last executing test programs: 3.859733778s ago: executing program 2 (id=630): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x80, 0x6) 3.612139848s ago: executing program 2 (id=633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x800}, 0x1c) 3.480603819s ago: executing program 2 (id=635): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r0, 0x0, 0x20, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 3.310519953s ago: executing program 2 (id=637): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}, {@enospc_debug}, {@nossd_spread}, {@noenospc_debug}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x5000943f, &(0x7f0000001480)={{}, 0x0, 0x10, @unused=[0x7fdf, 0x4, 0x1d6a, 0x40], @subvolid=0x10001}) 2.011861278s ago: executing program 2 (id=646): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB='quota,noquota,discard=0x0000000000000007,discard=0x00000000000004e5,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-u,uid=', @ANYRESHEX=0xee01, @ANYBLOB='\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 1.528003037s ago: executing program 0 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x3}, 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x98, 0x3, 0x6, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f00000000c0), 0x0}, 0x20) 1.433666924s ago: executing program 3 (id=650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.330885213s ago: executing program 0 (id=651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x1d}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 1.224097741s ago: executing program 1 (id=652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/172) 1.186566025s ago: executing program 3 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x101}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.025027238s ago: executing program 0 (id=654): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x42, 0x2, 0xfffffffc}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x25) 932.360115ms ago: executing program 1 (id=655): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 932.190625ms ago: executing program 3 (id=656): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r0, 0x0, &(0x7f00000024c0)) 829.482693ms ago: executing program 1 (id=657): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 805.707055ms ago: executing program 0 (id=658): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r0, &(0x7f0000001740)=""/26, 0xffffffffffffffcb, 0x6667b9fa4a4fda0, 0x0, 0x0) 748.22468ms ago: executing program 3 (id=659): r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x141121) r1 = dup(r0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) 635.439719ms ago: executing program 3 (id=660): unshare(0x8040600) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, &(0x7f00000003c0)=0x3e) 605.641492ms ago: executing program 0 (id=661): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000025c0)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80086e8a, 0x1000000000000) 492.19024ms ago: executing program 1 (id=662): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x20001}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x68, 0x0, 0x1, 0x6, 0x0, @empty=0x7f000000, @private=0xa010101, {[@timestamp_prespec={0x44, 0x4, 0xc1, 0x3, 0x7}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x3f9}}}}}}, 0x0) 363.089281ms ago: executing program 3 (id=663): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 302.623726ms ago: executing program 0 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000070900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c0002800800044000000000080002400000000208000540000000000800034000000000080006400080"], 0x94}}, 0x0) 132.27411ms ago: executing program 1 (id=665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 78.090634ms ago: executing program 2 (id=666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x4, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {0xfffffffffffffffd, 0x400000000000000, 0x1, 0x0, 0x7fffffff}, {0x3, 0x200000000, 0x0, 0x100000}, {0x0, 0x3}, 0x1, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9}, [@acm={0x4, 0x24, 0x2, 0xa}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x7f, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5}}}}}]}}]}}, 0x0) 0s ago: executing program 1 (id=667): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000004740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@sndrcv={0x30, 0x84, 0x1, {0x100, 0x4, 0x1, 0xa28, 0xb, 0x3, 0x0, 0x2}}], 0x30, 0x11}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 71.888101][ T5776] cgroup: Unknown subsys name 'net' [ 72.023821][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.761815][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.396627][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.413805][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.428448][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.430187][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.439894][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.445022][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.450549][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.465900][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.466040][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.474008][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.481633][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.488656][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.495989][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.502739][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.509451][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.516929][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.524738][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.531476][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.539795][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.547868][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.553042][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.567176][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.570530][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.582607][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.104890][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 76.160761][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.268532][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 76.279805][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 76.404091][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.411369][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.419851][ T5786] bridge_slave_0: entered allmulticast mode [ 76.427609][ T5786] bridge_slave_0: entered promiscuous mode [ 76.435646][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.442879][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.450420][ T5789] bridge_slave_0: entered allmulticast mode [ 76.457657][ T5789] bridge_slave_0: entered promiscuous mode [ 76.480886][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.488933][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.496399][ T5786] bridge_slave_1: entered allmulticast mode [ 76.503661][ T5786] bridge_slave_1: entered promiscuous mode [ 76.511134][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.518676][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.526399][ T5789] bridge_slave_1: entered allmulticast mode [ 76.533430][ T5789] bridge_slave_1: entered promiscuous mode [ 76.618350][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.631668][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.663330][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.670799][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.678195][ T5787] bridge_slave_0: entered allmulticast mode [ 76.685301][ T5787] bridge_slave_0: entered promiscuous mode [ 76.694731][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.703093][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.710436][ T5787] bridge_slave_1: entered allmulticast mode [ 76.717975][ T5787] bridge_slave_1: entered promiscuous mode [ 76.740942][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.750557][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.758076][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.765281][ T5788] bridge_slave_0: entered allmulticast mode [ 76.772493][ T5788] bridge_slave_0: entered promiscuous mode [ 76.819344][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.842113][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.849565][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.856832][ T5788] bridge_slave_1: entered allmulticast mode [ 76.863733][ T5788] bridge_slave_1: entered promiscuous mode [ 76.872935][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.886267][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.899629][ T5786] team0: Port device team_slave_0 added [ 76.908420][ T5786] team0: Port device team_slave_1 added [ 76.973949][ T5789] team0: Port device team_slave_0 added [ 77.003956][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.011371][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.038505][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.052601][ T5789] team0: Port device team_slave_1 added [ 77.060761][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.073885][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.087050][ T5787] team0: Port device team_slave_0 added [ 77.100928][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.108419][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.134862][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.168568][ T5787] team0: Port device team_slave_1 added [ 77.232340][ T5788] team0: Port device team_slave_0 added [ 77.241390][ T5788] team0: Port device team_slave_1 added [ 77.266495][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.273570][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.301061][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.315417][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.322405][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.348575][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.360711][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.368124][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.394587][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.407612][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.414650][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.441260][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.506532][ T5786] hsr_slave_0: entered promiscuous mode [ 77.513007][ T5786] hsr_slave_1: entered promiscuous mode [ 77.549040][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.556573][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.583346][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.619628][ T5789] hsr_slave_0: entered promiscuous mode [ 77.626879][ T5789] hsr_slave_1: entered promiscuous mode [ 77.633122][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.641024][ T5789] Cannot create hsr debugfs directory [ 77.647033][ T5800] Bluetooth: hci0: command tx timeout [ 77.653444][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.661013][ T5101] Bluetooth: hci2: command tx timeout [ 77.661057][ T5802] Bluetooth: hci1: command tx timeout [ 77.667050][ T5800] Bluetooth: hci3: command tx timeout [ 77.672352][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.704867][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.812939][ T5787] hsr_slave_0: entered promiscuous mode [ 77.820972][ T5787] hsr_slave_1: entered promiscuous mode [ 77.827605][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.835205][ T5787] Cannot create hsr debugfs directory [ 77.861459][ T5788] hsr_slave_0: entered promiscuous mode [ 77.868161][ T5788] hsr_slave_1: entered promiscuous mode [ 77.874477][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.882567][ T5788] Cannot create hsr debugfs directory [ 78.226692][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.256817][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.267632][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.279780][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.374315][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.394080][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.412230][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.422560][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.511302][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.536271][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.547962][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.560144][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.642212][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.652721][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.676629][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.690192][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.714630][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.772640][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.820978][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.828434][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.887303][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.894569][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.926246][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.938690][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.997699][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.014727][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.031928][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.048274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.055756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.067563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.074880][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.096413][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.104224][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.131167][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.138502][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.242087][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.291884][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.299260][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.334899][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.342318][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.508790][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.611964][ T5786] veth0_vlan: entered promiscuous mode [ 79.661584][ T5786] veth1_vlan: entered promiscuous mode [ 79.727156][ T5800] Bluetooth: hci3: command tx timeout [ 79.729254][ T5802] Bluetooth: hci1: command tx timeout [ 79.732699][ T5800] Bluetooth: hci2: command tx timeout [ 79.738778][ T5802] Bluetooth: hci0: command tx timeout [ 79.791898][ T5786] veth0_macvtap: entered promiscuous mode [ 79.841320][ T5786] veth1_macvtap: entered promiscuous mode [ 79.880542][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.936057][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.959607][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.976941][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.987689][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.998421][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.043257][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.082210][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.095106][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.192432][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.202466][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.230672][ T5788] veth0_vlan: entered promiscuous mode [ 80.272110][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.294905][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.297406][ T5788] veth1_vlan: entered promiscuous mode [ 80.360523][ T5789] veth0_vlan: entered promiscuous mode [ 80.394948][ T5787] veth0_vlan: entered promiscuous mode [ 80.414742][ T5789] veth1_vlan: entered promiscuous mode [ 80.443735][ T5787] veth1_vlan: entered promiscuous mode [ 80.516735][ T5789] veth0_macvtap: entered promiscuous mode [ 80.542703][ T5788] veth0_macvtap: entered promiscuous mode [ 80.558493][ T5789] veth1_macvtap: entered promiscuous mode [ 80.586577][ T5788] veth1_macvtap: entered promiscuous mode [ 80.633588][ T5787] veth0_macvtap: entered promiscuous mode [ 80.657217][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.669089][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.682440][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.701131][ T5787] veth1_macvtap: entered promiscuous mode [ 80.710324][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.722305][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.732718][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.743646][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.771511][ T5878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5'. [ 80.772226][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.814777][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.825451][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.837982][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.846441][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.885213][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.892741][ T5880] syz.0.6[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.895525][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.916106][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.929424][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.941664][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.951882][ T5880] loop0: detected capacity change from 0 to 1024 [ 80.956592][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.960528][ T5880] ======================================================= [ 80.960528][ T5880] WARNING: The mand mount option has been deprecated and [ 80.960528][ T5880] and is ignored by this kernel. Remove the mand [ 80.960528][ T5880] option from the mount to silence this warning. [ 80.960528][ T5880] ======================================================= [ 80.972587][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.020417][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.043452][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.056364][ T5880] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.084164][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.098144][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.117033][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.128576][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.140675][ T5880] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.6: Invalid block bitmap block 0 in block_group 0 [ 81.155548][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.158242][ T5880] Quota error (device loop0): write_blk: dquota write failed [ 81.168690][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.183280][ T5880] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.205006][ T5880] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.6: Failed to acquire dquot type 0 [ 81.224456][ T5880] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.6: Freeing blocks not in datazone - block = 0, count = 4096 [ 81.228669][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.251133][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.261078][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.271732][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.283543][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.290900][ T5880] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6: Invalid inode bitmap blk 0 in block_group 0 [ 81.297793][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.308539][ T1324] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 81.319348][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.337532][ T5880] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 81.346333][ T1324] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 0 [ 81.359241][ T5880] EXT4-fs (loop0): 1 orphan inode deleted [ 81.360661][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.371439][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.379159][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.400496][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.419343][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.467346][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.495595][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504966][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.514025][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.553158][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.719030][ T5884] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.736017][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.743904][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.806898][ T5802] Bluetooth: hci0: command tx timeout [ 81.812405][ T5802] Bluetooth: hci2: command tx timeout [ 81.818188][ T5796] Bluetooth: hci1: command tx timeout [ 81.818683][ T5800] Bluetooth: hci3: command tx timeout [ 81.831296][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.852915][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.909737][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.931029][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.945623][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.955568][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.006160][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.014753][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.071110][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.100483][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.288195][ T5891] loop2: detected capacity change from 0 to 64 [ 82.490380][ T5893] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0) [ 82.800184][ T5901] IPVS: starting estimator thread 0... [ 82.813633][ T5904] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 82.926628][ T785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.935898][ T5906] IPVS: using max 16 ests per chain, 38400 per kthread [ 83.156599][ T785] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 83.184716][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.265455][ T785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.308424][ T785] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 83.355764][ T785] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 83.364977][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.444010][ T785] usb 1-1: config 0 descriptor?? [ 83.842373][ T5931] loop2: detected capacity change from 0 to 512 [ 83.886133][ T5800] Bluetooth: hci2: command tx timeout [ 83.891667][ T5800] Bluetooth: hci3: command tx timeout [ 83.897239][ T5101] Bluetooth: hci1: command tx timeout [ 83.897292][ T5802] Bluetooth: hci0: command tx timeout [ 83.918860][ T785] kye 0003:0458:501B.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 83.961207][ T5931] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c02c, mo2=0002] [ 83.962517][ T785] kye 0003:0458:501B.0001: unknown main item tag 0x0 [ 84.016148][ T785] kye 0003:0458:501B.0001: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.0-1/input0 [ 84.034465][ T5931] System zones: 0-7 [ 84.042861][ T785] kye 0003:0458:501B.0001: tablet-enabling feature report not found [ 84.057436][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.082032][ T785] kye 0003:0458:501B.0001: tablet enabling failed [ 84.221258][ T785] usb 1-1: USB disconnect, device number 2 [ 84.307775][ T5931] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.20: attempt to clear invalid blocks 1886221359 len 1 [ 84.378072][ T5939] fido_id[5939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 84.385026][ T5931] EXT4-fs (loop2): Remounting filesystem read-only [ 84.574687][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.683106][ T5948] loop1: detected capacity change from 0 to 1024 [ 84.806734][ T5948] hfsplus: bad catalog entry type [ 84.890418][ T48] hfsplus: b-tree write err: -5, ino 4 [ 85.569358][ T5977] loop2: detected capacity change from 0 to 8 [ 85.718608][ T5982] kAFS: unable to lookup cell 'sէKyy [ 85.718608][ T5982] [ 85.718608][ T5982] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 86.050680][ T5993] loop0: detected capacity change from 0 to 256 [ 86.138073][ T5993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 86.749113][ T6008] loop1: detected capacity change from 0 to 1024 [ 86.776847][ T6008] EXT4-fs: Ignoring removed orlov option [ 86.840184][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.886005][ T6008] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2797: inode #12: comm syz.1.45: corrupted in-inode xattr: bad magic number in in-inode xattr [ 86.964162][ T6008] EXT4-fs (loop1): Remounting filesystem read-only [ 86.977979][ T6008] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 87.126136][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.260753][ T23] cfg80211: failed to load regulatory.db [ 87.347262][ T6033] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.384913][ T6034] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.415919][ T6034] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 87.426307][ T6036] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.447399][ T6031] loop2: detected capacity change from 0 to 4096 [ 87.466343][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 87.504863][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54'. [ 87.531394][ T6040] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.209117][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.304346][ T6063] netlink: 'syz.0.64': attribute type 27 has an invalid length. [ 88.316633][ T23] kernel write not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 88.406504][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 88.438802][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.459067][ T5874] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 88.485721][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.498152][ T5874] usb 4-1: config 0 descriptor?? [ 88.866560][ T6077] loop2: detected capacity change from 0 to 256 [ 88.949317][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 88.969333][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 88.990829][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 89.001147][ T6077] FAT-fs (loop2): Directory bread(block 64) failed [ 89.009987][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 89.015465][ T6077] FAT-fs (loop2): Directory bread(block 65) failed [ 89.030259][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 89.034067][ T6077] FAT-fs (loop2): Directory bread(block 66) failed [ 89.045517][ T5874] wacom 0003:056A:00B8.0002: unknown main item tag 0x0 [ 89.053931][ T6077] FAT-fs (loop2): Directory bread(block 67) failed [ 89.061321][ T6077] FAT-fs (loop2): Directory bread(block 68) failed [ 89.077677][ T5874] wacom 0003:056A:00B8.0002: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 89.078351][ T6077] FAT-fs (loop2): Directory bread(block 69) failed [ 89.104584][ T6077] FAT-fs (loop2): Directory bread(block 70) failed [ 89.111560][ T6077] FAT-fs (loop2): Directory bread(block 71) failed [ 89.112400][ T5874] wacom 0003:056A:00B8.0002: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 89.125868][ T6077] FAT-fs (loop2): Directory bread(block 72) failed [ 89.165454][ T6077] FAT-fs (loop2): Directory bread(block 73) failed [ 89.206804][ T5874] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0002/input/input5 [ 89.248416][ T6068] loop0: detected capacity change from 0 to 32768 [ 89.309415][ T6068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.68 (6068) [ 89.395907][ T5874] usb 4-1: USB disconnect, device number 2 [ 89.429529][ T6068] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.479873][ T6068] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 89.512849][ T6068] BTRFS info (device loop0): force clearing of disk cache [ 89.531345][ T6068] BTRFS info (device loop0): enabling auto defrag [ 89.544774][ T6068] BTRFS info (device loop0): max_inline at 0 [ 89.554436][ T6068] BTRFS info (device loop0): setting nodatacow, compression disabled [ 89.573007][ T6068] BTRFS info (device loop0): using free space tree [ 89.770864][ T6068] BTRFS info (device loop0): enabling ssd optimizations [ 89.803356][ T6068] BTRFS info (device loop0): auto enabling async discard [ 89.849514][ T6100] loop3: detected capacity change from 0 to 64 [ 89.866783][ T6068] BTRFS info (device loop0): rebuilding free space tree [ 90.068441][ T6078] loop1: detected capacity change from 0 to 32768 [ 90.144264][ T6078] [ 90.144264][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.144264][ T6078] [ 90.221073][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.273789][ T1324] [ 90.273789][ T1324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.273789][ T1324] [ 90.321104][ T1324] [ 90.321104][ T1324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.321104][ T1324] [ 90.353744][ T6078] [ 90.353744][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.353744][ T6078] [ 90.428297][ T111] [ 90.428297][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.428297][ T111] [ 90.500248][ T6078] [ 90.500248][ T6078] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.500248][ T6078] [ 90.654432][ T5787] [ 90.654432][ T5787] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.654432][ T5787] [ 90.679249][ T5787] [ 90.679249][ T5787] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.679249][ T5787] [ 91.048053][ T6096] loop2: detected capacity change from 0 to 32768 [ 91.078432][ T6096] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.73 (6096) [ 91.101086][ T6104] loop0: detected capacity change from 0 to 4096 [ 91.132635][ T6096] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.133064][ T6106] nbd: must specify a device to reconfigure [ 91.195826][ T6096] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.215083][ T6096] BTRFS info (device loop2): setting nodatacow, compression disabled [ 91.246172][ T6096] BTRFS info (device loop2): setting datacow [ 91.253279][ T6096] BTRFS info (device loop2): doing ref verification [ 91.266298][ T6096] BTRFS info (device loop2): force clearing of disk cache [ 91.283840][ T6096] BTRFS info (device loop2): turning off barriers [ 91.331359][ T6096] BTRFS info (device loop2): enabling ssd optimizations [ 91.375807][ T6096] BTRFS info (device loop2): using spread ssd allocation scheme [ 91.391231][ T6102] loop3: detected capacity change from 0 to 32768 [ 91.406102][ T6096] BTRFS info (device loop2): using free space tree [ 91.426250][ T6104] ntfs3: loop0: failed to convert "0080" to cp775 [ 91.498696][ T6104] ntfs3: loop0: failed to convert name for inode 1e. [ 91.645920][ T6096] BTRFS info (device loop2): rebuilding free space tree [ 92.037933][ T5789] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.864975][ T6108] loop1: detected capacity change from 0 to 32768 [ 92.940353][ T6108] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.998498][ T6127] loop0: detected capacity change from 0 to 32768 [ 93.231069][ T6108] XFS (loop1): Ending clean mount [ 93.401821][ T6151] Illegal XDP return value 4294967274 on prog (id 9) dev N/A, expect packet loss! [ 93.613293][ T5787] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.718155][ T6155] loop2: detected capacity change from 0 to 512 [ 93.742069][ T6155] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.796643][ T6136] loop3: detected capacity change from 0 to 32768 [ 93.871275][ T6136] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.874113][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.928184][ T6136] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.961082][ T6155] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.070163][ T6136] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 94.107913][ T6155] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.88: corrupted xattr block 19: overlapping e_value [ 94.136312][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 94.143551][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.262632][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 94.281270][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.319417][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.328915][ T6136] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.431658][ T6165] netlink: 'syz.1.89': attribute type 3 has an invalid length. [ 94.642037][ T6176] loop0: detected capacity change from 0 to 512 [ 94.668552][ T6176] EXT4-fs: Ignoring removed oldalloc option [ 94.756136][ T6176] EXT4-fs (loop0): 1 truncate cleaned up [ 94.772728][ T6176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.843494][ T6176] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.94: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 94.868989][ T6176] EXT4-fs (loop0): Remounting filesystem read-only [ 94.979827][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.529667][ T6198] sp0: Synchronizing with TNC [ 95.747445][ T6204] loop1: detected capacity change from 0 to 8 [ 95.794727][ T6204] SQUASHFS error: lzo decompression failed, data probably corrupt [ 95.826595][ T6204] SQUASHFS error: Failed to read block 0x91: -5 [ 95.834177][ T6204] SQUASHFS error: Unable to read metadata cache entry [8f] [ 95.852480][ T6204] SQUASHFS error: Unable to read inode 0x11f [ 95.919645][ T6208] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 96.010468][ T6214] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 96.170769][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 96.217017][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 96.238651][ T6222] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 97.732722][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 97.975365][ C1] sched: RT throttling activated [ 98.208138][ T6274] loop3: detected capacity change from 0 to 64 [ 98.322228][ T6253] loop1: detected capacity change from 0 to 131072 [ 98.341221][ T6253] F2FS-fs (loop1): invalid crc value [ 98.373922][ T6253] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 4 [ 98.387763][ T6253] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 98.639457][ T6276] loop2: detected capacity change from 0 to 4096 [ 98.709492][ T6276] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 98.987241][ T6290] sp0: Synchronizing with TNC [ 99.066106][ T6288] [U] [ 100.213547][ T6319] loop2: detected capacity change from 0 to 4096 [ 100.789917][ T6319] ntfs3: Cannot use different iocharset when remounting! [ 101.267255][ T6349] loop2: detected capacity change from 0 to 2048 [ 101.285490][ T5778] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.362922][ T6349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.495808][ T5778] usb 2-1: Using ep0 maxpacket: 16 [ 101.513630][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.545465][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.555300][ T5778] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.603105][ T5778] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.618874][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.637340][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.696941][ T5778] usb 2-1: config 0 descriptor?? [ 102.021956][ T6379] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.157436][ T5778] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 102.210018][ T5778] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 102.243224][ T5778] microsoft 0003:045E:07DA.0003: no inputs found [ 102.276517][ T5778] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 102.374581][ T5778] usb 2-1: USB disconnect, device number 2 [ 102.567394][ T786] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.603312][ T786] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.633269][ T786] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 102.645769][ T6393] fido_id[6393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 102.680525][ T786] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.01 Device [syz1] on syz0 [ 102.865542][ T6405] loop3: detected capacity change from 0 to 256 [ 102.966652][ T6405] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 103.202558][ T6410] fido_id[6410]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.632811][ T6430] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 103.654806][ T6430] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 103.674513][ T6430] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.182'. [ 103.847663][ T6434] loop0: detected capacity change from 0 to 4096 [ 103.892130][ T6438] loop3: detected capacity change from 0 to 512 [ 103.918319][ T6438] EXT4-fs: inline encryption not supported [ 103.961398][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.316046][ T6438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.347534][ T6449] netlink: 232 bytes leftover after parsing attributes in process `syz.2.186'. [ 104.366144][ T6438] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.420919][ T6438] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.473113][ T6438] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.184: inode #13: comm syz.3.184: iget: illegal inode # [ 104.562647][ T6438] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.184: couldn't read orphan inode 13 (err -117) [ 104.636473][ T6438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.707005][ T6438] EXT4-fs: inline encryption not supported [ 104.712996][ T6438] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.755850][ T6438] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.855693][ T6438] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 104.896606][ T6438] EXT4-fs error (device loop3): __ext4_remount:6741: comm syz.3.184: Abort forced by user [ 104.926631][ T6438] EXT4-fs (loop3): Remounting filesystem read-only [ 104.933303][ T6438] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.990747][ T6438] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.127002][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.324172][ T6414] loop1: detected capacity change from 0 to 65536 [ 105.426267][ T6414] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 105.563511][ T6414] XFS (loop1): Ending clean mount [ 105.660394][ T6487] capability: warning: `syz.3.196' uses deprecated v2 capabilities in a way that may be insecure [ 105.772142][ T5787] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 106.145049][ T6495] loop0: detected capacity change from 0 to 2048 [ 106.186649][ T6495] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.258037][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.322589][ T6495] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.201: bg 0: block 234: padding at end of block bitmap is not set [ 106.395315][ T6495] EXT4-fs (loop0): Remounting filesystem read-only [ 106.481373][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.497690][ T6469] loop2: detected capacity change from 0 to 32768 [ 106.563840][ T6469] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.627226][ T6509] loop3: detected capacity change from 0 to 2048 [ 106.683716][ T6509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.721796][ T6469] XFS (loop2): Ending clean mount [ 106.806498][ T6469] XFS (loop2): Quotacheck needed: Please wait. [ 106.833205][ T28] audit: type=1800 audit(1756231159.722:2): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 106.839481][ T6516] loop1: detected capacity change from 0 to 4096 [ 106.939753][ T6516] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 106.995234][ T6469] XFS (loop2): Quotacheck: Done. [ 107.173607][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.188652][ T6516] ntfs3: loop1: failed to convert "c46c" to cp737 [ 107.788283][ T6536] loop2: detected capacity change from 0 to 256 [ 107.824316][ T6536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 107.865548][ T28] audit: type=1800 audit(1756231160.762:3): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.209" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 108.138903][ T6544] capability: warning: `syz.2.218' uses 32-bit capabilities (legacy support in use) [ 108.340292][ T6552] loop2: detected capacity change from 0 to 256 [ 108.400267][ T6552] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.481193][ T6552] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 108.514743][ T6552] FAT-fs (loop2): Filesystem has been set read-only [ 108.718883][ T6562] loop1: detected capacity change from 0 to 128 [ 109.773616][ T786] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 109.790101][ T786] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 [ 109.983259][ T6598] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 110.025609][ T6598] netlink: 244 bytes leftover after parsing attributes in process `syz.3.243'. [ 110.276457][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.474871][ T6609] Bluetooth: MGMT ver 1.22 [ 110.507697][ T786] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.525627][ T786] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.564128][ T786] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.595762][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.648365][ T786] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 110.686440][ T786] usb 3-1: invalid MIDI out EP 0 [ 110.906400][ T5799] udevd[5799]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 110.943172][ T5799] udevd[5799]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 111.051054][ T786] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 111.105935][ T6617] loop1: detected capacity change from 0 to 8 [ 111.112540][ T786] usb 3-1: USB disconnect, device number 2 [ 111.127331][ T6617] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 111.151912][ T5799] udevd[5799]: incorrect cramfs checksum on /dev/loop1 [ 111.172585][ T6603] loop3: detected capacity change from 0 to 32768 [ 111.227434][ T6603] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.246 (6603) [ 111.239206][ T6080] udevd[6080]: incorrect cramfs checksum on /dev/loop1 [ 111.284414][ T6603] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 111.316609][ T6603] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 111.349790][ T6603] BTRFS info (device loop3): enabling auto defrag [ 111.369739][ T6603] BTRFS info (device loop3): doing ref verification [ 111.395889][ T6603] BTRFS info (device loop3): use no compression [ 111.403615][ T6603] BTRFS info (device loop3): force clearing of disk cache [ 111.445912][ T6603] BTRFS info (device loop3): max_inline at 4096 [ 111.452937][ T6603] BTRFS info (device loop3): disabling free space tree [ 111.695526][ T6603] BTRFS info (device loop3): enabling ssd optimizations [ 111.765715][ T6603] BTRFS info (device loop3): auto enabling async discard [ 111.797212][ T6603] BTRFS info (device loop3): rebuilding free space tree [ 111.866195][ T6603] BTRFS info (device loop3): disabling free space tree [ 111.873291][ T6603] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.915590][ T6603] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.177960][ T5788] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 112.384007][ T5805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (5805) [ 112.445806][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 114.581974][ T6693] loop1: detected capacity change from 0 to 32768 [ 114.730941][ T6693] JBD2: Ignoring recovery information on journal [ 114.880679][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 114.904179][ T6693] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.268807][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 115.363137][ T6732] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.298'. [ 115.387614][ T6732] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.298'. [ 115.397729][ T5778] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.426020][ T6729] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.298'. [ 115.621772][ T6736] loop2: detected capacity change from 0 to 512 [ 115.628337][ T5778] usb 4-1: Using ep0 maxpacket: 16 [ 115.662500][ T5778] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 115.682828][ T5778] usb 4-1: config 252 has no interface number 0 [ 115.699554][ T5778] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 115.768126][ T5778] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 115.795932][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.814940][ T5778] usb 4-1: Product: syz [ 115.835122][ T5778] usb 4-1: Manufacturer: syz [ 115.856535][ T5778] usb 4-1: SerialNumber: syz [ 115.877624][ T6738] loop0: detected capacity change from 0 to 2048 [ 115.945135][ T6738] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.949919][ T5778] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 116.016180][ T6738] NILFS (loop0): mounting unchecked fs [ 116.103867][ T1000] usb 4-1: Failed to submit usb control message: -71 [ 116.109640][ T5874] usb 4-1: USB disconnect, device number 3 [ 116.144148][ T1000] usb 4-1: unable to send the bmi data to the device: -71 [ 116.174539][ T1000] usb 4-1: unable to get target info from device [ 116.183067][ T6738] NILFS (loop0): recovery complete [ 116.198752][ T1000] usb 4-1: could not get target info (-71) [ 116.204940][ T1000] usb 4-1: could not probe fw (-71) [ 116.228885][ T6749] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.918854][ T6761] loop2: detected capacity change from 0 to 1024 [ 117.043907][ T6761] hfsplus: request for non-existent node 134217728 in B*Tree [ 117.065558][ T6761] hfsplus: request for non-existent node 134217728 in B*Tree [ 117.265560][ T785] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 117.312737][ T6772] loop1: detected capacity change from 0 to 1024 [ 117.390948][ T6772] hfsplus: bad catalog entry type [ 117.474441][ T785] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 117.495496][ T785] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 117.521696][ T785] usb 4-1: config 0 has no interface number 0 [ 117.528420][ T1000] hfsplus: b-tree write err: -5, ino 4 [ 117.529655][ T785] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 117.548120][ T785] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.568516][ T785] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 117.621174][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.648898][ T785] usb 4-1: config 0 descriptor?? [ 117.946460][ T6787] loop2: detected capacity change from 0 to 16 [ 117.983348][ T6787] erofs: (device loop2): mounted with root inode @ nid 36. [ 118.071088][ T6787] process 'syz.2.322' launched '??`PRስ뎞Έ@-0hB@ޗtk^Ͷ݆]BocH1imj7aIԟ}Cօ^B2?ca}ş8U \ܦDO CVy~ouszjUC,,`=#+T?Bn%.;Nl'4͈{ [ 118.071088][ T6787] r3~o?rXAAAAAL`޿#2׼' with NULL argv: empty string added [ 118.286991][ T785] usb 4-1: USB disconnect, device number 4 [ 118.546438][ T6797] loop2: detected capacity change from 0 to 512 [ 118.569830][ T6797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.603924][ T6797] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.633274][ T6797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 118.651707][ T6800] netlink: 240 bytes leftover after parsing attributes in process `syz.0.328'. [ 118.653800][ T6797] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 118.678694][ T6797] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 118.689319][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.712324][ T6797] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.327: dx entry: limit 65535 != root limit 120 [ 118.724724][ T6797] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.327: Corrupt directory, running e2fsck is recommended [ 118.744069][ T6797] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.327: path /87/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 118.749908][ T6780] loop1: detected capacity change from 0 to 32768 [ 118.839695][ T6780] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.882315][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.917296][ T6780] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 119.031230][ T6780] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 119.198760][ T6813] loop0: detected capacity change from 0 to 512 [ 119.224081][ T6780] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 119.286853][ T6813] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 119.306516][ T785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.328126][ T6813] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 119.351762][ T6813] System zones: 0-1, 15-15, 18-18, 34-34 [ 119.367815][ T6813] EXT4-fs (loop0): orphan cleanup on readonly fs [ 119.385553][ T6813] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 119.395042][ T6813] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 119.434787][ T6813] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 119.469582][ T6813] EXT4-fs (loop0): 1 truncate cleaned up [ 119.503977][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.534762][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.566945][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.595598][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.613496][ T6813] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 119.645736][ T785] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 119.657557][ T6821] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 119.675578][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.711838][ T785] usb 4-1: config 0 descriptor?? [ 119.781952][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.123663][ T6829] loop0: detected capacity change from 0 to 2048 [ 120.147927][ T6829] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 120.150807][ T785] aquacomputer_d5next 0003:0C70:F001.0006: unknown main item tag 0x0 [ 120.175177][ T6829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.214453][ T785] aquacomputer_d5next 0003:0C70:F001.0006: hidraw0: USB HID v0.05 Device [HID 0c70:f001] on usb-dummy_hcd.3-1/input0 [ 120.360358][ T6815] loop2: detected capacity change from 0 to 32768 [ 120.469024][ T785] usb 4-1: USB disconnect, device number 5 [ 120.504279][ T6830] fido_id[6830]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C70:F001.0006/report_descriptor': No such device [ 120.579988][ T6815] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 120.743395][ T6838] nbd: socks must be embedded in a SOCK_ITEM attr [ 120.808489][ T6815] syz.2.335 (6815) used greatest stack depth: 17712 bytes left [ 120.956270][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 121.306183][ T6850] loop1: detected capacity change from 0 to 4096 [ 121.365632][ T6853] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.420343][ T6850] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 121.440802][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 121.485746][ T6859] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 122.022518][ T6869] loop3: detected capacity change from 0 to 4096 [ 122.045324][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 122.051663][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 122.086915][ T6875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.092785][ T6869] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 122.138257][ T6869] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 122.317824][ T1324] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 122.351616][ T5788] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 122.380005][ T5788] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 122.398867][ T5788] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 122.420391][ T1000] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 122.633400][ T6885] netlink: 104 bytes leftover after parsing attributes in process `syz.1.364'. [ 122.723645][ T6891] loop2: detected capacity change from 0 to 512 [ 123.641317][ T6889] loop0: detected capacity change from 0 to 40427 [ 123.698655][ T6889] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 123.724828][ T6889] F2FS-fs (loop0): Image doesn't support compression [ 123.745112][ T6889] F2FS-fs (loop0): Image doesn't support compression [ 123.770608][ T6889] F2FS-fs (loop0): invalid crc value [ 123.817956][ T6889] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.023597][ T6889] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.204707][ T6889] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 124.331190][ T6905] loop1: detected capacity change from 0 to 32768 [ 124.341741][ T6921] loop2: detected capacity change from 0 to 164 [ 124.374360][ T6905] (syz.1.374,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.393163][ T6905] (syz.1.374,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.534042][ T6905] JBD2: Ignoring recovery information on journal [ 124.686685][ T6905] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 124.922143][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 125.362096][ T6950] loop3: detected capacity change from 0 to 1024 [ 125.411732][ T6950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.497180][ T6950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.596346][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.707690][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.857697][ T5830] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.869273][ T5830] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.900923][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 125.926097][ T5830] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 125.930961][ T6965] 9p: Unknown Cache mode or invalid value m [ 125.949103][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.967258][ T5830] usb 2-1: config 0 descriptor?? [ 126.374075][ T6959] loop0: detected capacity change from 0 to 32768 [ 126.414285][ T5830] uclogic 0003:5543:0005.0007: item 0 2 0 8 parsing failed [ 126.432913][ T5830] uclogic 0003:5543:0005.0007: parse failed [ 126.439631][ T5830] uclogic: probe of 0003:5543:0005.0007 failed with error -22 [ 126.485810][ T6959] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.561187][ T6959] XFS (loop0): Ending clean mount [ 126.603005][ T5830] usb 2-1: USB disconnect, device number 3 [ 126.731980][ T5786] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.404274][ T7005] loop3: detected capacity change from 0 to 4096 [ 127.423746][ T7005] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 127.471820][ T7005] ntfs3: loop3: Failed to load $Extend (-22). [ 127.483663][ T7005] ntfs3: loop3: Failed to initialize $Extend. [ 127.719565][ T7018] loop2: detected capacity change from 0 to 64 [ 127.848546][ T7022] loop1: detected capacity change from 0 to 128 [ 128.022304][ T28] audit: type=1800 audit(1756231180.922:4): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.420" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 128.059500][ T7027] loop2: detected capacity change from 0 to 64 [ 128.593623][ T7043] Zero length message leads to an empty skb [ 128.658499][ T7044] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 128.711289][ T7044] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 129.744401][ T7052] loop3: detected capacity change from 0 to 32768 [ 129.774755][ T7052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.435 (7052) [ 129.816369][ T7076] loop0: detected capacity change from 0 to 256 [ 129.858649][ T7052] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.901726][ T7052] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 129.953640][ T7052] BTRFS info (device loop3): using free space tree [ 129.980708][ T7076] FAT-fs (loop0): Directory bread(block 64) failed [ 130.009863][ T7076] FAT-fs (loop0): Directory bread(block 65) failed [ 130.010712][ T7060] loop1: detected capacity change from 0 to 32768 [ 130.042355][ T7076] FAT-fs (loop0): Directory bread(block 66) failed [ 130.045546][ T7060] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.439 (7060) [ 130.071701][ T7076] FAT-fs (loop0): Directory bread(block 67) failed [ 130.115682][ T7076] FAT-fs (loop0): Directory bread(block 68) failed [ 130.122639][ T7076] FAT-fs (loop0): Directory bread(block 69) failed [ 130.181698][ T7060] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.188269][ T7052] BTRFS info (device loop3): enabling ssd optimizations [ 130.215849][ T7076] FAT-fs (loop0): Directory bread(block 70) failed [ 130.222461][ T7076] FAT-fs (loop0): Directory bread(block 71) failed [ 130.233733][ T7060] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.295668][ T7060] BTRFS info (device loop1): force zlib compression, level 3 [ 130.303235][ T7060] BTRFS info (device loop1): force clearing of disk cache [ 130.325679][ T7076] FAT-fs (loop0): Directory bread(block 72) failed [ 130.332947][ T7076] FAT-fs (loop0): Directory bread(block 73) failed [ 130.368426][ T7060] BTRFS info (device loop1): setting nodatasum [ 130.448243][ T7060] BTRFS info (device loop1): use zlib compression, level 3 [ 130.501792][ T7060] BTRFS info (device loop1): enabling disk space caching [ 130.521960][ T7060] BTRFS info (device loop1): disk space caching is enabled [ 130.583744][ T5788] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.806433][ T7060] BTRFS info (device loop1): enabling ssd optimizations [ 130.829535][ T7060] BTRFS info (device loop1): auto enabling async discard [ 130.876694][ T7060] BTRFS info (device loop1): rebuilding free space tree [ 130.879362][ T7114] loop2: detected capacity change from 0 to 4096 [ 130.921108][ T7060] BTRFS info (device loop1): disabling free space tree [ 130.998820][ T7060] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.022788][ T7060] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.033426][ T7122] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.109419][ T7114] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 131.145661][ T7114] Remounting filesystem read-only [ 131.343694][ T5787] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 132.232689][ T7117] loop0: detected capacity change from 0 to 32768 [ 132.277327][ T7117] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.452 (7117) [ 132.356430][ T7117] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 132.396002][ T7117] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 132.406709][ T7117] BTRFS info (device loop0): using free space tree [ 132.515788][ T7147] loop3: detected capacity change from 0 to 1024 [ 132.537105][ T7147] EXT4-fs: Ignoring removed i_version option [ 132.556241][ T7159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.465'. [ 132.575787][ T7147] ext4: Unknown parameter 'block_va' [ 132.596681][ T7117] BTRFS info (device loop0): enabling ssd optimizations [ 132.603704][ T7117] BTRFS info (device loop0): auto enabling async discard [ 132.632635][ T7159] netlink: 31 bytes leftover after parsing attributes in process `syz.2.465'. [ 132.704059][ T7159] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 132.885866][ T5786] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 133.254837][ T7173] loop3: detected capacity change from 0 to 2048 [ 133.314445][ T7173] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.330556][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.348269][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.364272][ T7144] loop1: detected capacity change from 0 to 32768 [ 133.399207][ T6080] udevd[6080]: incorrect nilfs2 checksum on /dev/loop3 [ 133.444274][ T7177] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.964079][ T7189] loop2: detected capacity change from 0 to 512 [ 134.025253][ T7188] loop3: detected capacity change from 0 to 256 [ 134.082577][ T7188] exfat: Deprecated parameter 'namecase' [ 134.085178][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.120410][ T7189] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.139910][ T7188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 134.231287][ T7189] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #2: block 18: comm syz.2.477: lblock 23 mapped to illegal pblock 18 (length 1) [ 134.338970][ T7189] EXT4-fs (loop2): Remounting filesystem read-only [ 134.360854][ T5778] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.425107][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.588229][ T5778] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 134.606102][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.621249][ T7202] netlink: 'syz.2.480': attribute type 3 has an invalid length. [ 134.639659][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.672105][ T5778] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 134.705600][ T5778] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 134.735413][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.765985][ T5778] usb 2-1: config 0 descriptor?? [ 135.130781][ T7198] loop0: detected capacity change from 0 to 32768 [ 135.187025][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 135.210934][ T5778] kye 0003:0458:501B.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 135.248818][ T5778] kye 0003:0458:501B.0008: unknown main item tag 0x0 [ 135.276200][ T5778] kye 0003:0458:501B.0008: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 135.317907][ T5778] kye 0003:0458:501B.0008: tablet-enabling feature report not found [ 135.350613][ T5778] kye 0003:0458:501B.0008: tablet enabling failed [ 135.527891][ T785] usb 2-1: USB disconnect, device number 4 [ 135.762199][ T7222] loop3: detected capacity change from 0 to 4096 [ 135.798848][ T7222] ntfs3: loop3: It is recommened to use chkdsk. [ 135.822987][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 135.841274][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 135.851432][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 135.906353][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 135.938948][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 135.963709][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 135.985483][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 136.003751][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 136.024000][ T7222] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 136.374738][ T7234] loop1: detected capacity change from 0 to 4096 [ 136.429967][ T7240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.548448][ T7234] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 136.634002][ T7244] loop3: detected capacity change from 0 to 1024 [ 136.705894][ T7244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.758586][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.914774][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.007337][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.028201][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.055638][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.071878][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.091827][ T8] usb 3-1: Product: syz [ 137.114205][ T8] usb 3-1: Manufacturer: syz [ 137.129931][ T8] usb 3-1: SerialNumber: syz [ 137.149271][ T8] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 137.179326][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 137.222439][ T8] cdc_ncm 3-1:1.1: bind() failure [ 137.357675][ T8] usb 3-1: USB disconnect, device number 3 [ 137.450976][ T7249] loop0: detected capacity change from 0 to 32768 [ 138.571879][ T7289] loop3: detected capacity change from 0 to 4096 [ 138.605962][ T7289] NILFS (loop3): invalid segment: Checksum error in segment payload [ 138.635317][ T7289] NILFS (loop3): trying rollback from an earlier position [ 138.696266][ T7289] NILFS (loop3): recovery complete [ 138.734157][ T7292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.915575][ T785] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.941063][ T7274] loop1: detected capacity change from 0 to 32768 [ 139.105652][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 139.121700][ T785] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 139.147973][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.175689][ T785] usb 1-1: Product: syz [ 139.180028][ T785] usb 1-1: Manufacturer: syz [ 139.184758][ T785] usb 1-1: SerialNumber: syz [ 139.212460][ T785] usb 1-1: config 0 descriptor?? [ 139.239764][ T7287] loop2: detected capacity change from 0 to 32768 [ 139.249436][ T785] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 139.311693][ T7287] JBD2: Ignoring recovery information on journal [ 139.499553][ T7287] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.760353][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 139.888787][ T785] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 139.907100][ T785] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 139.940617][ T7312] loop2: detected capacity change from 0 to 4096 [ 139.962617][ T785] usb 1-1: USB disconnect, device number 3 [ 139.985793][ T5830] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.014028][ T7315] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.085429][ T7312] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 140.136688][ T7312] Remounting filesystem read-only [ 140.141891][ T7312] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 140.195463][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 140.202954][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.220882][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.244519][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 140.267294][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.288710][ T5830] usb 2-1: config 0 descriptor?? [ 140.710354][ T5830] logitech 0003:046D:C29C.0009: unknown main item tag 0xe [ 140.739062][ T5830] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 140.762268][ T5830] logitech 0003:046D:C29C.0009: unknown main item tag 0x0 [ 140.785161][ T5830] logitech 0003:046D:C29C.0009: unexpected long global item [ 140.804241][ T5830] logitech 0003:046D:C29C.0009: parse failed [ 140.821435][ T5830] logitech: probe of 0003:046D:C29C.0009 failed with error -22 [ 140.916930][ T5830] usb 2-1: USB disconnect, device number 5 [ 141.173105][ T7321] loop2: detected capacity change from 0 to 32768 [ 141.196647][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 141.293899][ T7325] loop0: detected capacity change from 0 to 32768 [ 141.334803][ T7325] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 141.334803][ T7325] [ 141.389165][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.431178][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 141.460517][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.491059][ T9] usb 4-1: config 0 descriptor?? [ 141.674699][ T28] audit: type=1326 audit(1756231194.552:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc38ebe9 code=0x7ffc0000 [ 141.721359][ T7331] loop2: detected capacity change from 0 to 512 [ 141.751912][ T7331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.768135][ T28] audit: type=1326 audit(1756231194.572:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7fc38ebe9 code=0x7ffc0000 [ 141.790842][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.816494][ T7331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.895715][ T28] audit: type=1326 audit(1756231194.602:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb7fc38ebe9 code=0x7ffc0000 [ 141.911737][ T7331] EXT4-fs (loop2): 1 truncate cleaned up [ 141.918503][ T28] audit: type=1326 audit(1756231194.602:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb7fc38ec23 code=0x7ffc0000 [ 141.918557][ T28] audit: type=1326 audit(1756231194.602:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb7fc38d69f code=0x7ffc0000 [ 141.918599][ T28] audit: type=1326 audit(1756231194.622:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb7fc38ec77 code=0x7ffc0000 [ 141.918643][ T28] audit: type=1326 audit(1756231194.622:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7fc38d550 code=0x7ffc0000 [ 141.918685][ T28] audit: type=1326 audit(1756231194.622:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7fc38e7eb code=0x7ffc0000 [ 141.918726][ T28] audit: type=1326 audit(1756231194.652:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb7fc38d84a code=0x7ffc0000 [ 141.918768][ T28] audit: type=1326 audit(1756231194.652:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.2.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb7fc38d84a code=0x7ffc0000 [ 141.969197][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.038596][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.104429][ T7343] netlink: 'syz.1.545': attribute type 2 has an invalid length. [ 142.113832][ T9] nintendo 0003:057E:200E.000A: unbalanced delimiter at end of report description [ 142.126248][ T9] nintendo 0003:057E:200E.000A: HID parse failed [ 142.127592][ T7331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.144450][ T9] nintendo 0003:057E:200E.000A: probe - fail = -22 [ 142.183578][ T9] nintendo: probe of 0003:057E:200E.000A failed with error -22 [ 142.295311][ T5830] usb 4-1: USB disconnect, device number 6 [ 142.362348][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.442144][ T7346] loop0: detected capacity change from 0 to 2048 [ 142.537721][ T7346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.651822][ T7346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.546: bg 0: block 234: padding at end of block bitmap is not set [ 142.699933][ T7356] loop1: detected capacity change from 0 to 4096 [ 142.725495][ T7356] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 142.900621][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.955219][ T7359] loop2: detected capacity change from 0 to 64 [ 143.416682][ T7371] loop0: detected capacity change from 0 to 1024 [ 143.525583][ T7371] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 143.551781][ T7371] hfsplus: xattr search failed [ 143.916092][ T7385] loop0: detected capacity change from 0 to 1024 [ 144.016620][ T7385] hfsplus: bad catalog entry type [ 144.101518][ T7383] loop2: detected capacity change from 0 to 8192 [ 144.147685][ T11] hfsplus: b-tree write err: -5, ino 4 [ 144.175872][ T7383] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.272816][ T7383] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 144.318079][ T7383] REISERFS (device loop2): using ordered data mode [ 144.327013][ T7383] reiserfs: using flush barriers [ 144.366310][ T7383] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.441821][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 144.446218][ T7383] REISERFS (device loop2): checking transaction log (loop2) [ 144.549136][ T7383] REISERFS (device loop2): Using r5 hash to sort names [ 144.792860][ T7398] loop1: detected capacity change from 0 to 4096 [ 145.122111][ T7398] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 145.764623][ T7428] loop1: detected capacity change from 0 to 512 [ 145.796280][ T7428] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.825957][ T7428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.845929][ T7428] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.952972][ T7428] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 145.993060][ T7428] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2983: inode #16: comm syz.1.585: corrupted xattr block 31: invalid header [ 146.049787][ T7428] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 146.087957][ T7428] EXT4-fs (loop1): 1 orphan inode deleted [ 146.126322][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.229497][ T7441] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 146.278784][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.377166][ T7410] loop3: detected capacity change from 0 to 32768 [ 146.476722][ T7444] loop1: detected capacity change from 0 to 512 [ 146.483707][ T7410] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 146.483707][ T7410] [ 146.501967][ T7444] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.516317][ T7410] ERROR: (device loop3): dbDiscardAG: -EIO [ 146.516317][ T7410] [ 146.561802][ T7444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.764090][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 146.871049][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 146.968367][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 147.084069][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.095532][ T7465] loop0: detected capacity change from 0 to 256 [ 147.128314][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 15: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 147.208041][ T7465] FAT-fs (loop0): Directory bread(block 64) failed [ 147.221243][ T7444] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz.1.592: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 147.240296][ T7465] FAT-fs (loop0): Directory bread(block 65) failed [ 147.262626][ T7465] FAT-fs (loop0): Directory bread(block 66) failed [ 147.288324][ T7465] FAT-fs (loop0): Directory bread(block 67) failed [ 147.308648][ T7465] FAT-fs (loop0): Directory bread(block 68) failed [ 147.328618][ T7465] FAT-fs (loop0): Directory bread(block 69) failed [ 147.350212][ T7465] FAT-fs (loop0): Directory bread(block 70) failed [ 147.357573][ T5787] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 147.365602][ T7465] FAT-fs (loop0): Directory bread(block 71) failed [ 147.398948][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.413164][ T7465] FAT-fs (loop0): Directory bread(block 72) failed [ 147.430355][ T7465] FAT-fs (loop0): Directory bread(block 73) failed [ 147.605824][ T7467] loop1: detected capacity change from 0 to 256 [ 147.694839][ T7467] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 147.802787][ T7467] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008) [ 148.083656][ T7464] loop2: detected capacity change from 0 to 32768 [ 148.193314][ T7464] find_entry called with index = 0 [ 148.233164][ T7464] read_mapping_page failed! [ 148.269086][ T7464] ERROR: (device loop2): txCommit: [ 148.269086][ T7464] [ 148.319122][ T7464] ERROR: (device loop2): remounting filesystem as read-only [ 148.387686][ T7460] loop3: detected capacity change from 0 to 32768 [ 148.456082][ T7460] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.482202][ T7460] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 148.514759][ T7460] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 148.525913][ T7483] netlink: 104 bytes leftover after parsing attributes in process `syz.1.609'. [ 148.612970][ T7485] loop0: detected capacity change from 0 to 2048 [ 148.628074][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 148.635012][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 148.650164][ T7485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.758451][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.942782][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 307ms [ 148.952958][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.980203][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 149.001468][ T7460] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 149.084999][ T7491] sp0: Synchronizing with TNC [ 149.385519][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.405068][ T7500] loop0: detected capacity change from 0 to 256 [ 149.481880][ T7500] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 149.487643][ T7460] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 149.487643][ T7460] bh = 2049 (type: exp=14, found=8) [ 149.487643][ T7460] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417 [ 149.528250][ T7460] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 149.536690][ T7460] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 149.546750][ T7460] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 149.558822][ T7460] gfs2: fsid=syz:syz.0: File system withdrawn [ 149.565143][ T7460] CPU: 1 PID: 7460 Comm: syz.3.597 Not tainted 6.6.102-syzkaller #0 [ 149.573223][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.583495][ T7460] Call Trace: [ 149.586859][ T7460] [ 149.589837][ T7460] dump_stack_lvl+0x16c/0x230 [ 149.594567][ T7460] ? kobject_uevent_env+0x363/0x8c0 [ 149.599917][ T7460] ? show_regs_print_info+0x20/0x20 [ 149.605341][ T7460] ? load_image+0x3b0/0x3b0 [ 149.609914][ T7460] ? kobject_uevent_env+0x363/0x8c0 [ 149.615268][ T7460] gfs2_withdraw+0xe50/0x13b0 [ 149.620061][ T7460] ? gfs2_lm+0x220/0x220 [ 149.624351][ T7460] ? __wait_on_bit+0x2d0/0x2d0 [ 149.629803][ T7460] ? bit_waitqueue+0x30/0x30 [ 149.634546][ T7460] gfs2_metatype_check_ii+0x78/0x90 [ 149.639892][ T7460] gfs2_quota_init+0xc85/0xe80 [ 149.644744][ T7460] ? qd_put+0x1a0/0x1a0 [ 149.648967][ T7460] ? inode_go_inval+0x12d/0x2b0 [ 149.653955][ T7460] gfs2_make_fs_rw+0x3f5/0x530 [ 149.654153][ T7502] loop2: detected capacity change from 0 to 4096 [ 149.658742][ T7460] ? gfs2_jdesc_check+0x2a0/0x2a0 [ 149.658764][ T7460] ? do_raw_spin_lock+0x121/0x2c0 [ 149.658792][ T7460] ? __rwlock_init+0x150/0x150 [ 149.658818][ T7460] ? do_raw_spin_unlock+0x121/0x230 [ 149.658847][ T7460] gfs2_reconfigure+0x612/0xb10 [ 149.658888][ T7460] reconfigure_super+0x21e/0x880 [ 149.695489][ T7460] vfs_fsconfig_locked+0x16c/0x320 [ 149.700672][ T7460] __se_sys_fsconfig+0x700/0x850 [ 149.705772][ T7460] ? __x64_sys_fsconfig+0xc0/0xc0 [ 149.710863][ T7460] ? lockdep_hardirqs_on+0x98/0x150 [ 149.716119][ T7460] ? __x64_sys_fsconfig+0x20/0xc0 [ 149.721517][ T7460] do_syscall_64+0x55/0xb0 [ 149.725999][ T7460] ? clear_bhb_loop+0x40/0x90 [ 149.730814][ T7460] ? clear_bhb_loop+0x40/0x90 [ 149.735543][ T7460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.741509][ T7460] RIP: 0033:0x7fd90f98ebe9 [ 149.745966][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.765693][ T7460] RSP: 002b:00007fd910893038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 149.774249][ T7460] RAX: ffffffffffffffda RBX: 00007fd90fbb5fa0 RCX: 00007fd90f98ebe9 [ 149.782448][ T7460] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 149.790480][ T7460] RBP: 00007fd90fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.798591][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.806916][ T7460] R13: 00007fd90fbb6038 R14: 00007fd90fbb5fa0 R15: 00007ffc41861db8 [ 149.814974][ T7460] [ 149.822595][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 149.828018][ T7502] __ntfs_error: 17 callbacks suppressed [ 149.828033][ T7502] ntfs: (device loop2): parse_options(): NLS character set cp8 Oone_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862. [ 149.859150][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.869883][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.882550][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.891995][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.905902][ T7502] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 149.918294][ T5830] usb 2-1: Product: syz [ 149.922593][ T5830] usb 2-1: Manufacturer: syz [ 149.927489][ T7502] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 149.942795][ T5830] usb 2-1: SerialNumber: syz [ 149.970057][ T7502] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 149.985543][ T7502] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 150.039571][ T7502] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 150.084187][ T7502] ntfs: volume version 3.1. [ 150.130067][ T7502] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 150.160458][ T7502] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 150.208559][ T7502] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 150.233925][ T7502] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 150.273386][ T7509] __vm_enough_memory: pid: 7509, comm: syz.0.621, not enough memory for the allocation [ 150.377929][ T5830] usb 2-1: cannot find UAC_HEADER [ 150.423751][ T5830] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 150.526283][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.604452][ T5778] usb 2-1: USB disconnect, device number 6 [ 150.860171][ T7519] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 150.880807][ T7519] netlink: 228 bytes leftover after parsing attributes in process `syz.0.625'. [ 151.001991][ T7525] nbd: must specify an index to disconnect [ 151.330076][ T7511] loop3: detected capacity change from 0 to 40427 [ 151.367137][ T7511] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 151.405799][ T7534] [U] [ 151.409260][ T7511] F2FS-fs (loop3): invalid crc value [ 151.446969][ T7511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.642023][ T7511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.904860][ T5788] syz-executor: attempt to access beyond end of device [ 151.904860][ T5788] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.952449][ T5788] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 152.153532][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 152.370130][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 152.393727][ T5874] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.411449][ T5874] usb 2-1: config 0 has no interface number 0 [ 152.428651][ T5874] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.470320][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.485852][ T5874] usb 2-1: Product: syz [ 152.490103][ T5874] usb 2-1: Manufacturer: syz [ 152.494917][ T5874] usb 2-1: SerialNumber: syz [ 152.518229][ T5874] usb 2-1: config 0 descriptor?? [ 152.527634][ T5874] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.544529][ T7552] loop2: detected capacity change from 0 to 32768 [ 152.578226][ T7552] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.637 (7552) [ 152.601403][ T7552] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.618787][ T7552] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.628467][ T7552] BTRFS info (device loop2): enabling auto defrag [ 152.635134][ T7552] BTRFS info (device loop2): max_inline at 0 [ 152.642349][ T7552] BTRFS info (device loop2): enabling ssd optimizations [ 152.650090][ T7552] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.661013][ T7552] BTRFS info (device loop2): use lzo compression, level 0 [ 152.669815][ T7552] BTRFS info (device loop2): using free space tree [ 152.741650][ T5874] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 152.776326][ T5874] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.864575][ T7560] loop0: detected capacity change from 0 to 8192 [ 153.042632][ T5789] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.173717][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.203519][ T5874] usb 2-1: USB disconnect, device number 7 [ 153.242916][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.296018][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 153.330030][ T5874] quatech2 2-1:0.51: device disconnected [ 154.525520][ T7615] loop0: detected capacity change from 0 to 2048 [ 154.547600][ T7615] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.607200][ T7618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.678180][ T7590] loop2: detected capacity change from 0 to 32768 [ 154.819557][ T7590] read_mapping_page failed! [ 154.824704][ T7590] ERROR: (device loop2): txCommit: [ 154.824704][ T7590] [ 154.868721][ T7590] ERROR: (device loop2): remounting filesystem as read-only [ 155.013331][ T111] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 155.045719][ T111] ------------[ cut here ]------------ [ 155.051332][ T111] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 155.078560][ T111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 155.084992][ T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted 6.6.102-syzkaller #0 [ 155.093131][ T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.103389][ T111] RIP: 0010:txUnlock+0xc87/0xcb0 [ 155.108380][ T111] Code: 4f 1e 61 07 0f 0b e8 28 ae 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba a3 03 00 00 48 c7 c1 a0 18 e4 8a e8 29 1e 61 07 <0f> 0b e8 02 ae 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba [ 155.128373][ T111] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 155.134571][ T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 08c9ab6d3b7ccd00 [ 155.143019][ T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 155.151113][ T111] RBP: ffffc9000284a0d8 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 155.159133][ T111] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff888028e4d7c0 [ 155.167143][ T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88801d344294 [ 155.175584][ T111] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 155.184724][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.191352][ T111] CR2: 00007ffd77cb6ee8 CR3: 000000005f946000 CR4: 00000000003506e0 [ 155.199455][ T111] Call Trace: [ 155.202767][ T111] [ 155.205732][ T111] ? lockdep_hardirqs_on+0x98/0x150 [ 155.211240][ T111] jfs_lazycommit+0x570/0xa60 [ 155.216138][ T111] ? txFreelock+0x5a0/0x5a0 [ 155.220672][ T111] ? do_task_dead+0xd0/0xd0 [ 155.225301][ T111] ? __kthread_parkme+0x7a/0x1c0 [ 155.230411][ T111] kthread+0x2fa/0x390 [ 155.234688][ T111] ? txFreelock+0x5a0/0x5a0 [ 155.239232][ T111] ? kthread_blkcg+0xd0/0xd0 [ 155.244030][ T111] ret_from_fork+0x48/0x80 [ 155.248481][ T111] ? kthread_blkcg+0xd0/0xd0 [ 155.253101][ T111] ret_from_fork_asm+0x11/0x20 [ 155.257911][ T111] [ 155.260955][ T111] Modules linked in: [ 155.266172][ T111] ---[ end trace 0000000000000000 ]--- [ 155.272004][ T111] RIP: 0010:txUnlock+0xc87/0xcb0 [ 155.279941][ T111] Code: 4f 1e 61 07 0f 0b e8 28 ae 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba a3 03 00 00 48 c7 c1 a0 18 e4 8a e8 29 1e 61 07 <0f> 0b e8 02 ae 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba [ 155.300777][ T111] RSP: 0018:ffffc90002cd7d08 EFLAGS: 00010246 [ 155.307327][ T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 08c9ab6d3b7ccd00 [ 155.315476][ T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 155.323572][ T111] RBP: ffffc9000284a0d8 R08: ffffc90002cd7a07 R09: 1ffff9200059af40 [ 155.332780][ T111] R10: dffffc0000000000 R11: fffff5200059af41 R12: ffff888028e4d7c0 [ 155.341216][ T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88801d344294 [ 155.349271][ T111] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 155.358597][ T111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.365242][ T111] CR2: 00007f5db57812f8 CR3: 00000000302ad000 CR4: 00000000003506f0 [ 155.373296][ T111] Kernel panic - not syncing: Fatal exception [ 155.379687][ T111] Kernel Offset: disabled [ 155.384235][ T111] Rebooting in 86400 seconds..