][ T30] audit: type=1326 audit(1750081715.326:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9107 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fade238e929 code=0x7ffc0000 [ 225.565841][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.574995][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.607860][ T9114] loop3: detected capacity change from 0 to 4096 [ 225.625215][ T9114] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 225.643331][ T5945] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 225.653292][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.666739][ T9110] loop1: detected capacity change from 0 to 4096 [ 225.676588][ T5945] usb 1-1: Product: syz [ 225.683267][ T5945] usb 1-1: Manufacturer: syz [ 225.691840][ T5945] usb 1-1: SerialNumber: syz [ 225.702404][ T9110] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 225.727955][ T5945] usb 1-1: config 0 descriptor?? [ 225.743427][ T9114] ntfs3(loop3): ino=19, mi_enum_attr [ 225.757614][ T9114] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 225.769724][ T5945] usb 1-1: bad CDC descriptors [ 225.793535][ T5945] usb 1-1: unsupported MDLM descriptors [ 225.839112][ T9114] ntfs3(loop3): failed to convert "c46c" to iso8859-9 [ 225.845501][ T9110] ntfs3(loop1): ino=19, mi_enum_attr [ 225.853701][ T9114] ntfs3(loop3): ino=20, mi_enum_attr [ 225.874163][ T9110] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 225.887382][ T9114] ntfs3(loop3): ino=1e, mi_enum_attr [ 225.947650][ T9110] ntfs3(loop1): failed to convert "c46c" to koi8-r [ 225.975322][ T5920] usb 5-1: USB disconnect, device number 9 [ 225.985021][ T9110] ntfs3(loop1): ino=20, mi_enum_attr [ 226.028856][ T5945] usb 1-1: USB disconnect, device number 5 [ 226.149764][ T9120] loop4: detected capacity change from 0 to 64 [ 226.498375][ T9131] loop2: detected capacity change from 0 to 64 [ 226.776730][ T9134] xt_CT: No such helper "pptp" [ 226.794663][ T9139] loop4: detected capacity change from 0 to 512 [ 226.909992][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 227.117313][ T9139] EXT4-fs (loop4): Test dummy encryption mode enabled [ 227.135553][ T9139] EXT4-fs error (device loop4): __ext4_iget:5379: inode #11: block 1: comm syz.4.1377: invalid block [ 227.137748][ T9139] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1377: couldn't read orphan inode 11 (err -117) [ 227.139932][ T9139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.299554][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.387148][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.431229][ T9159] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 227.449650][ T9159] cramfs: wrong magic [ 227.557096][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 227.566004][ T44] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 227.585092][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.626243][ T44] usb 3-1: config 0 has no interface number 0 [ 227.663785][ T9166] cgroup: Bad value for 'name' [ 227.676936][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 227.703758][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.733735][ T44] usb 3-1: Product: syz [ 227.746704][ T44] usb 3-1: Manufacturer: syz [ 227.766881][ T44] usb 3-1: SerialNumber: syz [ 227.789357][ T44] usb 3-1: config 0 descriptor?? [ 228.013919][ T44] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 228.031499][ T44] usb 3-1: No valid video chain found. [ 228.277338][ T44] usb 3-1: USB disconnect, device number 8 [ 228.310411][ T9183] tmpfs: Bad value for 'mpol' [ 228.521914][ T9170] loop3: detected capacity change from 0 to 32768 [ 228.592286][ T9170] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 228.788455][ T5843] ocfs2: Unmounting device (7,3) on (node local) [ 228.856860][ T9195] vlan1: entered promiscuous mode [ 229.127463][ T9203] netlink: 'syz.4.1404': attribute type 21 has an invalid length. [ 229.171648][ T9205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.197493][ T9203] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1404'. [ 229.234003][ T9177] loop1: detected capacity change from 0 to 32768 [ 229.471700][ T111] ------------[ cut here ]------------ [ 229.478001][ T111] WARNING: fs/jfs/jfs_dmap.c:2867 at dbAdjTree+0x454/0x4e0, CPU#1: jfsCommit/111 [ 229.487351][ T111] Modules linked in: [ 229.491602][ T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 229.503049][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.513281][ T111] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 229.518428][ T111] Code: 5a ff ff ff e8 dd ed 81 fe eb 05 e8 d6 ed 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 bd ed 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 229.538166][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.544477][ T111] RSP: 0018:ffffc90002d97988 EFLAGS: 00010293 [ 229.550708][ T111] RAX: ffffffff833e7c73 RBX: ffff888044912010 RCX: ffff88801df2da00 [ 229.558841][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 229.567430][ T111] RBP: 0000000000020056 R08: ffffea0001124487 R09: 1ffffd4000224890 [ 229.575948][ T111] R10: dffffc0000000000 R11: fffff94000224891 R12: ffff888044912018 [ 229.584052][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 229.592151][ T111] FS: 0000000000000000(0000) GS:ffff888125d40000(0000) knlGS:0000000000000000 [ 229.601219][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.607993][ T111] CR2: 00007faeef9ff6c4 CR3: 0000000078df8000 CR4: 00000000003526f0 [ 229.616016][ T111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 229.624132][ T111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 229.632242][ T111] Call Trace: [ 229.635673][ T111] [ 229.638789][ T111] ? __pfx_lock_metapage+0x10/0x10 [ 229.643963][ T111] dbJoin+0x238/0x300 [ 229.648059][ T111] ? do_read_cache_folio+0x4c6/0x590 [ 229.653416][ T111] dbFreeBits+0x4e1/0xdb0 [ 229.657957][ T111] dbFree+0x336/0x650 [ 229.661997][ T111] txFreeMap+0x7ff/0xde0 [ 229.666863][ T111] txUpdateMap+0x308/0x9c0 [ 229.671758][ T111] jfs_lazycommit+0x43f/0xa90 [ 229.676501][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 229.681856][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 229.687795][ T111] ? __kthread_parkme+0x7b/0x200 [ 229.692866][ T111] ? __kthread_parkme+0x1a1/0x200 [ 229.698033][ T111] kthread+0x711/0x8a0 [ 229.702168][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 229.707896][ T111] ? __pfx_kthread+0x10/0x10 [ 229.712719][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 229.718104][ T111] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.723381][ T111] ? __pfx_kthread+0x10/0x10 [ 229.728091][ T111] ret_from_fork+0x3fc/0x770 [ 229.732748][ T111] ? __pfx_ret_from_fork+0x10/0x10 [ 229.738012][ T111] ? __switch_to_asm+0x39/0x70 [ 229.742821][ T111] ? __switch_to_asm+0x33/0x70 [ 229.747715][ T111] ? __pfx_kthread+0x10/0x10 [ 229.752359][ T111] ret_from_fork_asm+0x1a/0x30 [ 229.757295][ T111] [ 229.760364][ T111] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 229.767675][ T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.16.0-rc2-next-20250616-syzkaller #0 PREEMPT(full) [ 229.778971][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.789043][ T111] Call Trace: [ 229.792332][ T111] [ 229.795271][ T111] dump_stack_lvl+0x99/0x250 [ 229.799885][ T111] ? __asan_memcpy+0x40/0x70 [ 229.804518][ T111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.809858][ T111] ? __pfx__printk+0x10/0x10 [ 229.814471][ T111] panic+0x2db/0x790 [ 229.818397][ T111] ? __pfx_panic+0x10/0x10 [ 229.822936][ T111] ? ret_from_fork_asm+0x1a/0x30 [ 229.827891][ T111] __warn+0x334/0x4c0 [ 229.831891][ T111] ? dbAdjTree+0x454/0x4e0 [ 229.836326][ T111] ? dbAdjTree+0x454/0x4e0 [ 229.840753][ T111] report_bug+0x2be/0x4f0 [ 229.845095][ T111] ? dbAdjTree+0x454/0x4e0 [ 229.849548][ T111] ? dbAdjTree+0x454/0x4e0 [ 229.853975][ T111] ? dbAdjTree+0x456/0x4e0 [ 229.858406][ T111] handle_bug+0x84/0x160 [ 229.862674][ T111] exc_invalid_op+0x1a/0x50 [ 229.867203][ T111] asm_exc_invalid_op+0x1a/0x20 [ 229.872069][ T111] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 229.877112][ T111] Code: 5a ff ff ff e8 dd ed 81 fe eb 05 e8 d6 ed 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 bd ed 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 229.896740][ T111] RSP: 0018:ffffc90002d97988 EFLAGS: 00010293 [ 229.902823][ T111] RAX: ffffffff833e7c73 RBX: ffff888044912010 RCX: ffff88801df2da00 [ 229.910858][ T111] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 229.918837][ T111] RBP: 0000000000020056 R08: ffffea0001124487 R09: 1ffffd4000224890 [ 229.926822][ T111] R10: dffffc0000000000 R11: fffff94000224891 R12: ffff888044912018 [ 229.934803][ T111] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 229.942791][ T111] ? dbAdjTree+0x453/0x4e0 [ 229.947230][ T111] ? dbAdjTree+0x453/0x4e0 [ 229.951659][ T111] ? __pfx_lock_metapage+0x10/0x10 [ 229.956795][ T111] dbJoin+0x238/0x300 [ 229.960965][ T111] ? do_read_cache_folio+0x4c6/0x590 [ 229.966269][ T111] dbFreeBits+0x4e1/0xdb0 [ 229.970627][ T111] dbFree+0x336/0x650 [ 229.974637][ T111] txFreeMap+0x7ff/0xde0 [ 229.978902][ T111] txUpdateMap+0x308/0x9c0 [ 229.983356][ T111] jfs_lazycommit+0x43f/0xa90 [ 229.988051][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 229.993273][ T111] ? __pfx_default_wake_function+0x10/0x10 [ 229.999100][ T111] ? __kthread_parkme+0x7b/0x200 [ 230.004047][ T111] ? __kthread_parkme+0x1a1/0x200 [ 230.009087][ T111] kthread+0x711/0x8a0 [ 230.013172][ T111] ? __pfx_jfs_lazycommit+0x10/0x10 [ 230.018390][ T111] ? __pfx_kthread+0x10/0x10 [ 230.022993][ T111] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.028202][ T111] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.033415][ T111] ? __pfx_kthread+0x10/0x10 [ 230.038108][ T111] ret_from_fork+0x3fc/0x770 [ 230.042721][ T111] ? __pfx_ret_from_fork+0x10/0x10 [ 230.047851][ T111] ? __switch_to_asm+0x39/0x70 [ 230.052638][ T111] ? __switch_to_asm+0x33/0x70 [ 230.057431][ T111] ? __pfx_kthread+0x10/0x10 [ 230.062045][ T111] ret_from_fork_asm+0x1a/0x30 [ 230.066843][ T111] [ 230.070194][ T111] Kernel Offset: disabled [ 230.074532][ T111] Rebooting in 86400 seconds..