last executing test programs: 5.245941425s ago: executing program 0 (id=1048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 5.182613511s ago: executing program 0 (id=1050): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.114068566s ago: executing program 0 (id=1053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="00001e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.038482428s ago: executing program 4 (id=1074): openat$urandom(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001640), 0x2, 0x0) write$nbd(r0, 0x0, 0x1010) 3.972003634s ago: executing program 4 (id=1075): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x2) 3.817314697s ago: executing program 4 (id=1078): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="017bd269f7dd3a93fa412d09c2790257816e859e38befc7634f092626c62b45f123b8f0f84059ba4351abe0bfd3933e564c513028b41a418555d5e4c744478e7ca03d24a2c1b0f248513f8f9cfc324431f5d5a6999ad47b61152edad98c141cf359dfcf021d4e8a18166aa7767e69420c5308149bcddd4a62a31d8f902a24645ef50e8395e891793f46aaa025a260c8d784a1ec9233755d12803582f0700000000000000df6c634447f23d2cd9e65d3461d3a09b93f7318e486e862f288bb7ce21e0df72e59ed16f3796c260b5be486b21c5d7cf21996406b4b3240f4255406a009a12c844c2d35cefba99e2b26b01a1347225c1a8cb9f6630d930847f193662a5eea4daf62aeb29324a86f8ec6367bf3105d3529316d3e044bbeedf80c3b301686b44cd51c9ff53690e9269caf72a039b5e32b3e543b8fbba25a1eaf60c3e1da6becef1750a9e8d991ef03ce3d14d85d69f6ff54465fba8ad4aef62561284fdc9cba6fea9a38fb5244e7729c047949660af09fa91fd17928f55f6bed589cdf6e6dde72206336961da8ce2c100ff90ac4a598e9846bc2b868a640021bec390b7f460d14330beadd5458a0352cde0d6c8bc1655da9121090c98cdf98438ab1baa3bbbb60db2436ae26fad78755d3df25b0f03c4c8f39f27a668aa45aa2953ebd6a34233a386f3d63a07f7e491a2db98af12cc6fc814e8a75efcf90c0e2a56a833d53b086be1ec10efe3c7d46abfedb36fc2fc75ebbdabcd356e489fe87dbf67bfe8de6d24d4db48c65da860ccf9f9b2f8b1fc8c8d2e7293a465ea21757521a1b0677f50901ea19c53fd3a8ca59fbc328e69b0d064746a000000a1ed7631a64c8ecb86645f66b4efc49b74ec93f4897a56c7dbb42f094e6685051a0d42bed7598cc30ffc08bc2db500c5e5f9d51fc89d25f3a202b0abc67dd7926f915d61c24e031636d984759a36ba0b3a06151764621bdbe91b510a6064aa51e0a73317ccb02dbb89c701eac52445561f7355071ef71ae5427f612f8620f6b9a80c440af2f162"], 0x41, 0x2f5, &(0x7f0000000b40)="$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") dup(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003020000202505a1a440000000010109026400010100000009040000120206000005240600000524"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 1.983750372s ago: executing program 4 (id=1092): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.982990312s ago: executing program 0 (id=1102): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 1.982639752s ago: executing program 1 (id=1093): unshare(0x20400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x76) 1.939154796s ago: executing program 0 (id=1096): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.822342876s ago: executing program 1 (id=1098): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed}, 0xe) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0), 0x4) 1.128620994s ago: executing program 4 (id=1110): syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./bus\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5d8e, &(0x7f000000dd80)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 978.531717ms ago: executing program 3 (id=1112): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 936.41325ms ago: executing program 1 (id=1114): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000000", 0x1c) 871.359826ms ago: executing program 3 (id=1115): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180000005a00010400000040000000000800008004"], 0x18}], 0x1}, 0x0) 782.397934ms ago: executing program 2 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c0800094000000002"], 0xc4}}, 0x0) 776.123864ms ago: executing program 3 (id=1117): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x400) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 726.380059ms ago: executing program 2 (id=1118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0xf}, 0x1) 669.379333ms ago: executing program 3 (id=1119): unshare(0x22020600) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000940)="$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") 602.343739ms ago: executing program 2 (id=1120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020526c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 295.646585ms ago: executing program 3 (id=1121): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="9dace7489e9965c49858a59fa4b7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 293.855685ms ago: executing program 2 (id=1131): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) 226.524291ms ago: executing program 1 (id=1122): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x2) fadvise64(r0, 0x0, 0x0, 0x0) 183.312095ms ago: executing program 2 (id=1123): r0 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioprio_set$pid(0x1, r0, 0x0) 137.465438ms ago: executing program 0 (id=1124): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000012003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f9001cffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x3, 0x10, 0x10, &(0x7f00000002c0)="0000000014000000", &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 125.1788ms ago: executing program 3 (id=1125): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x100, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000400), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 119.02452ms ago: executing program 1 (id=1126): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 78.663003ms ago: executing program 2 (id=1127): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x8100, r1}, 0x14) 689.35µs ago: executing program 4 (id=1128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)) 0s ago: executing program 1 (id=1129): socket$inet(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 88.032917][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.065576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.072048][ T4318] loop0: detected capacity change from 0 to 32768 [ 88.075103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.212312][ T3558] usb 5-1: Using ep0 maxpacket: 16 [ 88.226271][ T4318] jfs_strtoUCS: char2uni returned -22. [ 88.267833][ T4318] charset = euc-jp, char = 0xd4 [ 88.342509][ T3558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.370032][ T3558] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.418749][ T3558] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 88.439296][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.444469][ T4321] loop2: detected capacity change from 0 to 32768 [ 88.477894][ T4002] Bluetooth: hci1: command 0x040f tx timeout [ 88.486110][ T3558] usb 5-1: config 0 descriptor?? [ 88.523968][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.561473][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.628722][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.660683][ T4321] XFS (loop2): Mounting V5 Filesystem [ 88.681766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.733665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.793412][ T4196] device veth0_vlan entered promiscuous mode [ 88.800340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.888448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.915733][ T4321] XFS (loop2): Ending clean mount [ 88.949866][ T4196] device veth1_vlan entered promiscuous mode [ 88.963652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.975498][ T3558] uclogic 0003:2179:0053.0003: item fetching failed at offset 2/5 [ 88.984134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.012651][ T3558] uclogic 0003:2179:0053.0003: parse failed [ 89.019344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.032155][ T3558] uclogic: probe of 0003:2179:0053.0003 failed with error -22 [ 89.085505][ T3575] XFS (loop2): Unmounting Filesystem [ 89.092669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.101628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.143135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.155452][ T4196] device veth0_macvtap entered promiscuous mode [ 89.179549][ T4196] device veth1_macvtap entered promiscuous mode [ 89.186341][ T3558] usb 5-1: USB disconnect, device number 2 [ 89.278159][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.306017][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.354063][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.375840][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.397723][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.432163][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.456648][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.496895][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.511508][ T4370] loop1: detected capacity change from 0 to 32768 [ 89.521687][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.549831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.574501][ T4370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.212 (4370) [ 89.593752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.614523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.687030][ T4370] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 89.701019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.756446][ T4370] BTRFS info (device loop1): using free space tree [ 89.770907][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.786543][ T4370] BTRFS info (device loop1): has skinny extents [ 89.802965][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.850245][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.850269][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.850281][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.850296][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.850306][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.850320][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.857189][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.860893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.861591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.884297][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884335][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884365][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884394][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.253916][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.253984][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.258177][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.308906][ T4370] BTRFS info (device loop1): enabling ssd optimizations [ 90.532483][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.532592][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.535638][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.579203][ T4379] loop0: detected capacity change from 0 to 32768 [ 90.771804][ T4379] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.811233][ T3999] Bluetooth: hci1: command 0x0419 tx timeout [ 90.892200][ T26] audit: type=1326 audit(1728625922.560:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4429 comm="syz.2.219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66c7435ff9 code=0x0 [ 91.046911][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 91.060992][ T4438] loop3: detected capacity change from 0 to 512 [ 91.283426][ T4438] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.174: invalid indirect mapped block 256 (level 2) [ 91.311589][ T4438] EXT4-fs (loop3): 2 truncates cleaned up [ 91.348916][ T4438] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.404687][ T4447] futex_wake_op: syz.1.217 tries to shift op by 144; fix this program [ 91.775105][ T2986] kernel write not supported for file /dsp (pid: 2986 comm: kworker/1:3) [ 91.928662][ T4469] loop1: detected capacity change from 0 to 512 [ 91.962247][ T3558] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.033056][ T4469] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.046797][ T4437] loop4: detected capacity change from 0 to 40427 [ 92.069199][ T4469] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz.1.231: iget: bad i_size value: -6917529027641081756 [ 92.084112][ T4469] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.231: couldn't read orphan inode 17 (err -117) [ 92.099080][ T4469] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.103720][ T4437] F2FS-fs (loop4): invalid crc value [ 92.129958][ T4469] Quota error (device loop1): find_tree_dqentry: Getting block too big (144 >= 6) [ 92.142805][ T4469] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 92.154533][ T4469] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.231: Failed to acquire dquot type 1 [ 92.171592][ T4437] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.233007][ T3558] usb 4-1: Using ep0 maxpacket: 16 [ 92.243375][ T4437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.257937][ T4437] F2FS-fs (loop4): Can't flush 1 in 0 for segs_per_sec 1 != 1 [ 92.398979][ T3558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.410731][ T3558] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 92.431840][ T3558] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 92.441222][ T3558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.472409][ T3558] usb 4-1: config 0 descriptor?? [ 92.944215][ T3558] ortek 0003:1223:3F07.0004: unknown main item tag 0x6 [ 92.951270][ T3558] ortek 0003:1223:3F07.0004: report_id 29495 is invalid [ 92.960972][ T3558] ortek 0003:1223:3F07.0004: item 0 2 1 8 parsing failed [ 92.968510][ T3558] ortek: probe of 0003:1223:3F07.0004 failed with error -22 [ 93.156008][ T4004] usb 4-1: USB disconnect, device number 2 [ 93.695632][ T4485] netlink: 44 bytes leftover after parsing attributes in process `syz.1.234'. [ 93.876481][ T4497] loop0: detected capacity change from 0 to 64 [ 93.978429][ T4503] loop4: detected capacity change from 0 to 128 [ 94.392421][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.656895][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 94.661471][ T4491] loop3: detected capacity change from 0 to 32768 [ 94.782449][ T21] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 94.790547][ T21] usb 3-1: config 0 has no interface number 0 [ 94.798063][ T4530] loop0: detected capacity change from 0 to 128 [ 94.815178][ T4491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.846169][ T21] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.863098][ T4507] loop1: detected capacity change from 0 to 32768 [ 94.884002][ T4530] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.902618][ T21] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.908599][ T4530] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038 (0x7fffffff) [ 94.934512][ T4507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.244 (4507) [ 94.970515][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 95.032855][ T21] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 95.049114][ T4507] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.061379][ T21] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 95.066619][ T4507] BTRFS info (device loop1): using free space tree [ 95.119821][ T21] usb 3-1: Product: syz [ 95.127890][ T4507] BTRFS info (device loop1): has skinny extents [ 95.134571][ T21] usb 3-1: SerialNumber: syz [ 95.183447][ T21] usb 3-1: config 0 descriptor?? [ 95.242436][ T21] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 95.270510][ T4556] loop3: detected capacity change from 0 to 8 [ 95.284732][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 95.349789][ T4561] tipc: MTU too low for tipc bearer [ 95.431597][ T4507] BTRFS info (device loop1): enabling ssd optimizations [ 95.438084][ T21] usb 3-1: USB disconnect, device number 4 [ 95.448941][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 95.449320][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 95.483869][ T4576] binder: BINDER_SET_CONTEXT_MGR already set [ 95.537601][ T4576] binder: 4575:4576 ioctl 40046207 0 returned -16 [ 95.607633][ T21] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 95.723810][ T4587] loop3: detected capacity change from 0 to 8 [ 95.749073][ T4590] sp0: Synchronizing with TNC [ 95.803123][ T155] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 95.829307][ T4587] SQUASHFS error: Corrupted symlink [ 96.541101][ T4609] loop1: detected capacity change from 0 to 1024 [ 96.599363][ T4588] loop4: detected capacity change from 0 to 32768 [ 96.681332][ T4615] loop3: detected capacity change from 0 to 4096 [ 96.692889][ T4609] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 96.709040][ T4609] hfsplus: xattr search failed [ 96.738812][ T4615] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.743987][ T4617] loop2: detected capacity change from 0 to 8192 [ 96.756343][ T4588] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 96.800750][ T3583] udevd[3583]: incorrect nilfs2 checksum on /dev/loop3 [ 96.838018][ T4615] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 96.856509][ T4617] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 96.868493][ T4617] REISERFS (device loop2): using ordered data mode [ 96.878159][ T4621] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.889317][ T4617] reiserfs: using flush barriers [ 96.899861][ T4617] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.943373][ T4617] REISERFS (device loop2): checking transaction log (loop2) [ 96.995216][ T3580] ocfs2: Unmounting device (7,4) on (node local) [ 97.000372][ T4617] REISERFS (device loop2): Using r5 hash to sort names [ 97.014106][ T4617] REISERFS (device loop2): using 3.5.x disk format [ 97.033147][ T4617] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 97.163040][ T4628] loop3: detected capacity change from 0 to 64 [ 97.351660][ T4636] mkiss: ax0: crc mode is auto. [ 98.152607][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.394328][ T4696] loop1: detected capacity change from 0 to 4096 [ 98.492273][ T4699] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.562794][ T21] usb 4-1: config index 0 descriptor too short (expected 6197, got 36) [ 98.589823][ T21] usb 4-1: config 156 has too many interfaces: 182, using maximum allowed: 32 [ 98.620339][ T21] usb 4-1: config 156 has an invalid interface number: 209 but max is 181 [ 98.630344][ T21] usb 4-1: config 156 has 1 interface, different from the descriptor's value: 182 [ 98.661435][ T21] usb 4-1: config 156 has no interface number 0 [ 98.679550][ T21] usb 4-1: config 156 interface 209 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.725433][ T21] usb 4-1: config 156 interface 209 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.736769][ T21] usb 4-1: config 156 interface 209 has no altsetting 0 [ 98.745268][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 98.754702][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.882532][ T4004] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.918927][ T4688] loop2: detected capacity change from 0 to 40427 [ 98.967746][ T4688] F2FS-fs (loop2): invalid crc value [ 98.988998][ T4688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.055202][ T4688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 99.140261][ T3575] attempt to access beyond end of device [ 99.140261][ T3575] loop2: rw=2049, want=45104, limit=40427 [ 99.186565][ T4721] loop4: detected capacity change from 0 to 4096 [ 99.245296][ T4721] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 99.290227][ T4721] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 99.308279][ T4004] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.340738][ T4004] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.379724][ T4004] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.389022][ T4721] ntfs: volume version 3.1. [ 99.448099][ T4004] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.475000][ T4004] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 99.492830][ T23] usb 4-1: USB disconnect, device number 3 [ 99.507139][ T4004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.533919][ T4004] usb 2-1: config 0 descriptor?? [ 99.911390][ T4732] loop0: detected capacity change from 0 to 32768 [ 99.967542][ T4732] find_entry called with index = 0 [ 99.984802][ T4732] read_mapping_page failed! [ 99.989368][ T4732] ERROR: (device loop0): txCommit: [ 99.989368][ T4732] [ 100.006010][ T4732] ERROR: (device loop0): remounting filesystem as read-only [ 100.015236][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.024456][ T4732] ERROR: (device loop0): diFree: numfree > numinos [ 100.024456][ T4732] [ 100.042685][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.049403][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.060641][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.078599][ T21] kernel write not supported for file /input/mice (pid: 21 comm: kworker/1:0) [ 100.084914][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.097098][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.104199][ T4004] kye 0003:0458:4018.0006: unknown main item tag 0x0 [ 100.121063][ T4004] kye 0003:0458:4018.0006: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.1-1/input0 [ 100.218463][ T21] usb 2-1: USB disconnect, device number 4 [ 100.374059][ T4756] loop3: detected capacity change from 0 to 256 [ 100.434502][ T4761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.342'. [ 100.628083][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 100.879164][ T4786] loop4: detected capacity change from 0 to 256 [ 100.911221][ T4786] exfat: Deprecated parameter 'namecase' [ 100.934316][ T4782] loop1: detected capacity change from 0 to 2048 [ 100.960260][ T4778] loop2: detected capacity change from 0 to 4096 [ 100.974525][ T4786] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011fc6, chksum : 0x5c39844e, utbl_chksum : 0xe619d30d) [ 101.014887][ T4778] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.036822][ T4778] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 101.059265][ T4782] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.094846][ T4778] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 101.132632][ T4778] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 101.193932][ T4778] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 101.204531][ T4778] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 101.218464][ T4778] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 101.254451][ T4778] ntfs: volume version 3.1. [ 101.264331][ T4778] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 101.432392][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.570265][ T4790] loop3: detected capacity change from 0 to 32768 [ 101.682221][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 101.960197][ T4805] loop2: detected capacity change from 0 to 32768 [ 101.962476][ T21] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.989540][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.003312][ T4805] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.370 (4805) [ 102.008150][ T21] usb 5-1: Product: syz [ 102.040948][ T21] usb 5-1: Manufacturer: syz [ 102.046160][ T21] usb 5-1: SerialNumber: syz [ 102.054411][ T21] r8152-cfgselector 5-1: config 0 descriptor?? [ 102.070900][ T4805] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 102.088313][ T4805] BTRFS info (device loop2): setting nodatasum [ 102.095036][ T4805] BTRFS info (device loop2): using free space tree [ 102.101785][ T4805] BTRFS info (device loop2): has skinny extents [ 102.274003][ T4805] BTRFS info (device loop2): enabling ssd optimizations [ 102.366942][ T4790] XFS (loop3): Mounting V5 Filesystem [ 102.565118][ T21] r8152-cfgselector 5-1: Unknown version 0x0000 [ 102.571513][ T21] r8152-cfgselector 5-1: bad CDC descriptors [ 102.602206][ T1074] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.604727][ T21] r8152-cfgselector 5-1: Unknown version 0x0000 [ 102.621588][ T21] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 102.770873][ T4790] XFS (loop3): Ending clean mount [ 102.877296][ T4196] XFS (loop3): Unmounting Filesystem [ 102.882331][ T1074] usb 2-1: Using ep0 maxpacket: 8 [ 102.987449][ T4856] loop2: detected capacity change from 0 to 512 [ 103.012437][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.023553][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.033761][ T1074] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 103.050750][ T1074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.071362][ T4856] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.109261][ T1074] usb 2-1: config 0 descriptor?? [ 103.170579][ T4856] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 103.235478][ T4856] EXT4-fs (loop2): 1 truncate cleaned up [ 103.279804][ T4856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.553612][ T4863] loop4: detected capacity change from 0 to 32768 [ 103.634476][ T1074] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 103.647801][ T1074] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 103.647835][ T4863] JBD2: Ignoring recovery information on journal [ 103.656719][ T4875] loop2: detected capacity change from 0 to 1024 [ 103.667945][ T1074] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 103.675354][ T1074] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 103.684712][ T1074] logitech 0003:046D:C24F.0007: unknown main item tag 0x0 [ 103.695632][ T1074] logitech 0003:046D:C24F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 103.707291][ T1074] logitech 0003:046D:C24F.0007: no inputs found [ 103.783854][ T4863] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 103.827251][ T3650] hfsplus: b-tree write err: -5, ino 4 [ 103.837303][ T1074] usb 2-1: USB disconnect, device number 5 [ 103.975281][ T3580] ocfs2: Unmounting device (7,4) on (node local) [ 104.279028][ T4890] loop3: detected capacity change from 0 to 1024 [ 104.427332][ T4890] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.491834][ T4882] loop0: detected capacity change from 0 to 32768 [ 104.595281][ T4882] JBD2: Ignoring recovery information on journal [ 104.617429][ T4882] jbd2_journal_bmap: journal block not found at offset 64 on loop0-27 [ 104.670853][ T4882] JBD2: bad block at offset 64 [ 104.773367][ T4882] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.931115][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 104.985055][ T4886] loop2: detected capacity change from 0 to 32768 [ 104.992328][ T1074] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.146083][ T4929] UBIFS error (pid: 4929): cannot open "ub ", error -22 [ 105.352254][ T4847] Bluetooth: hci1: command 0x0405 tx timeout [ 105.416091][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.440833][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.455500][ T1074] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 105.479077][ T1074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.508003][ T1074] usb 2-1: config 0 descriptor?? [ 105.530771][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 105.602365][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.621739][ T4947] loop4: detected capacity change from 0 to 2048 [ 105.763908][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.790781][ T4947] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 105.827100][ T4947] fscrypt (loop4, inode 13): Error -61 getting encryption context [ 105.842221][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 105.876951][ T4940] loop0: detected capacity change from 0 to 32768 [ 105.921978][ T4957] tipc: Started in network mode [ 105.928087][ T4957] tipc: Node identity , cluster identity 4711 [ 105.936242][ T4957] tipc: Failed to set node id, please configure manually [ 105.944208][ T4957] tipc: Enabling of bearer rejected, failed to enable media [ 105.963768][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.996811][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.020860][ T1074] wacom 0003:056A:0028.0008: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 106.021986][ T21] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 106.060431][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.081823][ T1074] wacom 0003:056A:0028.0008: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.1-1/input0 [ 106.111053][ T1074] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0028.0008/input/input7 [ 106.113069][ T21] usb 4-1: config 0 descriptor?? [ 106.181106][ T4940] XFS (loop0): Mounting V5 Filesystem [ 106.218565][ T1074] usb 2-1: USB disconnect, device number 6 [ 106.362886][ T4940] XFS (loop0): Ending clean mount [ 106.405435][ T4940] XFS (loop0): Quotacheck needed: Please wait. [ 106.480838][ T4940] XFS (loop0): Quotacheck: Done. [ 106.525417][ T4977] loop4: detected capacity change from 0 to 2048 [ 106.565242][ T3567] XFS (loop0): Unmounting Filesystem [ 106.629585][ T4977] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.654826][ T21] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 106.680630][ T4955] loop2: detected capacity change from 0 to 32768 [ 106.687812][ T21] ft260 0003:0403:6030.0009: failed to parse HID [ 106.695082][ T21] ft260: probe of 0003:0403:6030.0009 failed with error -22 [ 106.721278][ T4978] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.827622][ T4980] loop1: detected capacity change from 0 to 128 [ 106.858641][ T4849] usb 4-1: USB disconnect, device number 4 [ 106.891137][ T4980] hpfs: bad mount options. [ 106.935607][ T4982] loop4: detected capacity change from 0 to 256 [ 107.022221][ T4982] exfat: Deprecated parameter 'utf8' [ 107.027581][ T4982] exfat: Deprecated parameter 'utf8' [ 107.048686][ T4982] exfat: Deprecated parameter 'utf8' [ 107.056798][ T4982] exfat: Deprecated parameter 'utf8' [ 107.101569][ T4982] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 107.157124][ T4986] loop0: detected capacity change from 0 to 2048 [ 107.243106][ T4986] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.270953][ T4986] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 107.500880][ T5001] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 107.957586][ T4985] loop2: detected capacity change from 0 to 32768 [ 108.023853][ T4988] loop1: detected capacity change from 0 to 32768 [ 108.056744][ T4985] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.429 (4985) [ 108.075957][ T5017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 108.090856][ T4985] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 108.107530][ T4985] BTRFS info (device loop2): turning off barriers [ 108.122426][ T4985] BTRFS info (device loop2): enabling auto defrag [ 108.149758][ T4985] BTRFS info (device loop2): ignoring bad roots [ 108.170605][ T4988] XFS (loop1): Mounting V5 Filesystem [ 108.182644][ T4985] BTRFS info (device loop2): force zlib compression, level 3 [ 108.222434][ T4985] BTRFS info (device loop2): enabling ssd optimizations [ 108.292497][ T4985] BTRFS info (device loop2): using spread ssd allocation scheme [ 108.302578][ T4985] BTRFS info (device loop2): using free space tree [ 108.362917][ T4985] BTRFS info (device loop2): has skinny extents [ 108.369408][ T4985] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 108.445400][ T4985] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 108.483654][ T4985] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 108.489115][ T5007] loop0: detected capacity change from 0 to 32768 [ 108.509501][ T4988] XFS (loop1): Ending clean mount [ 108.599336][ T4985] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 108.621323][ T4985] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 108.658648][ T3571] XFS (loop1): Unmounting Filesystem [ 108.670772][ T5007] XFS (loop0): Mounting V5 Filesystem [ 108.678656][ T4985] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 108.747272][ T5056] netlink: 'syz.4.452': attribute type 4 has an invalid length. [ 108.757442][ T4985] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 108.814430][ T4985] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 108.895403][ T4985] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 108.972403][ T4985] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 109.042712][ T5007] XFS (loop0): Ending clean mount [ 109.110966][ T5007] XFS (loop0): Quotacheck needed: Please wait. [ 109.163675][ T5084] loop1: detected capacity change from 0 to 512 [ 109.178449][ T5080] netlink: 'syz.3.457': attribute type 2 has an invalid length. [ 109.233756][ T5084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.292343][ T5084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.324620][ T5007] XFS (loop0): Quotacheck: Done. [ 109.429090][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 109.449845][ T5084] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,user_xattr,abort,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 109.533651][ T3567] XFS (loop0): Unmounting Filesystem [ 109.585127][ T5094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'. [ 109.714491][ T5104] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 109.729341][ T5099] loop3: detected capacity change from 0 to 4096 [ 109.753604][ T5105] loop4: detected capacity change from 0 to 256 [ 109.779789][ T3571] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 109.866838][ T5099] __ntfs_error: 4 callbacks suppressed [ 109.866854][ T5099] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 109.892374][ T5099] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 109.892657][ T5105] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 109.921641][ T5099] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 110.051855][ T5099] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 110.174810][ T5099] ntfs: volume version 3.1. [ 110.200971][ T5115] process 'syz.4.472' launched './file1' with NULL argv: empty string added [ 110.231636][ T5099] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 110.273909][ T5113] loop2: detected capacity change from 0 to 2048 [ 110.279257][ T5099] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 110.359200][ T5099] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 110.422559][ T5124] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.523414][ T5125] loop4: detected capacity change from 0 to 4096 [ 110.581893][ T5125] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 110.826629][ T5130] loop2: detected capacity change from 0 to 4096 [ 110.923915][ T5130] ntfs: volume version 3.1. [ 111.395143][ T5134] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.423123][ T5134] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.657437][ T5154] binder: 5153:5154 ioctl c018620c 20000140 returned -22 [ 111.704188][ T5160] futex_wake_op: syz.0.491 tries to shift op by 32; fix this program [ 111.985434][ T5166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.009538][ T5176] loop1: detected capacity change from 0 to 2048 [ 112.121889][ T5176] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.168479][ T5187] binder: 5185:5187 ioctl c018620c 20000140 returned -22 [ 112.178496][ T5186] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.180326][ T5176] attempt to access beyond end of device [ 112.180326][ T5176] loop1: rw=524288, want=33554432, limit=2048 [ 112.286721][ T5176] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 112.432932][ T5176] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 112.622387][ T5201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 112.692417][ T4842] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.897596][ T5216] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 113.052367][ T4842] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.070358][ T4842] usb 4-1: config 0 has no interface number 0 [ 113.094121][ T4842] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.129705][ T4842] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.148530][ T4842] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 113.158728][ T4842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.187899][ T4842] usb 4-1: config 0 descriptor?? [ 113.189061][ T5220] loop1: detected capacity change from 0 to 8192 [ 113.223061][ T5193] loop2: detected capacity change from 0 to 32768 [ 113.320991][ T5220] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 113.350637][ T5193] ERROR: (device loop2): dbAllocAG: Corrupt dmapctl page [ 113.350637][ T5193] [ 113.361029][ T5220] REISERFS (device loop1): using ordered data mode [ 113.362984][ T5193] ERROR: (device loop2): remounting filesystem as read-only [ 113.367627][ T5220] reiserfs: using flush barriers [ 113.381579][ T5220] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.400526][ T5220] REISERFS (device loop1): checking transaction log (loop1) [ 113.434657][ T5220] REISERFS (device loop1): Using tea hash to sort names [ 113.693058][ T4842] hid (null): global environment stack underflow [ 113.723268][ T4842] uclogic 0003:5543:0522.000A: global environment stack underflow [ 113.731109][ T4842] uclogic 0003:5543:0522.000A: item 0 1 1 11 parsing failed [ 113.810291][ T4842] uclogic 0003:5543:0522.000A: parse failed [ 113.853899][ T4842] uclogic: probe of 0003:5543:0522.000A failed with error -22 [ 113.934264][ T4842] usb 4-1: USB disconnect, device number 5 [ 114.092167][ T5259] loop1: detected capacity change from 0 to 4096 [ 114.159950][ T5259] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 114.192255][ T5259] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 114.219890][ T5259] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 114.295502][ T5259] ntfs: volume version 3.1. [ 114.361747][ T5241] loop0: detected capacity change from 0 to 32768 [ 114.496771][ T5241] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.587363][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 114.787466][ T5279] netlink: 'syz.0.548': attribute type 30 has an invalid length. [ 114.797458][ T5265] loop4: detected capacity change from 0 to 32768 [ 114.822265][ T4842] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 114.935156][ T5265] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page [ 114.935156][ T5265] [ 114.937366][ T5281] loop0: detected capacity change from 0 to 256 [ 114.956563][ T5265] ERROR: (device loop4): remounting filesystem as read-only [ 115.278002][ T5283] loop0: detected capacity change from 0 to 512 [ 115.318113][ T5269] loop2: detected capacity change from 0 to 40427 [ 115.326693][ T5285] loop4: detected capacity change from 0 to 512 [ 115.362452][ T4842] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.371521][ T4842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.390238][ T5273] loop3: detected capacity change from 0 to 32768 [ 115.393983][ T4842] usb 2-1: Product: syz [ 115.401583][ T4842] usb 2-1: Manufacturer: syz [ 115.409972][ T5285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 115.418917][ T4842] usb 2-1: SerialNumber: syz [ 115.424645][ T5285] System zones: 1-12 [ 115.440184][ T5269] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.440238][ T5273] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.546 (5273) [ 115.477058][ T4842] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.485931][ T5285] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.550: invalid indirect mapped block 8 (level 2) [ 115.493398][ T5283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.508973][ T5285] EXT4-fs (loop4): Remounting filesystem read-only [ 115.517236][ T5269] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.528529][ T5285] EXT4-fs (loop4): 1 truncate cleaned up [ 115.538319][ T5285] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 115.554315][ T3575] attempt to access beyond end of device [ 115.554315][ T3575] loop2: rw=2049, want=45104, limit=40427 [ 115.566686][ T5283] EXT4-fs error (device loop0): ext4_quota_enable:6383: comm syz.0.551: Bad quota inum: 11, type: 1 [ 115.584777][ T5273] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 115.599431][ T5283] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 115.604005][ T5273] BTRFS info (device loop3): using free space tree [ 115.620901][ T5273] BTRFS info (device loop3): has skinny extents [ 115.629191][ T5283] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 115.641960][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.888058][ T5273] BTRFS info (device loop3): enabling ssd optimizations [ 116.034800][ T4840] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.141016][ T4842] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.222137][ T5330] loop0: detected capacity change from 0 to 22 [ 116.245609][ T3583] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 10 /dev/loop3 scanned by udevd (3583) [ 116.275663][ T5330] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 116.349710][ T5330] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 116.432563][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.474200][ T4840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.532231][ T4840] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 116.541300][ T4840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.610539][ T4840] usb 5-1: config 0 descriptor?? [ 116.755466][ T4005] usb 2-1: USB disconnect, device number 7 [ 116.984778][ T5349] loop2: detected capacity change from 0 to 4096 [ 117.105451][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.129089][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.142744][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.182605][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.202223][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.209335][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.232206][ T4840] semitek 0003:1EA7:0907.000B: unknown main item tag 0x0 [ 117.260216][ T4840] semitek 0003:1EA7:0907.000B: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0 [ 117.330999][ T4840] usb 5-1: USB disconnect, device number 4 [ 117.442148][ T4842] usb 2-1: Service connection timeout for: 256 [ 117.448376][ T4842] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 117.478253][ T5337] loop3: detected capacity change from 0 to 32768 [ 117.501667][ T4842] ath9k_htc: Failed to initialize the device [ 117.527908][ T4005] usb 2-1: ath9k_htc: USB layer deinitialized [ 117.564871][ T5337] ERROR: (device loop3): dbAllocAG: Corrupt dmapctl page [ 117.564871][ T5337] [ 117.631398][ T5337] ERROR: (device loop3): remounting filesystem as read-only [ 117.652911][ T5372] loop2: detected capacity change from 0 to 256 [ 118.420965][ T5364] loop0: detected capacity change from 0 to 32768 [ 118.614706][ T5364] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.648792][ T5376] loop1: detected capacity change from 0 to 32768 [ 118.687598][ T3567] ocfs2: Unmounting device (7,0) on (node local) [ 118.920438][ T5376] XFS (loop1): Mounting V5 Filesystem [ 119.052020][ T5376] XFS (loop1): Ending clean mount [ 119.068581][ T5376] XFS (loop1): Quotacheck needed: Please wait. [ 119.179675][ T5376] XFS (loop1): Quotacheck: Done. [ 119.290645][ T3571] XFS (loop1): Unmounting Filesystem [ 119.531946][ T5404] loop4: detected capacity change from 0 to 32768 [ 120.270411][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 120.270427][ T26] audit: type=1400 audit(1728625951.940:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A14 pid=5465 comm="syz.4.617" [ 120.519531][ T5444] loop3: detected capacity change from 0 to 40427 [ 120.605938][ T5444] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 120.625930][ T5444] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.662383][ T5444] F2FS-fs (loop3): invalid crc value [ 120.733379][ T5444] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.850379][ T5444] F2FS-fs (loop3): Start checkpoint disabled! [ 120.869739][ T5488] loop1: detected capacity change from 0 to 4096 [ 120.878365][ T5444] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.886729][ T5444] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 120.901944][ T26] audit: type=1800 audit(1728625952.570:5): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.608" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 120.992667][ T5444] attempt to access beyond end of device [ 120.992667][ T5444] loop3: rw=2049, want=78672, limit=40427 [ 121.030022][ T5488] ntfs: volume version 3.1. [ 121.063262][ T5441] loop0: detected capacity change from 0 to 65536 [ 121.211917][ T5499] loop2: detected capacity change from 0 to 1024 [ 121.293709][ T5441] XFS (loop0): Mounting V5 Filesystem [ 121.310336][ T5499] hfsplus: xattr searching failed [ 121.376760][ T5509] loop1: detected capacity change from 0 to 4096 [ 121.400946][ T5509] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 121.421323][ T9] hfsplus: b-tree write err: -5, ino 4 [ 121.443574][ T3769] attempt to access beyond end of device [ 121.443574][ T3769] loop3: rw=2049, want=40976, limit=40427 [ 121.486495][ T5441] XFS (loop0): Ending clean mount [ 121.520018][ T5441] XFS (loop0): Quotacheck needed: Please wait. [ 121.626725][ T5441] XFS (loop0): Quotacheck: Done. [ 121.655813][ T3567] XFS (loop0): Unmounting Filesystem [ 121.657882][ T5519] loop2: detected capacity change from 0 to 8 [ 122.019588][ T5529] loop2: detected capacity change from 0 to 1024 [ 122.969788][ T5523] loop1: detected capacity change from 0 to 40427 [ 123.067397][ T5523] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.089117][ T5523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.121889][ T5523] F2FS-fs (loop1): invalid crc value [ 123.151420][ T5564] loop4: detected capacity change from 0 to 4096 [ 123.164045][ T5523] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.263475][ T5568] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.339091][ T5545] loop2: detected capacity change from 0 to 32768 [ 123.354157][ T5523] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.362168][ T5523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.434755][ T5557] loop0: detected capacity change from 0 to 32768 [ 123.452267][ T5545] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.651 (5545) [ 123.510558][ T5557] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.656 (5557) [ 123.525756][ T5545] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 123.554722][ T5545] BTRFS info (device loop2): setting nodatasum [ 123.560912][ T5545] BTRFS info (device loop2): using free space tree [ 123.614985][ T5573] loop4: detected capacity change from 0 to 1024 [ 123.619447][ T5557] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 123.631612][ T5545] BTRFS info (device loop2): has skinny extents [ 123.638680][ T3624] attempt to access beyond end of device [ 123.638680][ T3624] loop1: rw=1, want=45104, limit=40427 [ 123.692382][ T5557] BTRFS info (device loop0): turning off barriers [ 123.698890][ T5557] BTRFS info (device loop0): max_inline at 0 [ 123.705522][ T5557] BTRFS info (device loop0): enabling all of the rescue options [ 123.713521][ T5557] BTRFS info (device loop0): ignoring data csums [ 123.719947][ T5557] BTRFS info (device loop0): ignoring bad roots [ 123.732669][ T5557] BTRFS info (device loop0): disabling log replay at mount time [ 123.746953][ T5573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.770878][ T5557] BTRFS info (device loop0): force zlib compression, level 3 [ 123.802336][ T5557] BTRFS info (device loop0): allowing degraded mounts [ 123.809232][ T5557] BTRFS info (device loop0): enabling ssd optimizations [ 123.887457][ T5557] BTRFS info (device loop0): using spread ssd allocation scheme [ 123.895449][ T5557] BTRFS info (device loop0): using free space tree [ 123.902153][ T5557] BTRFS info (device loop0): has skinny extents [ 123.908726][ T5557] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 123.942621][ T5545] BTRFS info (device loop2): enabling ssd optimizations [ 123.971030][ T5557] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 124.070113][ T26] audit: type=1800 audit(1728625955.740:6): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 124.122318][ T5557] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 124.221318][ T5557] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 124.295297][ T5557] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 124.393660][ T5557] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 124.439221][ T5557] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 124.528787][ T5557] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 124.570332][ T5606] loop3: detected capacity change from 0 to 32768 [ 124.587390][ T5619] loop1: detected capacity change from 0 to 256 [ 124.623715][ T5557] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 124.723457][ T5606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.666 (5606) [ 124.767568][ T5606] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.786768][ T5557] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 124.815710][ T5606] BTRFS info (device loop3): using free space tree [ 124.838838][ T5606] BTRFS info (device loop3): has skinny extents [ 124.883486][ T5629] loop1: detected capacity change from 0 to 256 [ 125.242331][ T5606] BTRFS info (device loop3): enabling ssd optimizations [ 125.266223][ T5622] loop4: detected capacity change from 0 to 32768 [ 125.381940][ T5622] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.670 (5622) [ 125.443696][ T5622] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 125.483335][ T5622] BTRFS info (device loop4): metadata ratio 0 [ 125.489469][ T5622] BTRFS info (device loop4): enabling ssd optimizations [ 125.528159][ T5622] BTRFS info (device loop4): using spread ssd allocation scheme [ 125.557881][ T5622] BTRFS info (device loop4): force clearing of disk cache [ 125.582387][ T5622] BTRFS info (device loop4): enabling auto defrag [ 125.588851][ T5622] BTRFS info (device loop4): setting nodatacow, compression disabled [ 125.643635][ T5622] BTRFS info (device loop4): metadata ratio 15 [ 125.652776][ T5622] BTRFS info (device loop4): not using ssd optimizations [ 125.659827][ T5622] BTRFS info (device loop4): not using spread ssd allocation scheme [ 125.692224][ T5622] BTRFS info (device loop4): using free space tree [ 125.725053][ T5622] BTRFS info (device loop4): has skinny extents [ 125.953680][ T5668] loop0: detected capacity change from 0 to 4096 [ 126.084158][ T5668] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 126.170010][ T5665] loop2: detected capacity change from 0 to 32768 [ 126.206076][ T5622] BTRFS info (device loop4): clearing free space tree [ 126.227888][ T5622] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.281007][ T5665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.677 (5665) [ 126.312224][ T5622] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.362599][ T5668] ntfs: (device loop0): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 126.386057][ T5622] BTRFS info (device loop4): creating free space tree [ 126.470671][ T5665] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 126.502980][ T5668] ntfs: volume version 3.1. [ 126.510545][ T5665] BTRFS info (device loop2): using free space tree [ 126.521569][ T5622] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.546463][ T5665] BTRFS info (device loop2): has skinny extents [ 126.567339][ T5622] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.835432][ T5719] loop0: detected capacity change from 0 to 512 [ 126.895995][ T5672] loop1: detected capacity change from 0 to 32768 [ 126.942336][ T4837] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.020621][ T5672] JBD2: Ignoring recovery information on journal [ 127.034365][ T5719] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 127.072743][ T5665] BTRFS info (device loop2): enabling ssd optimizations [ 127.132602][ T5719] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038 (0x7fffffff) [ 127.188266][ T5672] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.303932][ T26] audit: type=1800 audit(1728625958.980:7): pid=5672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.678" name="file1" dev="loop1" ino=16946 res=0 errno=0 [ 127.326330][ T4837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 127.361936][ T4837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 127.397779][ T4837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.400356][ T3571] ocfs2: Unmounting device (7,1) on (node local) [ 127.440976][ T4837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.501382][ T5738] loop0: detected capacity change from 0 to 512 [ 127.525806][ T5707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.660431][ T5738] EXT4-fs (loop0): Ignoring removed nobh option [ 127.671932][ T5738] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 127.802254][ T3583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (3583) [ 127.849485][ T3613] usb 4-1: USB disconnect, device number 6 [ 127.917140][ T5738] EXT4-fs (loop0): 1 orphan inode deleted [ 127.953480][ T5738] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nodiscard,noquota,resuid=0x0000000000000000,errors=remount-ro,nobh,sysvgroups,delalloc,usrjquota=./file1,. Quota mode: writeback. [ 127.992462][ T5738] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038 (0x7fffffff) [ 127.993295][ T5754] atomic_op ffff88806371c198 conn xmit_atomic 0000000000000000 [ 128.030823][ T5747] xt_nfacct: accounting object `sy' does not exists [ 128.241142][ T4846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.296623][ T4839] Bluetooth: hci0: command 0x0401 tx timeout [ 128.363381][ T5773] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.700'. [ 128.388825][ T5770] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.700'. [ 128.512160][ T4846] usb 5-1: Using ep0 maxpacket: 16 [ 128.526792][ T5782] loop2: detected capacity change from 0 to 256 [ 128.550545][ T5784] loop3: detected capacity change from 0 to 512 [ 128.588748][ T5784] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.601782][ T5784] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff) [ 128.632614][ T4846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.666252][ T5784] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 128.680797][ T5782] FAT-fs (loop2): Directory bread(block 64) failed [ 128.695783][ T4846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.712493][ T5782] FAT-fs (loop2): Directory bread(block 65) failed [ 128.724407][ T4846] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 128.732383][ T5782] FAT-fs (loop2): Directory bread(block 66) failed [ 128.740151][ T4846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.740426][ T5782] FAT-fs (loop2): Directory bread(block 67) failed [ 128.757120][ T5782] FAT-fs (loop2): Directory bread(block 68) failed [ 128.763732][ T5782] FAT-fs (loop2): Directory bread(block 69) failed [ 128.768233][ T4846] usb 5-1: config 0 descriptor?? [ 128.773100][ T5782] FAT-fs (loop2): Directory bread(block 70) failed [ 128.781732][ T5782] FAT-fs (loop2): Directory bread(block 71) failed [ 128.788707][ T5782] FAT-fs (loop2): Directory bread(block 72) failed [ 128.796541][ T5782] FAT-fs (loop2): Directory bread(block 73) failed [ 129.101041][ T5798] loop2: detected capacity change from 0 to 47 [ 129.137325][ T5800] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 129.275546][ T4846] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 129.280569][ T5809] tipc: Started in network mode [ 129.303430][ T5809] tipc: Node identity aaaaaaaaaa2b, cluster identity 4711 [ 129.314032][ T5809] tipc: Enabled bearer , priority 10 [ 129.476117][ T4846] usb 5-1: USB disconnect, device number 5 [ 129.768589][ T5831] loop2: detected capacity change from 0 to 1024 [ 129.843143][ T5835] loop1: detected capacity change from 0 to 128 [ 129.869266][ T5831] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 129.877728][ T5831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 129.887099][ T5831] System zones: 0-1, 3-12 [ 129.893249][ T5831] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.901727][ T5831] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.728: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.919764][ T5831] EXT4-fs (loop2): 1 orphan inode deleted [ 129.927411][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: writeback. [ 130.007458][ T3571] sysv_free_block: flc_count > flc_size [ 130.058569][ T3571] sysv_free_block: flc_count > flc_size [ 130.066181][ T3571] sysv_free_block: flc_count > flc_size [ 130.101792][ T3571] sysv_free_block: flc_count > flc_size [ 130.142473][ T3571] sysv_free_block: flc_count > flc_size [ 130.148280][ T3571] sysv_free_block: flc_count > flc_size [ 130.158251][ T3571] sysv_free_block: flc_count > flc_size [ 130.177979][ T5815] loop3: detected capacity change from 0 to 32768 [ 130.188393][ T3571] sysv_free_block: flc_count > flc_size [ 130.198860][ T3571] sysv_free_block: flc_count > flc_size [ 130.205629][ T3571] sysv_free_block: flc_count > flc_size [ 130.213250][ T3571] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 130.334643][ T4002] tipc: Node number set to 8497834 [ 130.812732][ T5853] netlink: 256 bytes leftover after parsing attributes in process `syz.1.737'. [ 130.828649][ T5838] loop2: detected capacity change from 0 to 40427 [ 130.905162][ T5840] loop4: detected capacity change from 0 to 40427 [ 130.919882][ T5838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.007942][ T5840] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 131.021213][ T5840] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.055892][ T5838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.071935][ T5840] F2FS-fs (loop4): invalid crc value [ 131.093269][ T5840] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.117611][ T3575] attempt to access beyond end of device [ 131.117611][ T3575] loop2: rw=2049, want=45104, limit=40427 [ 131.191606][ T5840] F2FS-fs (loop4): recover fsync data on readonly fs [ 131.205806][ T5840] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 131.216387][ T5840] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.467317][ T5870] loop1: detected capacity change from 0 to 64 [ 131.545812][ T5855] loop3: detected capacity change from 0 to 32768 [ 131.764714][ T5855] XFS (loop3): Mounting V5 Filesystem [ 131.868543][ T5889] loop4: detected capacity change from 0 to 256 [ 131.881980][ T5855] XFS (loop3): Ending clean mount [ 131.926236][ T5892] loop1: detected capacity change from 0 to 512 [ 131.940399][ T5889] exfat: Deprecated parameter 'utf8' [ 131.967500][ T4196] XFS (loop3): Unmounting Filesystem [ 132.016138][ T5889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 132.063251][ T5892] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 132.081474][ T5892] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 132.106944][ T5892] System zones: 0-2, 18-18, 34-35 [ 132.113192][ T5892] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 132.167537][ T5892] EXT4-fs (loop1): shut down requested (0) [ 132.302464][ T3996] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.488875][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.556138][ T5910] loop3: detected capacity change from 0 to 512 [ 132.572301][ T3996] usb 3-1: Using ep0 maxpacket: 16 [ 132.632054][ T5916] loop0: detected capacity change from 0 to 64 [ 132.641259][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.647596][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.663837][ T5910] EXT4-fs (loop3): inline encryption not supported [ 132.670402][ T5910] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 132.670402][ T5910] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 132.670402][ T5910] [ 132.695748][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.771624][ T5910] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.760: casefold flag without casefold feature [ 132.798412][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.817146][ T5910] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.760: couldn't read orphan inode 15 (err -117) [ 132.843213][ T5910] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,inlinecrypt,block_validity,acl,noacl,i_version,,errors=continue. Quota mode: writeback. [ 132.860972][ T5922] misc userio: Invalid payload size [ 132.912352][ T3996] usb 3-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 132.927815][ T3996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.942018][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.958615][ T3996] usb 3-1: Product: syz [ 132.972167][ T3996] usb 3-1: Manufacturer: syz [ 132.981708][ T3996] usb 3-1: SerialNumber: syz [ 132.988697][ T3996] usb 3-1: config 0 descriptor?? [ 133.096085][ T5930] loop3: detected capacity change from 0 to 64 [ 133.241234][ T5934] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 133.260459][ T5934] netlink: 17 bytes leftover after parsing attributes in process `syz.1.770'. [ 133.387749][ T5940] loop3: detected capacity change from 0 to 1024 [ 133.472471][ T3996] mxuport 3-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 133.480908][ T3996] mxuport: probe of 3-1:0.0 failed with error -5 [ 133.534869][ T3996] usb 3-1: USB disconnect, device number 5 [ 133.699641][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 133.767678][ T5937] loop0: detected capacity change from 0 to 32768 [ 133.948704][ T5937] XFS (loop0): Mounting V5 Filesystem [ 134.026667][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.072655][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.081331][ T5919] device bridge_slave_0 entered promiscuous mode [ 134.105138][ T5937] XFS (loop0): Ending clean mount [ 134.176765][ T3567] XFS (loop0): Unmounting Filesystem [ 134.206281][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.226560][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.264697][ T5919] device bridge_slave_1 entered promiscuous mode [ 134.395480][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.508839][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.694869][ T5919] team0: Port device team_slave_0 added [ 134.705285][ T5919] team0: Port device team_slave_1 added [ 134.782487][ T4001] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.800647][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.818954][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.866100][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.890171][ T3996] Bluetooth: hci4: command 0x0409 tx timeout [ 134.941248][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.951834][ T5966] loop3: detected capacity change from 0 to 32768 [ 134.969761][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.049882][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.090860][ T5966] jfs_strtoUCS: char2uni returned -22. [ 135.130383][ T5966] charset = euc-jp, char = 0xd4 [ 135.143285][ T4001] usb 2-1: Using ep0 maxpacket: 16 [ 135.234973][ T5919] device hsr_slave_0 entered promiscuous mode [ 135.284250][ T5919] device hsr_slave_1 entered promiscuous mode [ 135.292560][ T4001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.327619][ T5919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.335394][ T4001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.351847][ T5919] Cannot create hsr debugfs directory [ 135.371815][ T4001] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 135.402595][ T4001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.433020][ T4001] usb 2-1: config 0 descriptor?? [ 135.508694][ T154] device hsr_slave_0 left promiscuous mode [ 135.532798][ T154] device hsr_slave_1 left promiscuous mode [ 135.556397][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.590325][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.593020][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.593048][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.593576][ T154] device bridge_slave_1 left promiscuous mode [ 135.593717][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.595291][ T154] device bridge_slave_0 left promiscuous mode [ 135.595406][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.601801][ T154] device veth1_macvtap left promiscuous mode [ 135.601878][ T154] device veth0_macvtap left promiscuous mode [ 135.601969][ T154] device veth1_vlan left promiscuous mode [ 135.602046][ T154] device veth0_vlan left promiscuous mode [ 135.757535][ T5992] loop2: detected capacity change from 0 to 32768 [ 135.844873][ T5992] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 135.858160][ T5992] BTRFS info (device loop2): using free space tree [ 135.907054][ T5992] BTRFS info (device loop2): has skinny extents [ 135.942963][ T4001] uclogic 0003:2179:0053.000D: item fetching failed at offset 2/5 [ 135.976995][ T4001] uclogic 0003:2179:0053.000D: parse failed [ 135.983515][ T4001] uclogic: probe of 0003:2179:0053.000D failed with error -22 [ 136.080997][ T5992] BTRFS info (device loop2): enabling ssd optimizations [ 136.085621][ T154] team0 (unregistering): Port device team_slave_1 removed [ 136.130030][ T154] team0 (unregistering): Port device team_slave_0 removed [ 136.147586][ T4001] usb 2-1: USB disconnect, device number 8 [ 136.213578][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.283219][ T6037] futex_wake_op: syz.3.790 tries to shift op by 144; fix this program [ 136.381987][ T26] audit: type=1326 audit(1728625968.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.3.792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb25659ff9 code=0x0 [ 136.458795][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.540709][ T6044] loop2: detected capacity change from 0 to 512 [ 136.589258][ T154] bond0 (unregistering): Released all slaves [ 136.641827][ T6044] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.789: invalid indirect mapped block 256 (level 2) [ 136.664430][ T6044] EXT4-fs (loop2): 2 truncates cleaned up [ 136.670349][ T6044] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 136.974330][ T3613] Bluetooth: hci4: command 0x041b tx timeout [ 137.498935][ T5919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.563915][ T5919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.602985][ T5919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.637492][ T5919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.807145][ T6052] loop1: detected capacity change from 0 to 32768 [ 137.879867][ T6052] JBD2: Ignoring recovery information on journal [ 137.963461][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.982644][ T6052] jbd2_journal_bmap: journal block not found at offset 64 on loop1-27 [ 137.991583][ T6052] JBD2: bad block at offset 64 [ 138.050650][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.069677][ T6052] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 138.083306][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.129211][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.146965][ T6086] loop3: detected capacity change from 0 to 8192 [ 138.176214][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.182981][ T3571] ocfs2: Unmounting device (7,1) on (node local) [ 138.212772][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.259637][ T6086] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 138.307659][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.314773][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.340360][ T6086] REISERFS (device loop3): using ordered data mode [ 138.432322][ T6086] reiserfs: using flush barriers [ 138.446098][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.469287][ T6086] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.502064][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.511282][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.570949][ T6086] REISERFS (device loop3): checking transaction log (loop3) [ 138.591208][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.598363][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.612663][ T6086] REISERFS (device loop3): Using r5 hash to sort names [ 138.619554][ T6086] REISERFS (device loop3): using 3.5.x disk format [ 138.658136][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.678171][ T6086] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 138.679159][ T6106] loop1: detected capacity change from 0 to 8 [ 138.714820][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.759284][ T5919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.829882][ T5919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.841489][ T6106] SQUASHFS error: Corrupted symlink [ 138.896844][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.962364][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.028082][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.042550][ T4002] Bluetooth: hci4: command 0x040f tx timeout [ 139.114793][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.138634][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.188133][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.215600][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.266125][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.308783][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.348257][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.367191][ T6115] loop0: detected capacity change from 0 to 8192 [ 139.510120][ T6137] loop2: detected capacity change from 0 to 64 [ 139.554463][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.561933][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.578995][ T6115] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 139.600898][ T6115] REISERFS (device loop0): using ordered data mode [ 139.612199][ T6115] reiserfs: using flush barriers [ 139.617018][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.620783][ T6115] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.664082][ T6115] REISERFS (device loop0): checking transaction log (loop0) [ 139.721229][ T6115] REISERFS (device loop0): Using tea hash to sort names [ 139.864340][ T4002] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.148820][ T4002] usb 2-1: Using ep0 maxpacket: 16 [ 140.166407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.187246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.205230][ T4001] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.234782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.253243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.271067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.284882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.302517][ T4002] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.315726][ T5919] device veth0_vlan entered promiscuous mode [ 140.322379][ T4002] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.344473][ T5919] device veth1_vlan entered promiscuous mode [ 140.355175][ T4002] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 140.374658][ T4002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.390003][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.399574][ T4002] usb 2-1: config 0 descriptor?? [ 140.405484][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.416286][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.432857][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.454249][ T5919] device veth0_macvtap entered promiscuous mode [ 140.477646][ T5919] device veth1_macvtap entered promiscuous mode [ 140.527868][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.550202][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.568364][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.589300][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.600080][ T4001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.619038][ T4001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.632439][ T4001] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 140.637547][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.657980][ T4001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.672868][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.676960][ T4001] usb 4-1: config 0 descriptor?? [ 140.702181][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.723731][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.754591][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.763718][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.772850][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.780902][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.790348][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.805150][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.818065][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.828807][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.841021][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.852377][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.863362][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.873694][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.884559][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.900329][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.913559][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.931057][ T4002] ortek 0003:1223:3F07.000E: unknown main item tag 0x6 [ 140.933366][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.950794][ T4002] ortek 0003:1223:3F07.000E: report_id 29495 is invalid [ 140.963719][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.979687][ T4002] ortek 0003:1223:3F07.000E: item 0 2 1 8 parsing failed [ 140.982639][ T5919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.988410][ T4002] ortek: probe of 0003:1223:3F07.000E failed with error -22 [ 141.018274][ T5919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.051861][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.125654][ T4003] Bluetooth: hci4: command 0x0419 tx timeout [ 141.141466][ T3653] usb 2-1: USB disconnect, device number 9 [ 141.184247][ T4001] wacom 0003:056A:0028.000F: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 141.214658][ T4001] wacom 0003:056A:0028.000F: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 141.230860][ T3769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.261742][ T3769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.263418][ T4001] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.000F/input/input12 [ 141.292013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.320373][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.330069][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.351681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.412661][ T4001] usb 4-1: USB disconnect, device number 7 [ 141.607056][ T6197] loop4: detected capacity change from 0 to 1024 [ 141.737898][ T6197] hfsplus: xattr searching failed [ 141.776007][ T9] hfsplus: b-tree write err: -5, ino 4 [ 141.809171][ T6203] loop1: detected capacity change from 0 to 256 [ 141.937165][ T6203] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3289bd7c, utbl_chksum : 0xe619d30d) [ 142.587992][ T6205] loop4: detected capacity change from 0 to 32768 [ 142.677171][ T6205] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.826 (6205) [ 142.697986][ T6199] loop2: detected capacity change from 0 to 65536 [ 142.737037][ T6205] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 142.767722][ T6205] BTRFS info (device loop4): setting nodatasum [ 142.775845][ T6205] BTRFS info (device loop4): using free space tree [ 142.792411][ T6205] BTRFS info (device loop4): has skinny extents [ 142.834798][ T6199] XFS (loop2): Mounting V5 Filesystem [ 142.870577][ T6213] loop3: detected capacity change from 0 to 32768 [ 142.910223][ T6199] XFS (loop2): Ending clean mount [ 142.926111][ T6199] XFS (loop2): Quotacheck needed: Please wait. [ 142.999394][ T6199] XFS (loop2): Quotacheck: Done. [ 143.064977][ T3575] XFS (loop2): Unmounting Filesystem [ 143.091082][ T6213] XFS (loop3): Mounting V5 Filesystem [ 143.107651][ T6221] loop1: detected capacity change from 0 to 32768 [ 143.138485][ T6205] BTRFS info (device loop4): enabling ssd optimizations [ 143.252505][ T26] audit: type=1800 audit(1728625974.930:9): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.826" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 143.297413][ T6221] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.836 (6221) [ 143.302988][ T6213] XFS (loop3): Ending clean mount [ 143.326208][ T6213] XFS (loop3): Quotacheck needed: Please wait. [ 143.419399][ T6213] XFS (loop3): Quotacheck: Done. [ 143.431365][ T6221] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 143.502796][ T6221] BTRFS info (device loop1): enabling auto defrag [ 143.509267][ T6221] BTRFS info (device loop1): doing ref verification [ 143.578046][ T6221] BTRFS info (device loop1): max_inline at 0 [ 143.585406][ T6221] BTRFS info (device loop1): force clearing of disk cache [ 143.613630][ T6221] BTRFS info (device loop1): turning on sync discard [ 143.636935][ T6221] BTRFS info (device loop1): disabling free space tree [ 143.658415][ T6221] BTRFS info (device loop1): has skinny extents [ 143.873474][ T4196] XFS (loop3): Unmounting Filesystem [ 144.109036][ T6221] BTRFS info (device loop1): enabling ssd optimizations [ 144.182347][ T6221] BTRFS info (device loop1): clearing free space tree [ 144.189422][ T6221] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.226801][ T6258] loop0: detected capacity change from 0 to 32768 [ 144.236021][ T6221] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.412033][ T6221] BTRFS info (device loop1): balance: start -f [ 144.442300][ T6221] BTRFS info (device loop1): balance: ended with status: 0 [ 144.500333][ T6258] XFS (loop0): Mounting V5 Filesystem [ 144.682349][ T6258] XFS (loop0): Ending clean mount [ 144.759729][ T6258] XFS (loop0): Quotacheck needed: Please wait. [ 144.836570][ T6258] XFS (loop0): Quotacheck: Done. [ 144.902448][ T6293] loop3: detected capacity change from 0 to 4096 [ 145.005424][ T6293] ntfs: volume version 3.1. [ 145.178920][ T3567] XFS (loop0): Unmounting Filesystem [ 145.231439][ T6303] loop2: detected capacity change from 0 to 64 [ 145.341002][ T6303] hfs: bad catalog folder thread [ 145.358794][ T6301] loop4: detected capacity change from 0 to 4096 [ 145.443704][ T6301] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 145.514175][ T6301] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 145.568784][ T6307] loop1: detected capacity change from 0 to 1024 [ 145.582932][ T6301] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 145.622433][ T6301] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 145.679088][ T6301] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 145.685254][ T6307] hfsplus: xattr searching failed [ 145.717841][ T3650] hfsplus: b-tree write err: -5, ino 4 [ 145.732487][ T6301] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 145.752422][ T6301] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 145.783398][ T6301] ntfs: volume version 3.1. [ 145.788235][ T6301] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 145.834381][ T4836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.848768][ T6311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.852528][ T6301] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 146.182011][ T6305] loop3: detected capacity change from 0 to 32768 [ 146.238384][ T4836] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.249677][ T4836] usb 3-1: config 0 has no interface number 0 [ 146.308217][ T6305] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 146.422384][ T4836] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.438107][ T4836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.456726][ T4836] usb 3-1: Product: syz [ 146.460917][ T4836] usb 3-1: Manufacturer: syz [ 146.478496][ T4836] usb 3-1: SerialNumber: syz [ 146.496047][ T4836] usb 3-1: config 0 descriptor?? [ 146.533500][ T4196] ocfs2: Unmounting device (7,3) on (node local) [ 146.695033][ T6329] loop0: detected capacity change from 0 to 32768 [ 146.752485][ T4836] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 146.788859][ T4836] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.804227][ T6329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.856 (6329) [ 146.836515][ T4836] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 146.858021][ T4836] usb 3-1: media controller created [ 146.908346][ T4836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.980175][ T6329] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 147.003285][ T6329] BTRFS info (device loop0): enabling auto defrag [ 147.028705][ T6329] BTRFS info (device loop0): doing ref verification [ 147.051881][ T6329] BTRFS info (device loop0): max_inline at 0 [ 147.063205][ T4836] usb 3-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 147.084821][ T4836] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 147.104098][ T6329] BTRFS info (device loop0): force clearing of disk cache [ 147.129538][ T6329] BTRFS info (device loop0): turning on sync discard [ 147.168864][ T6329] BTRFS info (device loop0): disabling free space tree [ 147.188339][ T6329] BTRFS info (device loop0): has skinny extents [ 147.260253][ T6331] loop4: detected capacity change from 0 to 32768 [ 147.322515][ T4836] DVB: Unable to find symbol mxl5005s_attach() [ 147.488997][ T6329] BTRFS info (device loop0): enabling ssd optimizations [ 147.496463][ T6360] loop3: detected capacity change from 0 to 256 [ 147.511803][ T4836] usb 3-1: USB disconnect, device number 6 [ 147.524787][ T6329] BTRFS info (device loop0): clearing free space tree [ 147.531582][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.552313][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.612497][ T6331] XFS (loop4): Mounting V5 Filesystem [ 147.755365][ T6329] BTRFS info (device loop0): balance: start -f [ 147.765696][ T6331] XFS (loop4): Ending clean mount [ 147.777383][ T6329] BTRFS info (device loop0): balance: ended with status: 0 [ 147.799834][ T6331] XFS (loop4): Quotacheck needed: Please wait. [ 147.970630][ T6331] XFS (loop4): Quotacheck: Done. [ 148.186973][ T6378] loop2: detected capacity change from 0 to 4096 [ 148.312426][ T5919] XFS (loop4): Unmounting Filesystem [ 148.338234][ T6378] ntfs: volume version 3.1. [ 148.546673][ T6374] loop3: detected capacity change from 0 to 32768 [ 148.656984][ T6388] futex_wake_op: syz.1.872 tries to shift op by 32; fix this program [ 148.719529][ T6374] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.866 (6374) [ 148.776126][ T6374] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 148.805120][ T6374] BTRFS info (device loop3): setting nodatasum [ 148.811423][ T6374] BTRFS info (device loop3): using free space tree [ 148.839671][ T6374] BTRFS info (device loop3): has skinny extents [ 148.985590][ T6404] loop4: detected capacity change from 0 to 512 [ 149.109290][ T6404] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 149.141303][ T6374] BTRFS info (device loop3): enabling ssd optimizations [ 149.181430][ T26] audit: type=1800 audit(1728625980.850:10): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.866" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 149.206127][ T6404] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038 (0x7fffffff) [ 150.749394][ T6440] loop4: detected capacity change from 0 to 4096 [ 150.864176][ T6428] loop1: detected capacity change from 0 to 32768 [ 150.942931][ T6440] ntfs: volume version 3.1. [ 151.042550][ T6428] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.187663][ T3571] ocfs2: Unmounting device (7,1) on (node local) [ 151.257556][ T6470] loop0: detected capacity change from 0 to 1024 [ 151.286403][ T6473] loop4: detected capacity change from 0 to 256 [ 151.359693][ T6470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.382237][ T6476] loop3: detected capacity change from 0 to 256 [ 151.781231][ T6490] loop0: detected capacity change from 0 to 4096 [ 151.800619][ T6454] loop2: detected capacity change from 0 to 32768 [ 151.859538][ T6454] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.890 (6454) [ 151.895655][ T6497] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.950134][ T6454] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 151.963773][ T6454] BTRFS info (device loop2): turning off barriers [ 151.976542][ T6454] BTRFS info (device loop2): max_inline at 0 [ 151.994794][ T6454] BTRFS info (device loop2): enabling all of the rescue options [ 152.006059][ T6454] BTRFS info (device loop2): ignoring data csums [ 152.014161][ T6454] BTRFS info (device loop2): ignoring bad roots [ 152.020577][ T6454] BTRFS info (device loop2): disabling log replay at mount time [ 152.070926][ T6454] BTRFS info (device loop2): force zlib compression, level 3 [ 152.108013][ T6454] BTRFS info (device loop2): allowing degraded mounts [ 152.136576][ T6454] BTRFS info (device loop2): enabling ssd optimizations [ 152.156358][ T6454] BTRFS info (device loop2): using spread ssd allocation scheme [ 152.201271][ T6454] BTRFS info (device loop2): using free space tree [ 152.220446][ T6454] BTRFS info (device loop2): has skinny extents [ 152.229420][ T6454] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 152.253804][ T6454] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 152.291912][ T6454] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 152.365019][ T6515] loop3: detected capacity change from 0 to 4096 [ 152.374258][ T6513] loop1: detected capacity change from 0 to 128 [ 152.380621][ T6454] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 152.406754][ T6515] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 152.462518][ T6454] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 152.490499][ T6454] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 152.514186][ T6513] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 152.526043][ T6454] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 152.564919][ T6454] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 152.585189][ T6454] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 152.597335][ T3571] sysv_free_block: trying to free block not in datazone [ 152.599451][ T6454] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 152.614603][ T3571] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 153.249963][ T6554] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.277489][ T6554] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 153.759764][ T6541] loop1: detected capacity change from 0 to 40427 [ 153.897973][ T6541] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 3) [ 153.919319][ T6541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 153.952592][ T6541] F2FS-fs (loop1): invalid crc value [ 154.001224][ T6541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.143262][ T6541] F2FS-fs (loop1): Start checkpoint disabled! [ 154.160607][ T6541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.172350][ T6541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 154.214792][ T6574] loop3: detected capacity change from 0 to 32768 [ 154.231334][ T26] audit: type=1800 audit(1728625985.900:11): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.933" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 154.273966][ T6541] attempt to access beyond end of device [ 154.273966][ T6541] loop1: rw=2049, want=78672, limit=40427 [ 154.298343][ T6574] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.939 (6574) [ 154.336137][ T6574] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 154.348718][ T6574] BTRFS info (device loop3): enabling auto defrag [ 154.357545][ T6574] BTRFS info (device loop3): doing ref verification [ 154.377437][ T6574] BTRFS info (device loop3): max_inline at 0 [ 154.392279][ T6574] BTRFS info (device loop3): force clearing of disk cache [ 154.399762][ T6574] BTRFS info (device loop3): turning on sync discard [ 154.412210][ T6574] BTRFS info (device loop3): disabling free space tree [ 154.419078][ T6574] BTRFS info (device loop3): has skinny extents [ 154.471391][ T154] attempt to access beyond end of device [ 154.471391][ T154] loop1: rw=2049, want=40976, limit=40427 [ 154.504943][ T6566] loop2: detected capacity change from 0 to 40427 [ 154.569139][ T6572] loop0: detected capacity change from 0 to 40427 [ 154.585735][ T6566] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 154.598457][ T6566] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.610872][ T6566] F2FS-fs (loop2): invalid crc value [ 154.617630][ T6572] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 154.625658][ T6572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.643536][ T6572] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 154.652065][ T6566] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.682366][ T6572] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.690759][ T6574] BTRFS info (device loop3): enabling ssd optimizations [ 154.699594][ T6574] BTRFS info (device loop3): clearing free space tree [ 154.706823][ T6574] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.718128][ T6574] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.832922][ T6566] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.840014][ T6566] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.881093][ T6572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 154.918093][ T6608] loop4: detected capacity change from 0 to 128 [ 154.932157][ T6572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.025348][ T6572] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 155.056006][ T6608] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 155.259390][ T3769] attempt to access beyond end of device [ 155.259390][ T3769] loop2: rw=1, want=45104, limit=40427 [ 155.875268][ T6619] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.884076][ T6619] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.892910][ T6619] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.901653][ T6619] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.939681][ T6621] loop3: detected capacity change from 0 to 736 [ 156.153514][ T6621] rock: directory entry would overflow storage [ 156.165375][ T6621] rock: sig=0x5850, size=36, remaining=14 [ 156.189958][ T6625] loop0: detected capacity change from 0 to 4096 [ 156.242982][ T6625] ntfs3: Invalid value for gid. [ 156.265288][ T6611] loop1: detected capacity change from 0 to 32768 [ 156.303648][ T6628] loop3: detected capacity change from 0 to 2048 [ 156.340303][ T6628] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.378851][ T6617] loop4: detected capacity change from 0 to 32768 [ 156.407648][ T6634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.438091][ T6611] XFS (loop1): Mounting V5 Filesystem [ 156.474659][ T6617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.945 (6617) [ 156.529451][ T6617] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 156.582246][ T6617] BTRFS info (device loop4): using free space tree [ 156.593978][ T6617] BTRFS info (device loop4): has skinny extents [ 156.658176][ T6611] XFS (loop1): Starting recovery (logdev: internal) [ 156.740539][ T6611] XFS (loop1): Ending recovery (logdev: internal) [ 156.842921][ T6617] BTRFS info (device loop4): enabling ssd optimizations [ 157.004598][ T3571] XFS (loop1): Unmounting Filesystem [ 157.022895][ T6639] loop0: detected capacity change from 0 to 32768 [ 157.079744][ T3624] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 157.524842][ T6668] loop0: detected capacity change from 0 to 512 [ 157.634902][ T6668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.713487][ T6668] EXT4-fs (loop0): 1 truncate cleaned up [ 157.720622][ T6668] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,min_batch_time=0x0000000000000fff,journal_dev=0x0000000000000005,user_xattr,abort,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 157.762443][ T6652] loop3: detected capacity change from 0 to 32768 [ 157.831404][ T6652] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.952 (6652) [ 157.906152][ T6666] loop2: detected capacity change from 0 to 32768 [ 157.923954][ T3567] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 157.974567][ T6652] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 158.012220][ T6652] BTRFS info (device loop3): turning off barriers [ 158.018718][ T6652] BTRFS info (device loop3): enabling auto defrag [ 158.053511][ T6652] BTRFS info (device loop3): ignoring bad roots [ 158.060341][ T6652] BTRFS info (device loop3): force zlib compression, level 3 [ 158.079370][ T6652] BTRFS info (device loop3): enabling ssd optimizations [ 158.105008][ T6652] BTRFS info (device loop3): using spread ssd allocation scheme [ 158.118594][ T6666] XFS (loop2): Mounting V5 Filesystem [ 158.132339][ T6652] BTRFS info (device loop3): using free space tree [ 158.162287][ T6652] BTRFS info (device loop3): has skinny extents [ 158.168700][ T6652] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 158.256390][ T6652] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 158.295631][ T6652] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 158.320053][ T6690] loop0: detected capacity change from 0 to 128 [ 158.407875][ T6666] XFS (loop2): Starting recovery (logdev: internal) [ 158.420753][ T6652] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 158.462763][ T6690] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 158.476726][ T6666] XFS (loop2): Ending recovery (logdev: internal) [ 158.534244][ T6652] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 158.571416][ T6652] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 158.599508][ T6672] loop4: detected capacity change from 0 to 32768 [ 158.631609][ T6652] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 158.661279][ T3575] XFS (loop2): Unmounting Filesystem [ 158.704601][ T6672] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.953 (6672) [ 158.727887][ T6672] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 158.737465][ T6672] BTRFS info (device loop4): enabling auto defrag [ 158.744257][ T6672] BTRFS info (device loop4): doing ref verification [ 158.751052][ T6672] BTRFS info (device loop4): max_inline at 0 [ 158.755347][ T6652] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 158.758439][ T6672] BTRFS info (device loop4): force clearing of disk cache [ 158.795028][ T6672] BTRFS info (device loop4): turning on sync discard [ 158.812341][ T6652] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 158.816405][ T6672] BTRFS info (device loop4): disabling free space tree [ 158.831122][ T6672] BTRFS info (device loop4): has skinny extents [ 158.918451][ T6652] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 158.981795][ T6672] BTRFS info (device loop4): enabling ssd optimizations [ 158.993721][ T6672] BTRFS info (device loop4): clearing free space tree [ 159.033864][ T6672] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.094388][ T6672] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.175523][ T6734] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.185101][ T6734] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.194242][ T6734] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.203647][ T6734] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.338270][ T6672] BTRFS info (device loop4): balance: start -f [ 159.354240][ T6672] BTRFS info (device loop4): balance: ended with status: 0 [ 159.523674][ T6738] loop2: detected capacity change from 0 to 736 [ 159.721617][ T6738] rock: directory entry would overflow storage [ 159.769122][ T6738] rock: sig=0x5850, size=36, remaining=14 [ 160.541201][ T6744] loop1: detected capacity change from 0 to 32768 [ 160.650577][ T6746] loop0: detected capacity change from 0 to 32768 [ 160.690735][ T6744] XFS (loop1): Mounting V5 Filesystem [ 160.794637][ T6746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.965 (6746) [ 160.873952][ T6744] XFS (loop1): Ending clean mount [ 160.879534][ T6746] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 160.905969][ T6754] loop3: detected capacity change from 0 to 32768 [ 160.932347][ T6746] BTRFS info (device loop0): using free space tree [ 160.946924][ T6746] BTRFS info (device loop0): has skinny extents [ 160.961534][ T6754] XFS: ikeep mount option is deprecated. [ 161.028096][ T6754] XFS (loop3): Mounting V5 Filesystem [ 161.057090][ T6757] loop2: detected capacity change from 0 to 40427 [ 161.074136][ T3571] XFS (loop1): Unmounting Filesystem [ 161.118748][ T6757] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 161.137236][ T6757] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 161.163450][ T6757] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 161.177338][ T6754] XFS (loop3): Ending clean mount [ 161.184893][ T6757] F2FS-fs (loop2): Found nat_bits in checkpoint [ 161.223903][ T6754] XFS (loop3): Quotacheck needed: Please wait. [ 161.242615][ T6746] BTRFS info (device loop0): enabling ssd optimizations [ 161.367990][ T3611] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 161.374202][ T6757] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 161.402198][ T6757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 161.446919][ T6754] XFS (loop3): Quotacheck: Done. [ 161.488995][ T6757] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 161.586288][ T4196] XFS (loop3): Unmounting Filesystem [ 162.166381][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'. [ 162.277506][ T6811] loop2: detected capacity change from 0 to 2048 [ 162.318253][ T6815] loop3: detected capacity change from 0 to 128 [ 162.376537][ T6815] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 162.386698][ T6811] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.471115][ T6820] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.902840][ T6807] loop4: detected capacity change from 0 to 32768 [ 163.044578][ T6807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.978 (6807) [ 163.064177][ T6838] loop0: detected capacity change from 0 to 64 [ 163.102697][ T6807] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 163.162361][ T6807] BTRFS info (device loop4): turning on sync discard [ 163.169080][ T6807] BTRFS info (device loop4): using free space tree [ 163.229978][ T6807] BTRFS info (device loop4): has skinny extents [ 163.451903][ T6823] loop1: detected capacity change from 0 to 32768 [ 163.473200][ T6826] loop2: detected capacity change from 0 to 32768 [ 163.529797][ T6826] XFS: ikeep mount option is deprecated. [ 163.535786][ T6807] BTRFS info (device loop4): enabling ssd optimizations [ 163.547336][ T6823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.982 (6823) [ 163.666935][ T6826] XFS (loop2): Mounting V5 Filesystem [ 163.687599][ T6823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 163.718905][ T6823] BTRFS info (device loop1): using free space tree [ 163.725748][ T6823] BTRFS info (device loop1): has skinny extents [ 163.941481][ T6836] loop3: detected capacity change from 0 to 40427 [ 164.024406][ T6836] F2FS-fs (loop3): invalid crc value [ 164.079021][ T6836] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.118740][ T6826] XFS (loop2): Ending clean mount [ 164.128206][ T6826] XFS (loop2): Quotacheck needed: Please wait. [ 164.242282][ T6823] BTRFS info (device loop1): enabling ssd optimizations [ 164.244381][ T6836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.261788][ T6826] XFS (loop2): Quotacheck: Done. [ 164.451399][ T6896] sp0: Synchronizing with TNC [ 164.568697][ T6879] loop0: detected capacity change from 0 to 32768 [ 164.629564][ T6879] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.993 (6879) [ 164.662540][ T4196] attempt to access beyond end of device [ 164.662540][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 164.667288][ T6879] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 164.692229][ T3575] XFS (loop2): Unmounting Filesystem [ 164.776838][ T6879] BTRFS info (device loop0): setting nodatasum [ 164.802114][ T6879] BTRFS info (device loop0): using free space tree [ 164.808773][ T6879] BTRFS info (device loop0): has skinny extents [ 165.182279][ T6879] BTRFS info (device loop0): enabling ssd optimizations [ 165.236508][ T26] audit: type=1800 audit(1728625996.910:12): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.993" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 165.688273][ T6918] loop2: detected capacity change from 0 to 32768 [ 165.789364][ T6918] JBD2: Ignoring recovery information on journal [ 165.798538][ T6918] jbd2_journal_bmap: journal block not found at offset 64 on loop2-27 [ 165.813500][ T6918] JBD2: bad block at offset 64 [ 165.821549][ T6918] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.916561][ T3575] ocfs2: Unmounting device (7,2) on (node local) [ 166.147850][ T6938] loop0: detected capacity change from 0 to 2048 [ 166.245938][ T6938] loop0: p1 p2 p3 [ 166.251793][ T6938] loop0: p1 size 458752 extends beyond EOD, truncated [ 166.274758][ T6940] loop4: detected capacity change from 0 to 4096 [ 166.290258][ T6938] loop0: p2 start 4294902784 is beyond EOD, truncated [ 166.310083][ T6938] loop0: p3 start 4278191616 is beyond EOD, truncated [ 166.341793][ T6945] loop2: detected capacity change from 0 to 128 [ 166.391449][ T6940] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 166.428973][ T6945] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 166.461525][ T6940] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 166.491874][ T6940] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 166.530477][ T6940] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 166.616106][ T5945] udevd[5945]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 166.689013][ T6940] ntfs: volume version 3.1. [ 166.693766][ T6927] loop1: detected capacity change from 0 to 32768 [ 166.753899][ T6940] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp737. You might want to try to use the mount option nls=utf8. [ 166.792929][ T6927] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.998 (6927) [ 166.828133][ T6940] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 166.871204][ T6927] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 166.920917][ T6927] BTRFS info (device loop1): turning off barriers [ 166.959328][ T6927] BTRFS info (device loop1): enabling auto defrag [ 166.992266][ T6927] BTRFS info (device loop1): ignoring bad roots [ 166.998568][ T6927] BTRFS info (device loop1): force zlib compression, level 3 [ 167.081024][ T6927] BTRFS info (device loop1): enabling ssd optimizations [ 167.131635][ T6927] BTRFS info (device loop1): using spread ssd allocation scheme [ 167.162050][ T6927] BTRFS info (device loop1): using free space tree [ 167.183767][ T6955] loop2: detected capacity change from 0 to 4096 [ 167.198802][ T6927] BTRFS info (device loop1): has skinny extents [ 167.205482][ T6942] loop3: detected capacity change from 0 to 32768 [ 167.215370][ T6927] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 167.230443][ T6942] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1006 (6942) [ 167.252223][ T6955] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 167.257354][ T6927] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 167.328370][ T6942] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 167.379433][ T6955] ntfs: (device loop2): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 167.391199][ T6927] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 167.402532][ T6942] BTRFS info (device loop3): using free space tree [ 167.402554][ T6942] BTRFS info (device loop3): has skinny extents [ 167.429568][ T6955] ntfs: volume version 3.1. [ 167.532265][ T6927] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 167.568740][ T6927] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 167.624693][ T6927] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 167.640684][ T6927] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 167.653252][ T6942] BTRFS info (device loop3): enabling ssd optimizations [ 167.653801][ T6927] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 167.751092][ T6994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1012'. [ 167.752780][ T6959] loop4: detected capacity change from 0 to 32768 [ 167.766682][ T6994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1012'. [ 167.793379][ T6927] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 167.826083][ T6980] loop0: detected capacity change from 0 to 4096 [ 167.843808][ T6927] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 167.877339][ T6959] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1010 (6959) [ 168.028337][ T3583] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (3583) [ 168.217351][ T7010] loop4: detected capacity change from 0 to 512 [ 168.641905][ T7010] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.688299][ T7010] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 168.782764][ T7021] loop0: detected capacity change from 0 to 64 [ 168.816215][ T7010] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 168.839031][ T7021] hfs: keylen 94 too large [ 168.985637][ T7013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.079323][ T7029] loop1: detected capacity change from 0 to 1024 [ 169.138988][ T7029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.255802][ T7033] loop3: detected capacity change from 0 to 4096 [ 169.270087][ T7037] loop4: detected capacity change from 0 to 1024 [ 169.307391][ T7033] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 169.375405][ T7037] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 169.433945][ T7037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e800e018, mo2=0000] [ 169.448849][ T7033] ntfs: volume version 3.1. [ 169.450498][ T7037] System zones: 0-1, 3-12 [ 169.497921][ T7037] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.504865][ T7037] EXT4-fs error (device loop4): ext4_free_blocks:6225: comm syz.4.1037: Freeing blocks not in datazone - block = 0, count = 4096 [ 169.518868][ T7046] loop0: detected capacity change from 0 to 128 [ 169.530221][ T7037] EXT4-fs (loop4): 1 orphan inode deleted [ 169.536220][ T7037] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: writeback. [ 169.628261][ T7046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.644337][ T7053] loop1: detected capacity change from 0 to 64 [ 169.651392][ T7051] loop2: detected capacity change from 0 to 512 [ 169.670964][ T7046] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038 (0x7fffffff) [ 169.733369][ T7057] loop3: detected capacity change from 0 to 64 [ 169.791627][ T7051] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 169.811568][ T7061] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 169.863149][ T7051] ext4 filesystem being mounted at /207/bus supports timestamps until 2038 (0x7fffffff) [ 170.140369][ T7079] loop2: detected capacity change from 0 to 1024 [ 170.250386][ T7087] loop3: detected capacity change from 0 to 1024 [ 170.287602][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.336949][ T7079] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 170.439758][ T7079] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 170.447450][ T7099] loop4: detected capacity change from 0 to 256 [ 170.855798][ T7107] loop4: detected capacity change from 0 to 4096 [ 171.177185][ T7123] loop1: detected capacity change from 0 to 16 [ 171.314140][ T7123] erofs: (device loop1): mounted with root inode @ nid 36. [ 171.346087][ T7133] loop2: detected capacity change from 0 to 16 [ 171.455699][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.478590][ T7133] erofs: (device loop2): mounted with root inode @ nid 36. [ 171.709451][ T7146] loop1: detected capacity change from 0 to 4096 [ 171.714768][ T7150] loop4: detected capacity change from 0 to 128 [ 171.771422][ T7150] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 172.062187][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.302134][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 172.376094][ T7152] loop2: detected capacity change from 0 to 32768 [ 172.473701][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 172.543735][ T7152] XFS (loop2): Mounting V5 Filesystem [ 172.562540][ T21] usb 5-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 172.593110][ T21] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.671162][ T7162] loop1: detected capacity change from 0 to 32768 [ 172.684629][ T7152] XFS (loop2): Ending clean mount [ 172.702414][ T7152] XFS (loop2): Quotacheck needed: Please wait. [ 172.715737][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.725372][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 172.725521][ T7185] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = -1, id = 0 [ 172.734536][ T21] usb 5-1: SerialNumber: syz [ 172.788150][ T7152] XFS (loop2): Quotacheck: Done. [ 172.793262][ T21] cdc_ether 5-1:1.0: skipping garbage [ 172.798692][ T21] usb 5-1: bad CDC descriptors [ 172.837130][ T3650] attempt to access beyond end of device [ 172.837130][ T3650] loop1: rw=1, want=2621800, limit=32768 [ 172.880413][ T275] blkno = 5002c, nblocks = 1 [ 172.888664][ T3575] XFS (loop2): Unmounting Filesystem [ 172.905990][ T275] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 172.905990][ T275] [ 172.916966][ T275] ERROR: (device loop1): remounting filesystem as read-only [ 172.999943][ T5744] usb 5-1: USB disconnect, device number 6 [ 173.596523][ T7189] loop2: detected capacity change from 0 to 2048 [ 173.618093][ T7196] loop0: detected capacity change from 0 to 512 [ 173.689081][ T7196] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 173.691571][ T7189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.718110][ T7196] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 173.756053][ T7204] loop3: detected capacity change from 0 to 512 [ 173.763315][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.784158][ T7204] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 173.787096][ T7196] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 173.799604][ T7196] System zones: 1-12 [ 173.808690][ T7204] EXT4-fs (loop3): old and new quota format mixing [ 173.809495][ T7196] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1096: corrupted in-inode xattr [ 173.846351][ T7196] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1096: couldn't read orphan inode 15 (err -117) [ 173.859722][ T7196] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none. [ 174.010049][ T7204] loop3: detected capacity change from 0 to 1764 [ 174.282681][ T7220] ntfs3: Bad value for 'gid' [ 174.704890][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1116'. [ 174.899913][ T7246] loop3: detected capacity change from 0 to 16 [ 174.991921][ T7246] erofs: (device loop3): EXPERIMENTAL big pcluster feature in use. Use at your own risk! [ 175.029778][ T7246] erofs: (device loop3): erofs_read_inode: bogus i_mode (3) @ nid 36 [ 175.188411][ T7226] loop4: detected capacity change from 0 to 32768 [ 175.222455][ T7248] netlink: 'syz.2.1131': attribute type 4 has an invalid length. [ 175.288058][ T7226] ERROR: (device loop4): diWrite: ixpxd invalid [ 175.288058][ T7226] [ 175.331834][ T7226] ERROR: (device loop4): remounting filesystem as read-only [ 175.385283][ T7226] ERROR: (device loop4): txCommit: [ 175.385283][ T7226] [ 175.509964][ T275] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 175.544694][ T275] ------------[ cut here ]------------ [ 175.550190][ T275] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 175.585882][ T7258] loop3: detected capacity change from 0 to 4096 [ 175.617712][ T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 175.623802][ T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.167-syzkaller #0 [ 175.631774][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.641823][ T275] RIP: 0010:txUnlock+0xc6e/0xca0 [ 175.646763][ T275] Code: 88 88 4c 07 0f 0b e8 21 c0 99 fe 48 c7 c7 00 7a c1 8a 48 c7 c6 f9 75 c1 8a ba a3 03 00 00 48 c7 c1 c0 84 c1 8a e8 62 88 4c 07 <0f> 0b e8 fb bf 99 fe 48 c7 c7 00 7a c1 8a 48 c7 c6 f9 75 c1 8a ba [ 175.666362][ T275] RSP: 0018:ffffc90002d87d08 EFLAGS: 00010246 [ 175.672426][ T275] RAX: 0000000000000037 RBX: 0000000000000000 RCX: f588954a175f0200 [ 175.680394][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 175.688367][ T275] RBP: ffff888063b8dd90 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 175.696333][ T275] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022e39000 [ 175.704308][ T275] R13: ffff88807d3be094 R14: ffffc900028fa000 R15: dffffc0000000000 [ 175.712317][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 175.721238][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.727809][ T275] CR2: 00007f66c75efa8c CR3: 000000006505b000 CR4: 00000000003506f0 [ 175.735773][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.743736][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.751709][ T275] Call Trace: [ 175.754975][ T275] [ 175.757893][ T275] ? __die_body+0x5e/0xa0 [ 175.762215][ T275] ? die+0x83/0xb0 [ 175.765931][ T275] ? do_trap+0x11e/0x350 [ 175.770192][ T275] ? txUnlock+0xc6e/0xca0 [ 175.774512][ T275] ? txUnlock+0xc6e/0xca0 [ 175.778836][ T275] ? do_error_trap+0x13d/0x1e0 [ 175.783593][ T275] ? txUnlock+0xc6e/0xca0 [ 175.787916][ T275] ? do_int3+0x30/0x30 [ 175.791975][ T275] ? rcu_is_watching+0x11/0xa0 [ 175.796734][ T275] ? handle_invalid_op+0x2c/0x40 [ 175.801676][ T275] ? txUnlock+0xc6e/0xca0 [ 175.806004][ T275] ? exc_invalid_op+0x2f/0x40 [ 175.810676][ T275] ? asm_exc_invalid_op+0x16/0x20 [ 175.815697][ T275] ? __wake_up_klogd+0xcc/0x100 [ 175.820543][ T275] ? txUnlock+0xc6e/0xca0 [ 175.824870][ T275] ? txUnlock+0xc6e/0xca0 [ 175.829194][ T275] ? lockdep_hardirqs_on+0x94/0x130 [ 175.834387][ T275] jfs_lazycommit+0x5cd/0xc30 [ 175.839056][ T275] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 175.844945][ T275] ? lockdep_hardirqs_on+0x94/0x130 [ 175.850138][ T275] ? txFreelock+0x580/0x580 [ 175.854636][ T275] ? sched_dynamic_update+0x240/0x240 [ 175.860005][ T275] kthread+0x3f6/0x4f0 [ 175.864069][ T275] ? txFreelock+0x580/0x580 [ 175.868563][ T275] ? kthread_blkcg+0xd0/0xd0 [ 175.873143][ T275] ret_from_fork+0x1f/0x30 [ 175.877557][ T275] [ 175.880563][ T275] Modules linked in: [ 175.890431][ T4838] Bluetooth: hci4: command 0x0405 tx timeout [ 175.896929][ T275] ---[ end trace 5f034f88a4bf73a9 ]--- [ 175.906335][ T275] RIP: 0010:txUnlock+0xc6e/0xca0 [ 175.918766][ T275] Code: 88 88 4c 07 0f 0b e8 21 c0 99 fe 48 c7 c7 00 7a c1 8a 48 c7 c6 f9 75 c1 8a ba a3 03 00 00 48 c7 c1 c0 84 c1 8a e8 62 88 4c 07 <0f> 0b e8 fb bf 99 fe 48 c7 c7 00 7a c1 8a 48 c7 c6 f9 75 c1 8a ba [ 175.947167][ T275] RSP: 0018:ffffc90002d87d08 EFLAGS: 00010246 [ 175.953379][ T275] RAX: 0000000000000037 RBX: 0000000000000000 RCX: f588954a175f0200 [ 175.961362][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 175.969784][ T275] RBP: ffff888063b8dd90 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 175.979468][ T275] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888022e39000 [ 175.987833][ T275] R13: ffff88807d3be094 R14: ffffc900028fa000 R15: dffffc0000000000 [ 176.008923][ T275] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 176.022327][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.026518][ T7258] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.029045][ T275] CR2: 00007f66c75c0178 CR3: 000000006707f000 CR4: 00000000003506f0 [ 176.048367][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.057418][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.065786][ T275] Kernel panic - not syncing: Fatal exception [ 176.072703][ T275] Kernel Offset: disabled [ 176.077039][ T275] Rebooting in 86400 seconds..