last executing test programs: 4.036612545s ago: executing program 1 (id=804): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="580000001400192340024b80040d8c560aff820fffff5bab003a0000002058000b4835ca945f010ebc000000000000008000f0fffeffe809005300fff5dd00000010400100030c100000000000224e0000d9af4c4ccf6c01", 0x58}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) 3.888872849s ago: executing program 1 (id=806): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000000000000029000000390000003c0402"], 0x38}, 0x40) 3.656932922s ago: executing program 1 (id=809): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x49, "210e6e7adefdbb98a6818746fdc00004684df126bafd9e958c032d5279edd419d9e99062c937725afc13b7a98bd49324bb91c20e8ce09d478441c5c72a46856eb80b3690a3f3d9aa99"}, 0x0, 0x0, 0x0, 0x0}) 2.19302642s ago: executing program 2 (id=833): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000280)='//\x00', &(0x7f00000003c0)='./file0\x00', r1) 2.09011667s ago: executing program 2 (id=835): unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@cgroup=r0, r0, 0x2f, 0x2014, 0x4}, 0x20) 1.9885836s ago: executing program 2 (id=836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="2900000003000000000000000000000001000000006772c37170"], 0x29) 1.932975416s ago: executing program 2 (id=838): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="380000000000000029000000390000003c0402"], 0x38}, 0x40) 1.820017077s ago: executing program 1 (id=842): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100)="d33c", 0x2, 0x3ca611852b6aee4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000001c0)='\r\x00', 0x2, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 1.699539399s ago: executing program 0 (id=844): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0) 1.679364701s ago: executing program 2 (id=845): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYRESHEX=0x0], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1830c1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}) 1.59291638s ago: executing program 1 (id=846): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x2200, 0x4) 1.501608409s ago: executing program 0 (id=848): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000006, 0x12, r1, 0x75824000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) 1.259896093s ago: executing program 3 (id=849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = mq_open(&(0x7f0000000000)='batadv_slave\x03\x00\x0e', 0x8c2, 0x34, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) mq_timedreceive(r1, 0x0, 0x0, 0xfffffffffffff801, 0x0) 1.250384434s ago: executing program 0 (id=857): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x6, "50fdd334a265"}}, 0xc) 1.069422463s ago: executing program 3 (id=850): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c890002060000000000000000000000000000000022fc"], 0x0) 830.107986ms ago: executing program 3 (id=851): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 618.925038ms ago: executing program 3 (id=852): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004a00003c0000000000059078ac1414006401010244140903e000000200000000e00000010000000900", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="92ff16"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 617.932678ms ago: executing program 2 (id=853): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040a0}, 0x80) 478.061152ms ago: executing program 1 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x3c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}}, 0x18) 382.820701ms ago: executing program 0 (id=855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001580), 0x49249249249256f, 0x40484) 382.634411ms ago: executing program 3 (id=856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) 305.340159ms ago: executing program 0 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuseblk(&(0x7f000000aa80), &(0x7f000000aac0)='./file0\x00', &(0x7f000000ab00), 0x4, &(0x7f000000ac40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 964.15µs ago: executing program 3 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40000163, 0x0, 0x0) 0s ago: executing program 0 (id=860): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): d ssd allocation scheme [ 89.404177][ T6027] BTRFS info (device loop3): turning off barriers [ 89.406164][ T6044] loop0: detected capacity change from 0 to 64 [ 89.411992][ T6027] BTRFS info (device loop3): disabling free space tree [ 89.439193][ T6027] BTRFS info (device loop3): not using ssd optimizations [ 89.460612][ T6027] BTRFS info (device loop3): not using spread ssd allocation scheme [ 89.503531][ T6044] minix_free_block (loop0:21): bit already cleared [ 89.588593][ T6027] BTRFS info (device loop3): rebuilding free space tree [ 89.661368][ T6027] BTRFS info (device loop3): disabling free space tree [ 89.668473][ T6027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.705149][ T6027] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.757792][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 90.082350][ T5792] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 90.574622][ T6072] loop1: detected capacity change from 0 to 32768 [ 90.615738][ T6072] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 90.719716][ T6072] XFS (loop1): Ending clean mount [ 90.865217][ T6072] syz.1.66 (6072) used greatest stack depth: 20712 bytes left [ 90.945675][ T5788] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 90.970522][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 91.046111][ T6105] loop3: detected capacity change from 0 to 4096 [ 91.167132][ T6105] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 91.183251][ T9] usb 1-1: config 0 has no interfaces? [ 91.191507][ T6105] ntfs3: loop3: Failed to load $Extend (-22). [ 91.202273][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.208305][ T6105] ntfs3: loop3: Failed to initialize $Extend. [ 91.219242][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.237521][ T9] usb 1-1: SerialNumber: syz [ 91.255323][ T9] usb 1-1: config 0 descriptor?? [ 91.279021][ T6113] loop2: detected capacity change from 0 to 1024 [ 91.294548][ T6113] EXT4-fs: Ignoring removed oldalloc option [ 91.303132][ T6113] EXT4-fs: Ignoring removed bh option [ 91.312933][ T6113] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.313036][ T6105] ntfs3: loop3: ino=5, "/" directory corrupted [ 91.359406][ T6113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.416911][ T6113] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.82: Allocating blocks 481-513 which overlap fs metadata [ 91.546749][ T5873] usb 1-1: USB disconnect, device number 3 [ 91.571180][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.227629][ T6127] loop2: detected capacity change from 0 to 32768 [ 92.272429][ T6127] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.346926][ T6127] XFS (loop2): Ending clean mount [ 92.367656][ T6127] XFS (loop2): Quotacheck needed: Please wait. [ 92.409707][ T6150] loop0: detected capacity change from 0 to 512 [ 92.439423][ T6150] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.445728][ T6127] XFS (loop2): Quotacheck: Done. [ 92.451807][ T6134] loop3: detected capacity change from 0 to 32768 [ 92.461597][ T6150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.482140][ T6150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.500932][ T6150] EXT4-fs error (device loop0): __ext4_iget:5067: inode #15: block 1803188595: comm syz.0.95: invalid block [ 92.504537][ T6134] JBD2: Ignoring recovery information on journal [ 92.546898][ T6150] EXT4-fs (loop0): Remounting filesystem read-only [ 92.557167][ T6150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.578983][ T6134] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.670623][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 92.670640][ T27] audit: type=1800 audit(1763273732.656:71): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 92.697277][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.706239][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.709943][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.796738][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 92.876595][ T6155] loop0: detected capacity change from 0 to 128 [ 93.006674][ T27] audit: type=1800 audit(1763273732.986:72): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.97" name="bus" dev="loop0" ino=1048593 res=0 errno=0 [ 93.695465][ T6159] loop2: detected capacity change from 0 to 32768 [ 93.744361][ T6159] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 93.963707][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 94.152492][ T6179] loop3: detected capacity change from 0 to 4096 [ 94.161188][ T51] Bluetooth: hci3: command tx timeout [ 94.177618][ T6179] NILFS (loop3): invalid segment: Checksum error in segment payload [ 94.200432][ T6179] NILFS (loop3): trying rollback from an earlier position [ 94.268130][ T6183] loop2: detected capacity change from 0 to 2048 [ 94.280727][ T6179] NILFS (loop3): recovery complete [ 94.294452][ T6184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.332063][ T6183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.344332][ T6183] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.412098][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.588328][ T6194] loop3: detected capacity change from 0 to 2048 [ 94.595954][ T6197] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.603193][ T6198] process 'syz.0.113' launched './file1' with NULL argv: empty string added [ 94.638088][ T6200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.778924][ T6194] NILFS (loop3): error -2 truncating bmap (ino=16) [ 94.849892][ T6200] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 94.878335][ T6200] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 94.896821][ T6206] loop2: detected capacity change from 0 to 512 [ 94.905961][ T6200] Remounting filesystem read-only [ 94.912138][ T1325] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 94.919156][ T1325] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 94.932597][ T1325] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 94.940219][ T1325] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 94.947839][ T1325] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 94.965034][ T6206] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 94.980511][ T1325] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 94.988443][ T1325] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 94.996010][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.005093][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.019562][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.028940][ T1325] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 95.038854][ T1325] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 95.047591][ T1325] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 95.055179][ T1325] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 95.075476][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.087823][ T1325] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 95.104030][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.113097][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.122166][ T1325] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 95.129555][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.138608][ T1325] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 95.145917][ T1325] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 95.153339][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.168012][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.178384][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.188375][ T6212] program syz.0.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.197785][ T1325] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 95.206650][ T1325] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 95.214787][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.230358][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.239276][ T1325] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.265412][ T5792] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 95.276863][ T5792] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 95.318305][ T5792] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 95.328391][ T5792] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.351351][ T5792] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.396115][ T5792] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.415111][ T6218] capability: warning: `syz.2.124' uses 32-bit capabilities (legacy support in use) [ 95.478032][ T6218] loop2: detected capacity change from 0 to 64 [ 95.557208][ T6224] program syz.3.117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.906305][ T6237] loop3: detected capacity change from 0 to 64 [ 96.059783][ T6239] loop1: detected capacity change from 0 to 4096 [ 96.072164][ T6239] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 96.125514][ T6239] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 96.213600][ T6239] ntfs3: loop1: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 96.350773][ T1303] ntfs3: loop1: ino=1e, failed to parse mft record [ 96.366779][ T6226] loop0: detected capacity change from 0 to 32768 [ 96.381006][ T6226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.127 (6226) [ 96.416518][ T6226] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.429380][ T6226] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 96.438242][ T6226] BTRFS info (device loop0): using free space tree [ 96.500144][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 96.561426][ T6226] BTRFS info (device loop0): enabling ssd optimizations [ 96.581241][ T6226] BTRFS info (device loop0): auto enabling async discard [ 96.598353][ T6271] loop2: detected capacity change from 0 to 512 [ 96.659161][ T6271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.707171][ T6271] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.902758][ T5801] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.920884][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.932278][ T6282] binder: 6281:6282 ioctl 4018620d 0 returned -22 [ 97.898551][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.091052][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 98.106821][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.129485][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.190029][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.208764][ T786] pvrusb2: ********** [ 98.216013][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.237229][ T786] pvrusb2: Important functionality might not be entirely working. [ 98.257247][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 98.270573][ T6338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.167'. [ 98.290050][ T786] pvrusb2: ********** [ 98.312814][ T6338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'. [ 98.420821][ T2321] pvrusb2: Invalid write control endpoint [ 98.576794][ T2321] pvrusb2: Invalid write control endpoint [ 98.584059][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.604954][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.638450][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.664088][ T2321] pvrusb2: Device being rendered inoperable [ 98.679737][ T6309] pvrusb2: Attempted to execute control transfer when device not ok [ 98.706362][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.715374][ T5873] usb 3-1: USB disconnect, device number 3 [ 98.720567][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 98.732808][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.3.174'. [ 98.750088][ T2321] pvrusb2: Attached sub-driver cx25840 [ 98.773003][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 98.813141][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.028999][ T6364] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.179'. [ 99.040653][ T6364] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 99.070047][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.192503][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.304162][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.435058][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.544781][ T6374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.578562][ T6374] bond0: (slave bond1): Enslaving as an active interface with an up link [ 99.986903][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.000078][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.010944][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.024532][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.035082][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.050704][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.448241][ T6397] loop1: detected capacity change from 0 to 512 [ 100.467999][ T6397] EXT4-fs: Ignoring removed oldalloc option [ 100.564037][ T6397] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.193: Parent and EA inode have the same ino 15 [ 100.610785][ T6384] loop2: detected capacity change from 0 to 32768 [ 100.620575][ T6384] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.188 (6384) [ 100.683101][ T6384] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 100.715379][ T6384] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 100.740611][ T6384] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 100.763604][ T6384] BTRFS info (device loop2): use lzo compression, level 0 [ 100.780455][ T6384] BTRFS info (device loop2): using free space tree [ 100.887988][ T6397] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.902384][ T6397] EXT4-fs error (device loop1): ext4_xattr_inode_iget:440: comm syz.1.193: Parent and EA inode have the same ino 15 [ 100.922855][ T6384] BTRFS info (device loop2): enabling ssd optimizations [ 100.932827][ T6384] BTRFS info (device loop2): auto enabling async discard [ 100.946044][ T6397] EXT4-fs (loop1): 1 orphan inode deleted [ 100.958951][ T6397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.986517][ T6386] chnl_net:caif_netlink_parms(): no params data found [ 101.089764][ T6397] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.193: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 101.212619][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.283907][ T6431] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 101.394525][ T5793] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 101.589165][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.606763][ T6386] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.622680][ T6386] bridge_slave_0: entered allmulticast mode [ 101.630164][ T6386] bridge_slave_0: entered promiscuous mode [ 101.668305][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.685885][ T6386] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.710790][ T6386] bridge_slave_1: entered allmulticast mode [ 101.732058][ T6386] bridge_slave_1: entered promiscuous mode [ 101.833809][ T786] kernel write not supported for file /uhid (pid: 786 comm: kworker/1:2) [ 101.889018][ T6386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.965393][ T6449] loop1: detected capacity change from 0 to 1024 [ 101.989288][ T6386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.080642][ T5790] Bluetooth: hci3: command tx timeout [ 102.119954][ T6386] team0: Port device team_slave_0 added [ 102.130091][ T6386] team0: Port device team_slave_1 added [ 102.139483][ T3487] hfsplus: b-tree write err: -5, ino 4 [ 102.264582][ T41] hsr_slave_0: left promiscuous mode [ 102.300539][ T41] hsr_slave_1: left promiscuous mode [ 102.317507][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.326521][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.354976][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.370654][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.384827][ T41] bridge_slave_1: left allmulticast mode [ 102.396796][ T41] bridge_slave_1: left promiscuous mode [ 102.414206][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.429912][ T41] bridge_slave_0: left allmulticast mode [ 102.447803][ T41] bridge_slave_0: left promiscuous mode [ 102.463437][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.535660][ T41] veth1_macvtap: left promiscuous mode [ 102.543628][ T41] veth0_macvtap: left promiscuous mode [ 102.549366][ T41] veth1_vlan: left promiscuous mode [ 102.555492][ T41] veth0_vlan: left promiscuous mode [ 102.657309][ T6447] loop3: detected capacity change from 0 to 32768 [ 102.675388][ T6447] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.743084][ T6447] XFS (loop3): Ending clean mount [ 102.821717][ T6447] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 102.833716][ T6447] XFS (loop3): Unmount and run xfs_repair [ 102.839502][ T6447] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 102.847115][ T6447] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 102.856201][ T6447] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 102.866908][ T6447] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 102.875861][ T6447] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 102.888194][ T6447] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 102.897467][ T6447] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 102.906543][ T6447] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 102.920253][ T6447] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 102.931392][ T6447] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 102.959987][ T6447] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 102.984332][ T6447] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 103.088517][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.556511][ T41] team0 (unregistering): Port device team_slave_1 removed [ 103.605841][ T41] team0 (unregistering): Port device team_slave_0 removed [ 103.648908][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.699518][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.161956][ T5790] Bluetooth: hci3: command tx timeout [ 104.176152][ T41] bond0 (unregistering): Released all slaves [ 104.258715][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.265869][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.292154][ T6386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.320019][ T6386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.332903][ T6386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.360224][ T6386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.606991][ T6386] hsr_slave_0: entered promiscuous mode [ 104.634473][ T6386] hsr_slave_1: entered promiscuous mode [ 104.648080][ T6386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.669458][ T6386] Cannot create hsr debugfs directory [ 104.676058][ T6481] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 104.678051][ T6483] loop2: detected capacity change from 0 to 256 [ 105.347208][ T6500] loop2: detected capacity change from 0 to 1024 [ 105.382127][ T6500] hfsplus: bad catalog entry type [ 105.445727][ T1122] hfsplus: b-tree write err: -5, ino 4 [ 105.560501][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.592290][ T6386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.616182][ T6386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.637617][ T6386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.658859][ T6386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.770976][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 105.782354][ T5873] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.800570][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.827597][ T5873] usb 4-1: config 0 descriptor?? [ 105.929991][ T6386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.971583][ T6386] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.989367][ T6513] loop1: detected capacity change from 0 to 1024 [ 105.994377][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.003727][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.040774][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.048000][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.063315][ T6513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c098, mo2=0002] [ 106.067755][ T5873] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.086824][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.101855][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.111098][ T5873] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.130109][ T5873] usb 4-1: media controller created [ 106.172584][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.199295][ T6386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.241310][ T5790] Bluetooth: hci3: command tx timeout [ 106.272921][ T5873] az6027: usb out operation failed. (-71) [ 106.287963][ T5873] az6027: usb out operation failed. (-71) [ 106.297669][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.305601][ T5873] stb0899_attach: Driver disabled by Kconfig [ 106.312888][ T5873] az6027: no front-end attached [ 106.312888][ T5873] [ 106.321163][ T5873] az6027: usb out operation failed. (-71) [ 106.340352][ T5873] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 106.354864][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 106.415105][ T5873] dvb-usb: schedule remote query interval to 400 msecs. [ 106.430463][ T5873] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 106.442616][ T5873] usb 4-1: USB disconnect, device number 2 [ 106.510681][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 106.634794][ T5873] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.723297][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.817813][ T6528] loop2: detected capacity change from 0 to 4096 [ 106.838130][ T6386] veth0_vlan: entered promiscuous mode [ 106.872619][ T6386] veth1_vlan: entered promiscuous mode [ 106.969822][ T6386] veth0_macvtap: entered promiscuous mode [ 106.997461][ T6386] veth1_macvtap: entered promiscuous mode [ 107.019213][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.030047][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.039960][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.050551][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.061354][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.073075][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.085506][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.134925][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.157737][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.169018][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.184986][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.196482][ T6386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.196505][ T6386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.198096][ T6386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.238259][ T6386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.249619][ T6386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.263137][ T6386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.289673][ T6538] loop3: detected capacity change from 0 to 4096 [ 107.290349][ T6386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.337757][ T6538] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.386059][ T6538] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 107.421221][ T786] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.465120][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.480015][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.519568][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.549949][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.622777][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.638071][ T786] usb 2-1: no configurations [ 107.649514][ T786] usb 2-1: can't read configurations, error -22 [ 107.667900][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 107.681071][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 107.697098][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 107.707716][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.180'. [ 107.718636][ T6546] Zero length message leads to an empty skb [ 108.207801][ T6566] loop3: detected capacity change from 0 to 512 [ 108.295072][ T6566] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.250: iget: bad extra_isize 90 (inode size 256) [ 108.319924][ T6566] EXT4-fs (loop3): Remounting filesystem read-only [ 108.327103][ T5790] Bluetooth: hci3: command tx timeout [ 108.333227][ T6566] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 108.343581][ T6566] EXT4-fs (loop3): 1 orphan inode deleted [ 108.351178][ T6566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.426416][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.830968][ T6563] loop0: detected capacity change from 0 to 40427 [ 108.853613][ T6563] F2FS-fs (loop0): invalid crc value [ 108.877760][ T6563] F2FS-fs (loop0): Found nat_bits in checkpoint [ 109.012073][ T6563] F2FS-fs (loop0): Start checkpoint disabled! [ 109.041601][ T6563] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 109.337574][ T1122] kworker/u4:6: attempt to access beyond end of device [ 109.337574][ T1122] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 109.368389][ T1122] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.387899][ T1122] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.025709][ T6605] loop0: detected capacity change from 0 to 1024 [ 110.042714][ T6605] EXT4-fs: Ignoring removed bh option [ 110.048864][ T6605] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.083205][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.144717][ T27] audit: type=1800 audit(1763273750.126:73): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 110.247750][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.279135][ T6597] loop1: detected capacity change from 0 to 32768 [ 110.346577][ T6597] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 110.475329][ T6620] sit0: entered promiscuous mode [ 110.477025][ T6597] (syz.1.263,6597,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 110.499374][ T6620] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 110.518360][ T6597] (syz.1.263,6597,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 110.520835][ T6620] netlink: 1 bytes leftover after parsing attributes in process `syz.2.271'. [ 110.532872][ T6621] netlink: 104 bytes leftover after parsing attributes in process `syz.3.272'. [ 110.549036][ T6597] (syz.1.263,6597,1):ocfs2_mknod:298 ERROR: status = -2 [ 110.556229][ T6597] (syz.1.263,6597,1):ocfs2_mknod:502 ERROR: status = -2 [ 110.701057][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 111.154246][ T6635] loop0: detected capacity change from 0 to 256 [ 111.168052][ T6635] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.190125][ T6635] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 111.237990][ T6635] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 111.415138][ T6627] loop3: detected capacity change from 0 to 40427 [ 111.430510][ T6627] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 111.438346][ T6627] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.472248][ T6627] F2FS-fs (loop3): invalid crc value [ 111.493669][ T6627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.582522][ T6627] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.589675][ T6627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.773879][ T1122] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.811185][ T1122] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.843552][ T6656] loop0: detected capacity change from 0 to 512 [ 111.877096][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.891929][ T6656] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.919051][ T6656] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.289: corrupted inode contents [ 111.941317][ T6656] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #4: comm syz.0.289: mark_inode_dirty error [ 111.957826][ T6656] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.289: corrupted inode contents [ 111.970909][ T6656] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.289: mark_inode_dirty error [ 112.038631][ T6656] Quota error (device loop0): write_blk: dquota write failed [ 112.075926][ T6656] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 112.128051][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.289: corrupted inode contents [ 112.128405][ T6656] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.289: Failed to acquire dquot type 1 [ 112.163258][ T6661] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #4: comm syz.0.289: mark_inode_dirty error [ 112.195938][ T6661] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.289: corrupted inode contents [ 112.255180][ T6661] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.289: mark_inode_dirty error [ 112.292576][ T6661] Quota error (device loop0): write_blk: dquota write failed [ 112.320546][ T6661] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 112.343227][ T6661] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 112.371084][ T6662] Quota error (device loop0): do_insert_tree: Inserting already present quota entry (block 7) [ 112.390989][ T6661] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.289: Failed to acquire dquot type 1 [ 112.407379][ T6662] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 112.607318][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.908088][ T6682] loop1: detected capacity change from 0 to 4096 [ 112.956369][ T6683] loop2: detected capacity change from 0 to 4096 [ 112.984647][ T6683] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 112.987145][ T6682] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.004979][ T6679] loop0: detected capacity change from 0 to 8192 [ 113.017068][ T6682] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 113.140664][ T6679] syz.0.294 (6679) used greatest stack depth: 19600 bytes left [ 113.193563][ T6668] loop3: detected capacity change from 0 to 32768 [ 113.219926][ T41] ntfs3: loop2: ino=1e, failed to parse mft record [ 113.356050][ T27] audit: type=1800 audit(1763273753.336:74): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 113.410707][ T6689] Dead loop on virtual device ip6_vti0, fix it urgently! [ 113.618972][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 113.908340][ T6705] loop2: detected capacity change from 0 to 512 [ 113.987938][ T6705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.010851][ T6705] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.115379][ T6705] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.233729][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.417183][ T6722] loop2: detected capacity change from 0 to 512 [ 114.485156][ T6722] EXT4-fs error (device loop2): ext4_xattr_inode_iget:449: comm syz.2.311: error while reading EA inode 32 err=-116 [ 114.520968][ T6722] EXT4-fs (loop2): Remounting filesystem read-only [ 114.527726][ T6722] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 114.554305][ T6722] EXT4-fs (loop2): 1 orphan inode deleted [ 114.561930][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.656154][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.811785][ T6727] loop2: detected capacity change from 0 to 1024 [ 114.844770][ T6718] loop3: detected capacity change from 0 to 32768 [ 114.990218][ T6718] UFO tlock:0xffffc9000284a048 [ 115.117909][ T6735] loop1: detected capacity change from 0 to 512 [ 115.154653][ T6735] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.317: bad orphan inode 15 [ 115.182416][ T6735] ext4_test_bit(bit=14, block=18) = 1 [ 115.195660][ T6735] is_bad_inode(inode)=0 [ 115.207622][ T6735] NEXT_ORPHAN(inode)=1023 [ 115.238738][ T6735] max_ino=32 [ 115.258784][ T6735] i_nlink=0 [ 115.269937][ T6735] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2988: inode #15: comm syz.1.317: corrupted xattr block 19: invalid header [ 115.314770][ T6735] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 115.336858][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 115.363634][ T6735] ext4 filesystem being mounted at /87/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 115.444736][ T6735] EXT4-fs (loop1): shut down requested (1) [ 115.517707][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 115.739997][ T6755] loop3: detected capacity change from 0 to 4096 [ 115.752457][ T6755] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 115.805559][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 116.022671][ T6763] loop2: detected capacity change from 0 to 2048 [ 116.069350][ T6763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.150672][ T6763] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 116.283415][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.317781][ T6758] loop0: detected capacity change from 0 to 32768 [ 116.373220][ T6758] [ 116.373220][ T6758] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.373220][ T6758] [ 116.413624][ T6759] loop1: detected capacity change from 0 to 32768 [ 116.474846][ T6759] JBD2: Ignoring recovery information on journal [ 116.491153][ T6758] ERROR: (device loop0): diWrite: ixpxd invalid [ 116.491153][ T6758] [ 116.527434][ T6769] loop3: detected capacity change from 0 to 4096 [ 116.542118][ T6758] ERROR: (device loop0): txCommit: [ 116.542118][ T6758] [ 116.585516][ T6775] ERROR: (device loop0): diWrite: ixpxd invalid [ 116.585516][ T6775] [ 116.600715][ T6759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 116.613373][ T6775] ERROR: (device loop0): txCommit: [ 116.613373][ T6775] [ 116.625833][ T6769] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 116.650590][ T6769] UDF-fs: Scanning with blocksize 512 failed [ 116.674251][ T6769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.704353][ T6386] [ 116.704353][ T6386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.704353][ T6386] [ 116.715414][ T6386] [ 116.715414][ T6386] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 116.715414][ T6386] [ 116.809292][ T27] audit: type=1800 audit(1763273756.786:75): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file1" dev="loop3" ino=1334 res=0 errno=0 [ 116.946289][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 117.327383][ T6794] loop3: detected capacity change from 0 to 1024 [ 117.394389][ T27] audit: type=1800 audit(1763273757.376:76): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.341" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 117.813021][ T6803] loop3: detected capacity change from 0 to 8192 [ 117.860463][ T6803] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 117.882386][ T6803] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.892682][ T6803] REISERFS (device loop3): using ordered data mode [ 117.899234][ T6803] reiserfs: using flush barriers [ 117.926030][ T6803] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.953592][ T6803] REISERFS (device loop3): checking transaction log (loop3) [ 117.976840][ T6803] REISERFS (device loop3): Using r5 hash to sort names [ 117.987156][ T6803] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 118.002611][ T6803] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 118.216599][ T6824] loop2: detected capacity change from 0 to 512 [ 118.242562][ T6824] EXT4-fs: Ignoring removed i_version option [ 118.271648][ T6824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.355638][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.386148][ T6824] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.519836][ T6838] netlink: 52 bytes leftover after parsing attributes in process `syz.1.357'. [ 118.536105][ T6834] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 118.555501][ T6834] dvmrp1: linktype set to 24593 [ 118.581170][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.610130][ T6840] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.358'. [ 118.624167][ T6840] netlink: zone id is out of range [ 118.629349][ T6840] netlink: zone id is out of range [ 118.635971][ T6840] netlink: zone id is out of range [ 118.660440][ T6840] netlink: zone id is out of range [ 118.670738][ T6840] netlink: zone id is out of range [ 118.690543][ T6840] netlink: zone id is out of range [ 118.700686][ T6840] netlink: zone id is out of range [ 118.715139][ T6840] netlink: zone id is out of range [ 118.723056][ T6840] netlink: zone id is out of range [ 118.740523][ T6840] netlink: zone id is out of range [ 118.918293][ T6850] netlink: 84 bytes leftover after parsing attributes in process `syz.0.363'. [ 118.962959][ T6848] loop1: detected capacity change from 0 to 4096 [ 119.489228][ T6865] loop0: detected capacity change from 0 to 4096 [ 119.699935][ T6874] loop2: detected capacity change from 0 to 512 [ 119.856032][ T6881] loop0: detected capacity change from 0 to 512 [ 119.881699][ T6881] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #17: comm syz.0.376: iget: bogus i_mode (0) [ 119.901597][ T6881] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.376: couldn't read orphan inode 17 (err -117) [ 119.926750][ T6881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.017895][ T6881] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.376: bg 0: block 7: invalid block bitmap [ 120.139575][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.189568][ T6879] loop3: detected capacity change from 0 to 32768 [ 120.209739][ T6879] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.375 (6879) [ 120.237771][ T6879] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 120.250669][ T6879] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.259535][ T6879] BTRFS info (device loop3): using free space tree [ 120.318123][ T6879] BTRFS info (device loop3): enabling ssd optimizations [ 120.334325][ T6879] BTRFS info (device loop3): auto enabling async discard [ 120.404218][ T27] audit: type=1800 audit(1763273760.386:77): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 120.448077][ T27] audit: type=1800 audit(1763273760.386:78): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.375" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 120.607662][ T5792] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 121.194309][ T6929] program syz.3.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.594531][ T6923] loop1: detected capacity change from 0 to 32768 [ 121.647645][ T6922] loop2: detected capacity change from 0 to 32768 [ 121.673108][ T6922] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.714203][ T6922] XFS (loop2): Ending clean mount [ 121.735306][ T6922] XFS (loop2): Quotacheck needed: Please wait. [ 121.793995][ T6922] XFS (loop2): Quotacheck: Done. [ 121.878128][ T786] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x28 [ 121.894110][ T786] XFS (loop2): Unmount and run xfs_repair [ 121.899894][ T786] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 121.914559][ T786] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 121.925393][ T786] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 121.938075][ T786] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 121.947297][ T786] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 121.966700][ T786] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.975917][ T786] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 121.995230][ T786] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.019888][ T786] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 122.030833][ T6922] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x28 len 8 error 74 [ 122.056643][ T6922] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 122.075245][ T6922] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 122.206048][ T6956] loop0: detected capacity change from 0 to 2048 [ 122.245360][ T6956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.319249][ T6960] loop3: detected capacity change from 0 to 128 [ 122.345761][ T6960] FAT-fs (loop3): Directory bread(block 414) failed [ 122.370598][ T6960] FAT-fs (loop3): Directory bread(block 415) failed [ 122.380384][ T6960] FAT-fs (loop3): Directory bread(block 416) failed [ 122.387051][ T6960] FAT-fs (loop3): Directory bread(block 417) failed [ 122.407067][ T6960] FAT-fs (loop3): Directory bread(block 418) failed [ 122.424129][ T6960] FAT-fs (loop3): Directory bread(block 419) failed [ 122.440431][ T6960] FAT-fs (loop3): Directory bread(block 420) failed [ 122.450364][ T6960] FAT-fs (loop3): Directory bread(block 421) failed [ 122.489549][ T6960] FAT-fs (loop3): Directory bread(block 414) failed [ 122.499842][ T6960] FAT-fs (loop3): Directory bread(block 415) failed [ 122.712842][ T6966] macvlan0: entered promiscuous mode [ 122.729150][ T5793] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.773827][ T6966] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 122.800472][ T6966] netlink: 'syz.3.402': attribute type 2 has an invalid length. [ 123.014748][ T6958] loop1: detected capacity change from 0 to 40427 [ 123.028850][ T6958] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 123.039197][ T6958] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 123.048661][ T6958] F2FS-fs (loop1): Image doesn't support compression [ 123.059658][ T6958] F2FS-fs (loop1): invalid crc value [ 123.068334][ T6958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.146163][ T6958] F2FS-fs (loop1): Start checkpoint disabled! [ 123.164582][ T6958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 123.310819][ T6958] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x452/0x550 [ 123.343586][ T6958] F2FS-fs (loop1): Stopped filesystem due to reason: 1 [ 123.699620][ T6974] loop2: detected capacity change from 0 to 32768 [ 123.717352][ T6974] XFS: noikeep mount option is deprecated. [ 123.770724][ T6974] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.809870][ T6976] loop3: detected capacity change from 0 to 32768 [ 123.880569][ T6976] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.967896][ T6974] XFS (loop2): Ending clean mount [ 124.007632][ T6974] XFS (loop2): Quotacheck needed: Please wait. [ 124.022603][ T6976] XFS (loop3): Ending clean mount [ 124.120999][ T6974] XFS (loop2): Quotacheck: Done. [ 124.273351][ T5792] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.351743][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.773691][ T7005] loop3: detected capacity change from 0 to 128 [ 124.802764][ T7005] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.818993][ T7005] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.022957][ T7011] loop3: detected capacity change from 0 to 512 [ 125.036961][ T7011] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.663207][ T7033] sp0: Synchronizing with TNC [ 125.885767][ T7038] loop0: detected capacity change from 0 to 47 [ 125.957431][ T7041] loop2: detected capacity change from 0 to 1024 [ 126.170396][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.381859][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 126.394772][ T5854] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 126.407836][ T5854] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 126.425530][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.441927][ T5854] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.460475][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.476402][ T5854] usb 4-1: Product: syz [ 126.485304][ T5854] usb 4-1: Manufacturer: syz [ 126.494437][ T5854] usb 4-1: SerialNumber: syz [ 126.775450][ T5854] usb 4-1: 0:2 : does not exist [ 126.841417][ T5854] usb 4-1: USB disconnect, device number 3 [ 126.944333][ T7064] loop0: detected capacity change from 0 to 128 [ 126.972362][ T7064] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.992260][ T7064] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.054751][ T7068] loop2: detected capacity change from 0 to 128 [ 127.072122][ T6386] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.149488][ T7068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 127.171122][ T7068] hpfs: filesystem error: improperly stopped [ 127.180427][ T7068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 127.210445][ T7068] hpfs: You really don't want any checks? You are crazy... [ 127.222517][ T7068] hpfs: hpfs_map_sector(): read error [ 127.229181][ T7068] hpfs: code page support is disabled [ 127.239354][ T7068] hpfs: hpfs_map_4sectors(): unaligned read [ 127.247854][ T7068] hpfs: hpfs_map_4sectors(): unaligned read [ 127.254994][ T7068] hpfs: filesystem error: unable to find root dir [ 127.857347][ T7083] loop1: detected capacity change from 0 to 8192 [ 127.880055][ T7083] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 127.903693][ T7083] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 127.920923][ T7083] REISERFS (device loop1): using ordered data mode [ 127.927512][ T7083] reiserfs: using flush barriers [ 127.935631][ T7088] loop0: detected capacity change from 0 to 4096 [ 127.947496][ T7083] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.959796][ T7088] ntfs: volume version 3.1. [ 127.986464][ T7083] REISERFS (device loop1): checking transaction log (loop1) [ 127.999821][ T7083] REISERFS (device loop1): Using r5 hash to sort names [ 128.097254][ T7083] reiserfs: enabling write barrier flush mode [ 128.136974][ T7083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.178836][ T7083] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.198873][ T7083] REISERFS (device loop1): Remounting filesystem read-only [ 128.208886][ T7096] loop3: detected capacity change from 0 to 1024 [ 128.218534][ T7083] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 128.234865][ T7083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.305606][ T7083] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.340416][ T7083] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 128.349679][ T7083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.380452][ T7083] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.422829][ T7083] REISERFS error (device loop1): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 128.461450][ T7083] REISERFS warning (device loop1): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 128.579287][ T7083] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 128.617517][ T7083] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 128.637005][ T7083] REISERFS (device loop1): Remounting filesystem read-only [ 128.645846][ T7083] REISERFS error (device loop1): zam-7001 reiserfs_find_entry: io error [ 128.674305][ T7106] loop0: detected capacity change from 0 to 512 [ 128.756650][ T7106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.770913][ T7106] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.819757][ T7106] EXT4-fs: Cannot change quota options when quota turned on [ 128.866461][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.930564][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.957839][ T7116] netlink: 'syz.0.456': attribute type 5 has an invalid length. [ 128.970442][ T7116] netlink: 'syz.0.456': attribute type 11 has an invalid length. [ 129.041377][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.077260][ T7121] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 129.132701][ T786] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 129.141557][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.151845][ T786] usb 3-1: config 0 has no interface number 0 [ 129.163572][ T786] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 129.172946][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.181688][ T786] usb 3-1: Product: syz [ 129.186023][ T786] usb 3-1: Manufacturer: syz [ 129.190834][ T786] usb 3-1: SerialNumber: syz [ 129.199204][ T786] usb 3-1: config 0 descriptor?? [ 129.215208][ T786] vmk80xx 3-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 129.250432][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.261966][ T5854] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.270574][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.286513][ T5854] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.296085][ T5854] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.304231][ T5854] usb 4-1: Manufacturer: syz [ 129.311649][ T5854] usb 4-1: config 0 descriptor?? [ 129.425327][ T5854] rc_core: IR keymap rc-hauppauge not found [ 129.445702][ T5854] Registered IR keymap rc-empty [ 129.450725][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 129.458160][ T5854] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 129.469241][ T786] usb 3-1: USB disconnect, device number 4 [ 129.479179][ T8] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.496767][ T5854] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 129.507702][ T8] usb 2-1: config 0 has no interface number 0 [ 129.509889][ T7123] loop0: detected capacity change from 0 to 32768 [ 129.516570][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 129.530132][ T7123] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.460 (7123) [ 129.539481][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.551508][ T8] usb 2-1: Product: syz [ 129.560727][ T8] usb 2-1: Manufacturer: syz [ 129.569474][ T8] usb 2-1: SerialNumber: syz [ 129.570929][ T7123] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.591387][ T7123] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.595318][ T8] usb 2-1: config 0 descriptor?? [ 129.604211][ T7123] BTRFS info (device loop0): turning on flush-on-commit [ 129.613695][ T7123] BTRFS info (device loop0): max_inline at 4096 [ 129.622238][ T8] hub 2-1:0.132: bad descriptor, ignoring hub [ 129.624184][ T7123] BTRFS info (device loop0): enabling disk space caching [ 129.638670][ T8] hub: probe of 2-1:0.132 failed with error -5 [ 129.640042][ T7123] BTRFS info (device loop0): enabling free space tree [ 129.653828][ T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input7 [ 129.656807][ T7123] BTRFS info (device loop0): turning off barriers [ 129.670133][ T7123] BTRFS info (device loop0): disabling tree log [ 129.684235][ T7123] BTRFS info (device loop0): enabling ssd optimizations [ 129.697639][ T7123] BTRFS info (device loop0): force clearing of disk cache [ 129.713629][ T7123] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 129.737941][ T7123] BTRFS info (device loop0): use lzo compression, level 0 [ 129.750041][ T7123] BTRFS info (device loop0): max_inline at 0 [ 129.759846][ T7123] BTRFS info (device loop0): using free space tree [ 129.803086][ T7123] BTRFS info (device loop0): rebuilding free space tree [ 129.854678][ T7123] BTRFS info (device loop0): checking UUID tree [ 130.049847][ T8] usb 4-1: USB disconnect, device number 4 [ 130.061285][ T6386] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.270955][ T9] usb 2-1: USB disconnect, device number 4 [ 130.430564][ T5873] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.630459][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 130.644802][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.667461][ T5873] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 130.690443][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.711209][ T5873] usb 3-1: config 0 descriptor?? [ 130.878836][ T7148] loop0: detected capacity change from 0 to 4096 [ 130.896893][ T7148] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.907745][ T7154] loop1: detected capacity change from 0 to 8 [ 130.916231][ T7148] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 130.924367][ T7152] nbd0: detected capacity change from 0 to 127 [ 130.962639][ T5790] block nbd0: Receive control failed (result -32) [ 130.976246][ T7155] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.164739][ T5873] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 131.343541][ T7161] loop1: detected capacity change from 0 to 4096 [ 131.382729][ T7161] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 131.410529][ T7161] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 131.419508][ T7161] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 131.480633][ T7161] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.539077][ T7161] ntfs: volume version 3.1. [ 131.562085][ T7161] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 131.578679][ T7161] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 131.662620][ T7161] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-2. You might want to try to use the mount option nls=utf8. [ 131.692971][ T7161] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 131.706057][ T9] usb 3-1: USB disconnect, device number 5 [ 132.150456][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.302836][ T7173] loop0: detected capacity change from 0 to 32768 [ 132.341079][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 132.353337][ T5854] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.380375][ T5854] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.398128][ T5854] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.419162][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.428715][ T5854] usb 2-1: Product: syz [ 132.433577][ T5854] usb 2-1: Manufacturer: syz [ 132.441424][ T5854] usb 2-1: SerialNumber: syz [ 132.499956][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.513535][ T7181] loop2: detected capacity change from 0 to 64 [ 132.526793][ T7181] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 132.676604][ T5854] usb 2-1: 0:2 : does not exist [ 132.686326][ T5854] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 132.700407][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 132.716430][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.735850][ T9] usb 4-1: config 0 has no interface number 0 [ 132.743481][ T5854] usb 2-1: USB disconnect, device number 5 [ 132.753525][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 132.773015][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.800364][ T9] usb 4-1: Product: syz [ 132.804822][ T9] usb 4-1: Manufacturer: syz [ 132.810383][ T9] usb 4-1: SerialNumber: syz [ 132.823581][ T9] usb 4-1: config 0 descriptor?? [ 132.842149][ T9] hub 4-1:0.132: bad descriptor, ignoring hub [ 132.848308][ T9] hub: probe of 4-1:0.132 failed with error -5 [ 132.872329][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input8 [ 133.124133][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135819][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243237][ T7183] loop0: detected capacity change from 0 to 40427 [ 133.253454][ T7183] F2FS-fs (loop0): invalid crc value [ 133.262675][ T7183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.305751][ T7183] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.396013][ T7199] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 133.419871][ T6386] syz-executor: attempt to access beyond end of device [ 133.419871][ T6386] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.442200][ T6386] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 133.442916][ T5854] usb 4-1: USB disconnect, device number 5 [ 133.952034][ T7201] loop0: detected capacity change from 0 to 32768 [ 133.997371][ T7201] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.179377][ T7201] XFS (loop0): Ending clean mount [ 134.223682][ T7220] loop2: detected capacity change from 0 to 4096 [ 134.236913][ T7220] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 134.318212][ T5853] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 [ 134.338065][ T5853] XFS (loop0): Unmount and run xfs_repair [ 134.357652][ T5853] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 134.377962][ T5853] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 134.390914][ T5853] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 134.409801][ T5853] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 134.419802][ T5853] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 134.428887][ T5853] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 134.438550][ T5853] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 134.448783][ T5853] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 134.455143][ T7224] loop1: detected capacity change from 0 to 512 [ 134.472806][ T5853] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 134.500200][ T7201] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x14 len 4 error 74 [ 134.529194][ T7201] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 134.560214][ T7224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.585310][ T7201] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 134.599414][ T7224] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.707583][ T6386] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.730412][ T7224] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 134.747715][ T7222] loop3: detected capacity change from 0 to 32768 [ 134.774947][ T7229] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 134.784245][ T7222] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.491 (7222) [ 134.819938][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.848889][ T7222] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 134.869045][ T7222] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 134.901028][ T7222] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 134.921036][ T7222] BTRFS info (device loop3): use lzo compression, level 0 [ 134.928968][ T7222] BTRFS info (device loop3): using free space tree [ 135.011244][ T7239] loop1: detected capacity change from 0 to 1024 [ 135.140535][ T7222] BTRFS info (device loop3): enabling ssd optimizations [ 135.147556][ T7222] BTRFS info (device loop3): auto enabling async discard [ 135.484032][ T5792] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 135.880488][ T786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.929984][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'. [ 136.095526][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 136.109804][ T786] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 136.134861][ T786] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 136.150430][ T786] usb 2-1: Product: syz [ 136.154835][ T786] usb 2-1: Manufacturer: syz [ 136.159469][ T786] usb 2-1: SerialNumber: syz [ 136.179411][ T786] usb 2-1: config 0 descriptor?? [ 136.417018][ T7286] loop3: detected capacity change from 0 to 128 [ 136.477496][ T27] audit: type=1800 audit(1763273776.456:79): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.513" name="file2" dev="loop3" ino=1048630 res=0 errno=0 [ 136.513058][ T7286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 136.517166][ T786] usb 2-1: USB disconnect, device number 6 [ 136.527598][ T7286] FAT-fs (loop3): Filesystem has been set read-only [ 136.540914][ T7286] syz.3.513: attempt to access beyond end of device [ 136.540914][ T7286] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 136.567496][ T7286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 136.575745][ T7286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 136.590803][ T7286] syz.3.513: attempt to access beyond end of device [ 136.590803][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.620218][ T7289] syz.3.513: attempt to access beyond end of device [ 136.620218][ T7289] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.680579][ T7286] syz.3.513: attempt to access beyond end of device [ 136.680579][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.715003][ T7289] syz.3.513: attempt to access beyond end of device [ 136.715003][ T7289] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.737890][ T7286] syz.3.513: attempt to access beyond end of device [ 136.737890][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.764154][ T7286] syz.3.513: attempt to access beyond end of device [ 136.764154][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.789102][ T7286] syz.3.513: attempt to access beyond end of device [ 136.789102][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.803057][ T7286] syz.3.513: attempt to access beyond end of device [ 136.803057][ T7286] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.037450][ T7288] loop0: detected capacity change from 0 to 32768 [ 137.049930][ T7288] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.512 (7288) [ 137.072428][ T7288] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.087850][ T7288] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 137.128632][ T7288] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 137.143777][ T7288] BTRFS info (device loop0): use lzo compression, level 0 [ 137.153370][ T7288] BTRFS info (device loop0): using free space tree [ 137.265393][ T7288] BTRFS info (device loop0): enabling ssd optimizations [ 137.295348][ T7288] BTRFS info (device loop0): auto enabling async discard [ 137.605984][ T6386] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.622750][ T7318] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 137.855045][ T7296] loop2: detected capacity change from 0 to 32768 [ 137.883552][ T7296] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.517 (7296) [ 137.926313][ T7296] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 137.950455][ T7296] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 137.959411][ T7296] BTRFS info (device loop2): using free space tree [ 138.097517][ T7296] BTRFS info (device loop2): enabling ssd optimizations [ 138.121725][ T7296] BTRFS info (device loop2): auto enabling async discard [ 138.270216][ T27] audit: type=1800 audit(1763273778.246:80): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 138.325891][ T27] audit: type=1800 audit(1763273778.276:81): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 138.432190][ T5793] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 138.458546][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 138.750362][ T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.997108][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 139.052383][ T786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.070349][ T786] usb 2-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 139.079442][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.080471][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.101577][ T786] usb 2-1: config 0 descriptor?? [ 139.310608][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.321448][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.340351][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.348571][ T9] usb 3-1: Product: syz [ 139.358559][ T9] usb 3-1: Manufacturer: syz [ 139.364264][ T9] usb 3-1: SerialNumber: syz [ 139.375997][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.544612][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.553875][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 139.562680][ T786] wacom 0003:056A:030A.0004: hidraw0: USB HID v0.07 Device [HID 056a:030a] on usb-dummy_hcd.1-1/input0 [ 139.576324][ T5854] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 139.585981][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.597853][ T5854] usb 4-1: config 0 descriptor?? [ 139.784490][ T786] usb 2-1: USB disconnect, device number 7 [ 139.850719][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 139.869349][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.890033][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 139.898391][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.907677][ T5854] usb 4-1: media controller created [ 139.913672][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.958382][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.049196][ T7351] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 140.066826][ T5854] az6027: usb out operation failed. (-71) [ 140.078590][ T5854] az6027: usb out operation failed. (-71) [ 140.087348][ T5854] stb0899_attach: Driver disabled by Kconfig [ 140.098457][ T5854] az6027: no front-end attached [ 140.098457][ T5854] [ 140.112867][ T5854] az6027: usb out operation failed. (-71) [ 140.120439][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 140.131509][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 140.152695][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 140.160036][ T5854] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 140.194984][ T5853] usb 3-1: USB disconnect, device number 6 [ 140.235450][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 140.249330][ T5854] usb 4-1: USB disconnect, device number 6 [ 140.302336][ T5854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 140.396891][ T7353] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 141.040473][ T8] usb 3-1: Service connection timeout for: 256 [ 141.049326][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 141.092657][ T8] ath9k_htc: Failed to initialize the device [ 141.112520][ T5853] usb 3-1: ath9k_htc: USB layer deinitialized [ 141.210406][ T786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.400586][ T786] usb 4-1: Using ep0 maxpacket: 16 [ 141.412681][ T786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.441481][ T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.468366][ T786] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.484311][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.508176][ T786] usb 4-1: Product: syz [ 141.530226][ T786] usb 4-1: Manufacturer: syz [ 141.543998][ T786] usb 4-1: SerialNumber: syz [ 141.792660][ T786] usb 4-1: 0:2 : does not exist [ 141.809612][ T786] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 141.857676][ T786] usb 4-1: USB disconnect, device number 7 [ 142.389749][ T7367] loop1: detected capacity change from 0 to 32768 [ 142.568950][ T7371] loop2: detected capacity change from 0 to 2048 [ 142.595386][ T7371] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 142.606722][ T7371] NILFS (loop2): mounting unchecked fs [ 142.650346][ T7371] NILFS (loop2): recovery complete [ 142.657647][ T7374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.116010][ T7381] syz.1.539 uses obsolete (PF_INET,SOCK_PACKET) [ 143.395779][ T7387] loop2: detected capacity change from 0 to 128 [ 143.506519][ T27] audit: type=1800 audit(1763273783.486:82): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.544" name="file2" dev="loop2" ino=1048631 res=0 errno=0 [ 143.561382][ T7387] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 143.569301][ T7387] FAT-fs (loop2): Filesystem has been set read-only [ 143.610475][ T7387] bio_check_eod: 4347 callbacks suppressed [ 143.610496][ T7387] syz.2.544: attempt to access beyond end of device [ 143.610496][ T7387] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 143.670600][ T7387] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 143.719082][ T7387] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 143.765279][ T7392] syz.2.544: attempt to access beyond end of device [ 143.765279][ T7392] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 143.830056][ T7392] syz.2.544: attempt to access beyond end of device [ 143.830056][ T7392] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 143.890461][ T7387] syz.2.544: attempt to access beyond end of device [ 143.890461][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 143.975481][ T7387] syz.2.544: attempt to access beyond end of device [ 143.975481][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.040671][ T7387] syz.2.544: attempt to access beyond end of device [ 144.040671][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.090427][ T7387] syz.2.544: attempt to access beyond end of device [ 144.090427][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.144808][ T7387] syz.2.544: attempt to access beyond end of device [ 144.144808][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.165363][ T7347] net_ratelimit: 57 callbacks suppressed [ 144.165385][ T7347] Set syz1 is full, maxelem 65536 reached [ 144.212864][ T7387] syz.2.544: attempt to access beyond end of device [ 144.212864][ T7387] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 144.740613][ T5853] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.950506][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 144.970343][ T5853] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.993683][ T5853] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.022169][ T5853] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.039128][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.060976][ T5853] usb 3-1: Product: syz [ 145.077363][ T5853] usb 3-1: Manufacturer: syz [ 145.085692][ T5853] usb 3-1: SerialNumber: syz [ 145.112514][ T7404] loop1: detected capacity change from 0 to 2048 [ 145.148063][ T7406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.277308][ T7404] NILFS (loop1): error -2 truncating bmap (ino=16) [ 145.315274][ T7409] loop3: detected capacity change from 0 to 8 [ 145.340802][ T7406] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 145.355459][ T7406] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 145.361247][ T5853] usb 3-1: 0:2 : does not exist [ 145.379338][ T7406] Remounting filesystem read-only [ 145.384236][ T5853] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 145.391427][ T3487] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 145.408581][ T3487] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 145.421458][ T3487] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 145.439380][ T3487] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 145.445729][ T5853] usb 3-1: USB disconnect, device number 7 [ 145.453776][ T3487] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 145.480524][ T3487] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 145.497774][ T3487] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 145.515573][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.535132][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.555888][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.586331][ T3487] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 145.593248][ T3487] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 145.606632][ T3487] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 145.614299][ T3487] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 145.621901][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.631502][ T3487] NILFS (loop1): discard dirty page: offset=229376, ino=3 [ 145.638731][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.658355][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.680601][ T3487] NILFS (loop1): discard dirty block: blocknr=50, size=1024 [ 145.689937][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.709851][ T3487] NILFS (loop1): discard dirty page: offset=0, ino=15 [ 145.730224][ T3487] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 145.737889][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.746909][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.755887][ T3487] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.774536][ T5788] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 145.786695][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 145.810361][ T5788] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 145.820061][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.829684][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.843736][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.859158][ T5788] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 145.866268][ T5788] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 145.874436][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.888244][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 145.897424][ T5788] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.164686][ T7425] loop1: detected capacity change from 0 to 128 [ 146.235153][ T27] audit: type=1800 audit(1763273786.216:83): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.558" name="file2" dev="loop1" ino=1048632 res=0 errno=0 [ 146.269159][ T7425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.300444][ T7425] FAT-fs (loop1): Filesystem has been set read-only [ 146.307130][ T7425] syz.1.558: attempt to access beyond end of device [ 146.307130][ T7425] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 146.350816][ T7425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.379524][ T7425] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.544795][ T7419] loop3: detected capacity change from 0 to 32768 [ 146.584986][ T7419] JBD2: Ignoring recovery information on journal [ 146.663517][ T7419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.948037][ T5792] ocfs2: Unmounting device (7,3) on (node local) [ 148.096828][ T7464] loop0: detected capacity change from 0 to 128 [ 148.161421][ T27] audit: type=1800 audit(1763273788.146:84): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.573" name="file2" dev="loop0" ino=1048633 res=0 errno=0 [ 148.167890][ T7464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 148.241480][ T7464] FAT-fs (loop0): Filesystem has been set read-only [ 148.248409][ T7464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 148.282150][ T7464] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 148.629199][ T7464] bio_check_eod: 8228 callbacks suppressed [ 148.629220][ T7464] syz.0.573: attempt to access beyond end of device [ 148.629220][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.669597][ T7464] syz.0.573: attempt to access beyond end of device [ 148.669597][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.707727][ T7464] syz.0.573: attempt to access beyond end of device [ 148.707727][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.745688][ T7464] syz.0.573: attempt to access beyond end of device [ 148.745688][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.785163][ T7464] syz.0.573: attempt to access beyond end of device [ 148.785163][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.821842][ T7464] syz.0.573: attempt to access beyond end of device [ 148.821842][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.841378][ T7464] syz.0.573: attempt to access beyond end of device [ 148.841378][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.858726][ T7464] syz.0.573: attempt to access beyond end of device [ 148.858726][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.890638][ T7464] syz.0.573: attempt to access beyond end of device [ 148.890638][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.910379][ T7462] loop1: detected capacity change from 0 to 40427 [ 148.924346][ T7464] syz.0.573: attempt to access beyond end of device [ 148.924346][ T7464] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 148.970396][ T7462] F2FS-fs (loop1): invalid crc value [ 149.022813][ T7462] F2FS-fs (loop1): Found nat_bits in checkpoint [ 149.170500][ T7462] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 149.539070][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 149.696921][ T7489] loop3: detected capacity change from 0 to 2048 [ 149.796372][ T7489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.873724][ T7491] loop0: detected capacity change from 0 to 4096 [ 149.967351][ T7491] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 149.991503][ T7491] ntfs3: loop0: Failed to load $Extend (-22). [ 150.007887][ T7491] ntfs3: loop0: Failed to initialize $Extend. [ 150.103244][ T7491] ntfs3: loop0: ino=5, "/" directory corrupted [ 150.232723][ T7499] loop1: detected capacity change from 0 to 256 [ 150.283809][ T7499] FAT-fs (loop1): Directory bread(block 64) failed [ 150.293997][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 150.300371][ T7499] FAT-fs (loop1): Directory bread(block 65) failed [ 150.309655][ T7499] FAT-fs (loop1): Directory bread(block 66) failed [ 150.330420][ T7499] FAT-fs (loop1): Directory bread(block 67) failed [ 150.346011][ T7499] FAT-fs (loop1): Directory bread(block 68) failed [ 150.360369][ T7499] FAT-fs (loop1): Directory bread(block 69) failed [ 150.368780][ T7499] FAT-fs (loop1): Directory bread(block 70) failed [ 150.386090][ T7499] FAT-fs (loop1): Directory bread(block 71) failed [ 150.396324][ T7499] FAT-fs (loop1): Directory bread(block 72) failed [ 150.410497][ T7499] FAT-fs (loop1): Directory bread(block 73) failed [ 150.477189][ T7508] loop3: detected capacity change from 0 to 1024 [ 150.553556][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.595224][ T7508] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.709376][ T7508] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: comm syz.3.590: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.751845][ T7508] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 150.780986][ T7508] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.780986][ T7508] [ 150.809894][ T7514] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: comm syz.3.590: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.838344][ T27] audit: type=1800 audit(1763273790.816:85): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.590" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 150.899903][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.189213][ T7513] loop0: detected capacity change from 0 to 40427 [ 151.226429][ T7521] loop1: detected capacity change from 0 to 2048 [ 151.236000][ T7513] F2FS-fs (loop0): invalid crc value [ 151.263270][ T7513] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.285233][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.401576][ T7513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.622097][ T7533] loop2: detected capacity change from 0 to 8 [ 151.871300][ T6386] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.013623][ T7535] loop1: detected capacity change from 0 to 4096 [ 152.063978][ T7535] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 152.083883][ T7535] ntfs3: loop1: Failed to load $Extend (-22). [ 152.090035][ T7535] ntfs3: loop1: Failed to initialize $Extend. [ 152.171808][ T7535] ntfs3: loop1: ino=5, "/" directory corrupted [ 152.815182][ T7541] loop2: detected capacity change from 0 to 32768 [ 152.861611][ T7541] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 153.195048][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 153.244159][ T7554] loop1: detected capacity change from 0 to 32768 [ 153.308069][ T7554] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 153.411466][ T7554] XFS (loop1): Ending clean mount [ 153.439689][ T7554] XFS (loop1): Quotacheck needed: Please wait. [ 153.455095][ T7553] loop0: detected capacity change from 0 to 32768 [ 153.529524][ T7554] XFS (loop1): Quotacheck: Done. [ 153.537376][ T7553] JBD2: Ignoring recovery information on journal [ 153.574608][ T7551] loop3: detected capacity change from 0 to 32768 [ 153.592589][ T8] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x28 [ 153.640516][ T8] XFS (loop1): Unmount and run xfs_repair [ 153.648055][ T8] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 153.669134][ T8] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 153.687460][ T7553] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 153.688820][ T8] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 153.707332][ T7567] loop2: detected capacity change from 0 to 2048 [ 153.714252][ T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 153.727226][ T7551] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 153.727226][ T7551] [ 153.738058][ T7551] ERROR: (device loop3): remounting filesystem as read-only [ 153.741850][ T8] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 153.752178][ T7551] jfs_mkdir: dtInsert returned -EIO [ 153.760589][ T8] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.779664][ T7551] ERROR: (device loop3): jfs_mkdir: [ 153.779664][ T7551] [ 153.780229][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.803945][ T7567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.824291][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.842316][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 153.855457][ T7554] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x28 len 8 error 74 [ 153.856125][ T7551] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 153.856125][ T7551] [ 153.888249][ T7554] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 153.925572][ T7554] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 154.013223][ T6386] ocfs2: Unmounting device (7,0) on (node local) [ 154.516677][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.988941][ T7582] loop1: detected capacity change from 0 to 512 [ 155.006702][ T7582] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.620: inode has both inline data and extents flags [ 155.026738][ T7582] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.620: couldn't read orphan inode 15 (err -117) [ 155.043724][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.091002][ T7574] loop0: detected capacity change from 0 to 32768 [ 155.111942][ T7574] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.609 (7574) [ 155.164557][ T7574] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.186455][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.211436][ T7574] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.220208][ T7574] BTRFS info (device loop0): setting nodatacow, compression disabled [ 155.230347][ T7574] BTRFS info (device loop0): force clearing of disk cache [ 155.237531][ T7574] BTRFS info (device loop0): enabling ssd optimizations [ 155.270358][ T7574] BTRFS info (device loop0): using spread ssd allocation scheme [ 155.287077][ T7574] BTRFS info (device loop0): turning off barriers [ 155.300439][ T7574] BTRFS info (device loop0): disabling free space tree [ 155.307767][ T7574] BTRFS info (device loop0): not using ssd optimizations [ 155.330315][ T7574] BTRFS info (device loop0): not using spread ssd allocation scheme [ 155.406378][ T7574] BTRFS info (device loop0): rebuilding free space tree [ 155.435408][ T7574] BTRFS info (device loop0): disabling free space tree [ 155.442611][ T7574] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.452392][ T7574] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.583736][ T6386] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.605714][ T7579] loop2: detected capacity change from 0 to 40427 [ 155.624727][ T7579] F2FS-fs (loop2): invalid crc value [ 155.671993][ T7579] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.789237][ T7579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.929451][ T5793] bio_check_eod: 422 callbacks suppressed [ 155.929472][ T5793] syz-executor: attempt to access beyond end of device [ 155.929472][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.956336][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 156.456723][ T7626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.263466][ T7629] loop1: detected capacity change from 0 to 32768 [ 157.345361][ T27] audit: type=1800 audit(1763273797.326:86): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.625" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 157.357333][ T7632] loop2: detected capacity change from 0 to 32768 [ 157.400120][ T7632] JBD2: Ignoring recovery information on journal [ 157.400513][ T7629] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 157.400513][ T7629] [ 157.490945][ T7632] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.781004][ T5793] ocfs2: Unmounting device (7,2) on (node local) [ 157.855320][ T7634] loop0: detected capacity change from 0 to 32768 [ 157.907969][ T7634] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 157.990017][ T7634] XFS (loop0): Ending clean mount [ 158.048520][ T7636] loop3: detected capacity change from 0 to 40427 [ 158.083825][ T7636] F2FS-fs (loop3): invalid crc value [ 158.111883][ T7636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.164118][ T6386] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.221212][ T7636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.665796][ T5792] syz-executor: attempt to access beyond end of device [ 158.665796][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.690833][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 158.868882][ T7648] loop1: detected capacity change from 0 to 32768 [ 158.914385][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 158.914385][ T7648] [ 158.952698][ T7648] xtLookup: xtSearch returned -5 [ 158.957712][ T7648] free_index: error reading directory table [ 158.970339][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 158.970339][ T7648] [ 158.999886][ T7648] xtLookup: xtSearch returned -5 [ 159.015705][ T7648] free_index: error reading directory table [ 159.030319][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.030319][ T7648] [ 159.059958][ T7648] xtLookup: xtSearch returned -5 [ 159.086582][ T7648] free_index: error reading directory table [ 159.110492][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.110492][ T7648] [ 159.140382][ T7648] xtLookup: xtSearch returned -5 [ 159.145508][ T7648] free_index: error reading directory table [ 159.151636][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.151636][ T7648] [ 159.180385][ T7648] xtLookup: xtSearch returned -5 [ 159.190643][ T7648] free_index: error reading directory table [ 159.206818][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.206818][ T7648] [ 159.230300][ T7648] xtLookup: xtSearch returned -5 [ 159.235305][ T7648] add_index: get/read_metapage failed! [ 159.260535][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.260535][ T7648] [ 159.280698][ T7648] xtLookup: xtSearch returned -5 [ 159.286007][ T7648] free_index: error reading directory table [ 159.300504][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.300504][ T7648] [ 159.320414][ T7648] xtLookup: xtSearch returned -5 [ 159.325608][ T7648] free_index: error reading directory table [ 159.336425][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.336425][ T7648] [ 159.353773][ T7648] xtLookup: xtSearch returned -5 [ 159.358771][ T7648] free_index: error reading directory table [ 159.369610][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.369610][ T7648] [ 159.379911][ T7648] xtLookup: xtSearch returned -5 [ 159.385733][ T7648] free_index: error reading directory table [ 159.410406][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.410406][ T7648] [ 159.420616][ T7648] xtLookup: xtSearch returned -5 [ 159.420632][ T7648] free_index: error reading directory table [ 159.422596][ T7648] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 159.422596][ T7648] [ 159.448023][ T7648] xtLookup: xtSearch returned -5 [ 159.453120][ T7648] add_index: get/read_metapage failed! [ 160.394706][ T7696] loop0: detected capacity change from 0 to 2048 [ 160.414284][ T7696] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.437111][ T7696] NILFS (loop0): mounting unchecked fs [ 160.477257][ T7696] NILFS (loop0): recovery complete [ 160.490506][ T7701] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.565273][ T5790] Bluetooth: hci2: adv larger than maximum supported [ 160.739780][ T7705] loop3: detected capacity change from 0 to 1024 [ 160.746613][ T7692] loop2: detected capacity change from 0 to 32768 [ 160.748285][ T7692] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.646 (7692) [ 160.763785][ T7705] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.787689][ T7705] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.800927][ T7705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.809790][ T7692] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.830635][ T7692] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 160.839353][ T7692] BTRFS info (device loop2): setting nodatacow, compression disabled [ 160.872555][ T7692] BTRFS info (device loop2): force clearing of disk cache [ 160.881281][ T7692] BTRFS info (device loop2): enabling ssd optimizations [ 160.888693][ T7692] BTRFS info (device loop2): using spread ssd allocation scheme [ 160.912636][ T7705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.936365][ T7692] BTRFS info (device loop2): turning off barriers [ 160.951652][ T7692] BTRFS info (device loop2): disabling free space tree [ 160.971602][ T7692] BTRFS info (device loop2): not using ssd optimizations [ 161.004967][ T7692] BTRFS info (device loop2): not using spread ssd allocation scheme [ 161.038146][ T7716] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #2: comm syz.3.653: corrupted in-inode xattr: bad e_name length [ 161.133475][ T7692] BTRFS info (device loop2): rebuilding free space tree [ 161.198542][ T7692] BTRFS info (device loop2): disabling free space tree [ 161.230433][ T7692] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 161.260400][ T7692] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.306600][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.428256][ T7711] loop1: detected capacity change from 0 to 32768 [ 161.480928][ T5793] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.482276][ T7711] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.702985][ T7711] XFS (loop1): Ending clean mount [ 161.732263][ T7711] XFS (loop1): Quotacheck needed: Please wait. [ 161.760671][ T5853] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.839414][ T7711] XFS (loop1): Quotacheck: Done. [ 161.972693][ T5853] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.992989][ T5853] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.015278][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.030809][ T5853] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.041242][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.055630][ T7741] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.067456][ T5853] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 162.332762][ T5853] usb 1-1: USB disconnect, device number 4 [ 162.428543][ T7747] loop3: detected capacity change from 0 to 40427 [ 162.468265][ T7747] F2FS-fs (loop3): invalid crc value [ 162.490318][ T7747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.558238][ T7747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.673003][ T7765] input: syz1 as /devices/virtual/input/input13 [ 162.817475][ T5792] syz-executor: attempt to access beyond end of device [ 162.817475][ T5792] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.861225][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 163.190630][ T5854] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.400420][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 163.409710][ T5854] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 163.432430][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.462853][ T5854] usb 2-1: config 0 descriptor?? [ 163.697326][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 163.731418][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.751247][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 163.780451][ T5854] usb 2-1: media controller created [ 163.836946][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.873031][ T7794] loop3: detected capacity change from 0 to 256 [ 163.907576][ T7772] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 163.924133][ T5854] az6027: usb out operation failed. (-71) [ 163.940451][ T5854] az6027: usb out operation failed. (-71) [ 163.946343][ T5854] stb0899_attach: Driver disabled by Kconfig [ 163.960344][ T5854] az6027: no front-end attached [ 163.960344][ T5854] [ 163.970353][ T5854] az6027: usb out operation failed. (-71) [ 163.980523][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 164.006610][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 164.033926][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 164.052539][ T5854] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 164.100572][ T5854] usb 2-1: USB disconnect, device number 8 [ 164.171510][ T5854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 164.509386][ T7790] loop0: detected capacity change from 0 to 40427 [ 164.539058][ T7790] F2FS-fs (loop0): invalid crc value [ 164.610435][ T7790] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.719261][ T7790] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.179689][ T6386] syz-executor: attempt to access beyond end of device [ 165.179689][ T6386] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.221730][ T6386] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 166.110484][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 166.716571][ T7821] loop3: detected capacity change from 0 to 32768 [ 166.784185][ T7821] gfs2: fsid=noquota: Trying to join cluster "lock_nolock", "noquota" [ 166.820609][ T7821] gfs2: fsid=noquota: Now mounting FS (format 0)... [ 166.915908][ T7821] gfs2: fsid=noquota.s: journal 0 mapped with 5 extents in 0ms [ 167.075936][ T7821] gfs2: fsid=noquota.s: first mount done, others may mount [ 167.501076][ T7846] loop0: detected capacity change from 0 to 1024 [ 167.720781][ T7846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.785812][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 167.893346][ T7846] EXT4-fs error (device loop0): ext4_xattr_inode_iget:444: inode #19: comm syz.0.703: missing EA_INODE flag [ 167.936378][ T7846] EXT4-fs error (device loop0): ext4_xattr_inode_iget:449: comm syz.0.703: error while reading EA inode 19 err=-117 [ 168.027695][ T7855] serio: Serial port ttyS3 [ 168.085987][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.294506][ T7865] mmap: syz.3.709 (7865) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.401928][ T7867] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 168.462780][ T7869] loop1: detected capacity change from 0 to 2048 [ 168.484089][ T7869] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.502101][ T7869] NILFS (loop1): mounting unchecked fs [ 168.552567][ T7869] NILFS (loop1): recovery complete [ 168.576160][ T7873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.186626][ T7782] Set syz1 is full, maxelem 65536 reached [ 169.296165][ T7888] loop2: detected capacity change from 0 to 512 [ 169.316940][ T7888] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.720: inode has both inline data and extents flags [ 169.336343][ T7888] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.720: couldn't read orphan inode 15 (err -117) [ 169.350112][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.420061][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.975846][ T7913] can0: slcan on ttyS3. [ 170.034008][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.732'. [ 170.039674][ T7919] loop1: detected capacity change from 0 to 256 [ 170.051824][ T7919] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.055248][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.732'. [ 170.062704][ T7919] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 170.068350][ T7919] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 170.073402][ T7913] can0 (unregistered): slcan off ttyS3. [ 170.088654][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 170.258095][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 170.271865][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 170.860528][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 170.888644][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 171.272087][ T7944] can0: slcan on ttyS3. [ 171.351836][ T7944] can0 (unregistered): slcan off ttyS3. [ 171.443292][ T7937] loop2: detected capacity change from 0 to 32768 [ 171.470832][ T7937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.741 (7937) [ 171.510413][ T7937] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.526677][ T7937] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 171.547868][ T7937] BTRFS info (device loop2): using free space tree [ 171.574942][ T7955] loop0: detected capacity change from 0 to 2048 [ 171.635607][ T7955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.663799][ T7937] BTRFS info (device loop2): enabling ssd optimizations [ 171.690473][ T7937] BTRFS info (device loop2): auto enabling async discard [ 171.728266][ T7955] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.747: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 171.800501][ T7955] EXT4-fs (loop0): Remounting filesystem read-only [ 171.878722][ T5793] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.891807][ T6386] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.269665][ T7975] loop1: detected capacity change from 0 to 32768 [ 172.332765][ T7975] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.437844][ T7975] XFS (loop1): Ending clean mount [ 172.520650][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 172.590419][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 172.637642][ T7982] loop3: detected capacity change from 0 to 40427 [ 172.663934][ T7982] F2FS-fs (loop3): invalid crc value [ 172.666022][ T5788] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.689738][ T7982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.808255][ T7982] F2FS-fs (loop3): Start checkpoint disabled! [ 172.850429][ T7982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 173.135473][ T8004] serio: Serial port ttyS3 [ 173.236273][ T7993] loop0: detected capacity change from 0 to 32768 [ 173.249858][ T7993] XFS: ikeep mount option is deprecated. [ 173.311406][ T7993] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.332798][ T41] kworker/u4:2: attempt to access beyond end of device [ 173.332798][ T41] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 173.367933][ T41] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.397426][ T41] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.494542][ T7993] XFS (loop0): Ending clean mount [ 173.525671][ T7993] XFS (loop0): Quotacheck needed: Please wait. [ 173.548795][ T8002] loop2: detected capacity change from 0 to 32768 [ 173.604946][ T7993] XFS (loop0): Quotacheck: Done. [ 173.614043][ T8002] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.707661][ T8002] XFS (loop2): Ending clean mount [ 173.760730][ T6386] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.977835][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.304845][ T8035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 174.344990][ T8035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.767'. [ 175.090840][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 175.098327][ T8039] loop0: detected capacity change from 0 to 32768 [ 175.179883][ T8039] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.289756][ T8039] XFS (loop0): Ending clean mount [ 175.304238][ T8039] XFS (loop0): Quotacheck needed: Please wait. [ 175.382836][ T8039] XFS (loop0): Quotacheck: Done. [ 175.397167][ T8044] loop2: detected capacity change from 0 to 32768 [ 175.427943][ T8044] gfs2: fsid=noquota: Trying to join cluster "lock_nolock", "noquota" [ 175.458960][ T8044] gfs2: fsid=noquota: Now mounting FS (format 0)... [ 175.472720][ T8044] gfs2: fsid=noquota.s: journal 0 mapped with 5 extents in 0ms [ 175.541939][ T8044] gfs2: fsid=noquota.s: first mount done, others may mount [ 175.631067][ T6386] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.151958][ T786] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 176.178032][ T786] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.533501][ T8085] loop1: detected capacity change from 0 to 512 [ 176.553907][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'. [ 176.584367][ T8085] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.784: inode has both inline data and extents flags [ 176.635953][ T8085] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.784: couldn't read orphan inode 15 (err -117) [ 176.660482][ T8085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.739770][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.898955][ T8096] loop2: detected capacity change from 0 to 2048 [ 176.943732][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.962937][ T8096] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.035742][ T8104] program syz.1.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.316820][ T8119] loop3: detected capacity change from 0 to 256 [ 177.357910][ T8119] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 178.029334][ T1122] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 345: padding at end of block bitmap is not set [ 178.072552][ T1122] EXT4-fs (loop2): Remounting filesystem read-only [ 178.084503][ T1303] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4868: inode #15: block 3: len 13: ext4_ext_map_blocks returned -5 [ 178.322412][ T8123] loop3: detected capacity change from 0 to 32768 [ 178.344339][ T8123] XFS: ikeep mount option is deprecated. [ 178.359965][ T8137] program syz.0.805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.390152][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.451993][ T8123] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.618910][ T8123] XFS (loop3): Ending clean mount [ 178.626723][ T8123] XFS (loop3): Quotacheck needed: Please wait. [ 178.679578][ T8123] XFS (loop3): Quotacheck: Done. [ 178.805826][ T5792] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.854119][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.078304][ T5873] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.096231][ T8167] loop0: detected capacity change from 0 to 128 [ 179.107664][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.138580][ T5873] usb 2-1: config 0 descriptor?? [ 179.140812][ T8171] loop3: detected capacity change from 0 to 2048 [ 179.153006][ T5873] cp210x 2-1:0.0: cp210x converter detected [ 179.162270][ T8167] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.176010][ T8171] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 179.179528][ T8167] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.211338][ T8175] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.217679][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.299957][ T6386] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.393762][ T8178] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 179.402251][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 179.569435][ T5873] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 179.586059][ T5873] usb 2-1: cp210x converter now attached to ttyUSB0 [ 179.618085][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 179.782242][ T8196] loop3: detected capacity change from 0 to 256 [ 179.784198][ T9] usb 2-1: USB disconnect, device number 9 [ 179.801203][ T8196] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 179.806870][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.833602][ T9] cp210x 2-1:0.0: device disconnected [ 180.163940][ T8211] loop3: detected capacity change from 0 to 512 [ 180.173393][ T8211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.197546][ T8211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 180.211190][ T8211] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.257278][ T8211] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 180.349730][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 180.597577][ T8229] "syz.3.843" (8229) uses obsolete ecb(arc4) skcipher [ 180.717355][ T8235] loop1: detected capacity change from 0 to 2048 [ 180.792898][ T8235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.852063][ T8235] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.069875][ T5833] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 181.095885][ T5833] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.219276][ T8233] loop2: detected capacity change from 0 to 40427 [ 181.238624][ T8233] F2FS-fs (loop2): invalid crc value [ 181.255048][ T8233] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.388116][ T8233] F2FS-fs (loop2): Start checkpoint disabled! [ 181.410481][ T8233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 181.696606][ T8255] loop3: detected capacity change from 0 to 128 [ 181.767955][ T1303] kworker/u4:7: attempt to access beyond end of device [ 181.767955][ T1303] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.799608][ T1303] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.807347][ T1122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 345: padding at end of block bitmap is not set [ 181.813308][ T1303] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 181.839892][ T1122] EXT4-fs (loop1): Remounting filesystem read-only [ 181.880560][ T41] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4868: inode #15: block 3: len 13: ext4_ext_map_blocks returned -5 [ 181.889032][ T8257] "syz.0.855" (8257) uses obsolete ecb(arc4) skcipher [ 182.165775][ T1122] wlan1: Trigger new scan to find an IBSS to join [ 182.166483][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.172409][ T41] wlan1: Trigger new scan to find an IBSS to join [ 182.241404][ T1122] ------------[ cut here ]------------ [ 182.247578][ T1122] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 182.258894][ T1122] WARNING: CPU: 1 PID: 1122 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 182.269006][ T1122] Modules linked in: [ 182.272978][ T1122] CPU: 1 PID: 1122 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 182.280607][ T1122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.290732][ T1122] Workqueue: events_unbound cfg80211_wiphy_work [ 182.297043][ T1122] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 182.303368][ T1122] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 9f be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 55 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 182.323160][ T1122] RSP: 0018:ffffc9000469f380 EFLAGS: 00010246 [ 182.329276][ T1122] RAX: 5676b23de67a5900 RBX: 000000000000000c RCX: ffff88802354bc00 [ 182.337421][ T1122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 182.345557][ T1122] RBP: 0000000000000084 R08: ffffc9000469ef87 R09: 1ffff920008d3df0 [ 182.353613][ T1122] R10: dffffc0000000000 R11: fffff520008d3df1 R12: 0000000000000040 [ 182.361751][ T1122] R13: dffffc0000000000 R14: ffff88801efb3358 R15: ffff88802c7b8028 [ 182.369860][ T1122] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 182.378875][ T1122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.385537][ T1122] CR2: 0000555563dde608 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 182.393793][ T1122] Call Trace: [ 182.397111][ T1122] [ 182.400098][ T1122] rate_control_send_low+0x194/0x790 [ 182.405480][ T1122] rate_control_get_rate+0x20b/0x5c0 [ 182.410872][ T1122] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 182.416653][ T1122] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 182.422720][ T1122] ? __lock_acquire+0x1260/0x7c80 [ 182.427807][ T1122] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 182.433984][ T1122] invoke_tx_handlers_late+0xb6/0x1810 [ 182.439505][ T1122] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 182.445410][ T1122] ieee80211_tx+0x2ad/0x420 [ 182.449970][ T1122] ? ieee80211_skb_resize+0x630/0x630 [ 182.455474][ T1122] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 182.461027][ T1122] ? __bpf_trace_tasklet+0x140/0x140 [ 182.466365][ T1122] ? ieee80211_xmit+0x310/0x3f0 [ 182.471326][ T1122] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 182.477444][ T1122] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 182.483341][ T1122] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 182.489716][ T1122] ieee80211_scan_state_send_probe+0x560/0x930 [ 182.495987][ T1122] ieee80211_scan_work+0x4e8/0x1c30 [ 182.501306][ T1122] cfg80211_wiphy_work+0x225/0x260 [ 182.506482][ T1122] ? process_scheduled_works+0x957/0x15b0 [ 182.512299][ T1122] process_scheduled_works+0xa45/0x15b0 [ 182.517941][ T1122] ? assign_work+0x400/0x400 [ 182.522620][ T1122] ? assign_work+0x39e/0x400 [ 182.527257][ T1122] worker_thread+0xa55/0xfc0 [ 182.531935][ T1122] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 182.537875][ T1122] ? _raw_spin_unlock+0x40/0x40 [ 182.542902][ T1122] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 182.548977][ T1122] kthread+0x2fa/0x390 [ 182.553125][ T1122] ? pr_cont_work+0x560/0x560 [ 182.557848][ T1122] ? kthread_blkcg+0xd0/0xd0 [ 182.562508][ T1122] ret_from_fork+0x48/0x80 [ 182.566973][ T1122] ? kthread_blkcg+0xd0/0xd0 [ 182.571629][ T1122] ret_from_fork_asm+0x11/0x20 [ 182.576461][ T1122] [ 182.579527][ T1122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.586899][ T1122] CPU: 1 PID: 1122 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 182.594479][ T1122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.604592][ T1122] Workqueue: events_unbound cfg80211_wiphy_work [ 182.610892][ T1122] Call Trace: [ 182.614304][ T1122] [ 182.617280][ T1122] dump_stack_lvl+0x16c/0x230 [ 182.622090][ T1122] ? show_regs_print_info+0x20/0x20 [ 182.627341][ T1122] ? load_image+0x3b0/0x3b0 [ 182.631898][ T1122] panic+0x2c0/0x710 [ 182.635863][ T1122] ? bpf_jit_dump+0xd0/0xd0 [ 182.640443][ T1122] ? ret_from_fork_asm+0x11/0x20 [ 182.645430][ T1122] __warn+0x2e0/0x470 [ 182.649441][ T1122] ? __rate_control_send_low+0x635/0x880 [ 182.655114][ T1122] ? __rate_control_send_low+0x635/0x880 [ 182.660779][ T1122] report_bug+0x2be/0x4f0 [ 182.665147][ T1122] ? __rate_control_send_low+0x635/0x880 [ 182.670822][ T1122] ? __rate_control_send_low+0x635/0x880 [ 182.676492][ T1122] ? __rate_control_send_low+0x637/0x880 [ 182.682170][ T1122] handle_bug+0xcf/0x120 [ 182.686447][ T1122] exc_invalid_op+0x1a/0x50 [ 182.691063][ T1122] asm_exc_invalid_op+0x1a/0x20 [ 182.695934][ T1122] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 182.702213][ T1122] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 9f be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 cb 55 69 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 182.721951][ T1122] RSP: 0018:ffffc9000469f380 EFLAGS: 00010246 [ 182.728068][ T1122] RAX: 5676b23de67a5900 RBX: 000000000000000c RCX: ffff88802354bc00 [ 182.736443][ T1122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 182.744441][ T1122] RBP: 0000000000000084 R08: ffffc9000469ef87 R09: 1ffff920008d3df0 [ 182.752557][ T1122] R10: dffffc0000000000 R11: fffff520008d3df1 R12: 0000000000000040 [ 182.760561][ T1122] R13: dffffc0000000000 R14: ffff88801efb3358 R15: ffff88802c7b8028 [ 182.768572][ T1122] rate_control_send_low+0x194/0x790 [ 182.773864][ T1122] rate_control_get_rate+0x20b/0x5c0 [ 182.779167][ T1122] ieee80211_tx_h_rate_ctrl+0xb2d/0x1770 [ 182.784810][ T1122] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 182.790804][ T1122] ? __lock_acquire+0x1260/0x7c80 [ 182.795855][ T1122] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 182.801948][ T1122] invoke_tx_handlers_late+0xb6/0x1810 [ 182.807530][ T1122] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 182.813380][ T1122] ieee80211_tx+0x2ad/0x420 [ 182.817991][ T1122] ? ieee80211_skb_resize+0x630/0x630 [ 182.823377][ T1122] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 182.828843][ T1122] ? __bpf_trace_tasklet+0x140/0x140 [ 182.834130][ T1122] ? ieee80211_xmit+0x310/0x3f0 [ 182.839164][ T1122] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 182.845154][ T1122] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 182.851069][ T1122] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 182.857418][ T1122] ieee80211_scan_state_send_probe+0x560/0x930 [ 182.863584][ T1122] ieee80211_scan_work+0x4e8/0x1c30 [ 182.868810][ T1122] cfg80211_wiphy_work+0x225/0x260 [ 182.873946][ T1122] ? process_scheduled_works+0x957/0x15b0 [ 182.879675][ T1122] process_scheduled_works+0xa45/0x15b0 [ 182.885246][ T1122] ? assign_work+0x400/0x400 [ 182.889847][ T1122] ? assign_work+0x39e/0x400 [ 182.894444][ T1122] worker_thread+0xa55/0xfc0 [ 182.899040][ T1122] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 182.904942][ T1122] ? _raw_spin_unlock+0x40/0x40 [ 182.909802][ T1122] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 182.915707][ T1122] kthread+0x2fa/0x390 [ 182.919796][ T1122] ? pr_cont_work+0x560/0x560 [ 182.924488][ T1122] ? kthread_blkcg+0xd0/0xd0 [ 182.929281][ T1122] ret_from_fork+0x48/0x80 [ 182.933707][ T1122] ? kthread_blkcg+0xd0/0xd0 [ 182.938315][ T1122] ret_from_fork_asm+0x11/0x20 [ 182.943120][ T1122] [ 182.946446][ T1122] Kernel Offset: disabled [ 182.950887][ T1122] Rebooting in 86400 seconds..