last executing test programs: 1m1.17128613s ago: executing program 3 (id=323): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1m0.829453005s ago: executing program 3 (id=329): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, 0x300, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1m0.720004537s ago: executing program 3 (id=332): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fe, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x0, 0x1, 0x8) 1m0.50282786s ago: executing program 3 (id=337): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d69736f383835392d37006572726f72733d72656d6f756e742d726f2c75737271756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f72733d636f6e74696e75652c7265736967652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c00"], 0x1, 0x61ae, &(0x7f0000007640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 59.038682414s ago: executing program 3 (id=362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x94, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) 57.853424853s ago: executing program 3 (id=379): syz_usb_connect(0x5, 0x2d, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0x1f, 0xb0, 0xb4, 0x10, 0xa07, 0x82, 0x839a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x8, 0x60, 0x2, [{{0x9, 0x4, 0x4a, 0x3, 0x1, 0x21, 0x68, 0xe6, 0x3, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 57.717520855s ago: executing program 32 (id=379): syz_usb_connect(0x5, 0x2d, &(0x7f0000001600)={{0x12, 0x1, 0x310, 0x1f, 0xb0, 0xb4, 0x10, 0xa07, 0x82, 0x839a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x8, 0x60, 0x2, [{{0x9, 0x4, 0x4a, 0x3, 0x1, 0x21, 0x68, 0xe6, 0x3, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x9, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.425312875s ago: executing program 4 (id=1189): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.250472388s ago: executing program 4 (id=1192): r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x1}}) 3.192402849s ago: executing program 4 (id=1194): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 2.834062914s ago: executing program 2 (id=1198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.251057014s ago: executing program 2 (id=1207): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000000)=0xa) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000002a40)) 2.131047766s ago: executing program 2 (id=1209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.016946668s ago: executing program 2 (id=1211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x30}}, 0x0) 1.84751893s ago: executing program 2 (id=1213): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) 1.735327802s ago: executing program 2 (id=1214): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000780)={0x20, 0x16, 0x2, "2fa6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.620254784s ago: executing program 4 (id=1218): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.383981518s ago: executing program 1 (id=1223): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.318141579s ago: executing program 0 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000400000000600000008"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x7, 0x5, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xab}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.24614083s ago: executing program 4 (id=1226): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file2\x00', 0x2808454, &(0x7f0000001f80)=ANY=[], 0x1, 0x5577, &(0x7f000000d340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='./file1\x00') 1.23736446s ago: executing program 0 (id=1228): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfc, 0x6a7, &(0x7f00000006c0)="$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") creat(&(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x30) 980.476994ms ago: executing program 1 (id=1229): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)={0x10, 0x37, 0x1, 0x70bd26, 0x25dfdc02}, 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) 871.735996ms ago: executing program 0 (id=1230): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) 828.144867ms ago: executing program 5 (id=1231): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) read(r0, &(0x7f0000000000)=""/83, 0x53) read(r0, 0x0, 0x0) 774.259377ms ago: executing program 1 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002160000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 656.364399ms ago: executing program 0 (id=1233): unshare(0x22020600) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 649.817109ms ago: executing program 1 (id=1234): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x413, 0x70bd28, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x4c}}, 0x0) 591.22852ms ago: executing program 5 (id=1235): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3ff}]}}}]}, 0x4c}}, 0x0) 522.316621ms ago: executing program 1 (id=1236): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'virt_wifi0\x00', @random="a1a938559e11"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 522.167972ms ago: executing program 0 (id=1237): io_uring_setup(0x5b24, &(0x7f00000003c0)={0x0, 0x2990, 0x10000, 0x2, 0x1fd}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 467.879892ms ago: executing program 5 (id=1238): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x30}}, 0x0) 467.008002ms ago: executing program 1 (id=1239): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') exit(0x100000000) getdents(r0, 0x0, 0x0) 421.434403ms ago: executing program 0 (id=1240): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x840, [0x1, 0x2, 0x5, 0x8, 0x3, 0xfffffffffffffffe]}) 327.950715ms ago: executing program 5 (id=1241): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/164, 0xa4) 135.079607ms ago: executing program 4 (id=1242): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x208242, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) 14.0687ms ago: executing program 5 (id=1243): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=1244): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x40000000) kernel console output (not intermixed with test programs): #2: block 13: comm syz.2.218: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.255232][ T4432] elecom 0003:056E:00FF.0002: hidraw0: USB HID v0.05 Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0 [ 70.257958][ T4812] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 70.282328][ T4812] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #2: comm syz.2.218: Deleting old file: nlink 5, error=-117 [ 70.303464][ T4432] Bluetooth: hci4: command 0x0405 tx timeout [ 70.313804][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.334942][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.370078][ T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 70.390352][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.418357][ T23] usb 4-1: config 0 descriptor?? [ 70.491748][ T4435] usb 1-1: USB disconnect, device number 3 [ 70.592558][ T4827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 70.681586][ T4826] loop2: detected capacity change from 0 to 4096 [ 70.695010][ T4826] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 70.732946][ T4826] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 70.769365][ T4826] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 70.808528][ T4836] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.857255][ T4826] ntfs: volume version 3.1. [ 70.905730][ T23] cm6533_jd 0003:0D8C:0022.0003: item fetching failed at offset 2/5 [ 70.917788][ T23] cm6533_jd 0003:0D8C:0022.0003: parse failed [ 70.929748][ T23] cm6533_jd: probe of 0003:0D8C:0022.0003 failed with error -22 [ 70.976712][ T4841] device batadv1 entered promiscuous mode [ 71.057032][ T4844] capability: warning: `syz.0.229' uses deprecated v2 capabilities in a way that may be insecure [ 71.123833][ T4435] usb 4-1: USB disconnect, device number 2 [ 71.127582][ T4846] loop2: detected capacity change from 0 to 512 [ 71.163461][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.184137][ T4850] loop0: detected capacity change from 0 to 128 [ 71.191852][ T4846] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 71.240464][ T4846] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 71.259635][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.266116][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.287944][ T4850] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 71.293509][ T4846] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.325939][ T4850] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.403459][ T4296] usb 5-1: Using ep0 maxpacket: 16 [ 71.499685][ T4855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'. [ 71.523583][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 71.554523][ T4856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 71.555125][ T4296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 71.638961][ T4296] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 71.682310][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.722967][ T4296] usb 5-1: config 0 descriptor?? [ 71.807940][ T4870] loop1: detected capacity change from 0 to 256 [ 71.838856][ T4873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.231150][ T4879] loop3: detected capacity change from 0 to 64 [ 72.239364][ T4296] cypress 0003:04B4:BCA1.0004: item fetching failed at offset 0/3 [ 72.256903][ T4296] cypress 0003:04B4:BCA1.0004: parse failed [ 72.271013][ T4296] cypress: probe of 0003:04B4:BCA1.0004 failed with error -22 [ 72.388450][ T4883] loop1: detected capacity change from 0 to 512 [ 72.451189][ T4883] EXT4-fs (loop1): inline encryption not supported [ 72.467269][ T4435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.478777][ T4435] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.503598][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 72.507900][ T4296] usb 5-1: USB disconnect, device number 3 [ 72.531158][ T4883] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,grpquota,,errors=continue. Quota mode: writeback. [ 72.559006][ T4874] loop2: detected capacity change from 0 to 32768 [ 72.574529][ T4883] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.723656][ T4891] capability: warning: `syz.1.247' uses 32-bit capabilities (legacy support in use) [ 72.818483][ T4889] loop3: detected capacity change from 0 to 8192 [ 72.876898][ T4889] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 72.913945][ T4889] REISERFS (device loop3): using ordered data mode [ 72.923509][ T4889] reiserfs: using flush barriers [ 72.963501][ T4889] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.054562][ T4889] REISERFS (device loop3): checking transaction log (loop3) [ 73.087427][ T4889] REISERFS (device loop3): Using tea hash to sort names [ 73.126012][ T4889] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 73.192005][ T4911] binder: 4910:4911 ioctl c00c620f 200000000180 returned -22 [ 73.253694][ T4431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.405164][ T1106] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 73.648020][ T4939] loop1: detected capacity change from 0 to 1024 [ 73.741980][ T4939] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.752530][ T4935] loop3: detected capacity change from 0 to 8192 [ 73.861542][ T4935] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 73.879327][ T4935] REISERFS (device loop3): using ordered data mode [ 73.907212][ T4935] reiserfs: using flush barriers [ 73.913460][ T4935] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 73.929986][ T4935] REISERFS (device loop3): checking transaction log (loop3) [ 73.976172][ T4935] REISERFS (device loop3): Using r5 hash to sort names [ 73.983213][ T4935] REISERFS (device loop3): using 3.5.x disk format [ 73.999369][ T4935] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 74.101701][ T4954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 74.242829][ T4958] program syz.1.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.274575][ T4963] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 74.429996][ T4962] loop4: detected capacity change from 0 to 4096 [ 74.447953][ T4970] loop2: detected capacity change from 0 to 64 [ 74.466997][ T4968] loop3: detected capacity change from 0 to 1024 [ 74.514674][ T4948] loop0: detected capacity change from 0 to 32768 [ 74.532269][ T4968] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 74.572631][ T4968] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 74.584770][ T4968] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.283: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 74.586961][ T4962] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 74.611964][ T4968] EXT4-fs (loop3): no journal found [ 74.649149][ T4968] EXT4-fs (loop3): can't get journal size [ 74.654215][ T4948] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.730825][ T4968] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,max_dir_size_kb=0x0000000000000005,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 74.892252][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 74.892265][ T26] audit: type=1800 audit(1751065340.980:3): pid=4948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.274" name="file2" dev="loop0" ino=17058 res=0 errno=0 [ 75.082996][ T4169] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 75.103831][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 75.215340][ T4988] netlink: 'syz.4.289': attribute type 2 has an invalid length. [ 75.363693][ T4992] loop2: detected capacity change from 0 to 256 [ 75.386664][ T4995] loop1: detected capacity change from 0 to 256 [ 75.481937][ T4995] exfat: Deprecated parameter 'namecase' [ 75.552744][ T4995] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 75.684197][ T5010] loop2: detected capacity change from 0 to 256 [ 75.764297][ T5010] exfat: Deprecated parameter 'utf8' [ 75.779032][ T5010] exfat: Deprecated parameter 'namecase' [ 75.811517][ T5010] exfat: Deprecated parameter 'utf8' [ 75.826076][ T5019] loop4: detected capacity change from 0 to 64 [ 75.845385][ T4296] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 75.887584][ T5010] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 75.905797][ T5023] loop1: detected capacity change from 0 to 512 [ 75.990372][ T5023] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 76.023576][ T5023] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.055225][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.253582][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.282257][ T5023] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.307: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 76.313709][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.339299][ T5034] loop2: detected capacity change from 0 to 4096 [ 76.353521][ T4296] usb 1-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 76.378071][ T7] cfg80211: failed to load regulatory.db [ 76.378535][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.397202][ T5023] EXT4-fs (loop1): Remounting filesystem read-only [ 76.408047][ T5029] loop3: detected capacity change from 0 to 32768 [ 76.419637][ T4296] usb 1-1: config 0 descriptor?? [ 76.431604][ T5034] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 76.443465][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 76.500796][ T5029] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.310 (5029) [ 76.551271][ T5029] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 76.586069][ T5029] BTRFS info (device loop3): metadata ratio 2 [ 76.593672][ T5038] loop1: detected capacity change from 0 to 512 [ 76.600048][ T5029] BTRFS info (device loop3): allowing degraded mounts [ 76.603461][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.607016][ T5029] BTRFS info (device loop3): force zlib compression, level 3 [ 76.622134][ T5029] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.664543][ T5029] BTRFS info (device loop3): use zstd compression, level 3 [ 76.673699][ T5029] BTRFS info (device loop3): force clearing of disk cache [ 76.682279][ T5029] BTRFS info (device loop3): max_inline at 0 [ 76.699499][ T5029] BTRFS info (device loop3): using free space tree [ 76.724750][ T5038] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.742269][ T5038] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.313: iget: bogus i_mode (0) [ 76.761161][ T5029] BTRFS info (device loop3): has skinny extents [ 76.796482][ T5038] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.313: couldn't read orphan inode 13 (err -117) [ 76.829569][ T5038] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.863425][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 76.929345][ T4296] wacom 0003:056A:00ED.0005: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.0-1/input0 [ 76.950306][ T5038] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 76.966616][ T5038] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 76.976555][ T5038] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 76.991117][ T23] usb 5-1: config 40 has an invalid interface number: 93 but max is 0 [ 76.999565][ T23] usb 5-1: config 40 has no interface number 0 [ 77.006510][ T5038] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 77.015931][ T23] usb 5-1: config 40 interface 93 has no altsetting 0 [ 77.062077][ T5065] loop2: detected capacity change from 0 to 47 [ 77.063947][ T5038] EXT4-fs (loop1): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 77.086313][ T5038] ext4 filesystem being remounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.123456][ T5029] BTRFS info (device loop3): enabling ssd optimizations [ 77.164696][ T5029] BTRFS info (device loop3): clearing free space tree [ 77.172399][ T5029] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.184594][ T23] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=11.6c [ 77.213956][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.232974][ T5029] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.285588][ T23] usb 5-1: Product: syz [ 77.289577][ T5029] BTRFS info (device loop3): creating free space tree [ 77.290097][ T23] usb 5-1: Manufacturer: syz [ 77.302209][ T23] usb 5-1: SerialNumber: syz [ 77.305195][ T5029] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.328360][ T2240] usb 1-1: USB disconnect, device number 4 [ 77.332577][ T5029] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.696558][ T23] usb 5-1: USB disconnect, device number 4 [ 77.873490][ T5089] loop2: detected capacity change from 0 to 256 [ 77.971455][ T5089] FAT-fs (loop2): Directory bread(block 64) failed [ 77.999325][ T5089] FAT-fs (loop2): Directory bread(block 65) failed [ 78.019632][ T5089] FAT-fs (loop2): Directory bread(block 66) failed [ 78.038692][ T5089] FAT-fs (loop2): Directory bread(block 67) failed [ 78.050731][ T5103] loop3: detected capacity change from 0 to 128 [ 78.058455][ T5089] FAT-fs (loop2): Directory bread(block 68) failed [ 78.067642][ T5089] FAT-fs (loop2): Directory bread(block 69) failed [ 78.082454][ T5089] FAT-fs (loop2): Directory bread(block 70) failed [ 78.089806][ T5089] FAT-fs (loop2): Directory bread(block 71) failed [ 78.103514][ T5089] FAT-fs (loop2): Directory bread(block 72) failed [ 78.117640][ T5089] FAT-fs (loop2): Directory bread(block 73) failed [ 78.487083][ T5127] program syz.2.341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.657785][ T5134] tipc: Enabling of bearer rejected, failed to enable media [ 78.770209][ T5140] loop0: detected capacity change from 0 to 512 [ 78.786918][ T2240] kernel write not supported for file /input/mouse0 (pid: 2240 comm: kworker/1:2) [ 78.876238][ T5140] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.955141][ T5140] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.347: bad orphan inode 131083 [ 79.004279][ T5140] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 79.184116][ T5119] loop3: detected capacity change from 0 to 32768 [ 79.256175][ T5153] loop0: detected capacity change from 0 to 190 [ 79.296351][ T5153] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 79.346360][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 79.387205][ T5156] loop4: detected capacity change from 0 to 4096 [ 79.390359][ T5119] overlayfs: upper fs needs to support d_type. [ 79.419660][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 79.443483][ T5119] overlayfs: upper fs does not support tmpfile. [ 79.469337][ T5164] loop2: detected capacity change from 0 to 256 [ 79.484121][ T5153] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 79.513996][ T5156] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 79.542512][ T5119] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 79.552946][ T5153] ntfs: volume version 3.1. [ 79.614076][ T5164] FAT-fs (loop2): Directory bread(block 64) failed [ 79.620636][ T5164] FAT-fs (loop2): Directory bread(block 65) failed [ 79.627481][ T5153] ntfs: (device loop0): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 79.673422][ T5164] FAT-fs (loop2): Directory bread(block 66) failed [ 79.698256][ T5164] FAT-fs (loop2): Directory bread(block 67) failed [ 79.705431][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is an extent inode! [ 79.724217][ T5164] FAT-fs (loop2): Directory bread(block 68) failed [ 79.730807][ T5164] FAT-fs (loop2): Directory bread(block 69) failed [ 79.741061][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 79.767059][ T5164] FAT-fs (loop2): Directory bread(block 70) failed [ 79.785273][ T5164] FAT-fs (loop2): Directory bread(block 71) failed [ 79.793039][ T5164] FAT-fs (loop2): Directory bread(block 72) failed [ 79.808446][ T5153] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 79.829381][ T5164] FAT-fs (loop2): Directory bread(block 73) failed [ 79.838996][ T5153] ntfs: (device loop0): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 79.907457][ T5153] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 79.959840][ T5153] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 79.982678][ T5153] attempt to access beyond end of device [ 79.982678][ T5153] loop0: rw=0, want=232, limit=190 [ 79.994714][ T5153] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1c. [ 80.013008][ T5153] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 80.026787][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x18 as bad. Run chkdsk. [ 80.048593][ T5153] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota. [ 80.068910][ T5153] ntfs: (device loop0): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 80.093539][ T5153] attempt to access beyond end of device [ 80.093539][ T5153] loop0: rw=0, want=248, limit=190 [ 80.120055][ T5153] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e. [ 80.142730][ T5153] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 80.152238][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 80.177701][ T5153] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1a as bad. Run chkdsk. [ 80.252065][ T4299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.341389][ T4299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.439052][ T5180] loop4: detected capacity change from 0 to 4096 [ 80.489201][ T5180] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 80.504666][ T4299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.657276][ T4299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.752460][ T5196] loop0: detected capacity change from 0 to 1764 [ 80.828850][ T5196] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 81.190712][ T5210] loop1: detected capacity change from 0 to 1024 [ 81.274275][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.343468][ T5210] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.373770][ T5220] program syz.0.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.517187][ T5227] loop2: detected capacity change from 0 to 64 [ 81.534827][ T5210] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.383: lblock 0 mapped to illegal pblock 0 (length 5) [ 81.623478][ T5210] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 81.673485][ T5210] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.673485][ T5210] [ 81.971050][ T5203] loop4: detected capacity change from 0 to 40427 [ 82.001948][ T5247] loop1: detected capacity change from 0 to 128 [ 82.036728][ T5203] F2FS-fs (loop4): invalid crc value [ 82.117711][ T5203] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.137365][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 82.148747][ T5247] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 82.207576][ T5247] attempt to access beyond end of device [ 82.207576][ T5247] loop1: rw=0, want=6491538, limit=128 [ 82.269929][ T5247] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 82.310514][ T5203] F2FS-fs (loop4): Start checkpoint disabled! [ 82.373466][ T4423] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.427321][ T4168] sysv_free_block: flc_count > flc_size [ 82.433138][ T4168] sysv_free_block: flc_count > flc_size [ 82.453572][ T4168] sysv_free_block: flc_count > flc_size [ 82.460566][ T4168] sysv_free_block: flc_count > flc_size [ 82.467669][ T4168] sysv_free_block: flc_count > flc_size [ 82.485433][ T5203] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 82.491079][ T4168] sysv_free_block: flc_count > flc_size [ 82.499744][ T4168] sysv_free_block: flc_count > flc_size [ 82.506724][ T4168] sysv_free_block: flc_count > flc_size [ 82.512278][ T4168] sysv_free_block: flc_count > flc_size [ 82.518228][ T4168] sysv_free_block: flc_count > flc_size [ 82.526314][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 82.536364][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.543551][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.551668][ T5218] device bridge_slave_0 entered promiscuous mode [ 82.569258][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.576597][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.584907][ T5218] device bridge_slave_1 entered promiscuous mode [ 82.733099][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.759267][ T4423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.772488][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.790197][ T4423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.803679][ T4423] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 82.817372][ T4423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.841744][ T4423] usb 1-1: config 0 descriptor?? [ 82.856384][ T5275] loop2: detected capacity change from 0 to 512 [ 82.909100][ T144] attempt to access beyond end of device [ 82.909100][ T144] loop4: rw=2049, want=40976, limit=40427 [ 82.927249][ T5275] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.982334][ T5275] EXT4-fs (loop2): 1 truncate cleaned up [ 83.001464][ T5218] team0: Port device team_slave_0 added [ 83.013602][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback. [ 83.028712][ T5218] team0: Port device team_slave_1 added [ 83.071027][ T5280] loop1: detected capacity change from 0 to 1024 [ 83.230093][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.243571][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.337076][ T4423] elecom 0003:056E:011C.0006: item fetching failed at offset 0/3 [ 83.364809][ T4423] elecom: probe of 0003:056E:011C.0006 failed with error -22 [ 83.375208][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.410114][ T5291] loop1: detected capacity change from 0 to 128 [ 83.483540][ T4424] Bluetooth: hci3: command 0x0409 tx timeout [ 83.502488][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.553867][ T5291] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.565721][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.591702][ C0] vkms_vblank_simulate: vblank timer overrun [ 83.601330][ T2240] usb 1-1: USB disconnect, device number 5 [ 83.613388][ T5291] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.672646][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.698836][ T4299] device hsr_slave_0 left promiscuous mode [ 83.711437][ T4299] device hsr_slave_1 left promiscuous mode [ 83.721984][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.737846][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.746149][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.754017][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.762816][ T4299] device bridge_slave_1 left promiscuous mode [ 83.785275][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.874947][ T4299] device bridge_slave_0 left promiscuous mode [ 83.881277][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.987072][ T4299] device veth1_macvtap left promiscuous mode [ 83.994031][ T4299] device veth0_macvtap left promiscuous mode [ 84.000109][ T4299] device veth1_vlan left promiscuous mode [ 84.006142][ T4299] device veth0_vlan left promiscuous mode [ 84.239946][ T5316] loop0: detected capacity change from 0 to 4096 [ 84.243579][ T4424] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 84.253882][ T4423] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.271468][ T5313] loop2: detected capacity change from 0 to 32768 [ 84.271533][ T5316] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 84.322065][ T5316] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.348709][ T5313] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 84.486545][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 84.502900][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 84.503933][ T4423] usb 2-1: Using ep0 maxpacket: 8 [ 84.552223][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.584869][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.616632][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 84.630290][ T5323] loop0: detected capacity change from 0 to 256 [ 84.673995][ T4423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.684046][ T4424] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.694315][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 84.714678][ T4423] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 84.725700][ T4424] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.746824][ T4423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.757569][ T5323] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 84.800828][ T4423] usb 2-1: config 0 descriptor?? [ 84.910715][ T4299] bond0 (unregistering): Released all slaves [ 84.940334][ T4424] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.955328][ T4424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.964829][ T4424] usb 5-1: Product: syz [ 84.969002][ T4424] usb 5-1: Manufacturer: syz [ 85.003354][ T4424] usb 5-1: SerialNumber: syz [ 85.108080][ T5218] device hsr_slave_0 entered promiscuous mode [ 85.147384][ T5218] device hsr_slave_1 entered promiscuous mode [ 85.180064][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.190244][ T5218] Cannot create hsr debugfs directory [ 85.305109][ T4423] elecom 0003:056E:010C.0007: ignoring exceeding usage max [ 85.340124][ T4423] elecom 0003:056E:010C.0007: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 85.351122][ T5337] loop2: detected capacity change from 0 to 2048 [ 85.495162][ T5337] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 85.510096][ T4422] usb 2-1: USB disconnect, device number 3 [ 85.531386][ T4724] udevd[4724]: incorrect nilfs2 checksum on /dev/loop2 [ 85.547377][ T4424] usb 5-1: cannot find UAC_HEADER [ 85.562000][ T5340] fido_id[5340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 85.577516][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 85.585752][ T5346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.625824][ T4424] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 85.714737][ T5218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.727912][ T4720] udevd[4720]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.761880][ T5350] loop0: detected capacity change from 0 to 64 [ 85.778990][ T4424] usb 5-1: USB disconnect, device number 5 [ 85.819527][ T5218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.852043][ T5218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.891610][ T5218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.169988][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.212879][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.227891][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.245320][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.297426][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.329365][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.364297][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.371401][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.383339][ T4422] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.447880][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.457310][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.466210][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.473335][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.483903][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.492797][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.517166][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.530957][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.542932][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.553526][ T5073] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.576887][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.585834][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.596404][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.608064][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.642503][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.675498][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.710182][ T5218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.739995][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.756039][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.803436][ T5073] usb 1-1: Using ep0 maxpacket: 16 [ 86.803522][ T4422] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.854625][ T4422] usb 2-1: config 0 has no interface number 0 [ 86.938369][ T5073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 86.967761][ T5073] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 87.034682][ T5073] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 87.063551][ T4422] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 87.073067][ T4422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.081558][ T5073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.099204][ T4422] usb 2-1: Product: syz [ 87.118017][ T4422] usb 2-1: Manufacturer: syz [ 87.122693][ T4422] usb 2-1: SerialNumber: syz [ 87.150654][ T5073] usb 1-1: config 0 descriptor?? [ 87.169170][ T4422] usb 2-1: config 0 descriptor?? [ 87.190787][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.215288][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.276123][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.386866][ T5419] loop2: detected capacity change from 0 to 256 [ 87.448497][ T4422] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 87.482137][ T5419] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 87.520667][ T4422] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.568715][ T4422] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 87.609338][ T4422] usb 2-1: media controller created [ 87.655266][ T4422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.666193][ T5073] kovaplus 0003:1E7D:2D50.0008: item fetching failed at offset 0/3 [ 87.699984][ T5073] kovaplus 0003:1E7D:2D50.0008: parse failed [ 87.707198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.716361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.726373][ T5073] kovaplus: probe of 0003:1E7D:2D50.0008 failed with error -22 [ 87.726461][ T4423] Bluetooth: hci3: command 0x040f tx timeout [ 87.747168][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.786297][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.822535][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.842836][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.887692][ T5218] device veth0_vlan entered promiscuous mode [ 87.927220][ T5073] usb 1-1: USB disconnect, device number 6 [ 87.946095][ T5218] device veth1_vlan entered promiscuous mode [ 88.046154][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.078635][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.097167][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.118981][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.150336][ T5218] device veth0_macvtap entered promiscuous mode [ 88.161885][ T5415] loop4: detected capacity change from 0 to 32768 [ 88.185429][ T5218] device veth1_macvtap entered promiscuous mode [ 88.197164][ T23] usb 2-1: USB disconnect, device number 4 [ 88.221592][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.250938][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.278178][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.295867][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.308106][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.321851][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.332724][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.344681][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.356659][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.383368][ T5415] (syz.4.440,5415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.412686][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.422530][ T5415] (syz.4.440,5415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 88.437463][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.442277][ T5415] (syz.4.440,5415,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 88.464123][ T5415] JBD2: Ignoring recovery information on journal [ 88.523027][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.553310][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.578766][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.625563][ T5415] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 88.641759][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.661347][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.671984][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.695525][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.726441][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.748574][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.798426][ T5415] (syz.4.440,5415,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 88.813964][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.832172][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.876736][ T5415] (syz.4.440,5415,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 88.898617][ T5218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.921080][ T5218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.948792][ T5415] (syz.4.440,5415,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 88.967109][ T5218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.994758][ T5415] (syz.4.440,5415,1):ocfs2_quota_read:201 ERROR: status = -5 [ 89.002178][ T5415] __quota_error: 2 callbacks suppressed [ 89.002195][ T5415] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 89.017694][ T5218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.042636][ T5415] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 89.052927][ T5415] (syz.4.440,5415,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 89.077861][ T5415] (syz.4.440,5415,0):ocfs2_mknod:314 ERROR: status = -5 [ 89.081611][ T5459] sp0: Synchronizing with TNC [ 89.099747][ T5415] (syz.4.440,5415,1):ocfs2_mknod:502 ERROR: status = -5 [ 89.130075][ T5458] [U] è [ 89.135484][ T5415] (syz.4.440,5415,1):ocfs2_mkdir:659 ERROR: status = -5 [ 89.319507][ T5468] loop0: detected capacity change from 0 to 64 [ 89.344537][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.388730][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 89.404984][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.471381][ T5249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.517375][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.541608][ T5249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.581858][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.816434][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 89.897505][ T5496] loop1: detected capacity change from 0 to 64 [ 89.907994][ T5491] loop2: detected capacity change from 0 to 1024 [ 90.053003][ T4265] hfsplus: b-tree write err: -5, ino 4 [ 90.053864][ T5497] loop5: detected capacity change from 0 to 4096 [ 90.453400][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.473732][ T4170] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.583153][ T5500] loop4: detected capacity change from 0 to 32768 [ 90.637836][ T5500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.460 (5500) [ 90.665952][ T5500] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.687381][ T5500] BTRFS info (device loop4): allowing degraded mounts [ 90.703417][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 90.709860][ T5500] BTRFS info (device loop4): turning on flush-on-commit [ 90.748929][ T5500] BTRFS info (device loop4): max_inline at 0 [ 90.785980][ T5500] BTRFS info (device loop4): setting nodatasum [ 90.792175][ T5500] BTRFS info (device loop4): enabling auto defrag [ 90.823436][ T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.845391][ T23] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 90.850848][ T5500] BTRFS info (device loop4): max_inline at 0 [ 90.859221][ T4170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.868204][ T5528] loop0: detected capacity change from 0 to 256 [ 90.877091][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.890972][ T4170] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.901846][ T23] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 90.911248][ T4170] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 90.925568][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.933367][ T5500] BTRFS info (device loop4): using free space tree [ 90.934338][ T4170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.940068][ T5500] BTRFS info (device loop4): has skinny extents [ 90.975143][ T23] usb 2-1: config 0 descriptor?? [ 90.995415][ T4170] usb 3-1: config 0 descriptor?? [ 91.067622][ T26] audit: type=1800 audit(1751065357.160:4): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="file1" dev="loop0" ino=1048648 res=0 errno=0 [ 91.089549][ T5528] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 91.100121][ T5528] FAT-fs (loop0): Filesystem has been set read-only [ 91.154364][ T5543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.470'. [ 91.232250][ T5556] loop0: detected capacity change from 0 to 1024 [ 91.387729][ T5500] BTRFS info (device loop4): enabling ssd optimizations [ 91.410741][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,errors=remount-ro,. Quota mode: none. [ 91.423128][ T5556] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.458015][ T23] glorious 0003:258A:0033.0009: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 91.484564][ T5556] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.472: lblock 3 mapped to illegal pblock 3 (length 12) [ 91.506733][ T4170] hid_mf 0003:0079:1846.000A: hidraw1: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 91.570987][ T4170] hid_mf 0003:0079:1846.000A: Invalid report, this should never happen! [ 91.600237][ T5556] EXT4-fs (loop0): Remounting filesystem read-only [ 91.610339][ T4170] hid_mf 0003:0079:1846.000A: Force feedback init failed. [ 91.724924][ T4284] usb 2-1: USB disconnect, device number 5 [ 91.761949][ T5578] fido_id[5578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 91.816031][ T4170] usb 3-1: USB disconnect, device number 3 [ 92.180527][ T5604] loop0: detected capacity change from 0 to 64 [ 92.460527][ T5616] loop0: detected capacity change from 0 to 256 [ 92.471197][ T5580] loop5: detected capacity change from 0 to 32768 [ 92.592476][ T5611] loop4: detected capacity change from 0 to 4096 [ 92.759658][ T5580] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 92.923971][ T26] audit: type=1800 audit(1751065359.010:5): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.476" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 92.931559][ T5639] loop0: detected capacity change from 0 to 1024 [ 93.002745][ T5611] ntfs3: loop4: ino=0, "file0" failed to extend initialized size to 8fecc. [ 93.070624][ T5218] ocfs2: Unmounting device (7,5) on (node local) [ 93.227701][ T4265] hfsplus: b-tree write err: -5, ino 4 [ 93.463390][ T5591] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 93.483718][ T5665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.498'. [ 93.814555][ T5680] device batadv1 entered promiscuous mode [ 93.833539][ T5591] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 93.863941][ T5591] usb 6-1: config 7 has no interface number 0 [ 93.876347][ T5591] usb 6-1: config 7 interface 101 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 93.925648][ T5683] loop4: detected capacity change from 0 to 2048 [ 94.047136][ T5683] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.053595][ T5591] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 94.089929][ T5687] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.101747][ T5591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.121434][ T4720] udevd[4720]: incorrect nilfs2 checksum on /dev/loop4 [ 94.138145][ T5656] loop1: detected capacity change from 0 to 32768 [ 94.144745][ T5591] usb 6-1: Product: syz [ 94.148913][ T5591] usb 6-1: Manufacturer: syz [ 94.173393][ T5591] usb 6-1: SerialNumber: syz [ 94.211211][ T5656] (syz.1.496,5656,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.268968][ T5656] (syz.1.496,5656,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 94.367331][ T5694] loop0: detected capacity change from 0 to 4096 [ 94.385606][ T5694] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.399586][ T5656] (syz.1.496,5656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 94.420707][ T5679] loop2: detected capacity change from 0 to 32768 [ 94.466269][ T5694] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 94.473769][ T5656] JBD2: Ignoring recovery information on journal [ 94.521458][ T5591] as10x_usb: device has been detected [ 94.531643][ T5591] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 94.548242][ T5591] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 94.565452][ T5656] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 94.578771][ T5591] as10x_usb: error during firmware upload part1 [ 94.581842][ T5679] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 94.585660][ T5591] Registered device Elgato EyeTV DTT Deluxe [ 94.600739][ T5591] usb 6-1: USB disconnect, device number 2 [ 94.616996][ T4720] udevd[4720]: incorrect nilfs2 checksum on /dev/loop0 [ 94.653161][ T5702] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.670078][ T5591] Unregistered device Elgato EyeTV DTT Deluxe [ 94.693760][ T5591] as10x_usb: device has been disconnected [ 94.785762][ T26] audit: type=1800 audit(1751065360.880:6): pid=5679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.503" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 94.913653][ T5656] (syz.1.496,5656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 94.934388][ T5656] (syz.1.496,5656,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 94.969654][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 94.988324][ T5656] (syz.1.496,5656,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 94.997387][ T5656] (syz.1.496,5656,0):ocfs2_quota_read:201 ERROR: status = -5 [ 95.005419][ T5656] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 5 [ 95.014485][ T5656] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 95.041309][ T5656] (syz.1.496,5656,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 95.081504][ T5656] (syz.1.496,5656,0):ocfs2_mknod:314 ERROR: status = -5 [ 95.111770][ T5656] (syz.1.496,5656,0):ocfs2_mknod:502 ERROR: status = -5 [ 95.119225][ T5656] (syz.1.496,5656,0):ocfs2_mkdir:659 ERROR: status = -5 [ 95.223578][ T5591] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 95.254394][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 95.365785][ T5723] loop4: detected capacity change from 0 to 2048 [ 95.415177][ T5723] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.463478][ T5591] usb 1-1: Using ep0 maxpacket: 8 [ 95.480904][ T5723] NILFS (loop4): mounting unchecked fs [ 95.494270][ T4721] udevd[4721]: incorrect nilfs2 checksum on /dev/loop4 [ 95.511691][ T5723] NILFS (loop4): recovery required for readonly filesystem [ 95.531969][ T5723] NILFS (loop4): write access will be enabled during recovery [ 95.556214][ T5723] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 95.577011][ T5734] loop5: detected capacity change from 0 to 64 [ 95.583679][ T5591] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 95.599734][ T5591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.619813][ T5723] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 95.645727][ T5591] usb 1-1: config 0 descriptor?? [ 95.662605][ T4720] udevd[4720]: incorrect nilfs2 checksum on /dev/loop4 [ 95.758010][ T5734] hfs: bad catalog entry type 0 [ 95.923479][ T5591] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 95.946658][ T5742] loop5: detected capacity change from 0 to 64 [ 95.980850][ T5744] loop2: detected capacity change from 0 to 128 [ 96.055092][ T5744] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 96.102492][ T26] audit: type=1800 audit(1751065362.190:7): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.528" name="file1" dev="loop2" ino=1048650 res=0 errno=0 [ 96.302464][ T5748] device gtp0 entered promiscuous mode [ 96.339095][ T5740] loop4: detected capacity change from 0 to 32768 [ 96.353487][ T5591] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.371690][ T5752] loop5: detected capacity change from 0 to 1764 [ 96.380135][ T5738] loop1: detected capacity change from 0 to 32768 [ 96.387391][ T5591] asix: probe of 1-1:0.0 failed with error -71 [ 96.404634][ T5591] usb 1-1: USB disconnect, device number 7 [ 96.421737][ T5752] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 96.513742][ T5738] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 96.531117][ T5759] loop2: detected capacity change from 0 to 2048 [ 96.559243][ T26] audit: type=1800 audit(1751065362.650:8): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 96.586135][ T5740] XFS (loop4): Mounting V5 Filesystem [ 96.686937][ T4168] ocfs2: Unmounting device (7,1) on (node local) [ 96.707601][ T5759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.742649][ T5740] XFS (loop4): Ending clean mount [ 96.775088][ T5740] XFS (loop4): Quotacheck needed: Please wait. [ 96.830876][ T5768] loop5: detected capacity change from 0 to 2048 [ 96.881914][ T5740] XFS (loop4): Quotacheck: Done. [ 96.955571][ T5768] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.974376][ T4169] XFS (loop4): Unmounting Filesystem [ 97.019487][ T3547] udevd[3547]: worker [4721] terminated by signal 32 (Unknown signal 32) [ 97.058405][ T5780] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.099773][ T3547] udevd[3547]: worker [4721] failed while handling '/devices/virtual/block/loop5' [ 97.169845][ T5778] loop0: detected capacity change from 0 to 4096 [ 97.385449][ T5791] loop1: detected capacity change from 0 to 2048 [ 97.391167][ T5778] ntfs3: loop0: ino=0, "file0" failed to extend initialized size to 8fecc. [ 97.486071][ T5791] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.513557][ T4423] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 97.521912][ T4720] udevd[4720]: incorrect nilfs2 checksum on /dev/loop1 [ 97.529080][ T5791] NILFS (loop1): mounting unchecked fs [ 97.539739][ T5791] NILFS (loop1): recovery required for readonly filesystem [ 97.589858][ T5791] NILFS (loop1): write access will be enabled during recovery [ 97.633478][ T5791] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 97.660276][ T4720] udevd[4720]: incorrect nilfs2 checksum on /dev/loop1 [ 97.703526][ T5791] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state [ 97.913611][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.941990][ T4423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.972347][ T4423] usb 3-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 98.001022][ T4423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.039495][ T4423] usb 3-1: config 0 descriptor?? [ 98.398419][ T5828] loop5: detected capacity change from 0 to 2048 [ 98.444577][ T5828] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.456549][ T5828] NILFS (loop5): mounting unchecked fs [ 98.462247][ T5828] NILFS (loop5): recovery required for readonly filesystem [ 98.464903][ T4724] udevd[4724]: incorrect nilfs2 checksum on /dev/loop5 [ 98.474480][ T5828] NILFS (loop5): write access will be enabled during recovery [ 98.493949][ T5828] NILFS (loop5): norecovery option specified, skipping roll-forward recovery [ 98.539125][ T4423] wacom 0003:056A:00ED.000B: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.2-1/input0 [ 98.563096][ T4724] udevd[4724]: incorrect nilfs2 checksum on /dev/loop5 [ 98.572680][ T5828] NILFS (loop5): couldn't remount because the filesystem is in an incomplete recovery state [ 98.776451][ T4423] usb 3-1: USB disconnect, device number 4 [ 98.816970][ T5843] fido_id[5843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 99.067768][ T5858] loop0: detected capacity change from 0 to 4096 [ 99.123822][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 99.159275][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 99.170054][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 99.200272][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 99.209126][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 99.225082][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 99.233085][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 99.255703][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 99.275475][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 99.291354][ T5858] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 99.450648][ T5878] loop5: detected capacity change from 0 to 1764 [ 99.528401][ T5885] netlink: 80 bytes leftover after parsing attributes in process `syz.1.584'. [ 99.597039][ T5885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 99.602424][ T5887] loop2: detected capacity change from 0 to 128 [ 99.642568][ T5885] tipc: MTU too low for tipc bearer [ 100.034780][ T5902] loop0: detected capacity change from 0 to 4096 [ 100.091215][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 100.109063][ T5902] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 100.153621][ T5902] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.247874][ T5902] ntfs: volume version 3.1. [ 100.275511][ T5902] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 100.381749][ T5902] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 100.444176][ T5902] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 100.495256][ T5902] ntfs: (device loop0): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 100.666493][ T5945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.612'. [ 100.683555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.758831][ T5942] loop4: detected capacity change from 0 to 4096 [ 100.759362][ T5950] loop1: detected capacity change from 0 to 256 [ 100.841247][ T5942] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 100.882752][ T5942] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 100.893403][ T5950] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 100.905084][ T5942] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 100.929900][ T3547] udevd[3547]: worker [4724] terminated by signal 32 (Unknown signal 32) [ 100.947428][ T5942] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 100.964257][ T3547] udevd[3547]: worker [4724] failed while handling '/devices/virtual/block/loop1' [ 101.052115][ T5942] ntfs: volume version 3.1. [ 101.336646][ T5960] loop2: detected capacity change from 0 to 8192 [ 101.385758][ T5972] loop4: detected capacity change from 0 to 2048 [ 101.421387][ T5960] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 101.466503][ T5960] REISERFS (device loop2): using ordered data mode [ 101.503486][ T5960] reiserfs: using flush barriers [ 101.573618][ T5972] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 101.589012][ T5960] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.617239][ T5972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.673685][ T5960] REISERFS (device loop2): checking transaction log (loop2) [ 101.701778][ T5960] REISERFS (device loop2): Using rupasov hash to sort names [ 101.760019][ T5960] REISERFS (device loop2): using 3.5.x disk format [ 101.792835][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.821640][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.858516][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 101.955962][ T5960] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 101.957147][ T5994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.982695][ T5960] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 102.046059][ T5977] loop5: detected capacity change from 0 to 32768 [ 102.046455][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.097320][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.154677][ T5977] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 102.177775][ T5960] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.192567][ T5997] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 102.280503][ T6011] loop4: detected capacity change from 0 to 128 [ 102.389529][ T6011] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.406592][ T5218] ocfs2: Unmounting device (7,5) on (node local) [ 102.427069][ T6011] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.667716][ T6020] loop1: detected capacity change from 0 to 4096 [ 102.774948][ T6031] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.028429][ T6039] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.293371][ T4284] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.428390][ T6022] loop0: detected capacity change from 0 to 32768 [ 103.553015][ T6066] loop4: detected capacity change from 0 to 128 [ 103.560239][ T4284] usb 6-1: Using ep0 maxpacket: 32 [ 103.591162][ T6022] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 103.709568][ T4284] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 103.731968][ T4284] usb 6-1: config 0 has no interface number 0 [ 103.835978][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 103.944017][ T4284] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 103.965878][ T4284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.004717][ T4284] usb 6-1: Product: syz [ 104.037846][ T4284] usb 6-1: Manufacturer: syz [ 104.042468][ T4284] usb 6-1: SerialNumber: syz [ 104.087555][ T4284] usb 6-1: config 0 descriptor?? [ 104.134943][ T4284] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 104.238545][ T6103] QAT: Invalid ioctl 1075883590 [ 104.279708][ T6108] bond0: ARP monitoring cannot be used with MII monitoring [ 104.284082][ T6103] QAT: Invalid ioctl 1075883590 [ 104.302628][ T6103] QAT: Invalid ioctl 1075883590 [ 104.326391][ T6103] QAT: Invalid ioctl 1075883590 [ 104.331429][ T6103] QAT: Invalid ioctl 1075883590 [ 104.354977][ T4284] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 104.367152][ T5589] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.389233][ T6103] QAT: Invalid ioctl 1075883590 [ 104.396796][ T6103] QAT: Invalid ioctl 1075883590 [ 104.402349][ T4284] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 104.418147][ T6103] QAT: Invalid ioctl 1075883590 [ 104.462880][ T4720] udevd[4720]: setting mode of /dev/bus/usb/006/003 to 020664 failed: Read-only file system [ 104.477054][ T6103] QAT: Invalid ioctl 1075883590 [ 104.482013][ T6103] QAT: Invalid ioctl 1075883590 [ 104.495551][ T4720] udevd[4720]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: Read-only file system [ 104.573108][ T4720] udevd[4720]: setting mode of /dev/ttyUSB0 to 020660 failed: Read-only file system [ 104.613459][ T5589] usb 3-1: Using ep0 maxpacket: 32 [ 104.642836][ T4720] udevd[4720]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: Read-only file system [ 104.721995][ T4720] udevd[4720]: symlink '../bus/usb/006/003' '/dev/char/189:642.tmp-c189:642' failed: Read-only file system [ 104.734537][ T5589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.756060][ T6128] loop4: detected capacity change from 0 to 4096 [ 104.774252][ T5589] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.821636][ T5589] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 104.858309][ T5589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.868928][ T6128] ntfs: volume version 3.1. [ 104.907188][ T5589] usb 3-1: config 0 descriptor?? [ 104.983310][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 104.993467][ T13] usb 6-1: USB disconnect, device number 3 [ 105.032768][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-diskseq/308.tmp-b7:4' failed: Read-only file system [ 105.060221][ T6147] loop0: detected capacity change from 0 to 256 [ 105.063462][ T13] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 105.093965][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 105.125031][ T13] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.137958][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:4' failed: Read-only file system [ 105.168177][ T13] quatech2 6-1:0.51: device disconnected [ 105.188373][ T6147] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 105.383396][ T5599] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 105.409499][ T5589] magicmouse 0003:05AC:0265.000C: ignoring exceeding usage max [ 105.429876][ T5589] magicmouse 0003:05AC:0265.000C: item fetching failed at offset 5/7 [ 105.452605][ T6163] loop4: detected capacity change from 0 to 4096 [ 105.470541][ T5589] magicmouse 0003:05AC:0265.000C: magicmouse hid parse failed [ 105.490484][ T5589] magicmouse: probe of 0003:05AC:0265.000C failed with error -22 [ 105.530142][ T6163] __ntfs_error: 12 callbacks suppressed [ 105.530159][ T6163] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 105.582483][ T6163] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 105.611318][ T5589] usb 3-1: USB disconnect, device number 5 [ 105.617774][ T6163] ntfs: volume version 3.1. [ 105.632782][ T6163] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 105.693209][ T6163] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 105.709955][ T6163] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 105.763573][ T5599] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.779427][ T5599] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.811744][ T6163] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 105.915392][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.694'. [ 105.949934][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system [ 105.963586][ T5599] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.972653][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.982628][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-diskseq/312.tmp-b7:4' failed: Read-only file system [ 106.003146][ T5599] usb 2-1: Product: syz [ 106.007920][ T5599] usb 2-1: Manufacturer: syz [ 106.012532][ T5599] usb 2-1: SerialNumber: syz [ 106.061779][ T6187] loop5: detected capacity change from 0 to 4096 [ 106.067325][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-diskseq/311.tmp-b7:0' failed: Read-only file system [ 106.147351][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 106.168002][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 106.210643][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 106.218955][ T6202] loop2: detected capacity change from 0 to 128 [ 106.253371][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 106.278215][ T4723] udevd[4723]: symlink '../../loop4' '/dev/disk/by-diskseq/313.tmp-b7:4' failed: Read-only file system [ 106.289115][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-diskseq/314.tmp-b7:5' failed: Read-only file system [ 106.319766][ T4187] udevd[4187]: symlink '../../loop0' '/dev/disk/by-diskseq/311.tmp-b7:0' failed: Read-only file system [ 106.328764][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 106.342881][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 106.356324][ T6202] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 106.373137][ T4723] udevd[4723]: symlink '../../loop4' '/dev/disk/by-diskseq/313.tmp-b7:4' failed: Read-only file system [ 106.391544][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system [ 106.391775][ T4185] udevd[4185]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 106.433518][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 106.449591][ T6202] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.493865][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 106.513697][ T5599] usb 2-1: cannot find UAC_HEADER [ 106.540366][ T5599] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 106.550359][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 106.568216][ T26] audit: type=1800 audit(1751065372.660:10): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.701" name="file2" dev="loop2" ino=12 res=0 errno=0 [ 106.592395][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 106.612133][ T6187] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 106.790679][ T5599] usb 2-1: USB disconnect, device number 6 [ 106.913359][ T4423] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.203538][ T4423] usb 1-1: Using ep0 maxpacket: 8 [ 107.319339][ T6222] loop2: detected capacity change from 0 to 32768 [ 107.343595][ T4423] usb 1-1: config 0 has an invalid interface number: 92 but max is 0 [ 107.351876][ T4423] usb 1-1: config 0 has no interface number 0 [ 107.406630][ T6252] loop1: detected capacity change from 0 to 2048 [ 107.430959][ T6222] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.706 (6222) [ 107.453970][ T6254] loop5: detected capacity change from 0 to 4096 [ 107.465949][ T6222] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 107.490246][ T6252] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 107.501849][ T6222] BTRFS info (device loop2): turning on async discard [ 107.515383][ T6254] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 107.542367][ T6252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.553883][ T4423] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44 [ 107.562935][ T4423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.573417][ T6222] BTRFS info (device loop2): using free space tree [ 107.581202][ T6222] BTRFS info (device loop2): has skinny extents [ 107.612362][ T6254] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 107.631624][ T4423] usb 1-1: Product: syz [ 107.648194][ T4423] usb 1-1: Manufacturer: syz [ 107.661840][ T4423] usb 1-1: SerialNumber: syz [ 107.673385][ T6254] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 107.719343][ T4423] usb 1-1: config 0 descriptor?? [ 107.807908][ T6254] ntfs: volume version 3.1. [ 107.952525][ T6222] BTRFS info (device loop2): enabling ssd optimizations [ 108.067629][ T4423] usb 1-1: USB disconnect, device number 8 [ 108.273785][ T6301] loop4: detected capacity change from 0 to 1764 [ 108.721783][ T6322] loop5: detected capacity change from 0 to 2048 [ 108.788178][ T6322] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 108.833138][ T6322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.929234][ T6342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.742'. [ 108.994166][ T6342] netlink: 43 bytes leftover after parsing attributes in process `syz.4.742'. [ 109.063530][ T6342] netlink: 'syz.4.742': attribute type 5 has an invalid length. [ 109.085614][ T6333] loop1: detected capacity change from 0 to 4096 [ 109.092762][ T6345] loop0: detected capacity change from 0 to 2048 [ 109.104207][ T6342] netlink: 43 bytes leftover after parsing attributes in process `syz.4.742'. [ 109.219260][ T6333] ntfs: volume version 3.1. [ 109.234380][ T6352] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.503530][ T6356] loop4: detected capacity change from 0 to 4096 [ 109.583407][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.591812][ T6356] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.630552][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 109.686770][ T6366] loop5: detected capacity change from 0 to 8192 [ 109.727463][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'. [ 109.755713][ T6356] EXT4-fs warning (device loop4): ext4_resize_fs:1981: can't read last block, resize aborted [ 110.084751][ T13] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 110.106841][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 110.148949][ T13] usb 3-1: SerialNumber: syz [ 110.186539][ T13] usb 3-1: config 0 descriptor?? [ 110.266471][ T6403] loop0: detected capacity change from 0 to 4096 [ 110.326426][ T6417] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.506781][ T6426] tipc: Started in network mode [ 110.525305][ T6426] tipc: Node identity ff050000000000000000000000000001, cluster identity 4711 [ 110.569374][ T6426] tipc: Enabling of bearer rejected, failed to enable media [ 110.591060][ T6403] ntfs3: loop0: ino=1f, "file3" failed to undo rename [ 110.673640][ T13] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 110.680827][ T13] hackrf 3-1:0.0: Could not detect board [ 110.713957][ T13] hackrf: probe of 3-1:0.0 failed with error -71 [ 110.739483][ T13] usb 3-1: USB disconnect, device number 6 [ 110.996772][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system [ 111.025617][ T6453] vivid-000: disconnect [ 111.055152][ T6452] vivid-000: reconnect [ 111.056011][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-diskseq/335.tmp-b7:4' failed: Read-only file system [ 111.095332][ T4160] udevd[4160]: symlink '../../loop5' '/dev/disk/by-diskseq/334.tmp-b7:5' failed: Read-only file system [ 111.162327][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system [ 111.165722][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-diskseq/337.tmp-b7:0' failed: Read-only file system [ 111.204905][ T4723] udevd[4723]: symlink '../../loop5' '/dev/disk/by-diskseq/334.tmp-b7:5' failed: Read-only file system [ 111.221767][ T6459] loop0: detected capacity change from 0 to 4096 [ 111.248917][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-diskseq/324.tmp-b7:2' failed: Read-only file system [ 111.300350][ T4723] udevd[4723]: symlink '../../loop1' '/dev/disk/by-diskseq/331.tmp-b7:1' failed: Read-only file system [ 111.346864][ T6472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.360826][ T4160] udevd[4160]: symlink '../../loop5' '/dev/disk/by-diskseq/334.tmp-b7:5' failed: Read-only file system [ 111.442833][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-diskseq/335.tmp-b7:4' failed: Read-only file system [ 111.511617][ T6459] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 111.577474][ T6459] Remounting filesystem read-only [ 111.661084][ T6487] device vlan2 entered promiscuous mode [ 111.688348][ T6487] device bridge0 entered promiscuous mode [ 111.742436][ T4175] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 111.763480][ T6483] loop5: detected capacity change from 0 to 8192 [ 111.939494][ T6500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.806'. [ 111.958302][ T6498] loop0: detected capacity change from 0 to 256 [ 111.959285][ T6496] loop4: detected capacity change from 0 to 1024 [ 111.987931][ T6498] exfat: Deprecated parameter 'namecase' [ 111.999931][ T6500] netlink: 43 bytes leftover after parsing attributes in process `syz.1.806'. [ 112.023502][ T6500] netlink: 'syz.1.806': attribute type 5 has an invalid length. [ 112.036139][ T6500] netlink: 43 bytes leftover after parsing attributes in process `syz.1.806'. [ 112.047250][ T6498] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 112.320406][ T6512] loop5: detected capacity change from 0 to 2048 [ 112.398312][ T6519] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.579454][ T6522] loop1: detected capacity change from 0 to 4096 [ 112.770475][ T6490] loop2: detected capacity change from 0 to 32768 [ 112.801237][ T6522] ntfs3: loop1: ino=1f, "file3" failed to undo rename [ 112.819016][ T6529] loop4: detected capacity change from 0 to 8192 [ 112.957550][ T6490] XFS (loop2): Mounting V5 Filesystem [ 113.167589][ T6490] XFS (loop2): Ending clean mount [ 113.176396][ T6490] XFS (loop2): Quotacheck needed: Please wait. [ 113.278433][ T6490] XFS (loop2): Quotacheck: Done. [ 113.318517][ T6539] loop1: detected capacity change from 0 to 8192 [ 113.381342][ T4182] XFS (loop2): Unmounting Filesystem [ 113.414753][ T6532] loop0: detected capacity change from 0 to 40427 [ 113.429628][ T6552] loop5: detected capacity change from 0 to 256 [ 113.474046][ T6552] exfat: Deprecated parameter 'namecase' [ 113.484344][ T6532] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 113.493031][ T6552] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 113.497057][ T6532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.593377][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.622001][ T6532] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.781257][ T6532] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.795369][ T6532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.843456][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 113.884273][ T5589] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.953878][ T4175] attempt to access beyond end of device [ 113.953878][ T4175] loop0: rw=2049, want=45104, limit=40427 [ 113.964119][ T23] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.991383][ T23] usb 5-1: config 0 has no interface number 0 [ 114.124025][ T5589] usb 2-1: Using ep0 maxpacket: 8 [ 114.164801][ T23] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.192836][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.211428][ T23] usb 5-1: Product: syz [ 114.216262][ T23] usb 5-1: Manufacturer: syz [ 114.224078][ T23] usb 5-1: SerialNumber: syz [ 114.238558][ T23] usb 5-1: config 0 descriptor?? [ 114.253562][ T5589] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 114.262017][ T5589] usb 2-1: config 0 has no interface number 0 [ 114.264980][ T6570] loop2: detected capacity change from 0 to 4096 [ 114.294704][ T23] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.351915][ T6571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.391492][ T6570] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 114.423581][ T5589] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=81.44 [ 114.429837][ T6570] Remounting filesystem read-only [ 114.453158][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.472824][ T4182] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 114.472933][ T5589] usb 2-1: Product: syz [ 114.505301][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.543761][ T23] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.553601][ T5589] usb 2-1: Manufacturer: syz [ 114.558857][ T5589] usb 2-1: SerialNumber: syz [ 114.588378][ T5589] usb 2-1: config 0 descriptor?? [ 114.654184][ T6564] loop5: detected capacity change from 0 to 32768 [ 114.752375][ T6564] JBD2: Ignoring recovery information on journal [ 114.774484][ T6564] JBD2: corrupted journal superblock [ 114.779937][ T6564] JBD2: error -117 scanning journal [ 114.785317][ T6564] (syz.5.831,6564,1):ocfs2_journal_wipe:1154 ERROR: status = -117 [ 114.795496][ T6564] (syz.5.831,6564,1):ocfs2_check_volume:2424 ERROR: status = -117 [ 114.803596][ T6564] (syz.5.831,6564,1):ocfs2_check_volume:2493 ERROR: status = -117 [ 114.811549][ T6564] (syz.5.831,6564,1):ocfs2_mount_volume:1824 ERROR: status = -117 [ 114.862718][ T6564] (syz.5.831,6564,0):ocfs2_fill_super:1177 ERROR: status = -117 [ 114.911190][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.831'. [ 114.925814][ T23] usb 2-1: USB disconnect, device number 7 [ 114.951245][ T6588] netlink: 52 bytes leftover after parsing attributes in process `syz.0.844'. [ 114.984507][ T6588] tipc: Invalid UDP bearer configuration [ 114.984564][ T6588] tipc: Enabling of bearer rejected, failed to enable media [ 115.119128][ T6597] loop0: detected capacity change from 0 to 16 [ 115.131209][ T6598] [U] „ [ 115.190993][ T6597] erofs: (device loop0): mounted with root inode @ nid 36. [ 115.194396][ T4422] usb 5-1: USB disconnect, device number 6 [ 115.203321][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.232973][ T4422] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 115.254766][ T6600] loop5: detected capacity change from 0 to 2048 [ 115.278200][ T4422] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 115.311258][ T6597] attempt to access beyond end of device [ 115.311258][ T6597] loop0: rw=524288, want=312, limit=16 [ 115.316758][ T6600] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.329237][ T4422] quatech2 5-1:0.51: device disconnected [ 115.338889][ T6597] attempt to access beyond end of device [ 115.338889][ T6597] loop0: rw=524288, want=1048992, limit=16 [ 115.363525][ T6597] attempt to access beyond end of device [ 115.363525][ T6597] loop0: rw=524288, want=24, limit=16 [ 115.383607][ T6597] attempt to access beyond end of device [ 115.383607][ T6597] loop0: rw=524288, want=688, limit=16 [ 115.539212][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 115.641363][ T6614] CUSE: info not properly terminated [ 115.778227][ T6628] loop0: detected capacity change from 0 to 1024 [ 115.848455][ T6636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.973760][ T5589] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.020296][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-diskseq/352.tmp-b7:4' failed: Read-only file system [ 116.048264][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-diskseq/361.tmp-b7:2' failed: Read-only file system [ 116.089792][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-diskseq/368.tmp-b7:0' failed: Read-only file system [ 116.093827][ T6644] loop4: detected capacity change from 0 to 4096 [ 116.135835][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-diskseq/361.tmp-b7:2' failed: Read-only file system [ 116.163173][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 116.166390][ T6648] loop2: detected capacity change from 0 to 128 [ 116.218745][ T5589] usb 2-1: Using ep0 maxpacket: 32 [ 116.259856][ T6648] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.271997][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 116.283549][ T6648] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.297160][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 116.315929][ T4169] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 116.322383][ T4169] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 116.343634][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.351720][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-diskseq/368.tmp-b7:0' failed: Read-only file system [ 116.363361][ T5589] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.386036][ T5589] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 116.406275][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.444845][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-diskseq/370.tmp-b7:2' failed: Read-only file system [ 116.464061][ T5589] usb 2-1: config 0 descriptor?? [ 116.465460][ T4160] udevd[4160]: symlink '../../loop4' '/dev/disk/by-diskseq/352.tmp-b7:4' failed: Read-only file system [ 116.703759][ T6640] loop5: detected capacity change from 0 to 32768 [ 116.763800][ T6656] loop0: detected capacity change from 0 to 8192 [ 116.804612][ T6640] XFS (loop5): Mounting V5 Filesystem [ 116.838922][ T6656] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 116.865457][ T6656] REISERFS (device loop0): using ordered data mode [ 116.898479][ T6656] reiserfs: using flush barriers [ 116.921982][ T6656] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.943719][ T4284] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.961717][ T5589] magicmouse 0003:05AC:0265.000D: ignoring exceeding usage max [ 116.970356][ T6656] REISERFS (device loop0): checking transaction log (loop0) [ 116.979618][ T6640] XFS (loop5): Ending clean mount [ 116.992715][ T5589] magicmouse 0003:05AC:0265.000D: item fetching failed at offset 5/7 [ 117.014677][ T6677] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.883' sets config #0 [ 117.040906][ T5589] magicmouse 0003:05AC:0265.000D: magicmouse hid parse failed [ 117.054398][ T6677] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.883' sets config #1 [ 117.069702][ T6656] REISERFS (device loop0): Using r5 hash to sort names [ 117.077968][ T5589] magicmouse: probe of 0003:05AC:0265.000D failed with error -22 [ 117.087862][ T6656] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.113827][ T6656] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 117.184850][ T5218] XFS (loop5): Unmounting Filesystem [ 117.247728][ T4284] usb 3-1: Using ep0 maxpacket: 32 [ 117.249951][ T23] usb 2-1: USB disconnect, device number 8 [ 117.352243][ T6682] loop4: detected capacity change from 0 to 128 [ 117.363633][ T4284] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.368921][ T6682] hpfs: bad mount options. [ 117.371732][ T4284] usb 3-1: config 0 has no interface number 0 [ 117.541360][ T6686] tipc: Started in network mode [ 117.560542][ T6686] tipc: Node identity , cluster identity 4711 [ 117.569859][ T4284] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.579813][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.618436][ T4284] usb 3-1: Product: syz [ 117.622773][ T4284] usb 3-1: Manufacturer: syz [ 117.629547][ T4284] usb 3-1: SerialNumber: syz [ 117.679900][ T4284] usb 3-1: config 0 descriptor?? [ 117.701845][ T6694] [U] „ [ 117.731667][ T6690] loop5: detected capacity change from 0 to 8192 [ 117.744775][ T4284] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.794118][ T6690] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 117.813733][ T6690] REISERFS (device loop5): using ordered data mode [ 117.820260][ T6690] reiserfs: using flush barriers [ 117.830763][ T6690] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.854046][ T6690] REISERFS (device loop5): checking transaction log (loop5) [ 117.893053][ T6690] REISERFS (device loop5): Using r5 hash to sort names [ 117.932717][ T6690] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 117.978859][ T4284] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.009018][ T4284] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.043325][ T6690] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 118.102259][ T6690] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 118.150250][ T6692] loop4: detected capacity change from 0 to 40427 [ 118.216473][ T6703] loop0: detected capacity change from 0 to 8192 [ 118.232315][ T6692] F2FS-fs (loop4): invalid crc value [ 118.251241][ T6692] F2FS-fs (loop4): Found nat_bits in checkpoint [ 118.322152][ T6703] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 118.354205][ T6711] CUSE: info not properly terminated [ 118.362505][ T6703] REISERFS (device loop0): using ordered data mode [ 118.404214][ T6703] reiserfs: using flush barriers [ 118.431044][ T6692] F2FS-fs (loop4): Start checkpoint disabled! [ 118.438694][ T6703] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.479320][ T6692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 118.546535][ T6703] REISERFS (device loop0): checking transaction log (loop0) [ 118.572177][ T6703] REISERFS (device loop0): Using r5 hash to sort names [ 118.589647][ T4422] usb 3-1: USB disconnect, device number 7 [ 118.595643][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.619054][ T6703] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 118.645463][ T4422] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.680132][ T6703] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 118.697338][ T4422] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.711270][ T1235] attempt to access beyond end of device [ 118.711270][ T1235] loop4: rw=2049, want=40976, limit=40427 [ 118.720430][ T4422] quatech2 3-1:0.51: device disconnected [ 118.921752][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.191786][ T6716] loop1: detected capacity change from 0 to 40427 [ 119.205080][ T6731] netlink: 52 bytes leftover after parsing attributes in process `syz.4.907'. [ 119.220858][ T6731] tipc: Invalid UDP bearer configuration [ 119.220898][ T6731] tipc: Enabling of bearer rejected, failed to enable media [ 119.239731][ T6733] loop2: detected capacity change from 0 to 1024 [ 119.258016][ T6716] F2FS-fs (loop1): invalid crc value [ 119.274795][ T6716] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.385218][ T23] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 119.419277][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 119.446406][ T23] usb 6-1: SerialNumber: syz [ 119.451162][ T6716] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.460597][ T6741] CUSE: info not properly terminated [ 119.478608][ T23] usb 6-1: config 0 descriptor?? [ 119.609896][ T6716] attempt to access beyond end of device [ 119.609896][ T6716] loop1: rw=2049, want=45104, limit=40427 [ 119.645070][ T6734] attempt to access beyond end of device [ 119.645070][ T6734] loop1: rw=2049, want=45112, limit=40427 [ 119.809974][ T6758] loop4: detected capacity change from 0 to 1024 [ 119.973217][ T6758] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.974908][ T23] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f [ 119.998999][ T6758] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.125604][ T23] hackrf 6-1:0.0: Could not detect board [ 120.135752][ T23] hackrf: probe of 6-1:0.0 failed with error -71 [ 120.171905][ T23] usb 6-1: USB disconnect, device number 4 [ 120.189025][ T6750] loop2: detected capacity change from 0 to 40427 [ 120.261674][ T6750] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 120.289417][ T6750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.387542][ T6773] loop0: detected capacity change from 0 to 136 [ 120.437061][ T6750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.468493][ T6783] loop1: detected capacity change from 0 to 8 [ 120.508486][ T4175] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 120.517301][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 120.525745][ T6750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.543902][ T4175] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 120.553634][ T6750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.663174][ T6783] SQUASHFS error: Failed to read block 0x2d7: -5 [ 120.675660][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 120.696151][ T6783] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 120.722350][ T4182] attempt to access beyond end of device [ 120.722350][ T4182] loop2: rw=2049, want=45104, limit=40427 [ 121.026474][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 121.046674][ T4723] udevd[4723]: symlink '../../loop4' '/dev/disk/by-diskseq/392.tmp-b7:4' failed: Read-only file system [ 121.061515][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/393.tmp-b7:0' failed: Read-only file system [ 121.109270][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/395.tmp-b7:0' failed: Read-only file system [ 121.122989][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 121.207000][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/395.tmp-b7:0' failed: Read-only file system [ 121.212226][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 121.271720][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/394.tmp-b7:1' failed: Read-only file system [ 121.277180][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/395.tmp-b7:0' failed: Read-only file system [ 121.339844][ T4723] udevd[4723]: symlink '../../loop2' '/dev/disk/by-diskseq/391.tmp-b7:2' failed: Read-only file system [ 121.642208][ T6799] loop5: detected capacity change from 0 to 32768 [ 121.832825][ T6799] XFS (loop5): Mounting V5 Filesystem [ 121.835765][ T6834] loop4: detected capacity change from 0 to 8192 [ 121.932391][ T6834] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 122.004707][ T6834] REISERFS (device loop4): using ordered data mode [ 122.011382][ T6834] reiserfs: using flush barriers [ 122.037587][ T6834] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.156835][ T6799] XFS (loop5): Ending clean mount [ 122.214924][ T6799] XFS (loop5): Quotacheck needed: Please wait. [ 122.271944][ T6863] loop0: detected capacity change from 0 to 32768 [ 122.283563][ T6834] REISERFS (device loop4): checking transaction log (loop4) [ 122.375395][ T6799] XFS (loop5): Quotacheck: Done. [ 122.438964][ T6863] XFS (loop0): Mounting V5 Filesystem [ 122.440590][ T6834] REISERFS (device loop4): Using r5 hash to sort names [ 122.500287][ T6863] XFS (loop0): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 122.527336][ T6834] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 122.592151][ T6834] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 122.617566][ T6863] XFS (loop0): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 122.633030][ T6863] XFS (loop0): log mount/recovery failed: error -22 [ 122.674774][ T6863] XFS (loop0): log mount failed [ 122.715131][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 122.768414][ T5218] XFS (loop5): Unmounting Filesystem [ 123.158500][ T6900] loop2: detected capacity change from 0 to 4096 [ 123.313108][ T6909] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.412227][ T6901] loop0: detected capacity change from 0 to 8192 [ 123.491387][ T6918] device gtp0 entered promiscuous mode [ 123.503551][ T5591] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 123.519983][ T6901] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 123.590596][ T6901] REISERFS (device loop0): using ordered data mode [ 123.590612][ T6901] reiserfs: using flush barriers [ 123.631523][ T6901] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.684582][ T6901] REISERFS (device loop0): checking transaction log (loop0) [ 123.793864][ T6901] REISERFS (device loop0): Using r5 hash to sort names [ 123.801027][ T6901] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 123.830423][ T6901] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.863546][ T5591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.898989][ T5591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.925714][ T6901] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 123.933769][ T5591] usb 5-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 123.973338][ T5591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.997749][ T5591] usb 5-1: config 0 descriptor?? [ 124.123512][ T4213] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 124.294046][ T6929] loop1: detected capacity change from 0 to 32768 [ 124.392682][ T6929] XFS (loop1): Mounting V5 Filesystem [ 124.486155][ T5591] logitech-hidpp-device 0003:046D:C090.000E: unbalanced delimiter at end of report description [ 124.516281][ T5591] logitech-hidpp-device 0003:046D:C090.000E: hidpp_probe:parse failed [ 124.529794][ T6929] XFS (loop1): Ending clean mount [ 124.563618][ T4213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.567772][ T5591] logitech-hidpp-device: probe of 0003:046D:C090.000E failed with error -22 [ 124.583319][ T4213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 124.614134][ T4213] usb 6-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 124.638638][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.653981][ T6944] loop0: detected capacity change from 0 to 40427 [ 124.660669][ T6929] XFS (loop1): Quotacheck needed: Please wait. [ 124.689079][ T4213] usb 6-1: config 0 descriptor?? [ 124.710960][ T6944] F2FS-fs (loop0): invalid crc value [ 124.711795][ T5591] usb 5-1: USB disconnect, device number 7 [ 124.727782][ T6933] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 124.743478][ T6929] XFS (loop1): Quotacheck: Done. [ 124.770241][ T6944] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.909414][ T6944] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.920225][ T4168] XFS (loop1): Unmounting Filesystem [ 124.971206][ T6944] attempt to access beyond end of device [ 124.971206][ T6944] loop0: rw=2049, want=45104, limit=40427 [ 124.986336][ T6966] attempt to access beyond end of device [ 124.986336][ T6966] loop0: rw=2049, want=45112, limit=40427 [ 125.233536][ T4213] semitek 0003:1EA7:0907.000F: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.5-1/input0 [ 125.437809][ T4213] usb 6-1: USB disconnect, device number 5 [ 125.487667][ T6981] loop4: detected capacity change from 0 to 512 [ 125.548567][ T6981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.629572][ T6981] EXT4-fs (loop4): 1 truncate cleaned up [ 125.666753][ T6981] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000006a,auto_da_alloc,nombcache,quota,,errors=continue. Quota mode: writeback. [ 125.689395][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.832023][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 126.039420][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-diskseq/404.tmp-b7:5' failed: Read-only file system [ 126.050401][ T7013] loop5: detected capacity change from 0 to 8 [ 126.072829][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-diskseq/406.tmp-b7:2' failed: Read-only file system [ 126.136926][ T7013] SQUASHFS error: Failed to read block 0x2d7: -5 [ 126.149940][ T7013] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 126.219018][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-diskseq/414.tmp-b7:5' failed: Read-only file system [ 126.252614][ T7028] tipc: Enabling not permitted [ 126.285786][ T7028] tipc: Enabling of bearer rejected, failed to enable media [ 126.303618][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/411.tmp-b7:0' failed: Read-only file system [ 126.336849][ T4723] udevd[4723]: symlink '../../loop1' '/dev/disk/by-diskseq/410.tmp-b7:1' failed: Read-only file system [ 126.361647][ T7027] loop0: detected capacity change from 0 to 4096 [ 126.382839][ T4720] udevd[4720]: symlink '../../loop4' '/dev/disk/by-diskseq/413.tmp-b7:4' failed: Read-only file system [ 126.402786][ T4160] udevd[4160]: symlink '../../loop2' '/dev/disk/by-diskseq/406.tmp-b7:2' failed: Read-only file system [ 126.439317][ T7027] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 126.481472][ T7032] loop4: detected capacity change from 0 to 8192 [ 126.533984][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-diskseq/410.tmp-b7:1' failed: Read-only file system [ 126.587029][ T7032] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 126.617240][ T4723] udevd[4723]: symlink '../../loop5' '/dev/disk/by-diskseq/414.tmp-b7:5' failed: Read-only file system [ 126.625598][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-diskseq/411.tmp-b7:0' failed: Read-only file system [ 126.674190][ T7032] REISERFS (device loop4): using ordered data mode [ 126.680820][ T7032] reiserfs: using flush barriers [ 126.709895][ T7032] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.773703][ T7032] REISERFS (device loop4): checking transaction log (loop4) [ 126.816358][ T7032] REISERFS (device loop4): Using r5 hash to sort names [ 126.845555][ T7032] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.845621][ T7032] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 126.904804][ T7032] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 126.905631][ T7055] loop2: detected capacity change from 0 to 8 [ 127.051714][ T7055] SQUASHFS error: Failed to read block 0x2d7: -5 [ 127.051735][ T7055] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 127.182817][ T7066] tipc: Enabling not permitted [ 127.182845][ T7066] tipc: Enabling of bearer rejected, failed to enable media [ 127.431202][ T7070] loop2: detected capacity change from 0 to 4096 [ 127.616328][ T7076] loop4: detected capacity change from 0 to 32768 [ 127.676749][ T7070] ntfs: volume version 3.1. [ 127.871228][ T7076] XFS (loop4): Mounting V5 Filesystem [ 128.017246][ T7076] XFS (loop4): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x30. [ 128.085094][ T7076] XFS (loop4): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 128.100006][ T7076] XFS (loop4): log mount/recovery failed: error -22 [ 128.162322][ T7076] XFS (loop4): log mount failed [ 128.517494][ T7133] loop2: detected capacity change from 0 to 4096 [ 128.572139][ T7144] loop0: detected capacity change from 0 to 256 [ 128.645206][ T7133] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.794774][ T7158] tipc: Enabling not permitted [ 128.800373][ T7158] tipc: Enabling of bearer rejected, failed to enable media [ 128.822447][ T7160] loop5: detected capacity change from 0 to 256 [ 128.900782][ T7165] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 129.092096][ T7176] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1082'. [ 129.139119][ T7176] openvswitch: netlink: Message has 13056 unknown bytes. [ 129.291223][ T7195] device bridge0 entered promiscuous mode [ 129.312487][ T7195] device macvlan2 entered promiscuous mode [ 129.436794][ T7199] loop4: detected capacity change from 0 to 4096 [ 129.446830][ T7190] loop1: detected capacity change from 0 to 4096 [ 129.529322][ T7199] ntfs: volume version 3.1. [ 129.560080][ T7190] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 129.782008][ T7221] mkiss: ax0: crc mode is auto. [ 130.143106][ T7233] loop0: detected capacity change from 0 to 4096 [ 130.263459][ T7245] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.451218][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 130.583923][ T7251] loop5: detected capacity change from 0 to 4096 [ 130.713845][ T7251] ntfs: volume version 3.1. [ 130.935538][ T7267] loop0: detected capacity change from 0 to 128 [ 130.969150][ T7231] loop1: detected capacity change from 0 to 32768 [ 131.048602][ T7231] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1096 (7231) [ 131.063087][ T4720] udevd[4720]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 131.063683][ T4723] udevd[4723]: symlink '../../loop5' '/dev/disk/by-diskseq/438.tmp-b7:5' failed: Read-only file system [ 131.100146][ T4723] udevd[4723]: symlink '../../loop5' '/dev/disk/by-diskseq/438.tmp-b7:5' failed: Read-only file system [ 131.113903][ T7267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.158595][ T7267] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.171123][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-diskseq/440.tmp-b7:1' failed: Read-only file system [ 131.209314][ T7271] loop5: detected capacity change from 0 to 8192 [ 131.213802][ T7231] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.226948][ T4160] udevd[4160]: symlink '../../loop1' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:1' failed: Read-only file system [ 131.276674][ T7271] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 131.289558][ T4723] udevd[4723]: symlink '../../loop0' '/dev/disk/by-diskseq/439.tmp-b7:0' failed: Read-only file system [ 131.290306][ T7271] REISERFS (device loop5): using ordered data mode [ 131.307836][ T7271] reiserfs: using flush barriers [ 131.313902][ T7231] BTRFS info (device loop1): force zlib compression, level 3 [ 131.314007][ T7271] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.321451][ T7231] BTRFS info (device loop1): force clearing of disk cache [ 131.347501][ T7231] BTRFS info (device loop1): setting nodatasum [ 131.355758][ T7231] BTRFS info (device loop1): allowing degraded mounts [ 131.362550][ T7231] BTRFS info (device loop1): enabling disk space caching [ 131.408530][ T7231] BTRFS info (device loop1): disk space caching is enabled [ 131.433411][ T7231] BTRFS info (device loop1): has skinny extents [ 131.435034][ T4723] udevd[4723]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 131.459678][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-diskseq/442.tmp-b7:5' failed: Read-only file system [ 131.498279][ T7271] REISERFS (device loop5): checking transaction log (loop5) [ 131.528021][ T4720] udevd[4720]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 131.535704][ T7261] loop2: detected capacity change from 0 to 32768 [ 131.547521][ T7271] REISERFS (device loop5): Using r5 hash to sort names [ 131.560111][ T7249] loop4: detected capacity change from 0 to 32768 [ 131.561959][ T4723] udevd[4723]: symlink '../../loop0' '/dev/disk/by-diskseq/439.tmp-b7:0' failed: Read-only file system [ 131.579848][ T7271] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 131.630891][ T7249] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 131.642377][ T7249] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 131.645669][ T7261] JBD2: Ignoring recovery information on journal [ 131.754178][ T7261] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.830932][ T7249] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 131.857317][ T7301] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 131.944388][ T7231] BTRFS info (device loop1): clearing free space tree [ 131.951224][ T7231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.997608][ T7231] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.998414][ T7249] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 132.053444][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.140290][ T4182] ocfs2: Unmounting device (7,2) on (node local) [ 132.503529][ T4422] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 132.651743][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 132.686210][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692585][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.773353][ T4422] usb 6-1: Using ep0 maxpacket: 8 [ 132.916577][ T4422] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.934634][ T4422] usb 6-1: config 0 interface 0 has no altsetting 0 [ 132.956894][ T4422] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 132.976776][ T4422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.014609][ T4422] usb 6-1: config 0 descriptor?? [ 133.378171][ T7370] loop2: detected capacity change from 0 to 64 [ 133.455886][ T7375] mkiss: ax0: crc mode is auto. [ 133.487419][ T4422] logitech 0003:046D:C286.0010: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.5-1/input0 [ 133.513080][ T4422] logitech 0003:046D:C286.0010: no inputs found [ 133.701118][ T7330] usb 6-1: USB disconnect, device number 6 [ 133.993103][ T7395] loop4: detected capacity change from 0 to 4096 [ 134.107336][ T7404] fido_id[7404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 134.162428][ T7395] ntfs3: loop4: ino=5, "/" directory corrupted [ 134.690729][ T7443] loop2: detected capacity change from 0 to 1024 [ 134.849118][ T7443] hfsplus: found bad thread record in catalog [ 134.923091][ T7456] loop4: detected capacity change from 0 to 128 [ 134.975852][ T154] hfsplus: b-tree write err: -5, ino 4 [ 135.179569][ T7456] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.190297][ T7456] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.399772][ T7419] loop1: detected capacity change from 0 to 32768 [ 135.404837][ T7462] loop2: detected capacity change from 0 to 8192 [ 135.544357][ T7462] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 135.574680][ T7462] REISERFS (device loop2): using ordered data mode [ 135.581238][ T7462] reiserfs: using flush barriers [ 135.603340][ T7462] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.625358][ T7462] REISERFS (device loop2): checking transaction log (loop2) [ 135.635375][ T7462] REISERFS (device loop2): Using r5 hash to sort names [ 135.666593][ T7462] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 135.686120][ T7487] loop4: detected capacity change from 0 to 4096 [ 135.761834][ T7448] loop0: detected capacity change from 0 to 32768 [ 135.840952][ T7492] loop5: detected capacity change from 0 to 1024 [ 135.970411][ T7448] JBD2: Ignoring recovery information on journal [ 136.087782][ T7492] hfsplus: found bad thread record in catalog [ 136.102188][ T4187] udevd[4187]: symlink '../../loop5' '/dev/disk/by-diskseq/446.tmp-b7:5' failed: Read-only file system [ 136.108523][ T4185] udevd[4185]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 136.126569][ T7487] EXT4-fs (loop4): Test dummy encryption mode enabled [ 136.131968][ T7448] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.156171][ T144] hfsplus: b-tree write err: -5, ino 4 [ 136.164108][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/462.tmp-b7:1' failed: Read-only file system [ 136.190315][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-diskseq/461.tmp-b7:0' failed: Read-only file system [ 136.208478][ T4185] udevd[4185]: symlink '../../loop2' '/dev/disk/by-diskseq/459.tmp-b7:2' failed: Read-only file system [ 136.213382][ T4187] udevd[4187]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 136.229562][ T7487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 136.242713][ T4160] udevd[4160]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 136.249111][ T7508] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.300023][ T4720] udevd[4720]: symlink '../../loop1' '/dev/disk/by-diskseq/462.tmp-b7:1' failed: Read-only file system [ 136.311424][ T7487] System zones: 0-5 [ 136.325872][ T4185] udevd[4185]: symlink '../../loop2' '/dev/disk/by-diskseq/459.tmp-b7:2' failed: Read-only file system [ 136.347331][ T4187] udevd[4187]: symlink '../../loop5' '/dev/disk/by-diskseq/463.tmp-b7:5' failed: Read-only file system [ 136.397392][ T7487] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 136.430512][ T4175] ocfs2: Unmounting device (7,0) on (node local) [ 136.606862][ T7520] loop5: detected capacity change from 0 to 512 [ 136.685659][ T7515] loop0: detected capacity change from 0 to 4096 [ 136.723430][ T7520] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.776481][ T7515] ntfs3: loop0: ino=3, Correct links count -> 2. [ 136.783778][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'. [ 136.793596][ T7520] EXT4-fs (loop5): 1 truncate cleaned up [ 136.799259][ T7520] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.844684][ T7530] nbd: must specify at least one socket [ 136.910825][ T7487] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 137.194882][ T7548] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 137.205393][ T7549] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.222966][ T7548] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 137.263756][ T7550] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 137.373429][ T4284] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.429429][ T7558] loop1: detected capacity change from 0 to 512 [ 137.532538][ T7558] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1223: inode #1: comm syz.1.1223: iget: illegal inode # [ 137.620621][ T7558] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1223: error while reading EA inode 1 err=-117 [ 137.662761][ T7567] loop5: detected capacity change from 0 to 4096 [ 137.664482][ T7569] loop0: detected capacity change from 0 to 1024 [ 137.680588][ T7558] EXT4-fs (loop1): 1 orphan inode deleted [ 137.686443][ T7558] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 137.710779][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.769328][ T7569] hfsplus: found bad thread record in catalog [ 137.793655][ T4284] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 137.843754][ T4284] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 137.854696][ T7567] ntfs3: loop5: ino=5, "/" directory corrupted [ 137.872245][ T154] hfsplus: b-tree write err: -5, ino 4 [ 138.040336][ T7564] loop4: detected capacity change from 0 to 40427 [ 138.053521][ T4284] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 138.064364][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.097093][ T4284] usb 3-1: Product: syz [ 138.101326][ T4284] usb 3-1: Manufacturer: syz [ 138.123715][ T4284] usb 3-1: SerialNumber: syz [ 138.143420][ T7564] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 138.149192][ T4284] usb 3-1: config 0 descriptor?? [ 138.151165][ T7564] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.195827][ T7564] F2FS-fs (loop4): invalid crc value [ 138.241599][ T7564] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.310973][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1238'. [ 138.351051][ T7593] nbd: must specify at least one socket [ 138.407944][ T7564] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.431253][ T7564] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.439469][ T4284] mos7840 3-1:0.0: required endpoints missing [ 138.489301][ T7600] loop5: detected capacity change from 0 to 256 [ 138.652203][ T4284] usb 3-1: USB disconnect, device number 8 [ 138.771327][ T7596] loop0: detected capacity change from 0 to 32768 [ 138.787282][ T7604] loop5: detected capacity change from 0 to 512 [ 138.846002][ T7596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1240 (7596) [ 138.878010][ T7604] [ 138.880376][ T7604] ====================================================== [ 138.887418][ T7604] WARNING: possible circular locking dependency detected [ 138.894448][ T7604] 5.15.186-syzkaller #0 Not tainted [ 138.899650][ T7604] ------------------------------------------------------ [ 138.906675][ T7604] syz.5.1244/7604 is trying to acquire lock: [ 138.912650][ T7604] ffff888074b06628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x32f/0x1b30 [ 138.922145][ T7604] [ 138.922145][ T7604] but task is already holding lock: [ 138.929488][ T7604] ffff88807a39a208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 138.938873][ T7604] [ 138.938873][ T7604] which lock already depends on the new lock. [ 138.938873][ T7604] [ 138.949265][ T7604] [ 138.949265][ T7604] the existing dependency chain (in reverse order) is: [ 138.958261][ T7604] [ 138.958261][ T7604] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 138.966333][ T7604] down_read+0x44/0x2e0 [ 138.971001][ T7604] v2_read_dquot+0x4a/0x110 [ 138.976010][ T7604] dquot_acquire+0x152/0x520 [ 138.981107][ T7604] ext4_acquire_dquot+0x2d9/0x4a0 [ 138.986636][ T7604] dqget+0x778/0xeb0 [ 138.991045][ T7604] __dquot_initialize+0x3b6/0xcb0 [ 138.996577][ T7604] ext4_rename2+0x751/0x3000 [ 139.001677][ T7604] vfs_rename+0xbbf/0x10d0 [ 139.006598][ T7604] do_renameat2+0xa83/0xf70 [ 139.011608][ T7604] __x64_sys_renameat2+0xce/0xe0 [ 139.017050][ T7604] do_syscall_64+0x4c/0xa0 [ 139.021973][ T7604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.028370][ T7604] [ 139.028370][ T7604] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 139.035994][ T7604] __mutex_lock_common+0x1eb/0x2390 [ 139.041716][ T7604] mutex_lock_nested+0x17/0x20 [ 139.046981][ T7604] dquot_commit+0x5a/0x410 [ 139.051904][ T7604] ext4_write_dquot+0x1f0/0x360 [ 139.057261][ T7604] mark_all_dquot_dirty+0xf9/0x400 [ 139.062877][ T7604] __dquot_alloc_space+0x5d0/0xe20 [ 139.068495][ T7604] ext4_mb_new_blocks+0xf68/0x4940 [ 139.074109][ T7604] ext4_ext_map_blocks+0x146f/0x64e0 [ 139.079899][ T7604] ext4_map_blocks+0x981/0x1b30 [ 139.085253][ T7604] ext4_getblk+0x16d/0x630 [ 139.090175][ T7604] ext4_bread+0x26/0x180 [ 139.094919][ T7604] ext4_append+0x2c3/0x560 [ 139.099837][ T7604] ext4_init_new_dir+0x2a2/0x940 [ 139.105278][ T7604] ext4_mkdir+0x47d/0xc50 [ 139.110112][ T7604] vfs_mkdir+0x387/0x570 [ 139.114858][ T7604] do_mkdirat+0x1d7/0x5a0 [ 139.119692][ T7604] __x64_sys_mkdirat+0x85/0x90 [ 139.124966][ T7604] do_syscall_64+0x4c/0xa0 [ 139.129888][ T7604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.136286][ T7604] [ 139.136286][ T7604] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 139.144090][ T7604] __lock_acquire+0x2c33/0x7c60 [ 139.149452][ T7604] lock_acquire+0x197/0x3f0 [ 139.154463][ T7604] down_read+0x44/0x2e0 [ 139.159124][ T7604] ext4_map_blocks+0x32f/0x1b30 [ 139.164478][ T7604] ext4_getblk+0x16d/0x630 [ 139.169402][ T7604] ext4_bread+0x26/0x180 [ 139.174153][ T7604] ext4_quota_read+0x1b3/0x3a0 [ 139.179427][ T7604] find_tree_dqentry+0x188/0xb30 [ 139.184872][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.190309][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.195750][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.201193][ T7604] qtree_read_dquot+0x13c/0x680 [ 139.206549][ T7604] v2_read_dquot+0xc0/0x110 [ 139.211555][ T7604] dquot_acquire+0x152/0x520 [ 139.216651][ T7604] ext4_acquire_dquot+0x2d9/0x4a0 [ 139.222186][ T7604] dqget+0x778/0xeb0 [ 139.226587][ T7604] __dquot_initialize+0x328/0xcb0 [ 139.232119][ T7604] ext4_process_orphan+0x54/0x300 [ 139.237646][ T7604] ext4_orphan_cleanup+0xaa9/0x12e0 [ 139.243351][ T7604] ext4_fill_super+0x9288/0x9a00 [ 139.248798][ T7604] mount_bdev+0x287/0x3c0 [ 139.253632][ T7604] legacy_get_tree+0xe6/0x180 [ 139.258814][ T7604] vfs_get_tree+0x88/0x270 [ 139.264207][ T7604] do_new_mount+0x24a/0xa40 [ 139.269216][ T7604] __se_sys_mount+0x2d6/0x3c0 [ 139.274541][ T7604] do_syscall_64+0x4c/0xa0 [ 139.279482][ T7604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.285895][ T7604] [ 139.285895][ T7604] other info that might help us debug this: [ 139.285895][ T7604] [ 139.296114][ T7604] Chain exists of: [ 139.296114][ T7604] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 139.296114][ T7604] [ 139.309757][ T7604] Possible unsafe locking scenario: [ 139.309757][ T7604] [ 139.317189][ T7604] CPU0 CPU1 [ 139.322540][ T7604] ---- ---- [ 139.327885][ T7604] lock(&s->s_dquot.dqio_sem); [ 139.332719][ T7604] lock(&dquot->dq_lock); [ 139.339817][ T7604] lock(&s->s_dquot.dqio_sem); [ 139.347181][ T7604] lock(&ei->i_data_sem/2); [ 139.351761][ T7604] [ 139.351761][ T7604] *** DEADLOCK *** [ 139.351761][ T7604] [ 139.360017][ T7604] 3 locks held by syz.5.1244/7604: [ 139.365123][ T7604] #0: ffff88807a39a0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 139.375224][ T7604] #1: ffff88805f4fa268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 139.384627][ T7604] #2: ffff88807a39a208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110 [ 139.394443][ T7604] [ 139.394443][ T7604] stack backtrace: [ 139.400315][ T7604] CPU: 1 PID: 7604 Comm: syz.5.1244 Not tainted 5.15.186-syzkaller #0 [ 139.408450][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.418496][ T7604] Call Trace: [ 139.421761][ T7604] [ 139.424683][ T7604] dump_stack_lvl+0x168/0x230 [ 139.429348][ T7604] ? load_image+0x3b0/0x3b0 [ 139.433843][ T7604] ? show_regs_print_info+0x20/0x20 [ 139.439028][ T7604] ? print_circular_bug+0x12b/0x1a0 [ 139.444211][ T7604] check_noncircular+0x274/0x310 [ 139.449131][ T7604] ? add_chain_block+0x940/0x940 [ 139.454047][ T7604] ? lockdep_lock+0xdc/0x1e0 [ 139.458624][ T7604] ? mark_lock+0x94/0x320 [ 139.462950][ T7604] ? mark_lock+0x94/0x320 [ 139.467281][ T7604] __lock_acquire+0x2c33/0x7c60 [ 139.472136][ T7604] ? verify_lock_unused+0x140/0x140 [ 139.477327][ T7604] ? verify_lock_unused+0x140/0x140 [ 139.482522][ T7604] ? verify_lock_unused+0x140/0x140 [ 139.487712][ T7604] lock_acquire+0x197/0x3f0 [ 139.492201][ T7604] ? ext4_map_blocks+0x32f/0x1b30 [ 139.497218][ T7604] ? mark_lock+0x94/0x320 [ 139.501552][ T7604] ? __might_sleep+0xf0/0xf0 [ 139.506129][ T7604] ? read_lock_is_recursive+0x10/0x10 [ 139.511493][ T7604] ? rcu_is_watching+0x11/0xa0 [ 139.516244][ T7604] down_read+0x44/0x2e0 [ 139.520387][ T7604] ? ext4_map_blocks+0x32f/0x1b30 [ 139.525400][ T7604] ext4_map_blocks+0x32f/0x1b30 [ 139.530250][ T7604] ? stack_depot_save+0x404/0x440 [ 139.535349][ T7604] ? ext4_issue_zeroout+0x250/0x250 [ 139.540538][ T7604] ? __kasan_kmalloc+0xcc/0xf0 [ 139.545286][ T7604] ? __kasan_kmalloc+0xb5/0xf0 [ 139.550034][ T7604] ? find_tree_dqentry+0x55/0xb30 [ 139.555042][ T7604] ? find_tree_dqentry+0x3eb/0xb30 [ 139.560145][ T7604] ? find_tree_dqentry+0x3eb/0xb30 [ 139.565256][ T7604] ? find_tree_dqentry+0x3eb/0xb30 [ 139.570361][ T7604] ? qtree_read_dquot+0x13c/0x680 [ 139.575374][ T7604] ? dquot_acquire+0x152/0x520 [ 139.580128][ T7604] ? ext4_acquire_dquot+0x2d9/0x4a0 [ 139.585319][ T7604] ? dqget+0x778/0xeb0 [ 139.589376][ T7604] ext4_getblk+0x16d/0x630 [ 139.593779][ T7604] ? __se_sys_mount+0x2d6/0x3c0 [ 139.598616][ T7604] ? do_syscall_64+0x4c/0xa0 [ 139.603191][ T7604] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.609247][ T7604] ? ext4_get_block_unwritten+0x30/0x30 [ 139.614782][ T7604] ext4_bread+0x26/0x180 [ 139.619013][ T7604] ext4_quota_read+0x1b3/0x3a0 [ 139.623766][ T7604] ? ext4_show_options+0x50/0x50 [ 139.628695][ T7604] find_tree_dqentry+0x188/0xb30 [ 139.633619][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.638543][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.643469][ T7604] find_tree_dqentry+0x3eb/0xb30 [ 139.648390][ T7604] qtree_read_dquot+0x13c/0x680 [ 139.653223][ T7604] ? preempt_count_add+0x8d/0x190 [ 139.658235][ T7604] ? down_read+0x1aa/0x2e0 [ 139.662638][ T7604] v2_read_dquot+0xc0/0x110 [ 139.667128][ T7604] dquot_acquire+0x152/0x520 [ 139.671708][ T7604] ext4_acquire_dquot+0x2d9/0x4a0 [ 139.676722][ T7604] dqget+0x778/0xeb0 [ 139.680604][ T7604] __dquot_initialize+0x328/0xcb0 [ 139.685615][ T7604] ? dquot_initialize+0x20/0x20 [ 139.690450][ T7604] ? ext4_get_projid+0x140/0x140 [ 139.695376][ T7604] ext4_process_orphan+0x54/0x300 [ 139.700396][ T7604] ext4_orphan_cleanup+0xaa9/0x12e0 [ 139.705603][ T7604] ? ext4_orphan_del+0xb90/0xb90 [ 139.710526][ T7604] ? errseq_check_and_advance+0x62/0x120 [ 139.716146][ T7604] ext4_fill_super+0x9288/0x9a00 [ 139.721079][ T7604] ? ext4_mount+0x40/0x40 [ 139.725391][ T7604] ? set_blocksize+0x1f1/0x370 [ 139.730143][ T7604] ? sb_set_blocksize+0xa5/0xe0 [ 139.734974][ T7604] mount_bdev+0x287/0x3c0 [ 139.739289][ T7604] ? ext4_mount+0x40/0x40 [ 139.743604][ T7604] legacy_get_tree+0xe6/0x180 [ 139.748260][ T7604] ? ext4_errno_to_code+0x160/0x160 [ 139.753450][ T7604] vfs_get_tree+0x88/0x270 [ 139.757851][ T7604] do_new_mount+0x24a/0xa40 [ 139.762347][ T7604] __se_sys_mount+0x2d6/0x3c0 [ 139.767009][ T7604] ? __x64_sys_mount+0xc0/0xc0 [ 139.771757][ T7604] ? lockdep_hardirqs_on+0x94/0x140 [ 139.776941][ T7604] ? __x64_sys_mount+0x1c/0xc0 [ 139.781692][ T7604] do_syscall_64+0x4c/0xa0 [ 139.786091][ T7604] ? clear_bhb_loop+0x30/0x80 [ 139.790751][ T7604] ? clear_bhb_loop+0x30/0x80 [ 139.795412][ T7604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 139.801304][ T7604] RIP: 0033:0x7fe129f3d0ca [ 139.805703][ T7604] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.825292][ T7604] RSP: 002b:00007fe127da2e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 139.833693][ T7604] RAX: ffffffffffffffda RBX: 00007fe127da2ef0 RCX: 00007fe129f3d0ca [ 139.841647][ T7604] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fe127da2eb0 [ 139.849691][ T7604] RBP: 0000200000000040 R08: 00007fe127da2ef0 R09: 0000000002010008 [ 139.857646][ T7604] R10: 0000000002010008 R11: 0000000000000246 R12: 0000200000000000 [ 139.865599][ T7604] R13: 00007fe127da2eb0 R14: 000000000000052d R15: 00002000000001c0 [ 139.873557][ T7604] [ 139.876618][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.881163][ T7596] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 139.904937][ T7604] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1244: bg 0: block 248: padding at end of block bitmap is not set [ 139.919799][ T7596] BTRFS info (device loop0): using free space tree [ 139.946504][ T7596] BTRFS info (device loop0): has skinny extents [ 139.954280][ T7604] __quota_error: 13 callbacks suppressed [ 139.954292][ T7604] Quota error (device loop5): write_blk: dquota write failed [ 139.969767][ T7604] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 139.988142][ T7604] EXT4-fs error (device loop5): ext4_acquire_dquot:6207: comm syz.5.1244: Failed to acquire dquot type 1 [ 140.015439][ T7604] EXT4-fs (loop5): 1 truncate cleaned up [ 140.029741][ T7604] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.041004][ T7604] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.130081][ T7596] BTRFS info (device loop0): enabling ssd optimizations [ 140.153835][ T144] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 140.185255][ T154] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)