last executing test programs: 44.790343481s ago: executing program 3 (id=746): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 43.806922741s ago: executing program 3 (id=751): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x23, 0x20000000, 0xffffffffffffffff, 0x800002}, {0xffffffff, 0x0, 0x6b, 0x4000a, 0xffffffffffffffff}]}) 43.652018876s ago: executing program 0 (id=752): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 43.080441293s ago: executing program 0 (id=756): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 42.781773163s ago: executing program 0 (id=759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10) 42.018592546s ago: executing program 3 (id=763): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 41.832493223s ago: executing program 2 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 41.505342632s ago: executing program 0 (id=766): sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r0, r0, 0x0, 0x200000) 41.449189484s ago: executing program 1 (id=767): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) r1 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) 41.342218518s ago: executing program 2 (id=768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xabbd}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x69}, 0x94) 41.030947057s ago: executing program 1 (id=769): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYsK8tc5rx03t2QtPTkCfYz9yD8S3/ncHlzC0S8vdua7DjQZYDFv/hvgX2jSDz+o4AE5SylsfumPyuZFM3FXQG2c2NvdfT3cqjh8/cP4Vy/0E0aWZ/whq2iuxMPh2Yy63ZtPrKqTqzYqHwpJjLGzze9wu7ffTL6Hd4r0B7fQZ+n0Xyrn4HvxT89W/Nt1UMGP87dprhs3/d/WGmQaUG9VoytF5LXDcwM9qbLFjBnxBZNRJCCCGEEEIIIYQQQgghhBBCCHHVnQQAAP//A2lTBA==") r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) 40.924181531s ago: executing program 2 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0xc, &(0x7f0000000080)=""/12, 0x0, 0x0, '\x00', r1}, 0x94) 40.526365003s ago: executing program 2 (id=771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) 40.382049837s ago: executing program 1 (id=772): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="ee", 0x1}], 0x1, 0xa) 40.2867269s ago: executing program 3 (id=773): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 40.101794816s ago: executing program 2 (id=774): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000000020000000000000800010000000000", 0x24) 40.064138527s ago: executing program 0 (id=775): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) 39.900930902s ago: executing program 1 (id=776): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 39.65976768s ago: executing program 2 (id=777): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") chdir(&(0x7f0000000240)='./file0\x00') truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffb) 39.573646713s ago: executing program 0 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1}) 39.450194346s ago: executing program 1 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) 39.260204222s ago: executing program 3 (id=780): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 38.949533041s ago: executing program 1 (id=781): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d) shutdown(r0, 0x1) 38.36980245s ago: executing program 3 (id=782): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @remote}, 0x10, 0x0, 0x0, &(0x7f0000004f40)=[@fadd={0x58, 0x114, 0x6, {{0xc48, 0x5}, 0x0, 0x0, 0x5, 0x7, 0x8, 0x4, 0x0, 0x401}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x9}}], 0x70}, 0x0) 0s ago: executing program 32 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 79.187806][ T5763] cgroup: Unknown subsys name 'net' [ 79.308734][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.976654][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.610519][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.621586][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.630343][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.638416][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.647063][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.655064][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.663678][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.671795][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.679301][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.698993][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.713859][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.726438][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.734096][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.735053][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.745945][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.751226][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.762871][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.768939][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.775204][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.784766][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.798944][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.806829][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.816234][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.824510][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.291854][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.358902][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.446255][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 83.526654][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 83.591612][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.599115][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.606532][ T5778] bridge_slave_0: entered allmulticast mode [ 83.614617][ T5778] bridge_slave_0: entered promiscuous mode [ 83.623525][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.633431][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.640814][ T5774] bridge_slave_0: entered allmulticast mode [ 83.647952][ T5774] bridge_slave_0: entered promiscuous mode [ 83.674885][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.682216][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.689596][ T5778] bridge_slave_1: entered allmulticast mode [ 83.697031][ T5778] bridge_slave_1: entered promiscuous mode [ 83.704920][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.712882][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.720166][ T5774] bridge_slave_1: entered allmulticast mode [ 83.727169][ T5774] bridge_slave_1: entered promiscuous mode [ 83.838211][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.852053][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.863827][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.878109][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.898466][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.905945][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.914000][ T5785] bridge_slave_0: entered allmulticast mode [ 83.921926][ T5785] bridge_slave_0: entered promiscuous mode [ 83.970831][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.978068][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.985688][ T5781] bridge_slave_0: entered allmulticast mode [ 83.993271][ T5781] bridge_slave_0: entered promiscuous mode [ 84.000717][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.007876][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.015937][ T5785] bridge_slave_1: entered allmulticast mode [ 84.024064][ T5785] bridge_slave_1: entered promiscuous mode [ 84.042448][ T5774] team0: Port device team_slave_0 added [ 84.052674][ T5774] team0: Port device team_slave_1 added [ 84.061595][ T5778] team0: Port device team_slave_0 added [ 84.068028][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.078040][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.085441][ T5781] bridge_slave_1: entered allmulticast mode [ 84.093391][ T5781] bridge_slave_1: entered promiscuous mode [ 84.124254][ T5778] team0: Port device team_slave_1 added [ 84.145585][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.187042][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.207456][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.214659][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.240705][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.254766][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.261869][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.287842][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.322005][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.352534][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.359967][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.386151][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.400831][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.407877][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.434171][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.450145][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.462807][ T5785] team0: Port device team_slave_0 added [ 84.473353][ T5785] team0: Port device team_slave_1 added [ 84.531808][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.539053][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.565083][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.614296][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.621437][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.647444][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.685090][ T5781] team0: Port device team_slave_0 added [ 84.697472][ T5778] hsr_slave_0: entered promiscuous mode [ 84.704443][ T5778] hsr_slave_1: entered promiscuous mode [ 84.743806][ T5774] hsr_slave_0: entered promiscuous mode [ 84.750545][ T5774] hsr_slave_1: entered promiscuous mode [ 84.757051][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.765691][ T5774] Cannot create hsr debugfs directory [ 84.775599][ T5781] team0: Port device team_slave_1 added [ 84.809460][ T51] Bluetooth: hci3: command tx timeout [ 84.815331][ T51] Bluetooth: hci0: command tx timeout [ 84.844878][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.851973][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.877978][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.888810][ T51] Bluetooth: hci2: command tx timeout [ 84.894540][ T51] Bluetooth: hci1: command tx timeout [ 84.908415][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.916301][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.943087][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.004971][ T5785] hsr_slave_0: entered promiscuous mode [ 85.011640][ T5785] hsr_slave_1: entered promiscuous mode [ 85.017977][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.027012][ T5785] Cannot create hsr debugfs directory [ 85.200078][ T5781] hsr_slave_0: entered promiscuous mode [ 85.206476][ T5781] hsr_slave_1: entered promiscuous mode [ 85.213054][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.220747][ T5781] Cannot create hsr debugfs directory [ 85.437815][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.469163][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.482006][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.492347][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.606175][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.617451][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.629310][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.641898][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.739522][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.751347][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.779742][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.834430][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.876432][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.888279][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.902379][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.914744][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.023554][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.038266][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.112007][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.132293][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.143618][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.151108][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.182680][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.189980][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.203504][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.210741][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.230994][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.238206][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.263197][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.308182][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.330474][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.337684][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.370488][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.377667][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.401467][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.520845][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.567532][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.574831][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.666266][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.673703][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.764946][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.896604][ T51] Bluetooth: hci0: command tx timeout [ 86.906050][ T5776] Bluetooth: hci3: command tx timeout [ 86.978777][ T51] Bluetooth: hci1: command tx timeout [ 86.984265][ T51] Bluetooth: hci2: command tx timeout [ 87.094362][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.242047][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.367739][ T5774] veth0_vlan: entered promiscuous mode [ 87.410148][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.436667][ T5774] veth1_vlan: entered promiscuous mode [ 87.459562][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.617051][ T5785] veth0_vlan: entered promiscuous mode [ 87.645155][ T5774] veth0_macvtap: entered promiscuous mode [ 87.681815][ T5774] veth1_macvtap: entered promiscuous mode [ 87.692815][ T5778] veth0_vlan: entered promiscuous mode [ 87.702223][ T5781] veth0_vlan: entered promiscuous mode [ 87.724585][ T5785] veth1_vlan: entered promiscuous mode [ 87.773738][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.788123][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.797108][ T5778] veth1_vlan: entered promiscuous mode [ 87.810033][ T5781] veth1_vlan: entered promiscuous mode [ 87.836812][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.847277][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.857758][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.867582][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.924310][ T5785] veth0_macvtap: entered promiscuous mode [ 87.938148][ T5785] veth1_macvtap: entered promiscuous mode [ 87.956888][ T5778] veth0_macvtap: entered promiscuous mode [ 87.972093][ T5778] veth1_macvtap: entered promiscuous mode [ 88.007487][ T5781] veth0_macvtap: entered promiscuous mode [ 88.056666][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.068958][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.082605][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.094991][ T5781] veth1_macvtap: entered promiscuous mode [ 88.127500][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.139163][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.150676][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.162729][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.175364][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.185452][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.196177][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.207860][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.235225][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.244208][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.253388][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260872][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.273799][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.283123][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.300764][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.312867][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.324762][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.336422][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.346587][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.357425][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.369485][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.407358][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.425802][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.436825][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.448978][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.462353][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.474345][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.485282][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.495561][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.506924][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.517314][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.527952][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.540894][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.567536][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.579517][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.588773][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597617][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.612709][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.622560][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.631385][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.640170][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.669232][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.677163][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.894604][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.929263][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.969368][ T5776] Bluetooth: hci3: command tx timeout [ 88.974906][ T51] Bluetooth: hci0: command tx timeout [ 89.050400][ T5776] Bluetooth: hci1: command tx timeout [ 89.057246][ T51] Bluetooth: hci2: command tx timeout [ 89.078963][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.086830][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.098122][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.144695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.278202][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.308830][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.419557][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.430471][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.439731][ T5844] syz.2.6[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.549548][ T5847] warning: `syz.3.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.596718][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.624706][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.204284][ T5844] loop2: detected capacity change from 0 to 32768 [ 90.216331][ T5844] ======================================================= [ 90.216331][ T5844] WARNING: The mand mount option has been deprecated and [ 90.216331][ T5844] and is ignored by this kernel. Remove the mand [ 90.216331][ T5844] option from the mount to silence this warning. [ 90.216331][ T5844] ======================================================= [ 90.304676][ T5844] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 90.329719][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.345687][ T5844] JBD2: Ignoring recovery information on journal [ 90.420322][ T5844] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.562859][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 90.588139][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 90.605775][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.630401][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 90.647237][ T9] usb 2-1: config 0 descriptor?? [ 90.661429][ T5860] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.957713][ T5867] loop3: detected capacity change from 0 to 4096 [ 90.984396][ T5862] loop0: detected capacity change from 0 to 32768 [ 90.995610][ T5867] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 91.031167][ T5867] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 91.049465][ T51] Bluetooth: hci0: command tx timeout [ 91.055097][ T5776] Bluetooth: hci3: command tx timeout [ 91.064366][ T5867] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 91.089934][ T5867] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 91.109778][ T5862] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.122075][ T5867] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 91.133683][ T5776] Bluetooth: hci2: command tx timeout [ 91.139335][ T51] Bluetooth: hci1: command tx timeout [ 91.151332][ T5867] ntfs: volume version 3.1. [ 91.173259][ T5867] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 91.193221][ T5867] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 91.205546][ T5867] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 91.231752][ T5867] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 91.241939][ T5867] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 91.311506][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0001/input/input5 [ 91.333009][ T5862] XFS (loop0): Ending clean mount [ 91.493226][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0001/input/input6 [ 91.648717][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5015.0001/input/input7 [ 91.691540][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.760609][ T9] kye 0003:0458:5015.0001: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 91.799722][ T5882] netlink: 568 bytes leftover after parsing attributes in process `syz.2.15'. [ 91.885754][ T9] usb 2-1: USB disconnect, device number 2 [ 92.101764][ T42] cfg80211: failed to load regulatory.db [ 92.293319][ T5886] fido_id[5886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 92.566078][ T5901] loop0: detected capacity change from 0 to 512 [ 92.597593][ T5901] EXT4-fs: inline encryption not supported [ 92.624274][ T5901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.654829][ T5901] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 92.675080][ T5901] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 92.706661][ T5901] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 92.721598][ T5901] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 92.734201][ T5901] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.758976][ T5901] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.16: bg 0: block 34: padding at end of block bitmap is not set [ 92.775982][ T5901] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.16: Failed to acquire dquot type 1 [ 92.805348][ T5909] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.838313][ T5901] EXT4-fs (loop0): 1 truncate cleaned up [ 92.880134][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.926531][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 93.100568][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.948634][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.071685][ T5924] loop0: detected capacity change from 0 to 40427 [ 94.095359][ T5924] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 94.112524][ T5924] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.141823][ T5924] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 94.176340][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.179684][ T5924] F2FS-fs (loop0): invalid crc value [ 94.185048][ T8] usb 2-1: config 0 has no interface number 0 [ 94.214754][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.228699][ T5924] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.248224][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.269741][ T8] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 94.298658][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.327527][ T8] usb 2-1: config 0 descriptor?? [ 94.452007][ T5924] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.471158][ T5924] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.713816][ T5781] syz-executor: attempt to access beyond end of device [ 94.713816][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.747368][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.767727][ T8] prodikeys 0003:041E:2801.0002: item fetching failed at offset 5/7 [ 94.806081][ T8] prodikeys 0003:041E:2801.0002: hid parse failed [ 94.835278][ T8] prodikeys: probe of 0003:041E:2801.0002 failed with error -22 [ 95.016338][ T9] usb 2-1: USB disconnect, device number 3 [ 95.183119][ T5954] loop3: detected capacity change from 0 to 8 [ 95.481364][ T5954] SQUASHFS error: xz decompression failed, data probably corrupt [ 95.527103][ T5954] SQUASHFS error: Failed to read block 0x60: -5 [ 95.607926][ T5954] SQUASHFS error: xz decompression failed, data probably corrupt [ 95.694046][ T5954] SQUASHFS error: Failed to read block 0x60: -5 [ 95.957555][ T5968] capability: warning: `syz.1.50' uses deprecated v2 capabilities in a way that may be insecure [ 95.993967][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.078633][ T5846] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.268683][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 96.283876][ T5846] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.293197][ T5846] usb 1-1: config 0 has no interface number 0 [ 96.317120][ T5846] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 96.338967][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.359812][ T5846] usb 1-1: Product: syz [ 96.364058][ T5846] usb 1-1: Manufacturer: syz [ 96.384474][ T5846] usb 1-1: SerialNumber: syz [ 96.405617][ T5846] usb 1-1: config 0 descriptor?? [ 96.417109][ T5846] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 96.452127][ T5846] usb 1-1: selecting invalid altsetting 1 [ 96.457972][ T5846] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 96.503957][ T5846] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 96.529116][ T5846] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 96.537768][ T5846] usb 1-1: media controller created [ 96.604122][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.623502][ T5966] loop2: detected capacity change from 0 to 32768 [ 97.289095][ T5974] loop1: detected capacity change from 0 to 40427 [ 97.309835][ T5974] F2FS-fs (loop1): invalid crc value [ 97.335180][ T5974] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.456420][ T5974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.688928][ T5964] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 97.740235][ T5846] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 97.769352][ T5846] zl10353_read_register: readreg error (reg=127, ret==-71) [ 97.778174][ T5846] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 97.945404][ T5846] usb 1-1: USB disconnect, device number 2 [ 98.181086][ T5983] loop2: detected capacity change from 0 to 2048 [ 98.247640][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.312432][ T5983] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.336642][ T5978] loop3: detected capacity change from 0 to 32768 [ 98.520574][ T5978] JBD2: Ignoring recovery information on journal [ 98.640616][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.699471][ T5978] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.860663][ T5996] vlan2: entered allmulticast mode [ 98.886518][ T5996] bond0: entered allmulticast mode [ 98.908660][ T5996] bond_slave_0: entered allmulticast mode [ 98.938276][ T5996] bond_slave_1: entered allmulticast mode [ 98.960359][ T5994] loop1: detected capacity change from 0 to 4096 [ 99.008368][ T5994] __ntfs_error: 7 callbacks suppressed [ 99.008385][ T5994] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 99.035486][ T5994] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 99.065391][ T5994] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 99.087292][ T5994] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 99.110762][ T5994] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 99.143009][ T5994] ntfs: volume version 3.1. [ 99.154189][ T5994] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 99.166524][ T5994] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 99.231835][ T5994] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 99.270747][ T5994] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 99.299377][ T5994] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 99.407920][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 99.867764][ T5991] loop0: detected capacity change from 0 to 32768 [ 99.926293][ T5991] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.089285][ T5991] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 100.154975][ T5991] XFS (loop0): Starting recovery (logdev: internal) [ 100.243530][ T5991] XFS (loop0): Ending recovery (logdev: internal) [ 100.369203][ T6019] bridge_slave_0: default FDB implementation only supports local addresses [ 100.437829][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.558624][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.775940][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 100.791240][ T5812] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 100.799754][ T5812] usb 2-1: config 0 has no interface number 0 [ 100.810624][ T5812] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 100.828780][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.848750][ T5812] usb 2-1: Product: syz [ 100.853004][ T5812] usb 2-1: Manufacturer: syz [ 100.878031][ T5812] usb 2-1: SerialNumber: syz [ 100.899393][ T5812] usb 2-1: config 0 descriptor?? [ 100.909136][ T5812] smsc95xx v2.0.0 [ 101.093816][ T6027] loop3: detected capacity change from 0 to 1024 [ 101.102062][ T6016] loop2: detected capacity change from 0 to 40427 [ 101.206288][ T6016] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.245273][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.495136][ T6016] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.541655][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.581116][ T6016] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0 [ 101.593776][ T6016] CPU: 1 PID: 6016 Comm: syz.2.67 Not tainted syzkaller #0 [ 101.601071][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.611209][ T6016] Call Trace: [ 101.614542][ T6016] [ 101.617521][ T6016] dump_stack_lvl+0x18c/0x250 [ 101.622271][ T6016] ? show_regs_print_info+0x20/0x20 [ 101.627508][ T6016] ? __asan_memset+0x22/0x40 [ 101.632141][ T6016] ? f2fs_get_next_page_offset+0x690/0x690 [ 101.638010][ T6016] ? f2fs_lookup_read_extent_cache_block+0x25b/0x460 [ 101.644733][ T6016] ? __lookup_extent_tree+0xba0/0xba0 [ 101.650143][ T6016] f2fs_is_valid_blkaddr+0xe39/0x1580 [ 101.655555][ T6016] f2fs_get_read_data_page+0x3bb/0x5d0 [ 101.661055][ T6016] ? f2fs_reserve_block+0x240/0x240 [ 101.666307][ T6016] f2fs_find_data_page+0x9f/0x390 [ 101.671370][ T6016] f2fs_readdir+0x4c3/0x970 [ 101.675914][ T6016] ? f2fs_fill_dentries+0xc00/0xc00 [ 101.681148][ T6016] ? read_lock_is_recursive+0x20/0x20 [ 101.686551][ T6016] ? lockdep_hardirqs_on+0x98/0x150 [ 101.691786][ T6016] ? mutex_lock_nested+0x20/0x20 [ 101.696808][ T6016] ? end_current_label_crit_section+0x149/0x170 [ 101.703110][ T6016] ? down_read_killable+0x1d0/0x340 [ 101.708370][ T6016] ? fsnotify_perm+0x271/0x5e0 [ 101.713180][ T6016] iterate_dir+0x1c2/0x580 [ 101.717638][ T6016] __se_sys_getdents64+0xf6/0x270 [ 101.722712][ T6016] ? __x64_sys_getdents64+0x80/0x80 [ 101.727956][ T6016] ? filldir+0x660/0x660 [ 101.732245][ T6016] ? lockdep_hardirqs_on+0x98/0x150 [ 101.737478][ T6016] do_syscall_64+0x55/0xb0 [ 101.741925][ T6016] ? clear_bhb_loop+0x40/0x90 [ 101.746728][ T6016] ? clear_bhb_loop+0x40/0x90 [ 101.751432][ T6016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.757460][ T6016] RIP: 0033:0x7fb05d79ce59 [ 101.761927][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.781576][ T6016] RSP: 002b:00007fb05b9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 101.790026][ T6016] RAX: ffffffffffffffda RBX: 00007fb05da15fa0 RCX: 00007fb05d79ce59 [ 101.798027][ T6016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 101.806034][ T6016] RBP: 00007fb05d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 101.814043][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.822045][ T6016] R13: 00007fb05da16038 R14: 00007fb05da15fa0 R15: 00007ffcbd67c9e8 [ 101.830060][ T6016] [ 102.081540][ T6041] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 102.157779][ T6043] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.167499][ T6043] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.176371][ T6043] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.185369][ T6043] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.325620][ T6043] Zero length message leads to an empty skb [ 102.725697][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 102.937601][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 103.036287][ T6060] loop3: detected capacity change from 0 to 128 [ 103.189689][ T5785] sysv_free_block: flc_count > flc_size [ 103.224872][ T5785] sysv_free_block: flc_count > flc_size [ 103.237356][ T5785] sysv_free_block: flc_count > flc_size [ 103.263400][ T5785] sysv_free_block: flc_count > flc_size [ 103.291377][ T5785] sysv_free_block: flc_count > flc_size [ 103.297078][ T5785] sysv_free_block: flc_count > flc_size [ 103.335692][ T5785] sysv_free_block: flc_count > flc_size [ 103.342945][ T5785] sysv_free_block: flc_count > flc_size [ 103.358743][ T5812] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 103.376625][ T5785] sysv_free_block: flc_count > flc_size [ 103.386398][ T5785] sysv_free_block: flc_count > flc_size [ 103.398285][ T5812] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.410264][ T5785] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 103.427106][ T5812] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 103.482032][ T5812] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 103.519226][ T5812] usb 2-1: USB disconnect, device number 4 [ 104.129969][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.99'. [ 104.299348][ T6098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.306176][ T6098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.315298][ T6098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.321832][ T6098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.331580][ T6098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.338100][ T6098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.363015][ T6098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.369641][ T6098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.380984][ T6098] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.387558][ T6098] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 105.632984][ T6139] loop0: detected capacity change from 0 to 256 [ 105.928941][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.130643][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.141695][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.166725][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.187244][ T5815] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 106.208548][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.243139][ T5815] usb 3-1: config 0 descriptor?? [ 106.445169][ T6140] loop1: detected capacity change from 0 to 40427 [ 106.478649][ T6140] F2FS-fs (loop1): Corrupted extension count (33554469 + 1 > 64) [ 106.491586][ T6140] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 106.522240][ T6140] F2FS-fs (loop1): invalid crc value [ 106.698911][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.706073][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.741831][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.760011][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.782345][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.808573][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.825975][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.868625][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.887405][ T6140] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 106.895705][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.920470][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.928425][ T6140] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.943142][ T5815] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0 [ 106.963465][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 106.984405][ T5815] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 107.046881][ T5815] usb 3-1: USB disconnect, device number 2 [ 107.094342][ T6140] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 107.115633][ T6140] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 107.246101][ T6168] fido_id[6168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 107.406448][ T6172] loop3: detected capacity change from 0 to 4096 [ 107.435454][ T6172] EXT4-fs: inline encryption not supported [ 107.674949][ T6172] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.696272][ T6172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 107.719323][ T6172] System zones: 0-5 [ 107.760828][ T6172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.861920][ T6183] loop0: detected capacity change from 0 to 128 [ 107.958157][ T6183] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.074187][ T6172] EXT4-fs: Ignoring sb option on remount [ 108.079202][ T6183] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.089383][ T6172] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 108.112753][ T6190] loop1: detected capacity change from 0 to 4096 [ 108.144420][ T6172] EXT4-fs: Cannot change journaled quota options when quota turned on [ 108.194999][ T6190] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 108.257638][ T6183] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.137: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 108.286998][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.404449][ T6190] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 108.461576][ T6190] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 108.475283][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.517403][ T6194] loop3: detected capacity change from 0 to 128 [ 108.584284][ T6194] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 108.623872][ T6194] hpfs: filesystem error: improperly stopped [ 108.647893][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 108.647909][ T27] audit: type=1800 audit(1781338722.888:7): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="bus" dev="loop1" ino=24 res=0 errno=0 [ 108.659171][ T6194] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 108.737115][ T6198] loop0: detected capacity change from 0 to 512 [ 108.751935][ T6194] [ 108.751949][ T6194] hpfs: You really don't want any checks? You are crazy... [ 108.753362][ T6194] hpfs: hpfs_map_sector(): read error [ 108.774374][ T6194] hpfs: code page support is disabled [ 108.783995][ T6194] hpfs: hpfs_map_4sectors(): unaligned read [ 108.791254][ T6196] loop2: detected capacity change from 0 to 4096 [ 108.815062][ T6194] hpfs: hpfs_map_4sectors(): unaligned read [ 108.834401][ T6196] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 108.859384][ T6194] hpfs: filesystem error: unable to find root dir [ 108.894764][ T6198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.907818][ T6198] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.015534][ T5778] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 109.075840][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.089588][ T6196] ntfs: volume version 3.1. [ 109.119758][ T6196] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 109.174934][ T6196] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 109.243785][ T6196] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 109.287843][ T6204] loop0: detected capacity change from 0 to 512 [ 109.336886][ T6204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.363398][ T6196] ntfs: (device loop2): ntfs_readdir(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size. [ 109.400286][ T6206] loop3: detected capacity change from 0 to 2048 [ 109.419024][ T6204] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.524920][ T6210] option changes via remount are deprecated (pid=6209 comm=syz.1.147) [ 109.536100][ T6204] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 109.559408][ T6204] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.588381][ T6211] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.599445][ T6204] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.145: Failed to acquire dquot type 0 [ 109.751086][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 109.774148][ T6206] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 109.824682][ T6206] Remounting filesystem read-only [ 109.865988][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.360047][ T6224] loop3: detected capacity change from 0 to 8192 [ 110.637360][ T6239] capability: warning: `syz.1.160' uses 32-bit capabilities (legacy support in use) [ 111.439518][ T6262] Bluetooth: MGMT ver 1.22 [ 111.638180][ T6269] hub 8-0:1.0: USB hub found [ 111.641147][ T6273] loop2: detected capacity change from 0 to 16 [ 111.647295][ T6269] hub 8-0:1.0: 1 port detected [ 111.939433][ T5775] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 112.039690][ T6281] loop2: detected capacity change from 0 to 4096 [ 112.059798][ T6281] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 112.146822][ T6281] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 112.162063][ T5775] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.193343][ T5775] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 112.217265][ T5775] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 112.250359][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.266840][ T5775] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 112.290745][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.312532][ T5775] usb 1-1: config 0 descriptor?? [ 112.323199][ T6272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.777726][ T5775] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x2 [ 112.798244][ T5775] koneplus 0003:1E7D:2D51.0004: bogus close delimiter [ 112.817120][ T5775] koneplus 0003:1E7D:2D51.0004: item 0 0 2 10 parsing failed [ 112.836168][ T5775] koneplus 0003:1E7D:2D51.0004: parse failed [ 112.851756][ T5775] koneplus: probe of 0003:1E7D:2D51.0004 failed with error -22 [ 112.998608][ T5813] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 113.021003][ T8] usb 1-1: USB disconnect, device number 3 [ 113.179419][ T6289] loop3: detected capacity change from 0 to 32768 [ 113.201617][ T5813] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 113.243440][ T5813] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.304327][ T5813] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.336115][ T5813] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.359814][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.373020][ T5813] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 113.383738][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.424981][ T5813] usb 2-1: config 0 descriptor?? [ 113.942204][ T5813] hid-alps 0003:044E:120C.0005: unknown main item tag 0x6 [ 113.966812][ T5813] hid-alps 0003:044E:120C.0005: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 114.191535][ T6305] loop3: detected capacity change from 0 to 4096 [ 114.206166][ T5846] usb 2-1: USB disconnect, device number 5 [ 114.233254][ T6307] fido_id[6307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:044E:120C.0005/report_descriptor': No such device [ 114.234746][ T6305] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 114.477986][ T27] audit: type=1326 audit(1781338728.718:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.501808][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.572614][ T6305] ntfs3: loop3: ino=9, attr_set_size [ 114.586410][ T6305] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 114.599565][ T27] audit: type=1326 audit(1781338728.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.675040][ T27] audit: type=1326 audit(1781338728.768:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.698969][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.715187][ T27] audit: type=1326 audit(1781338728.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.741469][ T27] audit: type=1326 audit(1781338728.768:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.765343][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.843522][ T27] audit: type=1326 audit(1781338728.768:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.867422][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.946383][ T27] audit: type=1326 audit(1781338728.768:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 114.970277][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.060170][ T27] audit: type=1326 audit(1781338728.768:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 115.084125][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.098219][ T27] audit: type=1326 audit(1781338728.768:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.193" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 115.231647][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 115.356021][ T6325] loop0: detected capacity change from 0 to 256 [ 115.379909][ T6325] exfat: Deprecated parameter 'namecase' [ 115.385677][ T6325] exfat: Deprecated parameter 'namecase' [ 115.443980][ T6325] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 115.613236][ T6325] exFAT-fs (loop0): hint_cluster is invalid (4278190089), rewind to the first cluster [ 115.639976][ T6325] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805ec087e0 iblock : 8, err : -5) [ 115.677590][ T6325] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 115.709355][ T6325] syz.0.200: attempt to access beyond end of device [ 115.709355][ T6325] loop0: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 115.748868][ T6325] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 115.759434][ T6325] syz.0.200: attempt to access beyond end of device [ 115.759434][ T6325] loop0: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 115.797623][ T6325] Buffer I/O error on dev loop0, logical block 34225520826, lost async page write [ 115.807041][ T6325] syz.0.200: attempt to access beyond end of device [ 115.807041][ T6325] loop0: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 115.821306][ T6325] Buffer I/O error on dev loop0, logical block 34225520827, lost async page write [ 115.831713][ T6325] syz.0.200: attempt to access beyond end of device [ 115.831713][ T6325] loop0: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 115.845853][ T6325] Buffer I/O error on dev loop0, logical block 34225520828, lost async page write [ 115.863571][ T6325] syz.0.200: attempt to access beyond end of device [ 115.863571][ T6325] loop0: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 115.878884][ T6325] Buffer I/O error on dev loop0, logical block 34225520829, lost async page write [ 115.888194][ T6325] syz.0.200: attempt to access beyond end of device [ 115.888194][ T6325] loop0: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 115.907132][ T6325] Buffer I/O error on dev loop0, logical block 34225520830, lost async page write [ 115.917051][ T6325] syz.0.200: attempt to access beyond end of device [ 115.917051][ T6325] loop0: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 115.933693][ T6325] Buffer I/O error on dev loop0, logical block 34225520831, lost async page write [ 115.994143][ T6332] loop3: detected capacity change from 0 to 4096 [ 116.026098][ T6332] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 116.442742][ T6335] loop1: detected capacity change from 0 to 32768 [ 116.484705][ T6335] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 116.500213][ T6335] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 1802)... [ 116.560097][ T6338] syz_tun: refused to change device tx_queue_len [ 116.573987][ T6335] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: no journals! [ 116.584303][ T6338] net_ratelimit: 66 callbacks suppressed [ 116.584317][ T6338] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 116.617258][ T6332] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 116.673941][ T6332] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 116.868110][ T6342] loop0: detected capacity change from 0 to 128 [ 116.942528][ T6342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.980344][ T6342] hpfs: filesystem error: improperly stopped [ 117.009384][ T6342] hpfs: You really don't want any checks? You are crazy... [ 117.017237][ T6342] hpfs: hpfs_map_sector(): read error [ 117.057927][ T6342] hpfs: code page support is disabled [ 117.089036][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 117.095143][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 117.147657][ T6342] hpfs: filesystem error: unable to find root dir [ 117.478792][ T5775] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.681672][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 117.704130][ T5775] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 117.724148][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.748656][ T5775] usb 4-1: Product: syz [ 117.752902][ T5775] usb 4-1: Manufacturer: syz [ 117.757542][ T5775] usb 4-1: SerialNumber: syz [ 117.767636][ T5775] usb 4-1: config 0 descriptor?? [ 118.081978][ T6367] loop0: detected capacity change from 0 to 256 [ 118.209359][ T5813] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 118.315129][ T6371] loop0: detected capacity change from 0 to 164 [ 118.423201][ T5775] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 118.450766][ T5813] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 66, using maximum allowed: 30 [ 118.450814][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 118.450841][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.450864][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 118.450890][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 118.450912][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 66 [ 118.455554][ T5813] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 118.455585][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.455606][ T5813] usb 3-1: Product: syz [ 118.455622][ T5813] usb 3-1: Manufacturer: syz [ 118.455637][ T5813] usb 3-1: SerialNumber: syz [ 118.458234][ T5813] usb 3-1: config 0 descriptor?? [ 118.579946][ T5775] peak_usb: probe of 4-1:0.0 failed with error -71 [ 118.588911][ T5775] usb 4-1: USB disconnect, device number 2 [ 118.733971][ T5813] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 118.929316][ T6379] loop1: detected capacity change from 0 to 128 [ 118.950671][ T6379] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.964696][ T42] usb 3-1: USB disconnect, device number 3 [ 119.013056][ T6379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.642214][ T6392] loop2: detected capacity change from 0 to 256 [ 119.669565][ T6392] exfat: Deprecated parameter 'utf8' [ 119.703900][ T6392] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 119.807825][ T6383] loop0: detected capacity change from 0 to 32768 [ 119.855183][ T6383] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.000093][ T6383] XFS (loop0): Ending clean mount [ 120.063569][ T6408] loop2: detected capacity change from 0 to 256 [ 120.180033][ T6410] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 120.223624][ T6408] FAT-fs (loop2): Directory bread(block 64) failed [ 120.244676][ T5781] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.261602][ T6408] FAT-fs (loop2): Directory bread(block 65) failed [ 120.268310][ T6408] FAT-fs (loop2): Directory bread(block 66) failed [ 120.299481][ T6408] FAT-fs (loop2): Directory bread(block 67) failed [ 120.306269][ T6408] FAT-fs (loop2): Directory bread(block 68) failed [ 120.365298][ T6408] FAT-fs (loop2): Directory bread(block 69) failed [ 120.376343][ T6408] FAT-fs (loop2): Directory bread(block 70) failed [ 120.391259][ T6408] FAT-fs (loop2): Directory bread(block 71) failed [ 120.401904][ T6408] FAT-fs (loop2): Directory bread(block 72) failed [ 120.409218][ T6408] FAT-fs (loop2): Directory bread(block 73) failed [ 121.544425][ T6441] loop1: detected capacity change from 0 to 1764 [ 121.925710][ T6427] loop2: detected capacity change from 0 to 32768 [ 121.975272][ T6427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.245 (6427) [ 122.025131][ T6433] loop0: detected capacity change from 0 to 32768 [ 122.093749][ T6427] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.106937][ T6427] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.119480][ T6427] BTRFS info (device loop2): setting nodatacow, compression disabled [ 122.134900][ T6433] JBD2: Ignoring recovery information on journal [ 122.145556][ T6427] BTRFS info (device loop2): turning on flush-on-commit [ 122.156083][ T6427] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 122.177355][ T6427] BTRFS info (device loop2): use lzo compression, level 0 [ 122.197914][ T6427] BTRFS info (device loop2): setting nodatasum [ 122.208051][ T6427] BTRFS info (device loop2): use no compression [ 122.216119][ T6427] BTRFS info (device loop2): trying to use backup root at mount time [ 122.225382][ T6427] BTRFS info (device loop2): max_inline at 0 [ 122.232511][ T6427] BTRFS info (device loop2): using free space tree [ 122.249274][ T6433] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.349293][ T5775] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.374526][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 122.424515][ T1101] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 122.443350][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 122.459464][ T6427] BTRFS warning (device loop2): couldn't read tree root [ 122.479704][ T6427] BTRFS warning (device loop2): try to load backup roots slot 1 [ 122.488362][ T6463] netlink: 'syz.3.256': attribute type 14 has an invalid length. [ 122.496769][ T6463] netlink: 'syz.3.256': attribute type 13 has an invalid length. [ 122.509478][ T1101] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 122.548927][ T5775] usb 2-1: Using ep0 maxpacket: 16 [ 122.563256][ T6427] BTRFS warning (device loop2): couldn't read tree root [ 122.575447][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.608184][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.618066][ T6427] BTRFS warning (device loop2): try to load backup roots slot 2 [ 122.629237][ T41] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 122.645432][ T5775] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 122.645449][ T6427] BTRFS warning (device loop2): couldn't read tree root [ 122.645472][ T6427] BTRFS warning (device loop2): try to load backup roots slot 3 [ 122.668221][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.719447][ T5775] usb 2-1: config 0 descriptor?? [ 122.749030][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 122.797729][ T6427] BTRFS info (device loop2): enabling ssd optimizations [ 122.818946][ T6427] BTRFS info (device loop2): auto enabling async discard [ 122.840620][ T6427] BTRFS info (device loop2): rebuilding free space tree [ 122.908251][ T6475] loop3: detected capacity change from 0 to 256 [ 122.987607][ T6475] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 123.021701][ T6427] BTRFS info (device loop2): checking UUID tree [ 123.175755][ T5775] cherry 0003:046A:0027.0006: unknown main item tag 0x4 [ 123.195708][ T5775] cherry 0003:046A:0027.0006: global environment stack underflow [ 123.225147][ T5775] cherry 0003:046A:0027.0006: item 0 0 1 11 parsing failed [ 123.259473][ T5775] cherry: probe of 0003:046A:0027.0006 failed with error -22 [ 123.440891][ T5775] usb 2-1: USB disconnect, device number 6 [ 123.547690][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.115368][ T6478] loop0: detected capacity change from 0 to 32768 [ 124.182720][ T6478] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 124.272464][ T6498] loop1: detected capacity change from 0 to 4096 [ 124.299178][ T6498] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 124.315306][ T6478] XFS (loop0): Ending clean mount [ 124.521615][ T6498] ntfs3: loop1: failed to convert "c46c" to cp775 [ 124.702758][ T6505] loop2: detected capacity change from 0 to 128 [ 124.730353][ T6505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 124.782400][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.030190][ T6489] loop3: detected capacity change from 0 to 32768 [ 125.117593][ T27] audit: type=1800 audit(1781338739.358:17): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.264" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 125.543292][ T6522] loop3: detected capacity change from 0 to 1024 [ 125.640775][ T5781] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.869837][ T6529] netlink: 5 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.819820][ T6555] netlink: 'syz.0.290': attribute type 8 has an invalid length. [ 127.348021][ T6571] loop3: detected capacity change from 0 to 256 [ 127.405951][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 127.461739][ T6571] FAT-fs (loop3): Directory bread(block 64) failed [ 127.499804][ T6571] FAT-fs (loop3): Directory bread(block 65) failed [ 127.507365][ T6571] FAT-fs (loop3): Directory bread(block 66) failed [ 127.557651][ T6571] FAT-fs (loop3): Directory bread(block 67) failed [ 127.569999][ T6571] FAT-fs (loop3): Directory bread(block 68) failed [ 127.579200][ T6571] FAT-fs (loop3): Directory bread(block 69) failed [ 127.585934][ T6571] FAT-fs (loop3): Directory bread(block 70) failed [ 127.603202][ T6571] FAT-fs (loop3): Directory bread(block 71) failed [ 127.611747][ T6571] FAT-fs (loop3): Directory bread(block 72) failed [ 127.618867][ T6571] FAT-fs (loop3): Directory bread(block 73) failed [ 127.934377][ T6583] loop0: detected capacity change from 0 to 128 [ 127.949954][ T6583] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.953244][ T6585] loop3: detected capacity change from 0 to 128 [ 127.978834][ T6583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 128.009076][ T6583] System zones: 1-3, 19-19, 35-36 [ 128.026265][ T6583] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.041111][ T6585] syz.3.305: attempt to access beyond end of device [ 128.041111][ T6585] loop3: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 128.077066][ T6583] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.174055][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.636274][ T6604] loop0: detected capacity change from 0 to 256 [ 128.657835][ T6603] bond_slave_0: entered promiscuous mode [ 128.664191][ T6603] bond_slave_1: entered promiscuous mode [ 128.690332][ T6603] macsec1: entered allmulticast mode [ 128.702721][ T6604] FAT-fs (loop0): Directory bread(block 64) failed [ 128.716449][ T6604] FAT-fs (loop0): Directory bread(block 65) failed [ 128.726471][ T6604] FAT-fs (loop0): Directory bread(block 66) failed [ 128.742144][ T6603] bond_slave_0: left promiscuous mode [ 128.747676][ T6603] bond_slave_1: left promiscuous mode [ 128.772846][ T6604] FAT-fs (loop0): Directory bread(block 67) failed [ 128.804203][ T6604] FAT-fs (loop0): Directory bread(block 68) failed [ 128.831754][ T6604] FAT-fs (loop0): Directory bread(block 69) failed [ 128.854586][ T6604] FAT-fs (loop0): Directory bread(block 70) failed [ 128.875719][ T6604] FAT-fs (loop0): Directory bread(block 71) failed [ 128.901169][ T6604] FAT-fs (loop0): Directory bread(block 72) failed [ 128.936210][ T6604] FAT-fs (loop0): Directory bread(block 73) failed [ 129.528769][ T5846] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 129.536879][ T6606] loop1: detected capacity change from 0 to 32768 [ 129.731583][ T5846] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 129.748630][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.790715][ T5846] usb 3-1: config 0 descriptor?? [ 130.075995][ T6626] process 'syz.0.325' launched '/dev/fd/3' with NULL argv: empty string added [ 130.087262][ T6618] loop3: detected capacity change from 0 to 32768 [ 130.119546][ T6618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.320 (6618) [ 130.167405][ T6618] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.205673][ T6618] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 130.216978][ T6618] BTRFS info (device loop3): setting nodatasum [ 130.248862][ T6618] BTRFS info (device loop3): force zlib compression, level 3 [ 130.252520][ T5846] [drm:udl_init] *ERROR* Selecting channel failed [ 130.256327][ T6618] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.279439][ T6618] BTRFS info (device loop3): use lzo compression, level 0 [ 130.286655][ T6618] BTRFS info (device loop3): turning on flush-on-commit [ 130.300236][ T6618] BTRFS info (device loop3): enabling auto defrag [ 130.306880][ T6618] BTRFS info (device loop3): max_inline at 4096 [ 130.326223][ T5846] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 130.337945][ T6618] BTRFS info (device loop3): using free space tree [ 130.358604][ T5846] [drm] Initialized udl on minor 2 [ 130.374907][ T5846] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.430667][ T5846] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 130.445558][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 130.458372][ T5846] usb 3-1: USB disconnect, device number 4 [ 130.484695][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 130.516037][ T6618] BTRFS info (device loop3): enabling ssd optimizations [ 130.940420][ T6649] loop1: detected capacity change from 0 to 512 [ 130.960615][ T6649] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 130.999582][ T6649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.069854][ T6649] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.323: invalid indirect mapped block 9 (level 0) [ 131.093699][ T6652] loop0: detected capacity change from 0 to 256 [ 131.155193][ T6649] EXT4-fs (loop1): 1 truncate cleaned up [ 131.163483][ T6649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.231089][ T6652] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 131.252320][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.358019][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.989317][ T27] audit: type=1326 audit(1781338747.238:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.1.350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82a539ce59 code=0x0 [ 133.044568][ T6704] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.065945][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073511][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.086768][ T6704] macvtap1: entered allmulticast mode [ 133.092558][ T6704] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 133.116753][ T6704] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 133.125093][ T6704] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 133.480144][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 134.071442][ T6733] loop1: detected capacity change from 0 to 1024 [ 134.203139][ T6733] hfsplus: invalid length 1280 has been corrected to 255 [ 134.438961][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 134.723970][ T6746] loop2: detected capacity change from 0 to 512 [ 134.763195][ T6746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.866430][ T6746] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.912997][ T6746] EXT4-fs (loop2): 1 truncate cleaned up [ 134.921307][ T6746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.044667][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.379358][ T6767] loop2: detected capacity change from 0 to 256 [ 135.419865][ T6767] exfat: Deprecated parameter 'utf8' [ 135.524761][ T6767] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 135.566732][ T6772] loop1: detected capacity change from 0 to 22 [ 135.605925][ T6772] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 135.651709][ T6772] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 135.928718][ T5776] Bluetooth: hci3: command tx timeout [ 136.276521][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 136.500871][ T6800] loop1: detected capacity change from 0 to 2048 [ 136.552997][ T6800] NILFS (loop1): invalid segment: Magic number mismatch [ 136.570497][ T6800] NILFS (loop1): trying rollback from an earlier position [ 136.624916][ T6800] NILFS (loop1): recovery complete [ 136.662916][ T6805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.878451][ T6810] loop0: detected capacity change from 0 to 1024 [ 137.022643][ T6811] loop3: detected capacity change from 0 to 4096 [ 137.328387][ T27] audit: type=1326 audit(1781338751.568:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.383696][ T27] audit: type=1326 audit(1781338751.608:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.446893][ T27] audit: type=1326 audit(1781338751.628:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.535082][ T27] audit: type=1326 audit(1781338751.628:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.669375][ T27] audit: type=1326 audit(1781338751.658:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.762269][ T27] audit: type=1326 audit(1781338751.658:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.849130][ T27] audit: type=1326 audit(1781338751.658:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 137.913947][ T27] audit: type=1326 audit(1781338751.658:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.0.405" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0b19ce59 code=0x7ffc0000 [ 138.125764][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.415'. [ 138.202897][ T6841] netlink: 'syz.0.416': attribute type 3 has an invalid length. [ 138.211121][ T6841] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 138.220271][ T6841] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.416'. [ 138.357617][ T6846] netlink: 'syz.0.418': attribute type 66 has an invalid length. [ 138.366504][ T5813] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 138.388582][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.571448][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.590424][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.599623][ T5813] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.606353][ T5813] usb 2-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 138.619627][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.630033][ T42] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 138.650469][ T5813] usb 2-1: config 0 descriptor?? [ 138.658866][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 138.685164][ T42] usb 4-1: SerialNumber: syz [ 138.934196][ T42] usb 4-1: 0:2 : does not exist [ 139.024702][ T42] usb 4-1: USB disconnect, device number 3 [ 139.093231][ T5813] ortek 0003:05A4:2000.0007: unknown main item tag 0x2 [ 139.128324][ T5813] ortek 0003:05A4:2000.0007: unknown main item tag 0x6 [ 139.137012][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.167662][ T6857] loop2: detected capacity change from 0 to 512 [ 139.169029][ T5813] ortek 0003:05A4:2000.0007: ignoring exceeding usage max [ 139.201117][ T5813] ortek 0003:05A4:2000.0007: hidraw0: USB HID v0.81 Device [HID 05a4:2000] on usb-dummy_hcd.1-1/input0 [ 139.243639][ T6857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.253298][ T6857] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 139.264865][ T6857] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 139.275597][ T6857] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 139.289622][ T6857] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.297687][ T6857] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=a040e01c, mo2=0000] [ 139.306328][ T6857] EXT4-fs (loop2): failed to initialize system zone (-117) [ 139.315644][ T6857] EXT4-fs (loop2): mount failed [ 139.406902][ T8] usb 2-1: USB disconnect, device number 7 [ 139.453270][ T6853] loop0: detected capacity change from 0 to 32768 [ 139.501686][ T6858] fido_id[6858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 139.539570][ T6853] JBD2: Ignoring recovery information on journal [ 139.623694][ T6853] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 139.871997][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 140.241388][ T6877] netlink: 100 bytes leftover after parsing attributes in process `syz.3.432'. [ 140.433221][ T6883] loop3: detected capacity change from 0 to 8 [ 140.451582][ T6883] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 140.521742][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 140.576696][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 140.752368][ T6887] loop1: detected capacity change from 0 to 4096 [ 140.784208][ T6887] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 140.794761][ T6887] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 140.830006][ T6887] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 140.863655][ T6887] ntfs: volume version 3.1. [ 141.000968][ T6887] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 141.001241][ T6887] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 141.131140][ T5778] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 141.201360][ T6875] loop2: detected capacity change from 0 to 32768 [ 141.277825][ T6875] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.322606][ T6906] netlink: 10 bytes leftover after parsing attributes in process `syz.1.441'. [ 141.459649][ T6875] XFS (loop2): Ending clean mount [ 141.762354][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.787168][ T6915] mkiss: ax0: crc mode is auto. [ 142.181584][ T6911] loop1: detected capacity change from 0 to 32768 [ 142.633635][ T6929] loop2: detected capacity change from 0 to 4096 [ 142.703844][ T6930] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.152607][ T6938] loop2: detected capacity change from 0 to 512 [ 143.166421][ T6938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.210675][ T6938] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 143.280470][ T6938] EXT4-fs (loop2): 1 truncate cleaned up [ 143.307105][ T6938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.566556][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.580997][ T6925] loop0: detected capacity change from 0 to 32768 [ 143.876820][ T6934] loop3: detected capacity change from 0 to 32768 [ 143.985153][ T6934] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 144.186456][ T5785] ocfs2: Unmounting device (7,3) on (node local) [ 144.469239][ T6964] bond0: option ad_select: unable to set because the bond device is up [ 144.510173][ T6960] loop0: detected capacity change from 0 to 4096 [ 144.530927][ T6960] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 144.612437][ T6960] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 144.663450][ T6966] loop3: detected capacity change from 0 to 1024 [ 144.829223][ T1308] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 145.015359][ T1318] hfsplus: b-tree write err: -5, ino 3 [ 145.465738][ T5846] kernel write not supported for file /input/mice (pid: 5846 comm: kworker/0:5) [ 145.599295][ T5813] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 145.810695][ T5813] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 145.838618][ T5813] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.868754][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 145.875470][ T5813] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 145.909128][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.930248][ T5813] usb 3-1: config 0 descriptor?? [ 145.937120][ T6981] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.015962][ T6990] loop1: detected capacity change from 0 to 32768 [ 146.030393][ T6990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.478 (6990) [ 146.071010][ T6990] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.099327][ T6990] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.128672][ T6990] BTRFS info (device loop1): metadata ratio 0 [ 146.134909][ T6990] BTRFS info (device loop1): setting nodatasum [ 146.159394][ T6990] BTRFS info (device loop1): using free space tree [ 146.317539][ T6990] BTRFS info (device loop1): enabling ssd optimizations [ 146.429585][ T5813] lg-g15 0003:046D:C227.0008: unknown main item tag 0x7 [ 146.450189][ T5813] lg-g15 0003:046D:C227.0008: hidraw0: USB HID v0.0c Device [HID 046d:c227] on usb-dummy_hcd.2-1/input0 [ 146.720476][ T5778] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.729817][ T8] usb 3-1: USB disconnect, device number 5 [ 146.910123][ T7024] netlink: 'syz.0.487': attribute type 2 has an invalid length. [ 147.094884][ T7028] loop0: detected capacity change from 0 to 512 [ 147.147541][ T7028] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.488: iget: bad i_size value: 38620345925642 [ 147.192577][ T7006] loop3: detected capacity change from 0 to 32768 [ 147.197464][ T7028] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.488: couldn't read orphan inode 15 (err -117) [ 147.258875][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.304724][ T7006] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.503063][ T7006] XFS (loop3): Ending clean mount [ 147.665574][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.765387][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.315712][ T7050] loop1: detected capacity change from 0 to 8192 [ 148.363197][ T7050] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.392477][ T7050] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 148.402722][ T7050] REISERFS (device loop1): using ordered data mode [ 148.418613][ T7050] reiserfs: using flush barriers [ 148.438591][ T7050] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.470812][ T7050] REISERFS (device loop1): checking transaction log (loop1) [ 148.780360][ T7069] loop2: detected capacity change from 0 to 8 [ 148.807825][ T7069] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 148.832987][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop2 [ 148.850989][ T7069] cramfs: empty filesystem [ 148.854151][ T7050] REISERFS (device loop1): Using tea hash to sort names [ 150.112213][ T7085] loop1: detected capacity change from 0 to 8192 [ 150.288775][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.486972][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 150.509421][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.517509][ T8] usb 4-1: Product: syz [ 150.545208][ T8] usb 4-1: Manufacturer: syz [ 150.561733][ T8] usb 4-1: SerialNumber: syz [ 150.583402][ T8] usb 4-1: config 0 descriptor?? [ 150.596402][ T7100] loop2: detected capacity change from 0 to 2048 [ 150.611760][ T8] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 150.694966][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.929929][ T7105] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 151.015561][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.103946][ T8] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 151.433285][ T5813] usb 4-1: USB disconnect, device number 4 [ 151.732175][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 152.028755][ T5815] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 152.222989][ T5815] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 152.243649][ T7146] loop3: detected capacity change from 0 to 256 [ 152.250551][ T5815] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.250585][ T5815] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.250608][ T5815] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 152.250635][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.250672][ T5815] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 152.250696][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.287562][ T5815] usb 1-1: config 0 descriptor?? [ 152.363400][ T7146] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 152.526323][ T7148] loop2: detected capacity change from 0 to 2048 [ 152.574569][ T7148] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 152.598568][ T7148] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 152.626271][ T7148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.732949][ T5815] hid-alps 0003:044E:120C.0009: unknown main item tag 0x6 [ 152.769187][ T5815] hid-alps 0003:044E:120C.0009: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 152.958411][ T8] usb 1-1: USB disconnect, device number 4 [ 153.194144][ T7157] loop3: detected capacity change from 0 to 512 [ 153.221195][ T7157] EXT4-fs: Ignoring removed oldalloc option [ 153.239997][ T7157] EXT4-fs: Ignoring removed bh option [ 153.266948][ T7157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 153.291505][ T7157] System zones: 1-12 [ 153.342587][ T7157] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.543: corrupted in-inode xattr: e_value size too large [ 153.365282][ T7157] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.543: couldn't read orphan inode 15 (err -117) [ 153.380537][ T7157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.919448][ T7169] loop2: detected capacity change from 0 to 256 [ 153.939417][ T7169] exfat: Deprecated parameter 'namecase' [ 153.945217][ T7169] exfat: Deprecated parameter 'namecase' [ 154.006058][ T7169] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 154.135248][ T7169] exFAT-fs (loop2): hint_cluster is invalid (4278190089), rewind to the first cluster [ 154.177292][ T7169] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805ec09b60 iblock : 8, err : -5) [ 154.209971][ T7169] exFAT-fs (loop2): error, invalid access to FAT (entry 0xff000008) [ 154.218150][ T7169] syz.2.548: attempt to access beyond end of device [ 154.218150][ T7169] loop2: rw=2049, sector=34225520825, nr_sectors = 1 limit=256 [ 154.241352][ T7169] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 154.257877][ T7169] syz.2.548: attempt to access beyond end of device [ 154.257877][ T7169] loop2: rw=2049, sector=34225520826, nr_sectors = 1 limit=256 [ 154.306190][ T7169] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 154.321683][ T7169] syz.2.548: attempt to access beyond end of device [ 154.321683][ T7169] loop2: rw=2049, sector=34225520827, nr_sectors = 1 limit=256 [ 154.348609][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.363692][ T7169] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 154.393030][ T7169] syz.2.548: attempt to access beyond end of device [ 154.393030][ T7169] loop2: rw=2049, sector=34225520828, nr_sectors = 1 limit=256 [ 154.444427][ T7177] loop3: detected capacity change from 0 to 512 [ 154.456556][ T7169] Buffer I/O error on dev loop2, logical block 34225520828, lost async page write [ 154.467596][ T7169] syz.2.548: attempt to access beyond end of device [ 154.467596][ T7169] loop2: rw=2049, sector=34225520829, nr_sectors = 1 limit=256 [ 154.509105][ T7169] Buffer I/O error on dev loop2, logical block 34225520829, lost async page write [ 154.534546][ T7169] syz.2.548: attempt to access beyond end of device [ 154.534546][ T7169] loop2: rw=2049, sector=34225520830, nr_sectors = 1 limit=256 [ 154.563421][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.593438][ T7169] Buffer I/O error on dev loop2, logical block 34225520830, lost async page write [ 154.603586][ T7169] syz.2.548: attempt to access beyond end of device [ 154.603586][ T7169] loop2: rw=2049, sector=34225520831, nr_sectors = 1 limit=256 [ 154.606017][ T7177] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.618348][ T7169] Buffer I/O error on dev loop2, logical block 34225520831, lost async page write [ 154.788683][ T7177] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks [ 154.860378][ T7177] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 154.923771][ T7181] loop0: detected capacity change from 0 to 4096 [ 154.937967][ T7183] netlink: 'syz.2.554': attribute type 2 has an invalid length. [ 154.963972][ T7181] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 155.016801][ T7181] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 155.032406][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.051615][ T7181] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 155.591613][ T7191] loop3: detected capacity change from 0 to 1024 [ 155.671423][ T7197] loop0: detected capacity change from 0 to 512 [ 155.672869][ T7191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.695202][ T7197] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.742599][ T7191] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.754536][ T7197] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.779450][ T7197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 155.787725][ T7197] System zones: 1-12 [ 155.794405][ T7197] EXT4-fs (loop0): 1 truncate cleaned up [ 155.832171][ T7197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.972614][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.102933][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.418982][ T7210] netlink: 96 bytes leftover after parsing attributes in process `syz.1.566'. [ 156.926051][ T7200] loop2: detected capacity change from 0 to 40427 [ 156.949945][ T7200] F2FS-fs (loop2): invalid crc value [ 156.976641][ T7200] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.138781][ T7200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 157.243925][ T7231] bridge0: entered promiscuous mode [ 157.317941][ T1308] kworker/u4:9: attempt to access beyond end of device [ 157.317941][ T1308] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.363759][ T1308] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 157.374525][ T7216] loop1: detected capacity change from 0 to 32768 [ 157.414745][ T7216] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.538822][ T7216] XFS (loop1): Ending clean mount [ 157.584844][ T7236] loop0: detected capacity change from 0 to 8192 [ 157.608533][ T7236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.690767][ T7236] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 157.737934][ T7236] REISERFS (device loop0): using ordered data mode [ 157.744687][ T7236] reiserfs: using flush barriers [ 157.768612][ T7236] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.823506][ T7236] REISERFS (device loop0): checking transaction log (loop0) [ 157.843898][ T5778] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 158.210170][ T7236] REISERFS (device loop0): Using tea hash to sort names [ 158.234208][ T7236] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 159.008116][ T7266] netlink: 'syz.3.587': attribute type 3 has an invalid length. [ 159.307775][ T7270] loop2: detected capacity change from 0 to 8192 [ 159.476328][ T7254] loop1: detected capacity change from 0 to 32768 [ 159.520202][ T7277] loop3: detected capacity change from 0 to 256 [ 159.569181][ T7278] netlink: 'syz.0.592': attribute type 3 has an invalid length. [ 159.630417][ T7254] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 159.665864][ T7277] FAT-fs (loop3): Directory bread(block 64) failed [ 159.691418][ T7277] FAT-fs (loop3): Directory bread(block 65) failed [ 159.708263][ T7277] FAT-fs (loop3): Directory bread(block 66) failed [ 159.732289][ T7277] FAT-fs (loop3): Directory bread(block 67) failed [ 159.741779][ T7277] FAT-fs (loop3): Directory bread(block 68) failed [ 159.754503][ T7277] FAT-fs (loop3): Directory bread(block 69) failed [ 159.774726][ T7277] FAT-fs (loop3): Directory bread(block 70) failed [ 159.791280][ T7277] FAT-fs (loop3): Directory bread(block 71) failed [ 159.798097][ T7277] FAT-fs (loop3): Directory bread(block 72) failed [ 159.836987][ T7284] loop0: detected capacity change from 0 to 16 [ 159.865521][ T7277] FAT-fs (loop3): Directory bread(block 73) failed [ 159.906294][ T7284] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.255807][ T7254] syz.1.579 (7254) used greatest stack depth: 18768 bytes left [ 160.331508][ T7292] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[7292] [ 160.431518][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 161.044333][ T27] audit: type=1326 audit(1781338775.288:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05d79ce59 code=0x7ffc0000 [ 161.106373][ T27] audit: type=1326 audit(1781338775.288:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05d79ce59 code=0x7ffc0000 [ 161.158668][ T27] audit: type=1326 audit(1781338775.318:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb05d79ce59 code=0x7ffc0000 [ 161.222025][ T27] audit: type=1326 audit(1781338775.318:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7309 comm="syz.2.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05d79ce59 code=0x7ffc0000 [ 161.595320][ T7295] loop3: detected capacity change from 0 to 40427 [ 161.627409][ T7308] loop1: detected capacity change from 0 to 32768 [ 161.669255][ T7295] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64) [ 161.677086][ T7295] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 161.701882][ T7308] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 161.722788][ T7295] F2FS-fs (loop3): invalid crc value [ 161.759496][ T7308] JBD2: Ignoring recovery information on journal [ 161.788545][ T7324] loop0: detected capacity change from 0 to 256 [ 161.796541][ T7324] exfat: Deprecated parameter 'namecase' [ 161.836941][ T7308] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.967292][ T7324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 162.152359][ T7295] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 162.243663][ T7295] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.374827][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 162.386422][ T7295] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix. [ 162.412210][ T7295] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 162.556980][ T7332] ipvlan2: entered promiscuous mode [ 162.581309][ T7332] bridge0: port 3(ipvlan2) entered blocking state [ 162.588217][ T7332] bridge0: port 3(ipvlan2) entered disabled state [ 162.609080][ T7332] ipvlan2: entered allmulticast mode [ 162.614557][ T7332] bridge0: entered allmulticast mode [ 162.641483][ T7332] ipvlan2: left allmulticast mode [ 162.654661][ T7332] bridge0: left allmulticast mode [ 163.296835][ T7346] loop3: detected capacity change from 0 to 16 [ 163.303546][ T7342] loop1: detected capacity change from 0 to 4096 [ 163.318563][ T7342] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 163.337978][ T7346] erofs: (device loop3): mounted with root inode @ nid 36. [ 163.401685][ T7342] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 164.368943][ T7368] netlink: 'syz.3.634': attribute type 9 has an invalid length. [ 164.659211][ T42] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.894174][ T42] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.906382][ T7354] loop0: detected capacity change from 0 to 32768 [ 164.918674][ T42] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.948577][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.957667][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 165.008574][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 165.011659][ T7354] [ 165.011659][ T7354] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.011659][ T7354] [ 165.041589][ T42] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 165.061862][ T42] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 165.089251][ T42] usb 2-1: Product: syz [ 165.093533][ T42] usb 2-1: Manufacturer: syz [ 165.123624][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 165.155105][ T7372] loop2: detected capacity change from 0 to 32768 [ 165.161859][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 165.188946][ T42] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 165.209228][ T42] cdc_wdm 2-1:1.0: Unknown control protocol [ 165.244397][ T7354] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 165.244397][ T7354] [ 165.278987][ T7372] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.319535][ T7388] netlink: 'syz.3.640': attribute type 322 has an invalid length. [ 165.346319][ T7354] xtLookup: xtSearch returned -5 [ 165.415518][ T7372] XFS (loop2): Ending clean mount [ 165.449360][ T7354] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 165.449360][ T7354] [ 165.483009][ T7372] XFS (loop2): Quotacheck needed: Please wait. [ 165.494973][ T8] usb 2-1: USB disconnect, device number 8 [ 165.501364][ T7354] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 165.501364][ T7354] [ 165.581338][ T7354] xtLookup: xtSearch returned -5 [ 165.586387][ T7354] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 165.586387][ T7354] [ 165.653699][ T7372] XFS (loop2): Quotacheck: Done. [ 165.833103][ T7392] loop3: detected capacity change from 0 to 164 [ 165.841512][ T1318] [ 165.841512][ T1318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.841512][ T1318] [ 165.859297][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.880956][ T1318] [ 165.880956][ T1318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.880956][ T1318] [ 165.896250][ T5781] [ 165.896250][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.896250][ T5781] [ 165.957996][ T113] [ 165.957996][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 165.957996][ T113] [ 166.014104][ T5781] [ 166.014104][ T5781] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.014104][ T5781] [ 166.475369][ T5776] Bluetooth: hci0: hcon ffff8880308a8000 sent 1 < count 107 [ 166.635744][ T7404] mkiss: ax0: crc mode is auto. [ 167.208734][ T7418] loop1: detected capacity change from 0 to 4096 [ 167.528602][ T27] audit: type=1326 audit(1781338781.768:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.3.650" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7fc00000 [ 167.969667][ T7441] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5778] was attempted by "\x22"[7441] [ 168.364727][ T27] audit: type=1326 audit(1781338782.608:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.419302][ T27] audit: type=1326 audit(1781338782.608:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.520688][ T27] audit: type=1326 audit(1781338782.608:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.612595][ T27] audit: type=1326 audit(1781338782.648:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.695324][ T27] audit: type=1326 audit(1781338782.648:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.782953][ T27] audit: type=1326 audit(1781338782.648:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.855485][ T27] audit: type=1326 audit(1781338782.648:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 168.893287][ T27] audit: type=1326 audit(1781338782.648:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.670" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe77019ce59 code=0x7ffc0000 [ 169.154306][ T7473] loop0: detected capacity change from 0 to 256 [ 169.444659][ T7481] netlink: 'syz.0.682': attribute type 3 has an invalid length. [ 169.625199][ T7486] loop3: detected capacity change from 0 to 1024 [ 169.636774][ T7487] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 169.838758][ T7489] netlink: 'syz.0.686': attribute type 5 has an invalid length. [ 170.921896][ T5846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.964009][ T7517] loop1: detected capacity change from 0 to 256 [ 171.118859][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 171.135045][ T5846] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 171.148673][ T5846] usb 1-1: config 0 has no interface number 0 [ 171.168643][ T5846] usb 1-1: config 0 interface 23 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.210199][ T5846] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 171.219954][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.239371][ T5846] usb 1-1: config 0 descriptor?? [ 171.561464][ T7527] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 171.672677][ T5846] uclogic 0003:5543:006E.000A: interface is invalid, ignoring [ 171.726085][ T5775] IPVS: starting estimator thread 0... [ 171.818812][ T7530] IPVS: using max 18 ests per chain, 43200 per kthread [ 171.914613][ T5846] usb 1-1: USB disconnect, device number 5 [ 171.926422][ T7533] nftables ruleset with unbound set [ 172.078404][ T7538] loop2: detected capacity change from 0 to 256 [ 172.598299][ T7523] loop1: detected capacity change from 0 to 40427 [ 172.643488][ T7523] F2FS-fs (loop1): heap/no_heap options were deprecated [ 172.683667][ T7523] F2FS-fs (loop1): invalid crc value [ 172.710081][ T7523] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 172.769058][ T7523] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.112068][ T7523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.375519][ T7562] loop2: detected capacity change from 0 to 256 [ 173.394990][ T7562] exfat: Deprecated parameter 'namecase' [ 173.415993][ T7547] loop3: detected capacity change from 0 to 32768 [ 173.446571][ T7562] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 173.453412][ T7547] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.659906][ T7547] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 173.803972][ T7547] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 173.864767][ T7547] XFS (loop3): Ending clean mount [ 174.046250][ T7569] loop0: detected capacity change from 0 to 32768 [ 174.072900][ T7569] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.720 (7569) [ 174.149403][ T7569] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.164494][ T7569] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 174.202808][ T7569] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 174.215696][ T5785] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 174.235087][ T7569] BTRFS info (device loop0): use zstd compression, level 3 [ 174.291453][ T7569] BTRFS info (device loop0): force clearing of disk cache [ 174.331411][ T7569] BTRFS info (device loop0): enabling disk space caching [ 174.368888][ T7569] BTRFS info (device loop0): disk space caching is enabled [ 174.554002][ T7569] BTRFS info (device loop0): enabling ssd optimizations [ 174.606697][ T7569] BTRFS info (device loop0): auto enabling async discard [ 174.655770][ T7569] BTRFS info (device loop0): rebuilding free space tree [ 174.760247][ T7569] BTRFS info (device loop0): disabling free space tree [ 174.790394][ T7569] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 174.818595][ T7569] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 174.876926][ T7600] loop3: detected capacity change from 0 to 16 [ 174.905762][ T7600] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.007851][ T7600] syz.3.726: attempt to access beyond end of device [ 175.007851][ T7600] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 175.077301][ T7600] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -6 in[63, 4033] out[4096] [ 175.119312][ T27] audit: type=1800 audit(1781338789.368:40): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.726" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 175.236168][ T5781] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 175.373154][ T7606] loop2: detected capacity change from 0 to 4096 [ 175.450228][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.658608][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.760654][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.928552][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 175.947026][ T5813] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 175.999106][ T5813] usb 4-1: config 0 has no interface number 0 [ 176.005309][ T5813] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 176.054501][ T7618] loop0: detected capacity change from 0 to 764 [ 176.073929][ T5813] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.108523][ T5813] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.153762][ T5813] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 176.172312][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.180458][ T7618] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 176.238719][ T5813] usb 4-1: Product: syz [ 176.245381][ T5813] usb 4-1: Manufacturer: syz [ 176.261017][ T5813] usb 4-1: SerialNumber: syz [ 176.294913][ T5813] usb 4-1: config 0 descriptor?? [ 176.323816][ T7608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.631029][ T5813] usb-storage 4-1:0.20: USB Mass Storage device detected [ 176.692277][ T5813] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 176.831513][ T5813] scsi host1: usb-storage 4-1:0.20 [ 176.942400][ T7634] loop0: detected capacity change from 0 to 512 [ 177.029090][ T7634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.074375][ T5813] usb 4-1: USB disconnect, device number 5 [ 177.081706][ T7634] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.300105][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.783069][ T7640] loop2: detected capacity change from 0 to 32768 [ 178.235661][ T7645] loop0: detected capacity change from 0 to 32768 [ 178.261390][ T7645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.743 (7645) [ 178.324787][ T7645] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.356419][ T7645] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 178.370423][ T7645] BTRFS info (device loop0): setting nodatasum [ 178.380518][ T7645] BTRFS info (device loop0): force zlib compression, level 3 [ 178.404536][ T7645] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 178.429877][ T7645] BTRFS info (device loop0): use lzo compression, level 0 [ 178.437158][ T7645] BTRFS info (device loop0): turning on flush-on-commit [ 178.445801][ T7645] BTRFS info (device loop0): enabling auto defrag [ 178.456402][ T7645] BTRFS info (device loop0): max_inline at 4096 [ 178.463171][ T7645] BTRFS info (device loop0): using free space tree [ 178.533040][ T7645] BTRFS info (device loop0): enabling ssd optimizations [ 178.768294][ T7658] loop1: detected capacity change from 0 to 32768 [ 178.837463][ T7658] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.884049][ T5781] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.040875][ T27] audit: type=1800 audit(1781338793.288:41): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.750" name="file2" dev="loop1" ino=17058 res=0 errno=0 [ 179.148702][ T5765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5765) [ 179.228775][ T7682] Bluetooth: MGMT ver 1.22 [ 179.390703][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 179.791730][ T7677] loop3: detected capacity change from 0 to 32768 [ 179.930855][ T7677] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 180.108129][ T7677] XFS (loop3): Ending clean mount [ 180.277363][ T5846] IPVS: starting estimator thread 0... [ 180.475663][ T5785] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 180.508993][ T7711] IPVS: using max 18 ests per chain, 43200 per kthread [ 181.602950][ T7726] loop1: detected capacity change from 0 to 16 [ 181.650032][ T7726] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 183.334840][ T7745] loop2: detected capacity change from 0 to 4096 [ 183.488671][ T7754] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.107449][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.131211][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.395039][ T5086] Bluetooth: hci0: command tx timeout [ 212.423125][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 212.450163][ T5782] Bluetooth: hci1: command tx timeout [ 256.453722][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.478288][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.283471][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 318.740199][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.764396][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.347066][ T28] INFO: task kworker/R-ipv6_:3155 blocked for more than 143 seconds. [ 350.092572][ T28] Not tainted syzkaller #0 [ 350.097687][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.