last executing test programs: 2.620658297s ago: executing program 1 (id=1728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0xfffffffffffffffd}, 0x10) 2.427348607s ago: executing program 1 (id=1731): modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 2.323526737s ago: executing program 3 (id=1733): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x9, @win={{0x3b62, 0x8, 0x2, 0x7f}, 0x7, 0xfffffffd, 0x0, 0x3, 0x0, 0x4}}) 2.250129284s ago: executing program 1 (id=1735): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000000)) 2.079543522s ago: executing program 3 (id=1738): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1b0) getdents64(r0, &(0x7f0000000240)=""/167, 0xa7) 2.048326954s ago: executing program 1 (id=1739): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x5b, 0xa, 0x0, "b75cbb1844038d2cd97c94fc49f31638b5f9623a74002a5b00", 0x31303553}) 1.883488191s ago: executing program 3 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0) 1.756100884s ago: executing program 1 (id=1746): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000900000000000000fdffffff180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.701235239s ago: executing program 3 (id=1748): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 1.528741957s ago: executing program 3 (id=1752): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000007480)=0xffffffffffffffc8) 1.374585052s ago: executing program 3 (id=1754): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998247856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f0b00f694c5bef739aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c669485a2e714ec9bb31ae0f201ca2e5b9ece2b035fbe2ee8d90aa87a986a307fe4fe90b7b2a48217f79001e60692c", @ANYRESHEX=0x0], 0x2, 0x5567, &(0x7f000000c4c0)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1.374237512s ago: executing program 2 (id=1755): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x13, r0, 0x81000000) 1.365206603s ago: executing program 1 (id=1756): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) 1.304278799s ago: executing program 4 (id=1757): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff210000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.142252735s ago: executing program 2 (id=1759): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+Y7aqRYZCBBKXSxJPAHdYtwIknIBoounQSbSlCMhPKWEt06CF09RF2Xhf0LdPWw7KKX3X9iL94W9ugyM+4uy/of7PO6zef5Pp8H5sXTeUZx7nm79eWr2+m4H9JvnGr57eFoVPLyEHS3LsyD9+MSfEYz1rDogxdPYxYfG03XqLeb3veiBGHAvo6XW0D89J6d0PQ15An2M/dhctt/Z3A5c4tY/t4dDXY8yHLAsnEt6LsZZF7fEWCCUqHVsbsmvyrZ1C0F3WF2c2Pv9Wy38ujhM/d3oTx4EE2a2R/wD1tFdqafDszV1nxWfeVUnXmxUHhSzOUNHu/7hb0B+mX0G7xXoL0+A78vRPKefgc/Ffzxby22VQyY/D12WuGzf937bqZBpYb1WtL6X0vcMDAz2pssWcOfEFk3EkIIIYQQQgghhBBCCCGEEEIIcdWdBAAA///mllHe") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x31c5024, 0x0, 0x4, 0x0, &(0x7f0000000200)) 1.109477058s ago: executing program 4 (id=1760): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 887.518471ms ago: executing program 2 (id=1762): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 843.920545ms ago: executing program 4 (id=1763): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000001800)="c0b3f641e93358db730fa114ef6fd9c6705352e1b8dfb95390d3ebb8cd73712ed6131a236b661abbe3038b46fa6f7c0f1e5c157cc3b5089582c0ef2a0fb81c4b6d478f7be370faea02f562a6fdead5a874b85495136d707a1cef985f3a56aeab38fa694e94d9e726bc11b61f00000000000000ed469d85cbf48688f6f8b4cd643a32a94ab6ec8efc569356a30a982aeae44ce595e461a425b08c032a84b79b477b410627d19c42cbb08d", 0xaa}, {&(0x7f0000000100)="8323000000001d39afc62ceefc8936f299eecf", 0x1a}, {&(0x7f0000000180), 0x13}, {&(0x7f00000001c0)="55c1ac6a33bcabcbf05b5674529841f58350038a066a02a6bc9d8c5eecfdbde63fe0ae2f71fe751ba7f269ebe88062259a37084b213e218b5a144b53a81e7cc49a22a19158853dbfabb1be2c6ab892f6083dc94e6a6710e73b7f4d1e2c52f8fe322e59d8020f1b81ca806ad1d02ffb2e82e69cf0a80a05a65dead7c62f7974b805c23351c9b7c340b4b064e60b5a4efdc0833b928d4530831c03a39c7727a1a29aec7354d1c5e9a5aa8af60670eee565ae446b989f81ea74a578a387aec81be9a2fdc25f94c171a3874be3e051956f638cf1f01811ddb63de509efb4008cdeb5cb0644c7cb2c", 0xfd82}, {&(0x7f0000000700)="820566a0e5038adaeacf19e7470234a058fa1a347381c790661dde230dc4150ae23ec76b77396270f45644f86e8d09edab75a26acb1e6209b5be5b40d09ba299b5c626c28448e5f04342e71e03d98aab89bf23721c77e3d1d2553eef61a61dc700000000000010bc27d1586457875f2878644dc8f4c8d47c9edc1bdb46392e3b52895de73f4d8808e1bd71ed7a571dc4f41465e8ad35c2ed5a79d701f8a8e492", 0xa0}, {&(0x7f0000000380)="c77d467908bfdef41403f806aa8abd7163a810e03642f3dea6321a7b21b738ed132db614140e7dc513a4f44adab6b69a9208bc55cf77e018bf5821baa9521cedb29a6d43c72b87ca91a291", 0x4b}, {&(0x7f0000000400)="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", 0x1de}], 0x7, 0x0) 773.073412ms ago: executing program 0 (id=1764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 765.823053ms ago: executing program 2 (id=1765): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x3c}}, 0x0) 654.306854ms ago: executing program 4 (id=1766): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) 519.485537ms ago: executing program 0 (id=1767): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 506.495939ms ago: executing program 2 (id=1768): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 403.327089ms ago: executing program 4 (id=1769): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 377.974292ms ago: executing program 2 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x74}}, 0x0) 262.771794ms ago: executing program 0 (id=1771): r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10) 151.923225ms ago: executing program 0 (id=1772): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x1) 149.512705ms ago: executing program 4 (id=1773): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) 91.724051ms ago: executing program 0 (id=1774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@flushpolicy={0xf0, 0x12, 0x105, 0x0, 0x0, "", [@sa={0xe0, 0x6, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x5, 0x4e20, 0x1, 0x0, 0x20, 0x20, 0x2b}, {@in=@empty, 0x4d5, 0x3c}, @in=@private=0xa010102, {0x9dd, 0x2, 0x349b, 0x5, 0x8000000000000000, 0x3a, 0x9, 0x7ff}, {0x1f174949, 0x5, 0x73d9, 0x4}, {0x486, 0x9}, 0x70bd25, 0x3505, 0xa, 0x0, 0x6}}]}, 0xf0}}, 0x20040810) 0s ago: executing program 0 (id=1775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffc, 0x8}, {0x0, 0x6}, {0x1, 0x3}, 0x10, 0x4000, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.910500][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 68.150142][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 68.218658][ T4415] netlink: 244 bytes leftover after parsing attributes in process `syz.3.18'. [ 68.230277][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 68.236404][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 68.249491][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 68.734715][ T4429] loop3: detected capacity change from 0 to 256 [ 69.121750][ T4413] loop0: detected capacity change from 0 to 32768 [ 69.139146][ T4408] loop2: detected capacity change from 0 to 65536 [ 69.164603][ T4413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.16 (4413) [ 69.281927][ T4413] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.297647][ T4408] XFS (loop2): Mounting V5 Filesystem [ 69.339745][ T4413] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 69.348483][ T4413] BTRFS info (device loop0): force clearing of disk cache [ 69.358356][ T4413] BTRFS info (device loop0): enabling auto defrag [ 69.365970][ T4413] BTRFS info (device loop0): enabling ssd optimizations [ 69.373942][ T4413] BTRFS info (device loop0): max_inline at 0 [ 69.418043][ T4408] XFS (loop2): Ending clean mount [ 69.423778][ T4413] BTRFS info (device loop0): enabling disk space caching [ 69.439820][ T4413] BTRFS info (device loop0): disk space caching is enabled [ 69.468405][ T4308] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 69.517101][ T4308] XFS (loop2): Unmount and run xfs_repair [ 69.532238][ T4308] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 69.541276][ T4308] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 69.550488][ T4308] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 69.559846][ T4308] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 69.569575][ T4308] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 69.583351][ T4308] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.593721][ T4308] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.603980][ T4467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 69.659672][ T4308] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.680330][ T4308] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 69.698763][ T4408] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 69.796990][ T4408] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 69.829546][ T4408] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 69.843943][ T4413] BTRFS info (device loop0): rebuilding free space tree [ 69.895821][ T4413] BTRFS info (device loop0): disabling free space tree [ 69.913469][ T4413] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 69.941139][ T4413] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 69.987462][ T4408] syz.2.3 (4408) used greatest stack depth: 20832 bytes left [ 70.017977][ T4276] XFS (loop2): Unmounting Filesystem [ 70.173770][ T4488] nft_compat: unsupported protocol 0 [ 70.269190][ T4265] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.278801][ T4492] netlink: 68 bytes leftover after parsing attributes in process `syz.4.44'. [ 70.304361][ T4492] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 71.232432][ T4527] tmpfs: Bad value for 'mpol' [ 71.354393][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361114][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.371867][ T4531] loop2: detected capacity change from 0 to 512 [ 71.420613][ T4531] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.427136][ T4531] EXT4-fs: Ignoring removed bh option [ 71.528357][ T4537] loop1: detected capacity change from 0 to 16 [ 71.554626][ T4531] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.577566][ T4537] ======================================================= [ 71.577566][ T4537] WARNING: The mand mount option has been deprecated and [ 71.577566][ T4537] and is ignored by this kernel. Remove the mand [ 71.577566][ T4537] option from the mount to silence this warning. [ 71.577566][ T4537] ======================================================= [ 71.629906][ T4531] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.59: bad orphan inode 14 [ 71.711449][ T4531] ext4_test_bit(bit=13, block=18) = 1 [ 71.716885][ T4531] is_bad_inode(inode)=0 [ 71.756898][ T4531] NEXT_ORPHAN(inode)=0 [ 71.787174][ T4531] max_ino=32 [ 71.799319][ T4531] i_nlink=1 [ 71.808792][ T4531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.809281][ T4537] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.961047][ T4516] loop4: detected capacity change from 0 to 32768 [ 72.031749][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 72.703472][ T4573] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.759567][ T4573] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.797418][ T4573] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.835807][ T4573] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.870047][ T4573] device geneve2 entered promiscuous mode [ 72.893454][ T4573] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.918608][ T4573] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.929767][ T4585] loop2: detected capacity change from 0 to 8 [ 72.938615][ T4573] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.951796][ T4573] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 72.980719][ T4585] SQUASHFS error: Failed to read block 0x1ec: -5 [ 72.995413][ T4585] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 73.099782][ T4587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 73.159661][ T4587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 73.352784][ T4589] syz.2.86 (4589) used greatest stack depth: 19232 bytes left [ 73.634129][ T4611] loop3: detected capacity change from 0 to 64 [ 73.746625][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 73.796835][ T4615] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 74.028839][ T4621] loop0: detected capacity change from 0 to 4096 [ 74.121900][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.179810][ T4633] No such timeout policy "syz1" [ 74.186930][ T4635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 74.463054][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 75.462847][ T4686] netlink: 'syz.3.134': attribute type 30 has an invalid length. [ 75.647506][ T4649] loop2: detected capacity change from 0 to 40427 [ 75.651887][ T4693] capability: warning: `syz.3.137' uses deprecated v2 capabilities in a way that may be insecure [ 75.728448][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 75.747562][ T4649] F2FS-fs (loop2): invalid crc value [ 75.782691][ T4649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 75.785252][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 75.919722][ T4649] F2FS-fs (loop2): Start checkpoint disabled! [ 75.975709][ T4649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 76.163200][ T4710] loop3: detected capacity change from 0 to 256 [ 76.234529][ C1] sd 0:0:1:0: [sda] tag#1508 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 76.245257][ C1] sd 0:0:1:0: [sda] tag#1508 CDB: Read(6) 08 00 00 00 03 44 [ 76.266435][ T4716] loop4: detected capacity change from 0 to 16 [ 76.366269][ T4716] erofs: (device loop4): mounted with root inode @ nid 36. [ 76.448242][ T4716] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 76.473663][ T14] cfg80211: failed to load regulatory.db [ 76.521300][ T4716] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 76.561774][ T4721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 76.581898][ T4716] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 76.616997][ T4716] syz.4.148: attempt to access beyond end of device [ 76.616997][ T4716] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 76.676940][ T4716] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 76.728834][ T26] audit: type=1800 audit(1763234520.482:2): pid=4716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.148" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 77.412726][ T4752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 77.522950][ T4756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.168'. [ 77.579729][ T4756] netlink: 'syz.0.168': attribute type 3 has an invalid length. [ 77.641488][ T4762] i2c i2c-0: Invalid block write size 252 [ 77.779563][ T4308] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 77.929001][ T4770] VFS: could not find a valid V7 on nullb0. [ 78.013604][ T4308] usb 5-1: config 1 has an invalid interface descriptor of length 6, skipping [ 78.049524][ T4308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.109271][ T4308] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.148097][ T4308] usb 5-1: config 1 has no interface number 1 [ 78.171835][ T4308] usb 5-1: string descriptor 0 read error: -22 [ 78.184228][ T4308] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.199659][ T4308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.297632][ T4308] usb 5-1: MIDIStreaming interface descriptor not found [ 78.404947][ T4308] snd-usb-audio: probe of 5-1:1.2 failed with error -16 [ 78.516301][ T4308] usb 5-1: USB disconnect, device number 2 [ 78.765851][ T4773] loop1: detected capacity change from 0 to 32768 [ 78.785850][ T4797] loop3: detected capacity change from 0 to 256 [ 78.815838][ T4797] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.855641][ T4773] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 78.872261][ T4797] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 78.917988][ T4773] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 78.950576][ T4797] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.988524][ T4773] (syz.1.176,4773,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 79.019529][ T4773] (syz.1.176,4773,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 79.079662][ T4773] (syz.1.176,4773,1):ocfs2_mknod:298 ERROR: status = -2 [ 79.087058][ T4773] (syz.1.176,4773,1):ocfs2_mknod:502 ERROR: status = -2 [ 79.304230][ T4814] device netdevsim0 entered promiscuous mode [ 79.307992][ T4817] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 79.321018][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 79.401944][ T52] block nbd3: Attempted send on invalid socket [ 79.408518][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.466113][ T4819] IPv6: addrconf: prefix option has invalid lifetime [ 79.525785][ T4823] loop4: detected capacity change from 0 to 8 [ 79.546380][ T26] audit: type=1326 audit(1763234523.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 79.639549][ T26] audit: type=1326 audit(1763234523.302:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 79.713367][ T4829] loop3: detected capacity change from 0 to 512 [ 79.757324][ T26] audit: type=1326 audit(1763234523.302:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4824 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 79.850726][ T4836] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.203'. [ 79.862400][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.880199][ T4829] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.007405][ T4829] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.201: Attempting to read directory block (0) that is past i_size (3) [ 80.224729][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 80.379056][ T4850] loop2: detected capacity change from 0 to 1024 [ 80.403786][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 80.438557][ T4850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.558544][ T4850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.667760][ T4850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 80.825925][ T4872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.875336][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 81.047703][ T4882] loop0: detected capacity change from 0 to 256 [ 81.169603][ T4308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.327616][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 81.337363][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 81.337438][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 81.337452][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 81.339258][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 81.348756][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 81.385336][ T4308] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 81.385379][ T4308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.385395][ T4308] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 81.385413][ T4308] usb 4-1: config 1 has no interface number 1 [ 81.385443][ T4308] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.385466][ T4308] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 81.385493][ T4308] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 81.387747][ T4308] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.387770][ T4308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.387787][ T4308] usb 4-1: Product: syz [ 81.387800][ T4308] usb 4-1: Manufacturer: syz [ 81.387813][ T4308] usb 4-1: SerialNumber: syz [ 81.618218][ T4308] usb 4-1: MIDIStreaming interface descriptor not found [ 81.666065][ T4308] usb 4-1: USB disconnect, device number 2 [ 81.745556][ T126] vcan0 speed is unknown, defaulting to 1000 [ 81.746890][ T4892] infiniband syz1: set active [ 81.746973][ T4892] infiniband syz1: added vcan0 [ 81.865354][ T4892] RDS/IB: syz1: added [ 81.873901][ T4892] smc: adding ib device syz1 with port count 1 [ 81.874070][ T4892] smc: ib device syz1 port 1 has pnetid [ 81.875931][ T4498] vcan0 speed is unknown, defaulting to 1000 [ 81.906929][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 81.964630][ T4911] x_tables: duplicate underflow at hook 3 [ 82.011650][ T4906] udevd[4906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.116309][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 82.508331][ T4925] capability: warning: `syz.2.243' uses 32-bit capabilities (legacy support in use) [ 82.587888][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 82.779764][ T4937] netlink: 188 bytes leftover after parsing attributes in process `syz.1.249'. [ 82.989279][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 83.245486][ T4955] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 83.685629][ T4892] vcan0 speed is unknown, defaulting to 1000 [ 83.738172][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 83.922653][ T4975] loop0: detected capacity change from 0 to 8 [ 83.962095][ T4975] SQUASHFS error: Failed to read block 0x1ec: -5 [ 83.987888][ T4975] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 84.486327][ T4998] loop1: detected capacity change from 0 to 764 [ 85.028796][ T5012] loop1: detected capacity change from 0 to 8 [ 85.056994][ T5012] SQUASHFS error: Failed to read block 0x1ec: -5 [ 85.057014][ T5012] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 85.094594][ T4991] loop4: detected capacity change from 0 to 32768 [ 85.136217][ T4991] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.274 (4991) [ 85.147673][ T4986] loop0: detected capacity change from 0 to 32768 [ 85.161536][ T4991] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 85.164880][ T4991] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.164942][ T4991] BTRFS info (device loop4): enabling ssd optimizations [ 85.164960][ T4991] BTRFS info (device loop4): not using ssd optimizations [ 85.164979][ T4991] BTRFS info (device loop4): turning off barriers [ 85.164995][ T4991] BTRFS info (device loop4): using free space tree [ 85.324853][ T4986] XFS (loop0): Mounting V5 Filesystem [ 85.635294][ T4986] XFS (loop0): Ending clean mount [ 85.651534][ T4269] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 85.732057][ T4986] XFS (loop0): Quotacheck needed: Please wait. [ 86.051388][ T4986] XFS (loop0): Quotacheck: Done. [ 86.206539][ T4265] XFS (loop0): Unmounting Filesystem [ 86.406084][ T5074] loop1: detected capacity change from 0 to 1024 [ 86.469040][ T5074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.526309][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 86.561616][ T5074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.610708][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 86.619989][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 86.714491][ T5074] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 86.747402][ T5093] netlink: 'syz.3.304': attribute type 9 has an invalid length. [ 86.878141][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 87.056769][ T5102] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.231444][ T26] audit: type=1326 audit(1763234530.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 87.235285][ T5110] loop1: detected capacity change from 0 to 16 [ 87.321605][ T26] audit: type=1326 audit(1763234531.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 87.383851][ T5110] erofs: (device loop1): mounted with root inode @ nid 36. [ 87.433297][ T5113] loop4: detected capacity change from 0 to 4096 [ 87.448869][ T26] audit: type=1326 audit(1763234531.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 87.537247][ T26] audit: type=1326 audit(1763234531.032:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5108 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 87.545875][ T5120] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.329'. [ 87.584072][ T5113] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 87.658042][ T5121] loop3: detected capacity change from 0 to 1024 [ 87.670229][ T5120] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 87.696549][ T5121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.806235][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.971702][ T5121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 88.062380][ T5134] comedi comedi4: bad chanlist[0]=0x000000dd chan=221 range length=2 [ 88.098075][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 88.238755][ T5139] netlink: 'syz.1.327': attribute type 9 has an invalid length. [ 88.408767][ T5148] loop4: detected capacity change from 0 to 64 [ 88.487373][ T5148] overlayfs: filesystem on './file0' not supported [ 89.069851][ T5177] loop0: detected capacity change from 0 to 512 [ 90.065829][ T5183] loop3: detected capacity change from 0 to 32768 [ 90.158943][ T5183] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 90.177440][ T5183] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 90.182434][ T5154] loop1: detected capacity change from 0 to 65536 [ 90.256212][ T5183] (syz.3.349,5183,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 90.256273][ T5183] (syz.3.349,5183,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 90.256293][ T5183] (syz.3.349,5183,0):ocfs2_mknod:298 ERROR: status = -2 [ 90.256314][ T5183] (syz.3.349,5183,0):ocfs2_mknod:502 ERROR: status = -2 [ 90.281301][ T5154] XFS (loop1): Mounting V5 Filesystem [ 90.376439][ T5154] XFS (loop1): Ending clean mount [ 90.429202][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 90.452047][ T4498] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 90.452555][ T4498] XFS (loop1): Unmount and run xfs_repair [ 90.452567][ T4498] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 90.452581][ T4498] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 90.452593][ T4498] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 90.452603][ T4498] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 90.452613][ T4498] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 90.452623][ T4498] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.452633][ T4498] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.452643][ T4498] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.452652][ T4498] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.452732][ T5154] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 90.453160][ T5154] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 90.453194][ T5154] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 90.463174][ T5063] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.564218][ T4275] XFS (loop1): Unmounting Filesystem [ 90.641608][ T5063] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 90.641634][ T5063] usb 3-1: config 0 has no interface number 0 [ 90.641664][ T5063] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 90.641688][ T5063] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.641708][ T5063] usb 3-1: config 0 interface 235 has no altsetting 0 [ 90.643745][ T5063] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 90.643772][ T5063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.643791][ T5063] usb 3-1: Product: syz [ 90.643804][ T5063] usb 3-1: Manufacturer: syz [ 90.643817][ T5063] usb 3-1: SerialNumber: syz [ 90.645492][ T5063] usb 3-1: config 0 descriptor?? [ 90.648874][ T5063] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 90.649108][ T5063] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 90.649148][ T5063] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 90.688798][ T5063] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 90.688953][ T5063] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 90.689008][ T5063] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 90.700466][ T5063] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 90.803720][ T5219] tc_dump_action: action bad kind [ 90.856049][ T5063] usb 3-1: USB disconnect, device number 2 [ 90.860561][ T5063] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 90.861126][ T5063] keyspan 3-1:0.235: device disconnected [ 91.685420][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.685461][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.685487][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.685520][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 91.685720][ T5247] device geneve2 entered promiscuous mode [ 91.702649][ T5247] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.702688][ T5247] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.702713][ T5247] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 91.702737][ T5247] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 92.008211][ T5261] overlayfs: conflicting options: userxattr,metacopy=on [ 92.021202][ T5259] loop1: detected capacity change from 0 to 1024 [ 92.110642][ T5259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.208280][ T5259] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.381: Attempting to read directory block (623) that is past i_size (638464) [ 92.336227][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 92.523508][ T4378] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.613012][ T5280] loop1: detected capacity change from 0 to 4096 [ 92.684912][ T5280] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.686580][ T5287] usb usb8: usbfs: process 5287 (syz.0.394) did not claim interface 0 before use [ 92.719503][ T4378] usb 5-1: Using ep0 maxpacket: 32 [ 92.735749][ T4378] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 92.775889][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.825125][ T4378] usb 5-1: Product: syz [ 92.841776][ T4378] usb 5-1: Manufacturer: syz [ 92.860840][ T4378] usb 5-1: SerialNumber: syz [ 92.892369][ T4378] usb 5-1: config 0 descriptor?? [ 92.903812][ T5289] delete_channel: no stack [ 92.940715][ T4378] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 93.125226][ T5276] loop2: detected capacity change from 0 to 40427 [ 93.147750][ T5276] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.167206][ T5276] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.215486][ T5276] F2FS-fs (loop2): invalid crc value [ 93.264024][ T5276] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.356505][ T4378] gspca_topro: reg_w err -71 [ 93.399581][ T4378] gspca_topro: Sensor soi763a [ 93.454594][ T4378] usb 5-1: USB disconnect, device number 3 [ 93.505151][ T5276] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.540380][ T5276] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.829116][ T4370] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.855359][ T4370] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 94.202515][ T5330] syz.1.413 uses obsolete (PF_INET,SOCK_PACKET) [ 94.763582][ T5348] loop4: detected capacity change from 0 to 256 [ 94.774222][ T5319] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 94.793124][ T5325] loop0: detected capacity change from 0 to 32768 [ 94.851012][ T5348] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 94.891046][ T5325] JBD2: Ignoring recovery information on journal [ 95.029011][ T5356] loop3: detected capacity change from 0 to 1764 [ 95.072176][ T5325] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 95.186200][ T5325] (syz.0.411,5325,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22 [ 95.275096][ T5325] ocfs2: Unmounting device (7,0) on (node local) [ 95.537694][ T5372] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 95.838389][ T5386] Lens A: ================= START STATUS ================= [ 95.874494][ T5386] Lens A: Focus, Absolute: 0 [ 95.909623][ T5386] Lens A: ================== END STATUS ================== [ 96.377347][ T5408] loop3: detected capacity change from 0 to 64 [ 96.500754][ T5408] syz.3.447: attempt to access beyond end of device [ 96.500754][ T5408] loop3: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 96.552004][ T5416] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 96.568132][ T5408] Buffer I/O error on dev loop3, logical block 32767, async page read [ 97.103188][ T5437] process 'syz.2.460' launched './file0' with NULL argv: empty string added [ 97.477340][ T5450] vivid-000: ================= START STATUS ================= [ 97.528168][ T5450] vivid-000: Generate PTS: true [ 97.589169][ T5450] vivid-000: Generate SCR: true [ 97.607345][ T5454] loop3: detected capacity change from 0 to 512 [ 97.625253][ T5450] tpg source WxH: 320x180 (Y'CbCr) [ 97.661238][ T5450] tpg field: 1 [ 97.664663][ T5450] tpg crop: 320x180@0x0 [ 97.668834][ T5450] tpg compose: 320x180@0x0 [ 97.701641][ T5450] tpg colorspace: 8 [ 97.715382][ T5458] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.715730][ T5450] tpg transfer function: 0/0 [ 97.731054][ T5454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.739392][ T5450] tpg Y'CbCr encoding: 0/0 [ 97.745066][ T5450] tpg quantization: 0/0 [ 97.749268][ T5450] tpg RGB range: 0/2 [ 97.753396][ T5450] vivid-000: ================== END STATUS ================== [ 97.761206][ T5458] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.770195][ T5458] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.779003][ T5458] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.788286][ T5458] device geneve2 entered promiscuous mode [ 97.792954][ T5463] overlayfs: option "workdir=./file0:/" is useless in a non-upper mount, ignore [ 97.802779][ T5454] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.831530][ T5458] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.845108][ T5458] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.854963][ T5458] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.864145][ T5458] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.873455][ T5463] overlayfs: missing 'lowerdir' [ 97.952297][ T5396] loop0: detected capacity change from 0 to 65536 [ 97.998320][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 98.119692][ T5396] XFS (loop0): Mounting V5 Filesystem [ 98.175806][ T5475] netlink: 'syz.1.474': attribute type 21 has an invalid length. [ 98.276651][ T5396] XFS (loop0): Ending clean mount [ 98.295218][ T5483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 98.316586][ T5057] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 98.340108][ T5057] XFS (loop0): Unmount and run xfs_repair [ 98.356009][ T5057] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 98.385878][ T5057] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 98.435028][ T5485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 98.469651][ T5057] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 98.478560][ T5057] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 98.511915][ T5057] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 98.539670][ T5057] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.569528][ T5057] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.578431][ T5057] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.638903][ T5057] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 98.658614][ T5396] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 98.667590][ T5493] IPVS: length: 120 != 24 [ 98.680116][ T5396] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 98.705490][ T5396] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 98.835952][ T4265] XFS (loop0): Unmounting Filesystem [ 98.972693][ T5481] loop2: detected capacity change from 0 to 32768 [ 99.050361][ T5481] [ 99.050361][ T5481] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.050361][ T5481] [ 99.120110][ T5481] jfs_lookup: dtSearch returned -5 [ 99.259746][ T4276] [ 99.259746][ T4276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.259746][ T4276] [ 99.292177][ T4276] [ 99.292177][ T4276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.292177][ T4276] [ 99.374219][ T4378] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.572643][ T4378] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.609502][ T4378] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.650753][ T26] audit: type=1326 audit(1763234543.412:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 99.683315][ T4378] usb 5-1: config 220 has no interface number 2 [ 99.709553][ T4378] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.743782][ T26] audit: type=1326 audit(1763234543.442:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 99.776668][ T4378] usb 5-1: config 220 interface 0 has no altsetting 0 [ 99.797051][ T4378] usb 5-1: config 220 interface 76 has no altsetting 0 [ 99.816434][ T4378] usb 5-1: config 220 interface 1 has no altsetting 0 [ 99.824124][ T26] audit: type=1326 audit(1763234543.442:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 99.852431][ T4378] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.869584][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.887901][ T4378] usb 5-1: Product: syz [ 99.892542][ T26] audit: type=1326 audit(1763234543.442:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 99.919559][ T4378] usb 5-1: Manufacturer: syz [ 99.924207][ T4378] usb 5-1: SerialNumber: syz [ 100.189169][ T4378] usb 5-1: selecting invalid altsetting 0 [ 100.212287][ T4378] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 100.229966][ T4378] usb 5-1: No valid video chain found. [ 100.291244][ T4378] usb 5-1: selecting invalid altsetting 0 [ 100.297042][ T4378] usbtest: probe of 5-1:220.1 failed with error -22 [ 100.353775][ T4378] usb 5-1: USB disconnect, device number 4 [ 100.529200][ T5549] i2c i2c-0: Invalid block write size 34 [ 100.644276][ T5524] loop0: detected capacity change from 0 to 40427 [ 100.670989][ T5553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.683998][ T5524] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 100.716925][ T5524] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.733990][ T5524] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 100.750131][ T5524] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x5 [ 100.797156][ T5524] F2FS-fs (loop0): invalid crc value [ 100.859191][ T5524] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.107920][ T5524] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.131839][ T5524] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.415194][ T5584] loop4: detected capacity change from 0 to 136 [ 101.426223][ T4265] syz-executor: attempt to access beyond end of device [ 101.426223][ T4265] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 101.494285][ T5584] Attempt to read inode for relocated directory [ 101.950530][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 101.969797][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 102.009636][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 102.166498][ T5610] netlink: 25 bytes leftover after parsing attributes in process `syz.2.538'. [ 102.769619][ T5053] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.909234][ T5640] loop0: detected capacity change from 0 to 4096 [ 102.933251][ T5640] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 102.964874][ T5053] usb 4-1: Using ep0 maxpacket: 32 [ 102.976537][ T5053] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 103.026654][ T5053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.055967][ T5053] usb 4-1: Product: syz [ 103.065459][ T5053] usb 4-1: Manufacturer: syz [ 103.094650][ T5053] usb 4-1: SerialNumber: syz [ 103.117761][ T5053] usb 4-1: config 0 descriptor?? [ 103.148898][ T5053] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 103.332736][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 103.555783][ T5053] gspca_topro: reg_w err -71 [ 103.563030][ T5664] loop2: detected capacity change from 0 to 1024 [ 103.601144][ T5053] gspca_topro: Sensor soi763a [ 103.617763][ T5053] usb 4-1: USB disconnect, device number 3 [ 103.847929][ T34] hfsplus: b-tree write err: -5, ino 4 [ 104.090337][ T5676] loop4: detected capacity change from 0 to 4096 [ 104.110370][ T5676] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 104.193712][ T5676] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 104.336768][ T5676] ntfs3: loop4: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 104.483822][ T5696] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 104.502142][ T4269] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 104.633430][ T5702] loop1: detected capacity change from 0 to 256 [ 104.728999][ T5706] loop3: detected capacity change from 0 to 1024 [ 104.998132][ T5714] loop2: detected capacity change from 0 to 256 [ 105.029122][ T5714] exfat: Deprecated parameter 'utf8' [ 105.044824][ T5714] exfat: Deprecated parameter 'namecase' [ 105.051270][ T4370] hfsplus: b-tree write err: -5, ino 4 [ 105.078584][ T5714] exfat: Deprecated parameter 'namecase' [ 105.099615][ T5714] exfat: Deprecated parameter 'utf8' [ 105.192690][ T5716] comedi comedi3: board detection failed [ 105.203138][ T5714] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 105.212236][ T5718] netlink: 'syz.0.589': attribute type 21 has an invalid length. [ 105.720532][ T5704] loop4: detected capacity change from 0 to 32768 [ 105.946601][ T5741] loop1: detected capacity change from 0 to 2048 [ 106.025435][ T5741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.184685][ T5750] netlink: 76 bytes leftover after parsing attributes in process `syz.0.605'. [ 106.379611][ T5053] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 106.474958][ T5761] loop4: detected capacity change from 0 to 16 [ 106.497116][ T5761] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 106.520393][ T5765] netlink: 'syz.1.611': attribute type 4 has an invalid length. [ 106.522413][ T5761] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 106.529239][ T5765] netlink: 152 bytes leftover after parsing attributes in process `syz.1.611'. [ 106.541848][ T5761] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 106.571390][ T5765] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.601204][ T5053] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.627130][ T5053] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 1.ff [ 106.662513][ T5053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.673073][ T5053] usb 4-1: SerialNumber: syz [ 106.684082][ T5053] usb 4-1: config 0 descriptor?? [ 106.717530][ T5053] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 106.754794][ T5053] usb 4-1: Detected SIO [ 106.773732][ T5053] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 106.897774][ T5053] usb 4-1: USB disconnect, device number 4 [ 106.930715][ T5053] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 106.960943][ T5053] ftdi_sio 4-1:0.0: device disconnected [ 107.478438][ T5795] overlayfs: missing 'lowerdir' [ 107.598810][ T5798] loop3: detected capacity change from 0 to 1024 [ 107.726079][ T5807] loop2: detected capacity change from 0 to 512 [ 107.742989][ T5808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 107.774904][ T5808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 107.779864][ T5807] EXT4-fs: Ignoring removed i_version option [ 107.814679][ T5807] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.849730][ T5808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.633'. [ 107.888253][ T5811] loop0: detected capacity change from 0 to 2048 [ 107.900870][ T5807] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.631: inode #13: comm syz.2.631: iget: illegal inode # [ 107.920575][ T5811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.931022][ T5807] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.631: couldn't read orphan inode 13 (err -117) [ 107.955768][ T5807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.126614][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 108.169824][ T5820] netlink: 'syz.1.640': attribute type 10 has an invalid length. [ 108.335476][ T5828] bridge0: port 3(bond0) entered blocking state [ 108.350128][ T5828] bridge0: port 3(bond0) entered disabled state [ 108.368204][ T5828] device bond0 entered promiscuous mode [ 108.381984][ T5828] device bond_slave_0 entered promiscuous mode [ 108.394033][ T5828] device bond_slave_1 entered promiscuous mode [ 108.445898][ T5828] bridge0: port 3(bond0) entered blocking state [ 108.452750][ T5828] bridge0: port 3(bond0) entered forwarding state [ 108.739643][ T5059] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.944512][ T5059] usb 1-1: Using ep0 maxpacket: 16 [ 108.952125][ T5059] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 109.008696][ T5059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.038795][ T5059] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 109.069019][ T5059] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 109.113451][ T5059] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.143295][ T5059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.180579][ T5059] usb 1-1: SerialNumber: syz [ 109.197882][ T5832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.215536][ T5832] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.480528][ T5873] loop1: detected capacity change from 0 to 64 [ 109.491856][ T5059] usb 1-1: USB disconnect, device number 2 [ 109.499708][ T5057] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.595874][ T5875] loop2: detected capacity change from 0 to 2048 [ 109.599572][ T5873] syz.1.662: attempt to access beyond end of device [ 109.599572][ T5873] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 109.634856][ T5873] Buffer I/O error on dev loop1, logical block 512, async page read [ 109.644996][ T5873] syz.1.662: attempt to access beyond end of device [ 109.644996][ T5873] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 109.647575][ T5875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.658732][ T5873] Buffer I/O error on dev loop1, logical block 56576, async page read [ 109.686070][ T5875] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.699630][ T5057] usb 4-1: Using ep0 maxpacket: 32 [ 109.716346][ T5057] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 109.741578][ T5057] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.770192][ T5057] usb 4-1: Product: syz [ 109.774420][ T5057] usb 4-1: Manufacturer: syz [ 109.795517][ T5057] usb 4-1: SerialNumber: syz [ 109.829385][ T5057] usb 4-1: config 0 descriptor?? [ 109.851590][ T5882] loop4: detected capacity change from 0 to 1764 [ 109.863191][ T5875] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.664: corrupted xattr block 128 [ 109.875682][ T5884] loop1: detected capacity change from 0 to 256 [ 109.905745][ T5882] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 109.934681][ T5884] FAT-fs (loop1): Directory bread(block 64) failed [ 109.964276][ T5884] FAT-fs (loop1): Directory bread(block 65) failed [ 109.979741][ T5884] FAT-fs (loop1): Directory bread(block 66) failed [ 110.000243][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 110.000706][ T5884] FAT-fs (loop1): Directory bread(block 67) failed [ 110.027649][ T5884] FAT-fs (loop1): Directory bread(block 68) failed [ 110.050040][ T5884] FAT-fs (loop1): Directory bread(block 69) failed [ 110.056154][ T5057] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 110.084375][ T5057] 00 00 00 00 00 00 00 00 [ 110.095550][ T5884] FAT-fs (loop1): Directory bread(block 70) failed [ 110.100568][ T5057] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 110.134699][ T5884] FAT-fs (loop1): Directory bread(block 71) failed [ 110.164140][ T5884] FAT-fs (loop1): Directory bread(block 72) failed [ 110.178556][ T5884] FAT-fs (loop1): Directory bread(block 73) failed [ 110.196306][ T5888] xt_cgroup: invalid path, errno=-2 [ 110.299128][ T5059] usb 4-1: USB disconnect, device number 5 [ 110.672333][ T5902] loop1: detected capacity change from 0 to 4096 [ 110.696119][ T5902] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 110.715153][ T5902] System zones: 0-5 [ 110.722374][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.764429][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 110.779696][ T4498] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.811348][ T5909] ipt_CLUSTERIP: unknown mode 3 [ 110.973231][ T4498] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 110.995625][ T4498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.025225][ T4498] usb 1-1: Product: syz [ 111.049616][ T4498] usb 1-1: Manufacturer: syz [ 111.054262][ T4498] usb 1-1: SerialNumber: syz [ 111.092167][ T4498] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 111.233980][ T4498] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.455776][ T5929] loop1: detected capacity change from 0 to 1024 [ 111.560489][ T5929] hfsplus: trying to free free bnode 0(1) [ 111.702242][ T4499] usb 1-1: USB disconnect, device number 3 [ 111.748548][ T4358] hfsplus: b-tree write err: -5, ino 4 [ 111.801988][ T5943] loop3: detected capacity change from 0 to 2048 [ 111.817361][ T5943] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 111.876737][ T5943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.914518][ T5946] loop1: detected capacity change from 0 to 256 [ 111.964837][ T5946] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 112.095547][ T5951] netlink: 'syz.4.699': attribute type 3 has an invalid length. [ 112.135006][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.4.699'. [ 112.549755][ T4498] usb 1-1: Service connection timeout for: 256 [ 112.555993][ T4498] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 112.586305][ T4498] ath9k_htc: Failed to initialize the device [ 112.621529][ T4499] usb 1-1: ath9k_htc: USB layer deinitialized [ 113.076938][ T5995] loop3: detected capacity change from 0 to 256 [ 113.165099][ T6003] loop2: detected capacity change from 0 to 256 [ 113.530966][ T6013] loop3: detected capacity change from 0 to 1024 [ 113.615348][ T6013] hfsplus: trying to free free bnode 0(1) [ 113.762782][ T46] hfsplus: b-tree write err: -5, ino 4 [ 114.118020][ T6040] loop3: detected capacity change from 0 to 1024 [ 114.256573][ T6047] loop1: detected capacity change from 0 to 764 [ 114.400895][ T6047] rock: directory entry would overflow storage [ 114.407529][ T6047] rock: sig=0x4f50, size=4, remaining=3 [ 114.436425][ T6047] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.507442][ T6057] netlink: 'syz.2.752': attribute type 30 has an invalid length. [ 114.557041][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'. [ 114.619781][ T6057] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 114.639879][ T6057] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 114.884778][ T6070] loop2: detected capacity change from 0 to 16 [ 114.920277][ T6070] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 114.965070][ T4909] udevd[4909]: incorrect cramfs checksum on /dev/loop2 [ 114.975352][ T6073] netlink: 'syz.4.760': attribute type 3 has an invalid length. [ 115.057550][ T4909] udevd[4909]: incorrect cramfs checksum on /dev/loop2 [ 115.151210][ T6079] loop4: detected capacity change from 0 to 64 [ 115.642306][ T6061] loop3: detected capacity change from 0 to 32768 [ 115.716103][ T6101] loop2: detected capacity change from 0 to 64 [ 115.737092][ T6061] XFS (loop3): Mounting V5 Filesystem [ 115.951063][ T6061] XFS (loop3): Ending clean mount [ 116.008889][ T6061] XFS (loop3): Quotacheck needed: Please wait. [ 116.122448][ T6061] XFS (loop3): Quotacheck: Done. [ 116.158532][ T6123] loop0: detected capacity change from 0 to 16 [ 116.240963][ T6123] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.401946][ T4271] XFS (loop3): Unmounting Filesystem [ 116.683598][ T6131] loop1: detected capacity change from 0 to 2048 [ 116.722969][ T6131] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 116.767955][ T6131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.866723][ T6119] loop4: detected capacity change from 0 to 32768 [ 116.942136][ T6119] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 116.942136][ T6119] [ 117.020997][ T6119] ERROR: (device loop4): remounting filesystem as read-only [ 117.070265][ T6139] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 117.081006][ T6119] ERROR: (device loop4): jfs_rename: [ 117.081006][ T6119] [ 117.209754][ T4269] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 117.209754][ T4269] [ 117.664227][ T6161] xt_socket: unknown flags 0x50 [ 117.900806][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 118.374913][ T6194] kcapi: manufacturer command 18446744073709551608 unknown. [ 118.485658][ T6199] loop3: detected capacity change from 0 to 64 [ 118.591475][ T6204] loop1: detected capacity change from 0 to 1024 [ 118.768900][ T6210] netlink: 248 bytes leftover after parsing attributes in process `syz.0.823'. [ 119.169544][ T5053] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.195726][ T6226] netlink: 'syz.3.832': attribute type 1 has an invalid length. [ 119.327978][ T6208] loop4: detected capacity change from 0 to 32768 [ 119.373399][ T5053] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 119.392938][ T5053] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 119.434640][ T5053] usb 2-1: Product: syz [ 119.438869][ T5053] usb 2-1: Manufacturer: syz [ 119.450321][ T6208] jfs_create: dtInsert returned -EIO [ 119.472149][ T5053] usb 2-1: SerialNumber: syz [ 119.477752][ T6208] ERROR: (device loop4): jfs_create: [ 119.477752][ T6208] [ 119.488178][ T5053] usb 2-1: config 0 descriptor?? [ 119.513846][ T5053] ch341 2-1:0.0: ch341-uart converter detected [ 119.891066][ T6249] binder: BC_ATTEMPT_ACQUIRE not supported [ 119.910272][ T6249] binder: 6248:6249 ioctl c0306201 2000000001c0 returned -22 [ 119.919384][ T5053] usb 2-1: failed to send control message: -71 [ 119.928377][ T5053] ch341-uart: probe of ttyUSB0 failed with error -71 [ 119.957755][ T5053] usb 2-1: USB disconnect, device number 2 [ 119.977663][ T5053] ch341 2-1:0.0: device disconnected [ 120.128899][ T952] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 120.302331][ T6263] loop4: detected capacity change from 0 to 4096 [ 120.305865][ T6265] loop0: detected capacity change from 0 to 2048 [ 120.317221][ T952] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 120.331045][ T952] usb 3-1: config 0 has no interface number 0 [ 120.344303][ T6263] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 120.347628][ T952] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 120.359351][ T6263] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 120.391181][ T952] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 120.410456][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.435612][ T6263] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 120.447310][ T952] usb 3-1: Product: syz [ 120.467680][ T6263] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 120.472068][ T6265] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.491225][ T6263] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 120.497715][ T952] usb 3-1: Manufacturer: syz [ 120.523839][ T6263] ntfs: volume version 3.1. [ 120.539007][ T6263] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 120.556757][ T952] usb 3-1: SerialNumber: syz [ 120.606542][ T952] usb 3-1: config 0 descriptor?? [ 120.624596][ T6263] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 120.672853][ T6263] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 120.718882][ T6263] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 120.759912][ T6263] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 120.796584][ T6261] loop3: detected capacity change from 0 to 32768 [ 120.828996][ T6261] XFS: noikeep mount option is deprecated. [ 120.873154][ T952] usb 3-1: USB disconnect, device number 3 [ 120.892068][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 120.940988][ T6261] XFS (loop3): Mounting V5 Filesystem [ 121.056793][ T6261] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 121.186443][ T6261] XFS (loop3): Starting recovery (logdev: internal) [ 121.209684][ T4499] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.271371][ T6261] XFS (loop3): Ending recovery (logdev: internal) [ 121.413207][ T4499] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 121.424631][ T4271] XFS (loop3): Unmounting Filesystem [ 121.440722][ T4499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.499058][ T4499] usb 2-1: Product: syz [ 121.523509][ T4499] usb 2-1: Manufacturer: syz [ 121.529130][ T4499] usb 2-1: SerialNumber: syz [ 121.590825][ T4499] usb 2-1: config 0 descriptor?? [ 121.594788][ T6292] loop0: detected capacity change from 0 to 1764 [ 121.806288][ T4499] hso 2-1:0.0: Can't find BULK IN endpoint [ 121.820135][ T4499] usb-storage 2-1:0.0: USB Mass Storage device detected [ 121.884460][ T6305] loop2: detected capacity change from 0 to 256 [ 122.016109][ T952] usb 2-1: USB disconnect, device number 3 [ 122.107731][ T6312] loop3: detected capacity change from 0 to 256 [ 122.148168][ T6312] exfat: Deprecated parameter 'utf8' [ 122.171590][ T6312] exfat: Deprecated parameter 'namecase' [ 122.229489][ T6312] exfat: Deprecated parameter 'utf8' [ 122.253146][ T6312] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 122.520789][ T6318] loop0: detected capacity change from 0 to 2048 [ 122.680300][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 122.721541][ T6331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.975639][ T6318] syz.0.871: attempt to access beyond end of device [ 122.975639][ T6318] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 123.036781][ T6318] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 123.046899][ T6318] syz.0.871: attempt to access beyond end of device [ 123.046899][ T6318] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 123.078441][ T6318] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 123.131462][ T6318] NILFS (loop0): error -5 truncating bmap (ino=16) [ 123.539556][ T5059] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.708729][ T6373] binder: 6372:6373 unknown command 0 [ 123.739656][ T6373] binder: 6372:6373 ioctl c0306201 200000000480 returned -22 [ 123.756359][ T5059] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 123.782809][ T5059] usb 4-1: config 0 has no interface number 0 [ 123.788960][ T5059] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 123.825737][ T5059] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.887707][ T5059] usb 4-1: config 0 interface 255 has no altsetting 0 [ 123.930152][ T5059] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 123.939244][ T5059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.996605][ T5059] usb 4-1: config 0 descriptor?? [ 124.032596][ T5059] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 124.249674][ T4378] usb 4-1: USB disconnect, device number 6 [ 124.315369][ T6401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.323252][ T6401] IPv6: NLM_F_CREATE should be set when creating new route [ 124.327801][ T6403] loop0: detected capacity change from 0 to 1024 [ 124.330541][ T6401] IPv6: NLM_F_CREATE should be set when creating new route [ 124.442865][ T6403] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.912: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.501966][ T6403] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.912: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.530169][ T6403] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.912: Failed to acquire dquot type 0 [ 124.555217][ T6403] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 124.638796][ T6403] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.912: mark_inode_dirty error [ 124.656001][ T6403] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 124.667496][ T6403] EXT4-fs (loop0): 1 orphan inode deleted [ 124.673560][ T6403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.682722][ T46] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.724669][ T46] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 0 [ 124.857465][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 124.872773][ T34] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.936068][ T34] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:2: Failed to release dquot type 0 [ 124.966863][ T4265] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 125.013967][ T4265] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 125.041901][ T4265] EXT4-fs error (device loop0): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error [ 125.089684][ T6431] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 125.517182][ T6444] qrtr: Invalid version 0 [ 125.965526][ T6435] loop0: detected capacity change from 0 to 32768 [ 126.016839][ T6428] loop1: detected capacity change from 0 to 40427 [ 126.026424][ T6435] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 126.053233][ T6428] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 126.061866][ T6428] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.085884][ T6428] F2FS-fs (loop1): invalid crc value [ 126.088367][ T6435] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.114185][ T6428] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.179314][ T4346] (kworker/u4:5,4346,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 126.232279][ T6428] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 126.239376][ T6428] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.447946][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 126.700244][ T6484] device vlan0 entered promiscuous mode [ 126.933098][ T6490] vivid-000: disconnect [ 126.963888][ T6489] vivid-000: reconnect [ 126.998179][ T6494] loop3: detected capacity change from 0 to 64 [ 127.280732][ T6502] netlink: 830 bytes leftover after parsing attributes in process `syz.2.958'. [ 127.297820][ T6502] device bond_slave_0 entered promiscuous mode [ 127.304577][ T6502] device bond_slave_1 entered promiscuous mode [ 127.671630][ T6522] futex_wake_op: syz.3.967 tries to shift op by 32; fix this program [ 127.964892][ T6533] loop1: detected capacity change from 0 to 64 [ 128.244480][ T6541] loop3: detected capacity change from 0 to 512 [ 128.366970][ T6541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.395664][ T6541] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.425548][ T6541] __quota_error: 13 callbacks suppressed [ 128.425565][ T6541] Quota error (device loop3): write_blk: dquota write failed [ 128.447602][ T6541] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 128.457342][ T6541] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 128.472606][ T6541] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.976: Failed to acquire dquot type 1 [ 128.576777][ T6517] loop0: detected capacity change from 0 to 32768 [ 128.599199][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 128.630684][ T6517] jfs_create: dtInsert returned -EIO [ 128.639285][ T6517] ERROR: (device loop0): jfs_create: [ 128.639285][ T6517] [ 128.804677][ T6560] netlink: 68 bytes leftover after parsing attributes in process `syz.2.984'. [ 128.863325][ T6560] netlink: 68 bytes leftover after parsing attributes in process `syz.2.984'. [ 128.926926][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.987'. [ 128.938923][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.987'. [ 129.423528][ T6579] loop4: detected capacity change from 0 to 2048 [ 129.555763][ T6579] GPT:first_usable_lbas don't match. [ 129.571907][ T6579] GPT:34 != 290 [ 129.575430][ T6579] GPT: Use GNU Parted to correct GPT errors. [ 129.615477][ T6579] loop4: p1 p2 p3 [ 129.625140][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.999'. [ 129.849626][ T952] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 130.052406][ T952] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 130.074381][ T952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.116279][ T952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.152575][ T952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.170096][ T952] usb 5-1: Product: syz [ 130.204675][ T952] usb 5-1: Manufacturer: syz [ 130.219941][ T952] usb 5-1: SerialNumber: syz [ 130.240421][ T6615] xt_HMARK: spi-set and port-set can't be combined [ 130.478605][ T952] usb 5-1: 0:2 : does not exist [ 130.478808][ T6620] loop3: detected capacity change from 0 to 1024 [ 130.486844][ T952] usb 5-1: unit 9 not found! [ 130.520658][ T952] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 130.571486][ T952] usb 5-1: USB disconnect, device number 5 [ 130.618802][ T6620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.639289][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.798149][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 130.949997][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1019'. [ 131.115213][ T6640] loop2: detected capacity change from 0 to 4096 [ 131.139351][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1025'. [ 131.261933][ T6649] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.345536][ T6640] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 131.411314][ T6640] Remounting filesystem read-only [ 131.425648][ T6655] loop0: detected capacity change from 0 to 16 [ 131.517524][ T6655] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.175979][ T6677] loop3: detected capacity change from 0 to 8 [ 132.206460][ T6677] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 132.225405][ T4909] udevd[4909]: incorrect cramfs checksum on /dev/loop3 [ 132.261518][ T6677] cramfs: Error -3 while decompressing! [ 132.284030][ T6653] loop4: detected capacity change from 0 to 32768 [ 132.302111][ T6677] cramfs: ffffffff96d7a1e8(1306)->ffff88805381c000(4096) [ 132.303563][ T4909] udevd[4909]: incorrect cramfs checksum on /dev/loop3 [ 132.320496][ T6677] cramfs: bad data blocksize 3221485966 [ 132.329369][ T6677] cramfs: Error -3 while decompressing! [ 132.332967][ T6683] loop0: detected capacity change from 0 to 256 [ 132.335076][ T6677] cramfs: ffffffff96d7a1e8(1306)->ffff88805381c000(4096) [ 132.349049][ T26] audit: type=1800 audit(1763234576.102:17): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 132.391503][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 132.418112][ T6653] XFS (loop4): Mounting V5 Filesystem [ 132.470661][ T6692] loop2: detected capacity change from 0 to 2048 [ 132.481470][ T6692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.669672][ T6653] XFS (loop4): Ending clean mount [ 132.793174][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.799552][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836787][ T4269] XFS (loop4): Unmounting Filesystem [ 132.853399][ T6701] loop3: detected capacity change from 0 to 8 [ 133.502487][ T6714] loop3: detected capacity change from 0 to 2048 [ 133.583674][ T6714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.943995][ T6698] loop0: detected capacity change from 0 to 32768 [ 133.986544][ T6698] XFS: noikeep mount option is deprecated. [ 134.052061][ T6698] XFS (loop0): Mounting V5 Filesystem [ 134.233954][ T6698] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 134.331425][ T6698] XFS (loop0): Starting recovery (logdev: internal) [ 134.341924][ T6746] loop3: detected capacity change from 0 to 1764 [ 134.413003][ T6747] loop2: detected capacity change from 0 to 4096 [ 134.420461][ T6698] XFS (loop0): Ending recovery (logdev: internal) [ 134.461270][ T6747] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 134.496494][ T6752] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 134.516641][ T26] audit: type=1400 audit(1763234578.272:18): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3AF6 pid=6751 comm="syz.4.1068" [ 134.616536][ T6747] ntfs3: loop2: failed to convert "c46c" to macinuit [ 134.670153][ T26] audit: type=1326 audit(1763234578.432:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 134.689803][ T4265] XFS (loop0): Unmounting Filesystem [ 134.803432][ T26] audit: type=1326 audit(1763234578.432:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 134.899506][ T26] audit: type=1326 audit(1763234578.452:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 134.948361][ T26] audit: type=1326 audit(1763234578.452:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 134.989738][ T4499] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.019839][ T26] audit: type=1326 audit(1763234578.452:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.3.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4acb8f6c9 code=0x7ffc0000 [ 135.209693][ T4499] usb 5-1: Using ep0 maxpacket: 32 [ 135.225976][ T4499] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 135.244514][ T4499] usb 5-1: config 0 has no interface number 0 [ 135.264851][ T4499] usb 5-1: config 0 interface 12 has no altsetting 0 [ 135.284524][ T4499] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 135.330172][ T4499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.338223][ T4499] usb 5-1: Product: syz [ 135.354264][ T4499] usb 5-1: Manufacturer: syz [ 135.358954][ T4499] usb 5-1: SerialNumber: syz [ 135.395411][ T4499] usb 5-1: config 0 descriptor?? [ 135.415571][ T4499] f81534 5-1:0.12: required endpoints missing [ 135.713829][ T6782] loop2: detected capacity change from 0 to 1024 [ 135.720590][ T5053] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.731162][ T6766] loop1: detected capacity change from 0 to 32768 [ 135.775031][ T6766] jfs_strtoUCS: char2uni returned -22. [ 135.798451][ T6782] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.1082: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.823963][ T6766] charset = euc-jp, char = 0xd4 [ 135.879145][ T6782] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 135.887915][ T6782] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.1082: lblock 0 mapped to illegal pblock 48 (length 1) [ 135.909385][ T6782] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 135.929652][ T5053] usb 1-1: Using ep0 maxpacket: 8 [ 135.936776][ T5053] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 135.955279][ T5053] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.986505][ T5053] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.988248][ T6782] EXT4-fs error (device loop2): ext4_acquire_dquot:6809: comm syz.2.1082: Failed to acquire dquot type 0 [ 136.006348][ T5053] usb 1-1: config 0 has no interface number 0 [ 136.023663][ T5053] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 136.047589][ T5053] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 136.063095][ T6782] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 136.081650][ T5053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.091992][ T6782] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1082: mark_inode_dirty error [ 136.116209][ T5053] usb 1-1: Product: syz [ 136.133444][ T5053] usb 1-1: Manufacturer: syz [ 136.138227][ T6782] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 136.141485][ T5053] usb 1-1: SerialNumber: syz [ 136.158890][ T6782] EXT4-fs (loop2): 1 orphan inode deleted [ 136.176424][ T4370] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.192461][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.217040][ T5053] usb 1-1: config 0 descriptor?? [ 136.256463][ T5053] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 136.263904][ T4370] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 136.308128][ T4370] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 136.437376][ T2305] pvrusb2: Invalid write control endpoint [ 136.439088][ T5053] usb 1-1: USB disconnect, device number 4 [ 136.466663][ T2305] usb 1-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 136.480228][ T2305] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 136.490645][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 136.496685][ T4370] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 136.516944][ T4370] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 136.532557][ T4370] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0 [ 136.586257][ T4276] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 136.603189][ T4276] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 136.619807][ T4276] EXT4-fs error (device loop2): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error [ 136.803314][ T6812] tmpfs: Bad value for 'mpol' [ 136.949158][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 137.133781][ T6824] loop1: detected capacity change from 0 to 1024 [ 137.208841][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.1102: lblock 2 mapped to illegal pblock 2 (length 1) [ 137.232874][ T6824] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.1102: lblock 0 mapped to illegal pblock 48 (length 1) [ 137.249700][ T6824] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.1102: Failed to acquire dquot type 0 [ 137.277421][ T6824] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 137.318103][ T6824] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.1102: mark_inode_dirty error [ 137.339544][ T6824] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 137.350514][ T6824] EXT4-fs (loop1): 1 orphan inode deleted [ 137.360717][ T6824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.371146][ T46] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.415115][ T46] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 0 [ 137.436150][ T6835] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1106'. [ 137.475232][ T6835] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1106'. [ 137.517133][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 137.530889][ T34] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.552620][ T34] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:2: Failed to release dquot type 0 [ 137.591240][ T4275] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 137.623130][ T4275] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 137.658574][ T4275] EXT4-fs error (device loop1): ext4_quota_off:7115: inode #3: comm syz-executor: mark_inode_dirty error [ 137.788380][ T5057] usb 5-1: USB disconnect, device number 6 [ 138.034458][ T6856] sock: sock_timestamping_bind_phc: sock not bind to device [ 138.325820][ T6867] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 138.340753][ T6860] loop3: detected capacity change from 0 to 4096 [ 138.366951][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.376548][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.463827][ T6863] loop2: detected capacity change from 0 to 4096 [ 138.493508][ T6860] ntfs3: loop3: ino=5, "/" directory corrupted [ 138.500062][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.500196][ T6867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.500545][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.522000][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.552682][ T6867] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.560990][ T6863] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 138.572554][ T6860] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 138.693069][ T6863] ntfs3: loop2: ino=0, attr_set_size [ 138.980236][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 139.024393][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 139.213145][ T6884] overlayfs: bad mount option "redirect_dir=on:/" [ 139.519712][ T6898] tmpfs: Bad value for 'nr_blocks' [ 139.606590][ T6896] loop3: detected capacity change from 0 to 4096 [ 139.667093][ T6896] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 139.812789][ T6896] ntfs3: loop3: failed to convert "c46c" to macinuit [ 140.004279][ T6914] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 140.171219][ T6921] netlink: 'syz.2.1149': attribute type 10 has an invalid length. [ 140.267955][ T6921] team0: Device veth1_macvtap failed to register rx_handler [ 140.351000][ T6922] loop3: detected capacity change from 0 to 8192 [ 140.383334][ T6922] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.599580][ T6922] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 140.662652][ T6922] REISERFS (device loop3): using ordered data mode [ 140.710067][ T6922] reiserfs: using flush barriers [ 140.769655][ T6922] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.831038][ T6922] REISERFS (device loop3): checking transaction log (loop3) [ 141.086538][ T6945] loop4: detected capacity change from 0 to 1024 [ 141.107990][ T6922] REISERFS (device loop3): Using tea hash to sort names [ 141.155545][ T6922] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 141.272413][ T6947] loop2: detected capacity change from 0 to 4096 [ 141.342377][ T6947] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 141.423705][ T6947] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.444113][ T6947] ntfs3: loop2: Failed to load $Extend. [ 141.642928][ T6960] loop4: detected capacity change from 0 to 2048 [ 141.720283][ T6964] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.770187][ T6960] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 141.871092][ T6960] Remounting filesystem read-only [ 141.890189][ T6960] NILFS error (device loop4): nilfs_bmap_last_key: broken bmap (inode number=16) [ 141.939149][ T6970] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 141.942710][ T6960] NILFS (loop4): error -5 truncating bmap (ino=16) [ 141.984134][ T6970] netlink: 'syz.1.1173': attribute type 11 has an invalid length. [ 142.019971][ T6970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1173'. [ 142.169101][ T4269] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 142.577616][ T6982] loop1: detected capacity change from 0 to 4096 [ 142.594223][ T6992] loop0: detected capacity change from 0 to 256 [ 142.697417][ T6992] FAT-fs (loop0): Directory bread(block 64) failed [ 142.717002][ T6982] ntfs3: loop1: ino=5, "/" directory corrupted [ 142.719356][ T6992] FAT-fs (loop0): Directory bread(block 65) failed [ 142.762347][ T6982] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 142.764369][ T6992] FAT-fs (loop0): Directory bread(block 66) failed [ 142.806855][ T6992] FAT-fs (loop0): Directory bread(block 67) failed [ 142.830506][ T6992] FAT-fs (loop0): Directory bread(block 68) failed [ 142.860130][ T6992] FAT-fs (loop0): Directory bread(block 69) failed [ 142.888006][ T6992] FAT-fs (loop0): Directory bread(block 70) failed [ 142.919539][ T6992] FAT-fs (loop0): Directory bread(block 71) failed [ 142.926441][ T6992] FAT-fs (loop0): Directory bread(block 72) failed [ 142.939567][ T6992] FAT-fs (loop0): Directory bread(block 73) failed [ 143.009678][ T5057] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.176088][ T7007] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 143.229702][ T5057] usb 3-1: Using ep0 maxpacket: 32 [ 143.236670][ T5057] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 143.266529][ T5057] usb 3-1: config 0 has no interface number 0 [ 143.285063][ T5057] usb 3-1: config 0 interface 12 has no altsetting 0 [ 143.302080][ T5057] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.332881][ T5057] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.359100][ T5057] usb 3-1: Product: syz [ 143.371566][ T5057] usb 3-1: Manufacturer: syz [ 143.387679][ T5057] usb 3-1: SerialNumber: syz [ 143.397251][ T5057] usb 3-1: config 0 descriptor?? [ 143.425477][ T5057] f81534 3-1:0.12: required endpoints missing [ 143.825626][ T7002] loop4: detected capacity change from 0 to 32768 [ 143.918048][ T7002] XFS (loop4): Mounting V5 Filesystem [ 144.080775][ T7043] bond0: Unable to set up delay as MII monitoring is disabled [ 144.098591][ T7002] XFS (loop4): Ending clean mount [ 144.214112][ T4269] XFS (loop4): Unmounting Filesystem [ 144.373984][ T7052] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 144.549775][ T7053] loop1: detected capacity change from 0 to 4096 [ 144.597285][ T7053] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 144.693071][ T7053] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 144.798509][ T7067] netlink: 'syz.3.1214': attribute type 2 has an invalid length. [ 144.822824][ T7067] netlink: 'syz.3.1214': attribute type 8 has an invalid length. [ 144.848564][ T7067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1214'. [ 145.108730][ T7077] xt_bpf: check failed: parse error [ 145.229483][ T4498] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.247986][ T7083] loop0: detected capacity change from 0 to 1764 [ 145.279185][ T7083] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 145.419696][ T4498] usb 2-1: Using ep0 maxpacket: 16 [ 145.427477][ T4498] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 145.445668][ T4498] usb 2-1: config 0 has no interface number 0 [ 145.477764][ T4498] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 145.494823][ T4498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.505750][ T4498] usb 2-1: Product: syz [ 145.529670][ T4498] usb 2-1: Manufacturer: syz [ 145.534323][ T4498] usb 2-1: SerialNumber: syz [ 145.558739][ T4498] usb 2-1: config 0 descriptor?? [ 145.591331][ T4498] usb-storage 2-1:0.102: USB Mass Storage device detected [ 145.621804][ T4498] usb-storage 2-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 145.638237][ T4498] usb-storage 2-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 145.638237][ T4498] Please send a copy of this message to and [ 145.664774][ T7095] PM: Enabling pm_trace changes system date and time during resume. [ 145.664774][ T7095] PM: Correct system time has to be restored manually after resume. [ 145.794375][ T952] usb 3-1: USB disconnect, device number 4 [ 145.827256][ T7089] loop0: detected capacity change from 0 to 32768 [ 145.833758][ T4498] usb 2-1: USB disconnect, device number 4 [ 145.856818][ T7081] loop3: detected capacity change from 0 to 32768 [ 145.926082][ T7089] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 145.946522][ T7081] XFS (loop3): Mounting V5 Filesystem [ 145.958061][ T46] (kworker/u4:3,46,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7 [ 145.985758][ T7089] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 256 but claims that 2046 are free [ 146.035255][ T7081] XFS (loop3): Ending clean mount [ 146.040924][ T7089] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.056605][ T7089] OCFS2: File system is now read-only. [ 146.086548][ T7089] (syz.0.1225,7089,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 146.131702][ T7089] (syz.0.1225,7089,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 146.169168][ T7089] (syz.0.1225,7089,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 146.208666][ T7089] (syz.0.1225,7089,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 146.262380][ T7089] (syz.0.1225,7089,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 146.273626][ T4271] XFS (loop3): Unmounting Filesystem [ 146.309832][ T7089] (syz.0.1225,7089,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 146.328339][ T7089] (syz.0.1225,7089,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 146.374903][ T7089] (syz.0.1225,7089,1):ocfs2_mknod:385 ERROR: status = -30 [ 146.405931][ T7089] (syz.0.1225,7089,1):ocfs2_mknod:502 ERROR: status = -30 [ 146.445817][ T7089] (syz.0.1225,7089,1):ocfs2_create:676 ERROR: status = -30 [ 146.529882][ T7115] xt_TCPMSS: Only works on TCP SYN packets [ 146.629062][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 146.777386][ T7121] netlink: 'syz.1.1236': attribute type 10 has an invalid length. [ 146.834488][ T7117] loop4: detected capacity change from 0 to 4096 [ 146.916108][ T7117] __ntfs_error: 4 callbacks suppressed [ 146.916126][ T7117] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 146.917669][ T7121] team0: Device veth1_macvtap failed to register rx_handler [ 146.929478][ T7117] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 146.984469][ T7101] loop2: detected capacity change from 0 to 32768 [ 147.066393][ T7101] jfs_strtoUCS: char2uni returned -22. [ 147.077130][ T7117] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 147.105521][ T7101] charset = euc-jp, char = 0xd4 [ 147.127614][ T7117] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.185418][ T7117] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 147.218380][ T7117] ntfs: volume version 3.1. [ 147.244480][ T7117] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 147.325647][ T7117] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 147.342061][ T7117] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 147.376452][ T7130] netlink: 'syz.1.1241': attribute type 10 has an invalid length. [ 147.388487][ T7117] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 147.425079][ T7117] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 147.460329][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.488181][ T7130] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.893970][ T7135] loop2: detected capacity change from 0 to 8192 [ 147.978767][ T7135] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 148.018933][ T7135] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 148.037233][ T7135] REISERFS (device loop2): using ordered data mode [ 148.084755][ T7135] reiserfs: using flush barriers [ 148.121209][ T7135] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 148.179214][ T7135] REISERFS (device loop2): checking transaction log (loop2) [ 148.238561][ T7125] loop0: detected capacity change from 0 to 32768 [ 148.287411][ T7125] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1235 (7125) [ 148.336761][ T7150] loop3: detected capacity change from 0 to 4096 [ 148.405283][ T7125] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.418021][ T7150] ntfs: volume version 3.1. [ 148.451198][ T7125] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.492700][ T7135] REISERFS (device loop2): Using tea hash to sort names [ 148.504162][ T7125] BTRFS info (device loop0): enabling disk space caching [ 148.524748][ T7135] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 148.537335][ T7125] BTRFS info (device loop0): enabling auto defrag [ 148.566550][ T7125] BTRFS info (device loop0): max_inline at 0 [ 148.650025][ T7125] BTRFS info (device loop0): use no compression [ 148.656348][ T7125] BTRFS info (device loop0): force clearing of disk cache [ 148.684006][ T7125] BTRFS info (device loop0): disabling disk space caching [ 148.809994][ T7169] netlink: 'syz.4.1256': attribute type 32 has an invalid length. [ 149.118384][ T7125] BTRFS info (device loop0): enabling ssd optimizations [ 149.173424][ T7125] BTRFS info (device loop0): rebuilding free space tree [ 149.222622][ T7125] BTRFS info (device loop0): disabling free space tree [ 149.239590][ T7125] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 149.252660][ T7125] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 149.313764][ T7125] BTRFS error (device loop0: state M): unrecognized mount option 'ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿ' [ 149.434656][ T4265] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.593717][ T7208] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 149.643705][ T7208] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 149.732039][ T4909] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop0 scanned by udevd (4909) [ 149.954782][ T7212] loop4: detected capacity change from 0 to 4096 [ 150.065690][ T7212] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 150.218454][ T7212] ntfs3: loop4: failed to convert "c46c" to iso8859-7 [ 150.499987][ T7243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.627797][ T7246] loop4: detected capacity change from 0 to 2048 [ 150.659530][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 150.706622][ T7246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.776156][ T7253] tmpfs: Bad value for 'mpol' [ 150.889993][ T7257] netlink: 'syz.3.1288': attribute type 10 has an invalid length. [ 150.984526][ T7257] team0: Device veth1_macvtap failed to register rx_handler [ 151.098413][ T7231] loop0: detected capacity change from 0 to 32768 [ 151.143054][ T7231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1267 (7231) [ 151.204626][ T7231] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.259307][ T7231] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 151.283291][ T7231] BTRFS info (device loop0): using free space tree [ 151.563453][ T7228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.586851][ T7231] BTRFS info (device loop0): enabling ssd optimizations [ 151.635464][ T7278] loop2: detected capacity change from 0 to 4096 [ 151.706440][ T7278] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 151.761033][ T7278] ntfs3: loop2: Failed to load root. [ 151.772161][ T4265] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.779686][ T7228] usb 4-1: Using ep0 maxpacket: 16 [ 151.806668][ T7228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 151.848962][ T7228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 151.922192][ T7228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 151.956705][ T7228] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 151.983946][ T7228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.067650][ T7228] usb 4-1: Product: syz [ 152.076334][ T4909] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4909) [ 152.096865][ T7228] usb 4-1: Manufacturer: syz [ 152.110725][ T7228] usb 4-1: SerialNumber: syz [ 152.140261][ T7228] usb 4-1: config 0 descriptor?? [ 152.180535][ T7269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.187805][ T7269] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.253033][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 152.261645][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 152.269731][ T7228] port100 4-1:0.0: NFC: Could not get supported command types [ 152.514798][ T7308] usb 4-1: USB disconnect, device number 7 [ 152.555049][ T7319] openvswitch: netlink: Message has 4 unknown bytes. [ 152.575572][ T7321] netlink: 920 bytes leftover after parsing attributes in process `syz.2.1309'. [ 152.796414][ T7303] loop4: detected capacity change from 0 to 32768 [ 152.875652][ T7303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1302 (7303) [ 152.933715][ T7303] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.009188][ T7303] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 153.056736][ T7303] BTRFS info (device loop4): using free space tree [ 153.219617][ T7343] netlink: 'syz.1.1317': attribute type 6 has an invalid length. [ 153.514294][ T7303] BTRFS info (device loop4): enabling ssd optimizations [ 153.552720][ T7368] loop1: detected capacity change from 0 to 512 [ 153.603942][ T7368] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 153.650749][ T7368] EXT4-fs (loop1): orphan cleanup on readonly fs [ 153.670332][ T4269] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.689911][ T7368] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.1323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 153.780158][ T7368] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1323: couldn't read orphan inode 13 (err -117) [ 153.875890][ T7368] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.931013][ T7368] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 153.940568][ T4257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop4 scanned by udevd (4257) [ 153.999831][ T7368] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 154.078967][ T7368] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 154.100535][ T7368] ext4 filesystem being remounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.154965][ T7383] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1326'. [ 154.194989][ T7383] 0ªX¹¦À: renamed from caif0 [ 154.223302][ T7383] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 154.236171][ T7385] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1330'. [ 154.260925][ T7381] loop2: detected capacity change from 0 to 4096 [ 154.270970][ T7345] loop0: detected capacity change from 0 to 32768 [ 154.298788][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 154.407530][ T7345] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 154.646843][ T7399] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 154.712882][ T4265] XFS (loop0): Unmounting Filesystem [ 154.826045][ T7399] device bond2 entered promiscuous mode [ 154.896513][ T7399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.026309][ T7404] loop1: detected capacity change from 0 to 8192 [ 155.105864][ T7404] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.217063][ T7404] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 155.257275][ T7404] FAT-fs (loop1): Filesystem has been set read-only [ 155.394163][ T4275] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 155.415449][ T7415] loop4: detected capacity change from 0 to 4096 [ 155.564041][ T7421] loop0: detected capacity change from 0 to 2048 [ 155.660450][ T7421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.708240][ T7423] loop1: detected capacity change from 0 to 4096 [ 155.756680][ T7421] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 155.783387][ T7423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 155.890561][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 155.916888][ T7421] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 156.016603][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 156.216295][ T7440] loop1: detected capacity change from 0 to 1024 [ 156.331070][ T7442] loop3: detected capacity change from 0 to 2048 [ 156.397218][ T7442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.062334][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 157.113343][ T7478] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 157.288203][ T7489] netlink: 'syz.2.1373': attribute type 3 has an invalid length. [ 157.301299][ T7488] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1377'. [ 157.389875][ T7490] loop1: detected capacity change from 0 to 4096 [ 157.464277][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.485278][ T7494] loop3: detected capacity change from 0 to 256 [ 157.550948][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 157.555580][ T7490] EXT4-fs error (device loop1): ext4_empty_dir:3154: inode #12: block 80: comm syz.1.1374: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 157.606789][ T7494] FAT-fs (loop3): Directory bread(block 64) failed [ 157.670428][ T7494] FAT-fs (loop3): Directory bread(block 65) failed [ 157.677174][ T7494] FAT-fs (loop3): Directory bread(block 66) failed [ 157.680161][ T7490] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #12: comm syz.1.1374: directory missing '..' [ 157.729668][ T7494] FAT-fs (loop3): Directory bread(block 67) failed [ 157.736396][ T7494] FAT-fs (loop3): Directory bread(block 68) failed [ 157.780630][ T7494] FAT-fs (loop3): Directory bread(block 69) failed [ 157.787635][ T7494] FAT-fs (loop3): Directory bread(block 70) failed [ 157.829755][ T7379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 203: padding at end of block bitmap is not set [ 157.853727][ T7494] FAT-fs (loop3): Directory bread(block 71) failed [ 157.879605][ T7494] FAT-fs (loop3): Directory bread(block 72) failed [ 157.887772][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 157.899036][ T7494] FAT-fs (loop3): Directory bread(block 73) failed [ 158.136422][ T7507] loop2: detected capacity change from 0 to 4096 [ 158.176751][ T7507] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 158.356410][ T7521] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1392'. [ 158.399687][ T7521] 0ªX¹¦À: renamed from caif0 [ 158.458149][ T7521] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 158.689838][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 158.689854][ T26] audit: type=1326 audit(1763234602.442:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 158.764214][ T26] audit: type=1326 audit(1763234602.482:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 158.862863][ T26] audit: type=1326 audit(1763234602.482:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 158.951937][ T26] audit: type=1326 audit(1763234602.482:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 159.019474][ T26] audit: type=1326 audit(1763234602.482:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.2.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c1f8f6c9 code=0x7ffc0000 [ 159.101607][ T7553] loop2: detected capacity change from 0 to 256 [ 159.198984][ T7553] FAT-fs (loop2): Directory bread(block 64) failed [ 159.238478][ T7553] FAT-fs (loop2): Directory bread(block 65) failed [ 159.281433][ T7553] FAT-fs (loop2): Directory bread(block 66) failed [ 159.288022][ T7553] FAT-fs (loop2): Directory bread(block 67) failed [ 159.306475][ T7553] FAT-fs (loop2): Directory bread(block 68) failed [ 159.340754][ T7553] FAT-fs (loop2): Directory bread(block 69) failed [ 159.347465][ T7553] FAT-fs (loop2): Directory bread(block 70) failed [ 159.372471][ T7553] FAT-fs (loop2): Directory bread(block 71) failed [ 159.407290][ T7553] FAT-fs (loop2): Directory bread(block 72) failed [ 159.414892][ T7553] FAT-fs (loop2): Directory bread(block 73) failed [ 159.547377][ T7569] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1415'. [ 159.610326][ T7569] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1415'. [ 159.669128][ T7573] ptrace attach of "./syz-executor exec"[4271] was attempted by ""[7573] [ 159.809706][ T7577] loop1: detected capacity change from 0 to 2048 [ 159.845065][ T7577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.900093][ T26] audit: type=1800 audit(1763234603.662:33): pid=7577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1419" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 160.005236][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1423'. [ 160.201911][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1425'. [ 160.509161][ T7581] loop3: detected capacity change from 0 to 32768 [ 160.581643][ T7607] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1432'. [ 160.591725][ T7607] 0ªX¹¦À: renamed from caif0 [ 160.598405][ T7607] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 160.618005][ T7581] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 160.708065][ T7581] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 160.811944][ T7581] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 160.844471][ T7615] loop2: detected capacity change from 0 to 256 [ 160.849551][ T7581] OCFS2: Returning error to the calling process. [ 160.887609][ T7581] (syz.3.1421,7581,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 160.907850][ T7581] (syz.3.1421,7581,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 160.918608][ T7615] FAT-fs (loop2): Directory bread(block 64) failed [ 160.928397][ T7615] FAT-fs (loop2): Directory bread(block 65) failed [ 160.944982][ T7615] FAT-fs (loop2): Directory bread(block 66) failed [ 160.948431][ T7581] (syz.3.1421,7581,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 160.955779][ T7615] FAT-fs (loop2): Directory bread(block 67) failed [ 160.969458][ T7581] (syz.3.1421,7581,1):ocfs2_mknod:306 ERROR: status = -5 [ 160.974943][ T7615] FAT-fs (loop2): Directory bread(block 68) failed [ 160.987049][ T7581] (syz.3.1421,7581,1):ocfs2_mknod:502 ERROR: status = -5 [ 160.987226][ T7615] FAT-fs (loop2): Directory bread(block 69) failed [ 161.006510][ T7615] FAT-fs (loop2): Directory bread(block 70) failed [ 161.007290][ T7581] (syz.3.1421,7581,1):ocfs2_mkdir:659 ERROR: status = -5 [ 161.013148][ T7615] FAT-fs (loop2): Directory bread(block 71) failed [ 161.013249][ T7615] FAT-fs (loop2): Directory bread(block 72) failed [ 161.013272][ T7615] FAT-fs (loop2): Directory bread(block 73) failed [ 161.150865][ T7308] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.206257][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 161.236321][ T7599] loop1: detected capacity change from 0 to 32768 [ 161.276993][ T7599] (syz.1.1429,7599,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.319786][ T7599] (syz.1.1429,7599,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.359561][ T7308] usb 5-1: Using ep0 maxpacket: 32 [ 161.375561][ T7308] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 161.396157][ T7308] usb 5-1: config 0 has no interface number 1 [ 161.400250][ T7599] JBD2: Ignoring recovery information on journal [ 161.459868][ T7308] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 161.479352][ T7308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.500264][ T7599] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.521413][ T7308] usb 5-1: Product: syz [ 161.525636][ T7308] usb 5-1: Manufacturer: syz [ 161.563218][ T7308] usb 5-1: SerialNumber: syz [ 161.598518][ T7308] usb 5-1: config 0 descriptor?? [ 161.730776][ T7308] viperboard 5-1:0.61: version 0.00 found at bus 005 address 007 [ 161.808921][ T7308] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 161.869521][ T7308] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 161.894150][ T7308] viperboard 5-1:0.0: version 0.00 found at bus 005 address 007 [ 161.922484][ T7308] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 161.960694][ T7308] viperboard-i2c: probe of viperboard-i2c.5.auto failed with error -5 [ 161.999712][ T7308] usb 5-1: USB disconnect, device number 7 [ 162.016470][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 162.394515][ T7651] comedi comedi0: dt2814: I/O port conflict (0x1,2) [ 163.466119][ T7697] device wlan0 entered promiscuous mode [ 163.792673][ T7709] loop3: detected capacity change from 0 to 4096 [ 163.825831][ T7709] EXT4-fs: inline encryption not supported [ 163.858290][ T7709] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.887518][ T7717] netlink: 'syz.1.1482': attribute type 15 has an invalid length. [ 163.932512][ T7709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.966216][ T7699] loop2: detected capacity change from 0 to 32768 [ 163.990149][ T7699] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 164.214309][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 164.396731][ T4257] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 164.657151][ T7744] loop3: detected capacity change from 0 to 64 [ 165.335021][ T7767] loop0: detected capacity change from 0 to 4096 [ 165.408483][ T7767] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 165.445361][ T7767] ntfs3: loop0: Failed to load $Extend. [ 165.515433][ T7767] ntfs3: loop0: ino=5, "/" directory corrupted [ 165.825172][ T7796] fuse: blksize only supported for fuseblk [ 166.145840][ T7810] loop4: detected capacity change from 0 to 22 [ 166.157934][ T7801] loop2: detected capacity change from 0 to 4096 [ 166.173012][ T7810] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 166.186562][ T7801] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 166.219572][ T7810] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 166.545448][ T7819] binder: 7818:7819 ioctl 400c620e 0 returned -14 [ 166.779010][ T7825] loop4: detected capacity change from 0 to 2048 [ 166.838802][ T7825] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 166.878612][ T7825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.943975][ T7833] loop2: detected capacity change from 0 to 4096 [ 166.966068][ T26] audit: type=1800 audit(1763234610.722:34): pid=7825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1531" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 167.019629][ T7837] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.047051][ T7833] NILFS error (device loop2): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 167.120546][ T7833] Remounting filesystem read-only [ 167.303506][ T7840] loop1: detected capacity change from 0 to 4096 [ 167.619645][ T7219] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.843975][ T7219] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 167.855474][ T7863] loop0: detected capacity change from 0 to 1024 [ 167.868283][ T7219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.885556][ T7863] hfsplus: Filesystem is marked locked, mounting read-only. [ 167.889490][ T7219] usb 3-1: Product: syz [ 167.909631][ T7219] usb 3-1: Manufacturer: syz [ 167.914323][ T7219] usb 3-1: SerialNumber: syz [ 167.955075][ T7863] hfsplus: filesystem is marked locked, leaving read-only. [ 167.959029][ T7219] r8152-cfgselector 3-1: config 0 descriptor?? [ 168.279927][ T7225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.384067][ T7219] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.407785][ T7219] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 168.472174][ T7225] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 168.499773][ T7225] usb 2-1: config 0 has no interface number 0 [ 168.516280][ T7225] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 168.535972][ T7225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.559771][ T7225] usb 2-1: Product: syz [ 168.570124][ T7225] usb 2-1: Manufacturer: syz [ 168.577297][ T7225] usb 2-1: SerialNumber: syz [ 168.595982][ T7225] usb 2-1: config 0 descriptor?? [ 168.775704][ T7900] loop4: detected capacity change from 0 to 256 [ 168.827092][ T7225] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 168.850357][ T7225] usb 2-1: No valid video chain found. [ 168.858654][ T7225] usb 2-1: USB disconnect, device number 5 [ 169.050800][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'. [ 169.348288][ T7918] loop0: detected capacity change from 0 to 2048 [ 169.424005][ T7918] loop0: p1 < > p4 < > [ 169.504707][ T3637] loop0: p1 < > p4 < > [ 169.593628][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.608493][ T4265] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 169.645792][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.656915][ T7926] loop3: detected capacity change from 0 to 2048 [ 169.679458][ T4909] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 169.733290][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.749601][ T7926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.785541][ T4909] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 169.826496][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.858032][ T4909] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 169.876182][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.894275][ T4909] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 169.895353][ T7910] loop4: detected capacity change from 0 to 32768 [ 169.906555][ T4909] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.956842][ T4909] Buffer I/O error on dev loop0p4, logical block 0, async page read [ 170.003685][ T7910] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 170.090571][ T7910] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 170.162789][ T4909] udevd[4909]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 170.173428][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 170.299324][ T7645] udevd[7645]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 170.342641][ T4909] udevd[4909]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 170.446063][ T4269] ocfs2: Unmounting device (7,4) on (node local) [ 170.458038][ T4910] udevd[4910]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 170.476768][ T4909] udevd[4909]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 171.203489][ T7984] netlink: 'syz.3.1607': attribute type 27 has an invalid length. [ 171.212877][ T7984] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 171.836144][ T7987] loop2: detected capacity change from 0 to 32768 [ 171.885731][ T7987] (syz.2.1608,7987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.936571][ T7987] (syz.2.1608,7987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 172.020331][ T7987] JBD2: Ignoring recovery information on journal [ 172.107933][ T7987] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.217942][ T8021] loop1: detected capacity change from 0 to 128 [ 172.237859][ T8023] loop3: detected capacity change from 0 to 164 [ 172.326463][ T8021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.327462][ T8023] Unsupported NM flag settings (240) [ 172.360360][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 172.366907][ T8021] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.452119][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 172.892143][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'. [ 172.921692][ T8045] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1635'. [ 172.939505][ T8045] netlink: 'syz.4.1635': attribute type 3 has an invalid length. [ 172.958315][ T8045] netlink: 'syz.4.1635': attribute type 2 has an invalid length. [ 172.998953][ T8045] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1635'. [ 173.492513][ T8070] delete_channel: no stack [ 173.708667][ T8051] loop3: detected capacity change from 0 to 32768 [ 173.732986][ T8051] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 173.790340][ T8082] loop1: detected capacity change from 0 to 1024 [ 173.929802][ T8086] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 173.937689][ T8086] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 173.981612][ T8086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.067450][ T4909] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 174.762806][ T8120] loop2: detected capacity change from 0 to 128 [ 175.299620][ T5063] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.461243][ T8124] loop3: detected capacity change from 0 to 32768 [ 175.489609][ T5063] usb 3-1: Using ep0 maxpacket: 16 [ 175.500544][ T5063] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 175.530244][ T5063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.547429][ T5063] usb 3-1: Product: syz [ 175.556199][ T8124] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.559459][ T5063] usb 3-1: Manufacturer: syz [ 175.570099][ T5063] usb 3-1: SerialNumber: syz [ 175.578570][ T5063] usb 3-1: config 0 descriptor?? [ 175.595997][ T5063] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 175.605441][ T5063] usb 3-1: Detected FT232H [ 175.692150][ T8124] OCFS2: ERROR (device loop3): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature [ 175.720000][ T8124] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 175.753874][ T8124] OCFS2: Returning error to the calling process. [ 175.786133][ T8124] (syz.3.1673,8124,1):ocfs2_xattr_block_find:2835 ERROR: status = -5 [ 175.904930][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 175.998586][ T8158] loop0: detected capacity change from 0 to 256 [ 176.007673][ T5063] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 176.030283][ T5063] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 176.048540][ T5063] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 176.099709][ T5063] usb 3-1: USB disconnect, device number 6 [ 176.162281][ T5063] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 176.213412][ T5063] ftdi_sio 3-1:0.0: device disconnected [ 176.286044][ T8162] loop4: detected capacity change from 0 to 1024 [ 176.494923][ T46] hfsplus: b-tree write err: -5, ino 4 [ 176.519006][ T8170] SET target dimension over the limit! [ 177.332280][ T8204] siw: device registration error -23 [ 177.459661][ T8208] xt_TCPMSS: Only works on TCP SYN packets [ 177.513914][ T8210] netlink: 'syz.3.1714': attribute type 3 has an invalid length. [ 177.999320][ T8228] SET target dimension over the limit! [ 178.263829][ T8238] loop4: detected capacity change from 0 to 256 [ 178.297263][ T8238] exfat: Deprecated parameter 'namecase' [ 178.336208][ T8238] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 179.604615][ T8298] netlink: 'syz.4.1757': attribute type 7 has an invalid length. [ 179.628875][ T8298] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1757'. [ 179.674844][ T8302] loop2: detected capacity change from 0 to 16 [ 179.734115][ T8302] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 179.831838][ T8304] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.249069][ T8316] netlink: 'syz.4.1766': attribute type 4 has an invalid length. [ 180.264722][ T8316] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1766'. [ 180.344461][ T8296] loop1: detected capacity change from 0 to 32768 [ 180.392419][ T8296] (syz.1.1756,8296,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.452002][ T8296] (syz.1.1756,8296,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 180.489784][ T8294] loop3: detected capacity change from 0 to 40427 [ 180.522778][ T8294] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 180.553865][ T8296] JBD2: Ignoring recovery information on journal [ 180.592382][ T8294] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.694643][ T8294] F2FS-fs (loop3): invalid crc value [ 180.722149][ T8294] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.789163][ T8296] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 180.821112][ T8294] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.841154][ T8294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.927128][ T8296] [ 180.929513][ T8296] ====================================================== [ 180.936548][ T8296] WARNING: possible circular locking dependency detected [ 180.943591][ T8296] syzkaller #0 Not tainted [ 180.948016][ T8296] ------------------------------------------------------ [ 180.955045][ T8296] syz.1.1756/8296 is trying to acquire lock: [ 180.961055][ T8296] ffff8880716589c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xad6/0x11e0 [ 180.973276][ T8296] [ 180.973276][ T8296] but task is already holding lock: [ 180.980649][ T8296] ffff8880716bb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 180.990169][ T8296] [ 180.990169][ T8296] which lock already depends on the new lock. [ 180.990169][ T8296] [ 181.000585][ T8296] [ 181.000585][ T8296] the existing dependency chain (in reverse order) is: [ 181.009608][ T8296] [ 181.009608][ T8296] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 181.017456][ T8296] down_read+0x42/0x2d0 [ 181.022164][ T8296] ocfs2_init_acl+0x2fb/0x720 [ 181.027475][ T8296] ocfs2_mknod+0x1463/0x2350 [ 181.032706][ T8296] ocfs2_create+0x1b6/0x4a0 [ 181.037750][ T8296] path_openat+0x1187/0x2e70 [ 181.042914][ T8296] do_filp_open+0x1c1/0x3c0 [ 181.047967][ T8296] do_sys_openat2+0x142/0x490 [ 181.053196][ T8296] __x64_sys_openat+0x135/0x160 [ 181.058599][ T8296] do_syscall_64+0x4c/0xa0 [ 181.063566][ T8296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.070004][ T8296] [ 181.070004][ T8296] -> #1 (jbd2_handle){++++}-{0:0}: [ 181.077324][ T8296] jbd2_journal_lock_updates+0xa7/0x380 [ 181.083420][ T8296] __ocfs2_flush_truncate_log+0x2cd/0x11d0 [ 181.089777][ T8296] ocfs2_truncate_log_shutdown+0x13e/0x2e0 [ 181.096121][ T8296] ocfs2_dismount_volume+0x204/0x930 [ 181.101954][ T8296] generic_shutdown_super+0x130/0x340 [ 181.107870][ T8296] kill_block_super+0x7c/0xe0 [ 181.113102][ T8296] deactivate_locked_super+0x93/0xf0 [ 181.118936][ T8296] cleanup_mnt+0x463/0x4f0 [ 181.123906][ T8296] task_work_run+0x1ca/0x250 [ 181.129045][ T8296] exit_to_user_mode_loop+0xe6/0x110 [ 181.134879][ T8296] exit_to_user_mode_prepare+0xee/0x180 [ 181.140974][ T8296] syscall_exit_to_user_mode+0x16/0x40 [ 181.146981][ T8296] do_syscall_64+0x58/0xa0 [ 181.151949][ T8296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.158470][ T8296] [ 181.158470][ T8296] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 181.169012][ T8296] __lock_acquire+0x2cf8/0x7c50 [ 181.174413][ T8296] lock_acquire+0x1b4/0x490 [ 181.179461][ T8296] down_write+0x36/0x60 [ 181.184172][ T8296] ocfs2_xattr_set+0xad6/0x11e0 [ 181.189576][ T8296] ocfs2_set_acl+0x4e1/0x590 [ 181.194712][ T8296] ocfs2_iop_set_acl+0x16f/0x270 [ 181.200202][ T8296] posix_acl_xattr_set+0x387/0x3f0 [ 181.205859][ T8296] __vfs_setxattr+0x3e0/0x420 [ 181.211081][ T8296] __vfs_setxattr_noperm+0x129/0x5e0 [ 181.216926][ T8296] vfs_setxattr+0x168/0x2f0 [ 181.221983][ T8296] setxattr+0x2b2/0x2d0 [ 181.226676][ T8296] path_setxattr+0x142/0x280 [ 181.231811][ T8296] __x64_sys_setxattr+0xb7/0xd0 [ 181.237204][ T8296] do_syscall_64+0x4c/0xa0 [ 181.242169][ T8296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.248609][ T8296] [ 181.248609][ T8296] other info that might help us debug this: [ 181.248609][ T8296] [ 181.258851][ T8296] Chain exists of: [ 181.258851][ T8296] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 181.258851][ T8296] [ 181.274693][ T8296] Possible unsafe locking scenario: [ 181.274693][ T8296] [ 181.282331][ T8296] CPU0 CPU1 [ 181.287752][ T8296] ---- ---- [ 181.293216][ T8296] lock(&oi->ip_xattr_sem); [ 181.297828][ T8296] lock(jbd2_handle); [ 181.304434][ T8296] lock(&oi->ip_xattr_sem); [ 181.311652][ T8296] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 181.318970][ T8296] [ 181.318970][ T8296] *** DEADLOCK *** [ 181.318970][ T8296] [ 181.327215][ T8296] 3 locks held by syz.1.1756/8296: [ 181.332434][ T8296] #0: ffff88801bf16460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 181.341788][ T8296] #1: ffff8880716bb488 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x141/0x2f0 [ 181.352181][ T8296] #2: ffff8880716bb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x40c/0x11e0 [ 181.362136][ T8296] [ 181.362136][ T8296] stack backtrace: [ 181.368045][ T8296] CPU: 1 PID: 8296 Comm: syz.1.1756 Not tainted syzkaller #0 [ 181.375859][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.385954][ T8296] Call Trace: [ 181.389348][ T8296] [ 181.392288][ T8296] dump_stack_lvl+0x168/0x22e [ 181.396986][ T8296] ? load_image+0x3b0/0x3b0 [ 181.401512][ T8296] ? show_regs_print_info+0x12/0x12 [ 181.406728][ T8296] ? print_circular_bug+0x12b/0x1a0 [ 181.411947][ T8296] check_noncircular+0x274/0x310 [ 181.416911][ T8296] ? add_chain_block+0x940/0x940 [ 181.421856][ T8296] ? lockdep_lock+0xdc/0x1e0 [ 181.426462][ T8296] ? ocfs2_read_inode_block+0x11a/0x180 [ 181.432034][ T8296] ? _find_first_zero_bit+0xcf/0x100 [ 181.437344][ T8296] __lock_acquire+0x2cf8/0x7c50 [ 181.442232][ T8296] ? verify_lock_unused+0x140/0x140 [ 181.447449][ T8296] ? ocfs2_inode_lock_tracker+0x144/0x660 [ 181.453184][ T8296] ? posix_acl_xattr_set+0x387/0x3f0 [ 181.458486][ T8296] ? __lock_acquire+0x7c50/0x7c50 [ 181.463613][ T8296] ? do_raw_spin_lock+0x11d/0x280 [ 181.468652][ T8296] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.474735][ T8296] ? __rwlock_init+0x140/0x140 [ 181.479511][ T8296] lock_acquire+0x1b4/0x490 [ 181.484025][ T8296] ? ocfs2_xattr_set+0xad6/0x11e0 [ 181.489069][ T8296] ? ocfs2_xattr_block_find+0x150/0x4b0 [ 181.494635][ T8296] ? __might_sleep+0xd0/0xd0 [ 181.499294][ T8296] ? preempt_count_add+0x8d/0x190 [ 181.504337][ T8296] ? read_lock_is_recursive+0x10/0x10 [ 181.509728][ T8296] ? rwsem_write_trylock+0x12f/0x1b0 [ 181.515058][ T8296] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 181.520628][ T8296] ? ocfs2_xattr_ibody_find+0xcb/0x7c0 [ 181.526120][ T8296] down_write+0x36/0x60 [ 181.530291][ T8296] ? ocfs2_xattr_set+0xad6/0x11e0 [ 181.535417][ T8296] ocfs2_xattr_set+0xad6/0x11e0 [ 181.540331][ T8296] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 181.546066][ T8296] ? __kasan_kmalloc+0x8e/0xa0 [ 181.550849][ T8296] ? ocfs2_set_acl+0x11e/0x590 [ 181.555628][ T8296] ? ocfs2_iop_set_acl+0x16f/0x270 [ 181.560762][ T8296] ? posix_acl_xattr_set+0x387/0x3f0 [ 181.566069][ T8296] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 181.571557][ T8296] ? setxattr+0x2b2/0x2d0 [ 181.575916][ T8296] ? __kmem_cache_alloc_node+0x140/0x260 [ 181.581573][ T8296] ? ocfs2_set_acl+0x11e/0x590 [ 181.586347][ T8357] loop2: detected capacity change from 0 to 32768 [ 181.586358][ T8296] ? rcu_is_watching+0x11/0xa0 [ 181.597535][ T8296] ? ocfs2_set_acl+0x11e/0x590 [ 181.601929][ T8357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1784 (8357) [ 181.602388][ T8296] ? __kmalloc+0xe1/0x240 [ 181.618868][ T8296] ? ocfs2_inode_lock_atime+0x4e0/0x4e0 [ 181.624440][ T8296] ocfs2_set_acl+0x4e1/0x590 [ 181.629055][ T8296] ocfs2_iop_set_acl+0x16f/0x270 [ 181.634010][ T8296] ? ocfs2_xattr_get+0x220/0x220 [ 181.638961][ T8296] ? __kmem_cache_alloc_node+0x140/0x260 [ 181.644609][ T8296] ? vfs_set_acl_prepare+0x108/0x6e0 [ 181.649891][ T8296] ? __kmalloc+0xe1/0x240 [ 181.654215][ T8296] ? posix_acl_valid+0x320/0x3a0 [ 181.659145][ T8296] posix_acl_xattr_set+0x387/0x3f0 [ 181.664252][ T8296] ? posix_acl_xattr_get+0x550/0x550 [ 181.669535][ T8296] __vfs_setxattr+0x3e0/0x420 [ 181.674217][ T8296] __vfs_setxattr_noperm+0x129/0x5e0 [ 181.679500][ T8296] vfs_setxattr+0x168/0x2f0 [ 181.684002][ T8296] ? xattr_permission+0x500/0x500 [ 181.689020][ T8296] ? _copy_from_user+0x10b/0x170 [ 181.693947][ T8296] ? setxattr+0x214/0x2d0 [ 181.698269][ T8296] setxattr+0x2b2/0x2d0 [ 181.702421][ T8296] ? path_setxattr+0x280/0x280 [ 181.707183][ T8296] ? __mnt_want_write+0x21f/0x2a0 [ 181.712208][ T8296] path_setxattr+0x142/0x280 [ 181.716795][ T8296] ? simple_xattr_list_add+0xf0/0xf0 [ 181.722086][ T8296] ? lock_chain_count+0x20/0x20 [ 181.726961][ T8296] __x64_sys_setxattr+0xb7/0xd0 [ 181.731826][ T8296] do_syscall_64+0x4c/0xa0 [ 181.736254][ T8296] ? clear_bhb_loop+0x60/0xb0 [ 181.740922][ T8296] ? clear_bhb_loop+0x60/0xb0 [ 181.745598][ T8296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.751519][ T8296] RIP: 0033:0x7f9b4ed8f6c9 [ 181.755942][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.775545][ T8296] RSP: 002b:00007f9b4cff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 181.783950][ T8296] RAX: ffffffffffffffda RBX: 00007f9b4efe5fa0 RCX: 00007f9b4ed8f6c9 [ 181.792006][ T8296] RDX: 0000200000000100 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 181.799992][ T8296] RBP: 00007f9b4ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.807961][ T8296] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 181.815963][ T8296] R13: 00007f9b4efe6038 R14: 00007f9b4efe5fa0 R15: 00007fffbf8964b8 [ 181.823941][ T8296] [ 181.827029][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.846049][ T8357] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.873302][ T8357] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.900762][ T8357] BTRFS info (device loop2): setting nodatacow, compression disabled [ 181.908899][ T8357] BTRFS info (device loop2): turning on flush-on-commit [ 181.916806][ T8357] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 181.931634][ T4275] ocfs2: Unmounting device (7,1) on (node local) [ 181.938083][ T8357] BTRFS info (device loop2): use lzo compression, level 0 [ 181.971198][ T8357] BTRFS info (device loop2): setting nodatasum [ 181.980876][ T8357] BTRFS info (device loop2): use no compression [ 181.999584][ T8357] BTRFS info (device loop2): trying to use backup root at mount time [ 182.008796][ T8357] BTRFS info (device loop2): max_inline at 0 [ 182.021082][ T8357] BTRFS info (device loop2): using free space tree [ 182.139090][ T4358] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 182.152622][ T8357] BTRFS warning (device loop2): couldn't read tree root [ 182.160749][ T8357] BTRFS warning (device loop2): try to load backup roots slot 1 [ 182.168737][ T46] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 182.183414][ T8357] BTRFS warning (device loop2): couldn't read tree root [ 182.190649][ T8357] BTRFS warning (device loop2): try to load backup roots slot 2 [ 182.198739][ T8357] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 182.211581][ T8357] BTRFS warning (device loop2): couldn't read tree root [ 182.218579][ T8357] BTRFS warning (device loop2): try to load backup roots slot 3 [ 182.229229][ T8357] BTRFS info (device loop2): enabling ssd optimizations [ 182.236720][ T8357] BTRFS info (device loop2): rebuilding free space tree [ 182.246122][ T8357] BTRFS info (device loop2): checking UUID tree [ 182.279442][ T26] audit: type=1800 audit(1763234626.032:35): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1784" name="file1" dev="loop2" ino=257 res=0 errno=0 [ 182.303178][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.329819][ T4909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (4909) [ 186.069714][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 186.069851][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 186.075749][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 186.075773][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 186.081819][ T4278] Bluetooth: hci1: command 0x0406 tx timeout