last executing test programs: 1m33.384197131s ago: executing program 3 (id=97): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000080)=0x8000, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x9d}], 0x1, 0x4160, 0x0) 1m33.154814035s ago: executing program 3 (id=98): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl2\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000}}) 1m33.004460368s ago: executing program 3 (id=99): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) 1m32.660360075s ago: executing program 3 (id=101): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000180)={[{@nolazytime}]}, 0x4, 0x982a, &(0x7f0000009b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20100, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0, 0x0, 0x0, 0xfffffffd}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000002200)) 1m30.731243901s ago: executing program 3 (id=115): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 1m29.111238763s ago: executing program 3 (id=125): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 1m28.643195372s ago: executing program 32 (id=125): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x7, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 5.773787014s ago: executing program 4 (id=672): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0xfffffffffffffffd, 0xa, 0x1, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x77c, &(0x7f0000001180)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5.565836188s ago: executing program 2 (id=674): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) 5.47496981s ago: executing program 1 (id=677): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 5.041032619s ago: executing program 4 (id=679): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000a80)={[{@nouuid}, {@nolazytime}, {@nolargeio}, {@qnoenforce}, {@nogrpid}, {@bsdgroups}, {@quota}, {@lazytime}]}, 0x1, 0x9822, &(0x7f000001c740)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) 4.842114993s ago: executing program 5 (id=680): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 4.639416967s ago: executing program 2 (id=681): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.621569857s ago: executing program 1 (id=682): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00'}, 0x94) unshare(0x2c020400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.201337916s ago: executing program 5 (id=683): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4) 3.763803185s ago: executing program 4 (id=684): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7, 0x6, 0x7267, 0xb, 0x6, 0x100000001, 0x6, 0x9, 0x35}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 3.720567255s ago: executing program 1 (id=685): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x400, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.48828815s ago: executing program 5 (id=686): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x18, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0xd, 0x1, '^'}, 0x0, 0x0, 0x0, 0x0}) 3.091839798s ago: executing program 0 (id=689): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x3}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.019328849s ago: executing program 1 (id=690): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d07, &(0x7f0000000040)) 2.892221662s ago: executing program 1 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.469159851s ago: executing program 0 (id=692): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x86a0}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) 2.297954604s ago: executing program 4 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.195853516s ago: executing program 0 (id=694): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x1, 0x0, 0x1, 0x2}, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) 2.063906959s ago: executing program 2 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.872134992s ago: executing program 1 (id=696): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x18) 1.675325206s ago: executing program 2 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000001c0)={[{@grpid}, {@auto_da_alloc}, {@minixdf}, {@noinit_itable}, {@init_itable}]}, 0xff, 0x52e, &(0x7f0000000640)="$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") 1.675052556s ago: executing program 0 (id=698): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000140)=0x8) 1.674782456s ago: executing program 4 (id=699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xf00, &(0x7f00000024c0)=ANY=[], 0x0) 1.439830051s ago: executing program 5 (id=700): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) recvfrom(r0, 0x0, 0x45, 0x40000000, 0x0, 0x0) 1.243331435s ago: executing program 0 (id=701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000000c0)={[{@orlov}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@bh}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [], 0x2c}, 0x6, 0x4ff, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) fdatasync(r0) 1.242947185s ago: executing program 4 (id=702): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0xbb, 0x3, "bd492f03634fa952cf772f8b8213587a23caa32454057d25a93da8214ea47eecbab1fc78f845fc7ac0d87e151be2c6e285e98bf08bfe359b6a4a6d323ec324aef7fea82ffe243f33300af4cffa2e80abc5c5e2cde04c3cc311275f467ca67214d0e5be5ebd77608d12870074e1bd17e8db147be26141ababac5515623299e5580d0aa7403162eb8ff80c0d68d94c9e297471a1ac965339fd72d2c889cfaf1e35f3618cc6e8929a4d116b9e57775b483e9143676f97d3face8747330bcebb1542d32bdd7cee8f2b4345881f6ee89e8d07d79a516fa34ac9aa8db8c1462e179e4103a1a012db4083740a95e0afc35d6bb0b146034d7c096c2e09c22d6bb04c43ee", 0xb, 0x1, 0x5, 0x0, 0xc1, 0x1, 0x6d, 0x1}}}, 0x120) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.107386048s ago: executing program 2 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r1 = accept4(r0, 0x0, 0x0, 0x80000) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f00000009c0)=0x3, 0x4) 432.715331ms ago: executing program 0 (id=704): r0 = syz_io_uring_setup(0x67e8, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x5f9117fecd4df6f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1bee3af45c0596d92f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x5ae7, 0x0, 0x0, 0x0, 0x0) 316.144364ms ago: executing program 5 (id=705): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x402, 0x7fff800000000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) 55.049969ms ago: executing program 2 (id=706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 0s ago: executing program 5 (id=707): socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x2000048, &(0x7f00000002c0)={[{@norecovery}, {@minixdf}, {@debug}, {@errors_continue}]}, 0x0, 0x498, &(0x7f0000001b40)="$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") chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): up [ 91.425578][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.460815][ T4555] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.700760][ T4555] usb 1-1: Using ep0 maxpacket: 32 [ 91.717625][ T4555] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 91.785606][ T4555] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.796078][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 91.860526][ T4555] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.890258][ T4555] usb 1-1: Product: syz [ 91.915441][ T4555] usb 1-1: Manufacturer: syz [ 91.920162][ T4555] usb 1-1: SerialNumber: syz [ 91.987073][ T4555] usb 1-1: config 0 descriptor?? [ 92.027014][ T4557] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 92.368278][ T4563] loop3: detected capacity change from 0 to 131072 [ 92.444159][ T4563] XFS (loop3): Mounting V5 Filesystem [ 92.469151][ T4579] loop2: detected capacity change from 0 to 128 [ 92.518230][ T4579] FAT-fs (loop2): Directory bread(block 162) failed [ 92.534059][ T4579] FAT-fs (loop2): Directory bread(block 163) failed [ 92.551972][ T127] usb 1-1: USB disconnect, device number 2 [ 92.566005][ T4579] FAT-fs (loop2): Directory bread(block 164) failed [ 92.621757][ T4563] XFS (loop3): Starting recovery (logdev: internal) [ 92.636329][ T4579] FAT-fs (loop2): Directory bread(block 165) failed [ 92.668192][ T4563] XFS (loop3): Ending recovery (logdev: internal) [ 92.688937][ T4579] FAT-fs (loop2): Directory bread(block 166) failed [ 92.720747][ T4579] FAT-fs (loop2): Directory bread(block 167) failed [ 92.727452][ T4579] FAT-fs (loop2): Directory bread(block 168) failed [ 92.766164][ T4579] FAT-fs (loop2): Directory bread(block 169) failed [ 92.823014][ T4565] loop1: detected capacity change from 0 to 32768 [ 92.859763][ T4565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.52 (4565) [ 92.866758][ T4273] XFS (loop3): Unmounting Filesystem [ 92.994316][ T4565] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 93.054472][ T4565] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 93.077980][ T4565] BTRFS info (device loop1): enabling auto defrag [ 93.143915][ T4565] BTRFS info (device loop1): doing ref verification [ 93.179110][ T4565] BTRFS info (device loop1): max_inline at 0 [ 93.241876][ T4565] BTRFS info (device loop1): force clearing of disk cache [ 93.289776][ T4565] BTRFS info (device loop1): turning on sync discard [ 93.304000][ T4565] BTRFS info (device loop1): disabling free space tree [ 93.595446][ T4565] BTRFS info (device loop1): enabling ssd optimizations [ 93.622589][ T4608] loop0: detected capacity change from 0 to 1024 [ 93.639497][ T4565] BTRFS info (device loop1): rebuilding free space tree [ 93.853080][ T4565] BTRFS info (device loop1): disabling free space tree [ 93.873833][ T4565] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 93.903293][ T4565] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 93.921366][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 94.164008][ T4631] loop2: detected capacity change from 0 to 128 [ 94.237075][ T27] audit: type=1800 audit(1759758784.113:5): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="file1" dev="loop2" ino=1048598 res=0 errno=0 [ 94.569860][ T4634] loop0: detected capacity change from 0 to 128 [ 94.650298][ T4634] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 94.671647][ T4634] hpfs: filesystem error: improperly stopped [ 94.689210][ T4634] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 94.733057][ T4634] hpfs: You really don't want any checks? You are crazy... [ 94.776095][ T4636] vivid-002: disconnect [ 94.778247][ T4634] hpfs: hpfs_map_sector(): read error [ 94.786497][ T4635] vivid-002: reconnect [ 94.811112][ T4634] hpfs: code page support is disabled [ 94.887573][ T4634] hpfs: hpfs_map_4sectors(): unaligned read [ 94.911137][ T4634] hpfs: hpfs_map_4sectors(): unaligned read [ 94.917125][ T4634] hpfs: filesystem error: unable to find root dir [ 94.933803][ T4266] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.949309][ T4638] loop2: detected capacity change from 0 to 1024 [ 95.013497][ T4642] loop3: detected capacity change from 0 to 512 [ 95.033624][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.552019][ T4645] loop4: detected capacity change from 0 to 4096 [ 95.642133][ T4642] EXT4-fs (loop3): Test dummy encryption mode enabled [ 95.678017][ T4642] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.728947][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 95.794545][ T4642] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.74: bad orphan inode 131083 [ 95.969879][ T4642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 96.103338][ T4658] loop0: detected capacity change from 0 to 32768 [ 96.227390][ T4665] Bluetooth: MGMT ver 1.22 [ 96.236275][ T4658] XFS (loop0): Mounting V5 Filesystem [ 96.245443][ T4665] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 96.325471][ T4658] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 96.352334][ T4658] XFS (loop0): Starting recovery (logdev: internal) [ 96.367704][ T4658] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x8 [ 96.379790][ T4658] XFS (loop0): Unmount and run xfs_repair [ 96.385737][ T4658] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 96.393225][ T4658] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff ABTB............ [ 96.402255][ T4658] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 96.411982][ T4658] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 96.420827][ T4640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 416: padding at end of block bitmap is not set [ 96.435668][ T4658] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 96.444778][ T4658] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 96.448022][ T4670] loop2: detected capacity change from 0 to 1024 [ 96.453712][ T4658] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.453761][ T4658] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.466718][ T4645] ext4: Unknown parameter 'nouser_xattr' [ 96.469083][ T4658] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.499378][ T4658] XFS (loop0): log mount/recovery failed: error -74 [ 96.524987][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 96.602384][ T4658] XFS (loop0): log mount failed [ 97.152705][ T4681] loop3: detected capacity change from 0 to 1024 [ 97.182318][ T4681] EXT4-fs: Ignoring removed oldalloc option [ 97.229163][ T4681] EXT4-fs: Ignoring removed bh option [ 97.262123][ T4681] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.300705][ T4310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.545647][ T4681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.889387][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 97.910433][ T4676] loop1: detected capacity change from 0 to 32768 [ 97.977437][ T4676] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.81 (4676) [ 98.348764][ T4688] loop0: detected capacity change from 0 to 131072 [ 98.381014][ T4688] F2FS-fs (loop0): invalid crc value [ 98.398574][ T4676] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 98.444069][ T4688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.480758][ T4676] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 98.487377][ T4310] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.508442][ T4310] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 98.519802][ T4688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.529061][ T4310] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 98.539625][ T4676] BTRFS info (device loop1): using free space tree [ 98.560001][ T4310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.579318][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 98.608006][ T4310] usb 5-1: Product: syz [ 98.617982][ T4310] usb 5-1: Manufacturer: syz [ 98.629143][ T4310] usb 5-1: SerialNumber: syz [ 98.652475][ T4310] cdc_mbim 5-1:1.0: skipping garbage [ 98.660527][ T4688] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 98.681886][ T4688] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 98.856691][ T4679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.869898][ T4676] BTRFS info (device loop1): enabling ssd optimizations [ 98.993464][ T27] audit: type=1804 audit(1759758788.873:6): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.81" name="/newroot/12/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 99.303532][ T4266] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 99.441126][ T4377] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (4377) [ 99.469299][ T4679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.725123][ T4310] cdc_mbim 5-1:1.0: bind() failure [ 99.755774][ T4310] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 99.778812][ T4310] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 99.800855][ T4310] usbtest: probe of 5-1:1.1 failed with error -71 [ 99.840881][ T4310] usb 5-1: USB disconnect, device number 2 [ 100.621027][ T127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.810658][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 100.823223][ T127] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 100.872088][ T127] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 100.905021][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.920666][ T127] usb 3-1: Product: syz [ 100.930857][ T127] usb 3-1: Manufacturer: syz [ 100.940864][ T127] usb 3-1: SerialNumber: syz [ 100.971657][ T127] usb 3-1: config 0 descriptor?? [ 100.979279][ T4754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.010366][ T4750] loop3: detected capacity change from 0 to 32768 [ 101.022894][ T127] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 101.196610][ T4750] XFS (loop3): Mounting V5 Filesystem [ 101.375824][ T4750] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 101.404896][ T4789] loop4: detected capacity change from 0 to 1024 [ 101.444774][ T127] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 101.462179][ T4789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.478724][ T4750] XFS (loop3): Starting recovery (logdev: internal) [ 101.488294][ T4789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.518124][ T4331] usb 3-1: USB disconnect, device number 2 [ 101.518267][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 101.565689][ T4789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.580266][ T4750] XFS (loop3): Ending recovery (logdev: internal) [ 101.590179][ T127] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 101.666340][ T4789] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.850648][ T4310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.967928][ T4776] loop0: detected capacity change from 0 to 32768 [ 101.987652][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 102.035900][ T4794] fido_id[4794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.061705][ T4310] usb 2-1: Using ep0 maxpacket: 32 [ 102.068870][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.091050][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.110773][ T4310] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 102.153437][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.192677][ T4310] usb 2-1: config 0 descriptor?? [ 102.202624][ T4776] XFS (loop0): Mounting V5 Filesystem [ 102.424562][ T4776] XFS (loop0): Ending clean mount [ 102.465717][ T4776] XFS (loop0): Quotacheck needed: Please wait. [ 102.619557][ T4776] XFS (loop0): Quotacheck: Done. [ 102.697082][ T4310] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 102.777483][ T4270] XFS (loop0): Unmounting Filesystem [ 102.877903][ T4273] XFS (loop3): Unmounting Filesystem [ 102.953145][ T952] usb 2-1: USB disconnect, device number 2 [ 103.005809][ T4814] fido_id[4814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 103.065949][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.349878][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.508355][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.695283][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.352315][ T4834] loop4: detected capacity change from 0 to 4096 [ 104.542342][ T4838] loop0: detected capacity change from 0 to 1024 [ 104.556246][ T4834] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 104.588521][ T4838] EXT4-fs: Ignoring removed orlov option [ 104.614294][ T4838] EXT4-fs: inline encryption not supported [ 104.660276][ T4838] EXT4-fs: Ignoring removed bh option [ 104.680299][ T4838] EXT4-fs: inline encryption not supported [ 104.772350][ T4838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.778280][ T4840] loop1: detected capacity change from 0 to 4096 [ 104.909333][ T4834] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 105.076401][ T4840] ntfs: volume version 3.1. [ 105.099969][ T4834] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 105.253203][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 105.369001][ T4274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.378681][ T4274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.389594][ T4274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.400962][ T4274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.408561][ T4274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.418035][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.508802][ T75] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 105.569948][ T4277] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 105.596757][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 105.621488][ T4277] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 105.645937][ T33] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 105.672045][ T75] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 105.692764][ T4277] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 106.708219][ T4884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 106.721516][ T4884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 106.731264][ T4884] Zero length message leads to an empty skb [ 106.839779][ T51] device hsr_slave_0 left promiscuous mode [ 106.881593][ T51] device hsr_slave_1 left promiscuous mode [ 106.890060][ T4891] loop4: detected capacity change from 0 to 512 [ 106.899762][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.927883][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.945525][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.966831][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.994508][ T51] device bridge_slave_1 left promiscuous mode [ 107.007498][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.044948][ T51] device bridge_slave_0 left promiscuous mode [ 107.059346][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.178937][ T51] device veth1_macvtap left promiscuous mode [ 107.193031][ T51] device veth0_macvtap left promiscuous mode [ 107.199400][ T51] device veth1_vlan left promiscuous mode [ 107.206831][ T51] device veth0_vlan left promiscuous mode [ 107.344048][ T4897] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 107.470915][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 107.539957][ T4899] loop1: detected capacity change from 0 to 64 [ 107.617988][ T4892] loop2: detected capacity change from 0 to 32768 [ 107.698245][ T27] audit: type=1800 audit(1759758797.573:7): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="bus" dev="loop1" ino=22 res=0 errno=0 [ 108.493409][ T27] audit: type=1326 audit(1759758798.373:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8dd2af79 code=0x7ffc0000 [ 108.557413][ T27] audit: type=1326 audit(1759758798.403:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8dd2af79 code=0x7ffc0000 [ 108.600653][ T27] audit: type=1326 audit(1759758798.403:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 108.670653][ T27] audit: type=1326 audit(1759758798.403:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8dd2af79 code=0x7ffc0000 [ 108.727740][ T27] audit: type=1326 audit(1759758798.403:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 108.815175][ T27] audit: type=1326 audit(1759758798.403:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8dd2af79 code=0x7ffc0000 [ 108.855124][ T51] team0 (unregistering): Port device team_slave_1 removed [ 108.873954][ T27] audit: type=1326 audit(1759758798.403:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 108.950668][ T27] audit: type=1326 audit(1759758798.403:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4912 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 109.058705][ T4911] loop2: detected capacity change from 0 to 32768 [ 109.109886][ T51] team0 (unregistering): Port device team_slave_0 removed [ 109.141891][ T4911] XFS (loop2): Mounting V5 Filesystem [ 109.226565][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.284739][ T4911] XFS (loop2): Ending clean mount [ 109.324920][ T4911] XFS (loop2): Quotacheck needed: Please wait. [ 109.338688][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.386555][ T4911] XFS (loop2): Quotacheck: Done. [ 109.491074][ T127] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.492028][ T4267] XFS (loop2): Unmounting Filesystem [ 109.562334][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 109.676110][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.703014][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.715400][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.734179][ T127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.744942][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.819167][ T127] usb 2-1: config 0 descriptor?? [ 110.101262][ T51] bond0 (unregistering): Released all slaves [ 110.269795][ T127] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 110.348748][ T127] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 110.499513][ T4850] chnl_net:caif_netlink_parms(): no params data found [ 110.970953][ T4850] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.986893][ T4948] loop4: detected capacity change from 0 to 256 [ 110.993487][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.001061][ T4850] device bridge_slave_0 entered promiscuous mode [ 111.041945][ T4948] exfat: Deprecated parameter 'utf8' [ 111.047428][ T4948] exfat: Deprecated parameter 'utf8' [ 111.088257][ T4850] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.134513][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.186632][ T4850] device bridge_slave_1 entered promiscuous mode [ 111.370485][ T4850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.454937][ T4850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.607277][ T22] usb 2-1: USB disconnect, device number 3 [ 111.630823][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 111.637446][ T4850] team0: Port device team_slave_0 added [ 111.683845][ T4961] vivid-000: disconnect [ 111.689367][ T4850] team0: Port device team_slave_1 added [ 111.737231][ T4961] vivid-000: reconnect [ 111.822919][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.829937][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.893834][ T4850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.952478][ T4850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.959479][ T4850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.053310][ T4850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.287553][ T4850] device hsr_slave_0 entered promiscuous mode [ 112.322005][ T4850] device hsr_slave_1 entered promiscuous mode [ 112.331851][ T4850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.339507][ T4850] Cannot create hsr debugfs directory [ 112.903259][ T4850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.933260][ T4850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.971384][ T4850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.003278][ T4850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.286072][ T4977] loop0: detected capacity change from 0 to 32768 [ 113.335606][ T4850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.419016][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.472241][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.519549][ T4850] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.549916][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.571684][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.605744][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.612957][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.632180][ T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.681021][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.710811][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 113.719084][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.741502][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.754818][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.762017][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.791165][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.823008][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.850013][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.859508][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.894208][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.900782][ T22] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 113.913491][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.927996][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.950686][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.985207][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.987434][ T22] usb 3-1: config 0 descriptor?? [ 114.042431][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.088122][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.113812][ T4850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.155075][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.186545][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.227985][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.246002][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.441833][ T22] hid-led 0003:27B8:01ED.0004: item fetching failed at offset 3/5 [ 114.460325][ T5035] loop0: detected capacity change from 0 to 512 [ 114.473561][ T22] hid-led: probe of 0003:27B8:01ED.0004 failed with error -22 [ 114.544725][ T5035] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.185: casefold flag without casefold feature [ 114.619881][ T5035] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.185: couldn't read orphan inode 15 (err -117) [ 114.651581][ T22] usb 3-1: USB disconnect, device number 3 [ 114.666619][ T5035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.877749][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 114.891178][ T5025] loop1: detected capacity change from 0 to 32768 [ 114.987681][ T5025] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 115.094971][ T5025] (syz.1.186,5025,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 115.127955][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.140385][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.166218][ T4850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.322199][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 115.671271][ T5070] loop0: detected capacity change from 0 to 256 [ 115.970781][ T4548] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.058023][ T5083] loop8: detected capacity change from 0 to 8 [ 116.084509][ T5083] Dev loop8: unable to read RDB block 8 [ 116.096064][ T5083] loop8: unable to read partition table [ 116.117766][ T5083] loop8: partition table beyond EOD, truncated [ 116.136204][ T5083] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 116.176924][ T4548] usb 5-1: Using ep0 maxpacket: 32 [ 116.184077][ T4548] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 116.216682][ T4548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.259298][ T4548] usb 5-1: config 0 descriptor?? [ 116.320240][ T4548] as10x_usb: device has been detected [ 116.349446][ T4548] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 116.449849][ T4548] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 116.545446][ T4548] as10x_usb: error during firmware upload part1 [ 116.548917][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.561962][ T4548] Registered device nBox DVB-T Dongle [ 116.576766][ T4548] usb 5-1: USB disconnect, device number 3 [ 116.597622][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.658126][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.692170][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.718088][ T4548] Unregistered device nBox DVB-T Dongle [ 116.730448][ T4850] device veth0_vlan entered promiscuous mode [ 116.732274][ T4548] as10x_usb: device has been disconnected [ 116.759357][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.777081][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.810284][ T4850] device veth1_vlan entered promiscuous mode [ 116.929912][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.941211][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.962503][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.992486][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.014246][ T4850] device veth0_macvtap entered promiscuous mode [ 117.044047][ T4850] device veth1_macvtap entered promiscuous mode [ 117.099170][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.127737][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.156621][ T5104] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.178167][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.188854][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.199054][ T5104] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.213356][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.228186][ T5104] overlayfs: failed to resolve './file1/file0': -2 [ 117.235227][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.250115][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.262410][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.283470][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.309925][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.337336][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.373637][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.401594][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.432337][ T5106] loop1: detected capacity change from 0 to 4096 [ 117.439733][ T5106] __ntfs_warning: 117 callbacks suppressed [ 117.439748][ T5106] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 117.486584][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.513010][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.551566][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.590640][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.611224][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.630633][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.660802][ T4850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.690671][ T4850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.729456][ T5106] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 117.761209][ T5106] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 117.791653][ T4850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.815840][ T4850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.824799][ T4850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.833628][ T4850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.843343][ T4850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.866424][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.906458][ T5106] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 117.906752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.925954][ T5106] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 117.957730][ T5096] loop0: detected capacity change from 0 to 32768 [ 117.990696][ T5106] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 117.999511][ T5106] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 118.106565][ T5120] loop4: detected capacity change from 0 to 2048 [ 118.118021][ T5106] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.123073][ T5096] XFS (loop0): Mounting V5 Filesystem [ 118.127088][ T5106] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 118.153673][ T5106] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 118.190183][ T5106] ntfs: volume version 3.1. [ 118.197677][ T5120] UDF-fs: error (device loop4): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 118.280755][ T5120] UDF-fs: Scanning with blocksize 512 failed [ 118.328903][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.367292][ T5096] XFS (loop0): Ending clean mount [ 118.405345][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.446422][ T5120] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 118.457538][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.461351][ T5096] XFS (loop0): Quotacheck needed: Please wait. [ 118.498734][ T5120] UDF-fs: Scanning with blocksize 1024 failed [ 118.560310][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.576546][ T5120] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 118.614895][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.645009][ T5120] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 118.653500][ T5096] XFS (loop0): Quotacheck: Done. [ 118.680086][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.745764][ T5120] UDF-fs: Scanning with blocksize 2048 failed [ 118.810920][ T5120] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 118.867832][ T5120] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 118.961808][ T5120] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 118.980057][ T5120] UDF-fs: Scanning with blocksize 4096 failed [ 119.022989][ T5120] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 119.061604][ T4270] XFS (loop0): Unmounting Filesystem [ 121.125222][ T5185] loop5: detected capacity change from 0 to 4096 [ 121.595494][ T5202] loop0: detected capacity change from 0 to 512 [ 121.657146][ T4850] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 121.683644][ T5202] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 121.686089][ T4850] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 121.703601][ T5176] loop1: detected capacity change from 0 to 32768 [ 121.708962][ T5202] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 121.794234][ T5202] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 121.831991][ T5176] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 121.849531][ T5202] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 121.893841][ T5202] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 121.903316][ T5202] EXT4-fs (loop0): orphan cleanup on readonly fs [ 121.918326][ T5202] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.228: bg 0: block 34: padding at end of block bitmap is not set [ 121.957894][ T5202] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.228: Failed to acquire dquot type 1 [ 122.002167][ T5202] EXT4-fs (loop0): 1 truncate cleaned up [ 122.023436][ T5202] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.242609][ T4266] (syz-executor,4266,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 122.299061][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 122.341172][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 122.358304][ T5214] loop4: detected capacity change from 0 to 2048 [ 122.466433][ T5214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.408950][ T5211] loop5: detected capacity change from 0 to 32768 [ 123.446691][ T5211] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 123.795515][ T5220] loop0: detected capacity change from 0 to 32768 [ 123.799026][ T4377] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 123.861005][ T5220] [ 123.861005][ T5220] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.861005][ T5220] [ 124.142585][ T4368] read_mapping_page failed! [ 124.147582][ T4368] ERROR: (device loop0): txCommit: [ 124.147582][ T4368] [ 124.228493][ T4368] jfs_write_inode: jfs_commit_inode failed! [ 124.265403][ T4270] [ 124.265403][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.265403][ T4270] [ 124.308193][ T5249] loop2: detected capacity change from 0 to 1024 [ 124.310673][ T4270] [ 124.310673][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.310673][ T4270] [ 124.433827][ T5247] loop1: detected capacity change from 0 to 8192 [ 124.491055][ T5247] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 124.527270][ T5235] loop4: detected capacity change from 0 to 32768 [ 124.579176][ T5247] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 124.590784][ T5247] REISERFS (device loop1): using ordered data mode [ 124.599704][ T5247] reiserfs: using flush barriers [ 124.613979][ T5247] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 124.672808][ T5247] REISERFS (device loop1): checking transaction log (loop1) [ 124.691470][ T5247] REISERFS (device loop1): Using r5 hash to sort names [ 124.698931][ T5247] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 124.821390][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 124.821404][ T27] audit: type=1800 audit(1759759070.694:133): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 125.356155][ T5258] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.422847][ T5265] loop5: detected capacity change from 0 to 64 [ 125.641869][ T5258] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.889727][ T4850] Trying to free block not in datazone [ 125.923083][ T5258] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.943189][ T4850] Trying to free block not in datazone [ 125.954740][ T5277] loop1: detected capacity change from 0 to 1764 [ 125.965420][ T4850] Trying to free block not in datazone [ 125.987461][ T4850] Trying to free block not in datazone [ 125.996462][ T4850] Trying to free block not in datazone [ 126.005613][ T4850] Trying to free block not in datazone [ 126.008851][ T5277] nullb0: [CUMANA/ADFS] p1 [Linux] p2 < > [ 126.028647][ T4850] Trying to free block not in datazone [ 126.084629][ T4850] Trying to free block not in datazone [ 126.100390][ T4850] Trying to free block not in datazone [ 126.119225][ T4850] Trying to free block not in datazone [ 126.146531][ T4850] Trying to free block not in datazone [ 126.170377][ T4850] Trying to free block not in datazone [ 126.187826][ T4850] Trying to free block not in datazone [ 126.229945][ T5258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.251197][ T4850] Trying to free block not in datazone [ 126.504093][ T5258] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.564880][ T5293] loop4: detected capacity change from 0 to 256 [ 126.584645][ T5258] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.681609][ T5258] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.751403][ T5258] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.797109][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.018210][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.040281][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.090724][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 128.150709][ T22] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 128.180197][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.244464][ T22] usb 5-1: config 0 descriptor?? [ 128.665886][ T22] wacom 0003:056A:0003.0005: unknown main item tag 0x6 [ 128.692723][ T22] wacom 0003:056A:0003.0005: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 128.714016][ T22] wacom 0003:056A:0003.0005: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 128.756586][ T22] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.0005/input/input7 [ 128.902281][ T22] usb 5-1: USB disconnect, device number 4 [ 129.296772][ T5347] loop5: detected capacity change from 0 to 32768 [ 129.308392][ T5365] fido_id[5365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 129.415762][ T5347] XFS (loop5): Mounting V5 Filesystem [ 129.605281][ T5347] XFS (loop5): Ending clean mount [ 129.781691][ T5347] XFS (loop5): User initiated shutdown received. [ 129.837591][ T5395] loop1: detected capacity change from 0 to 512 [ 129.865036][ T5347] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 129.941861][ T5347] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 129.951928][ T5395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.147821][ T4850] XFS (loop5): Unmounting Filesystem [ 130.190843][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.193148][ T5405] overlayfs: statfs failed on './file0' [ 130.252279][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 130.422719][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.451077][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.480022][ T22] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.506441][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.516662][ T5409] netlink: 'syz.1.293': attribute type 29 has an invalid length. [ 130.533321][ T5409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 130.535898][ T22] usb 1-1: SerialNumber: syz [ 130.837623][ T22] usb 1-1: 0:2 : does not exist [ 130.894037][ T5416] loop1: detected capacity change from 0 to 2048 [ 130.968428][ T22] usb 1-1: USB disconnect, device number 3 [ 130.998343][ T5416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.196476][ T27] audit: type=1800 audit(1759759077.064:134): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.295" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.433414][ T5430] loop4: detected capacity change from 0 to 4096 [ 131.443666][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.472429][ T5403] loop2: detected capacity change from 0 to 40427 [ 131.526604][ T5403] F2FS-fs (loop2): invalid crc value [ 131.558249][ T5403] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.833246][ T5403] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.888379][ T4277] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 131.894739][ T5415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 131.934597][ T5415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 1024 with error 28 [ 131.980717][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.077494][ T5415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.077494][ T5415] [ 132.083016][ T5403] syz.2.290: attempt to access beyond end of device [ 132.083016][ T5403] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.149398][ T5415] EXT4-fs (loop1): Total free blocks count 0 [ 132.168438][ T5441] syz.2.290: attempt to access beyond end of device [ 132.168438][ T5441] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 132.182332][ T5415] EXT4-fs (loop1): Free/Dirty block details [ 132.188407][ T5415] EXT4-fs (loop1): free_blocks=2415919504 [ 132.215538][ T5415] EXT4-fs (loop1): dirty_blocks=1024 [ 132.240696][ T5415] EXT4-fs (loop1): Block reservation details [ 132.267255][ T5415] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 132.408273][ T4267] syz-executor: attempt to access beyond end of device [ 132.408273][ T4267] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 132.552979][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 132.645220][ T5428] loop5: detected capacity change from 0 to 40427 [ 132.709612][ T5428] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 132.834530][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.841012][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.873284][ T5428] F2FS-fs (loop5): invalid crc value [ 132.938498][ T5428] F2FS-fs (loop5): Found nat_bits in checkpoint [ 133.159317][ T5428] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 133.336108][ T5428] syz.5.297: attempt to access beyond end of device [ 133.336108][ T5428] loop5: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 133.589183][ T4850] syz-executor: attempt to access beyond end of device [ 133.589183][ T4850] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 133.590429][ T5472] loop2: detected capacity change from 0 to 64 [ 133.790975][ T4274] Bluetooth: hci3: command 0x0405 tx timeout [ 134.011948][ T127] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 134.232689][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.264778][ T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.295719][ T127] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 134.315978][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.341547][ T127] usb 1-1: config 0 descriptor?? [ 134.780699][ T127] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 135.066818][ T4338] usb 1-1: USB disconnect, device number 4 [ 135.170787][ T5504] fido_id[5504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 135.901328][ T5539] loop1: detected capacity change from 0 to 4096 [ 135.969774][ T5539] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.010118][ T5539] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 136.069373][ T5546] loop4: detected capacity change from 0 to 1024 [ 136.145238][ T5546] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.180894][ T5546] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 136.223607][ T5550] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.227648][ T5546] JBD2: no valid journal superblock found [ 136.254159][ T5546] EXT4-fs (loop4): error loading journal [ 136.418891][ T5554] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 136.503908][ T5554] Remounting filesystem read-only [ 136.701993][ T5563] loop0: detected capacity change from 0 to 512 [ 136.727893][ T5561] loop4: detected capacity change from 0 to 512 [ 136.731542][ T5563] FAT-fs (loop0): unable to read block(196165962) for building NFS inode [ 136.896084][ T5537] loop5: detected capacity change from 0 to 32768 [ 136.941633][ T5537] XFS: ikeep mount option is deprecated. [ 136.947362][ T5537] XFS: ikeep mount option is deprecated. [ 137.104266][ T5537] XFS (loop5): Mounting V5 Filesystem [ 137.134177][ T5576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.143251][ T5576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.162248][ T5576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.351'. [ 137.312774][ T5537] XFS (loop5): Ending clean mount [ 137.341923][ T5537] XFS (loop5): Quotacheck needed: Please wait. [ 137.455743][ T5537] XFS (loop5): Quotacheck: Done. [ 137.570076][ T4850] XFS (loop5): Unmounting Filesystem [ 137.857681][ T5590] loop2: detected capacity change from 0 to 4096 [ 137.887881][ T5590] ext4: Unknown parameter 'nouser_xattr' [ 138.360228][ T5605] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+¼ÿÿÿÿÿÿÿÿ [ 138.471749][ T5609] loop0: detected capacity change from 0 to 2048 [ 138.484828][ T5580] loop4: detected capacity change from 0 to 32768 [ 138.515844][ T5609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.657948][ T5580] XFS (loop4): Mounting V5 Filesystem [ 138.777622][ T5628] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 138.830719][ T5580] XFS (loop4): Ending clean mount [ 138.847904][ T5580] XFS (loop4): Quotacheck needed: Please wait. [ 138.938542][ T5580] XFS (loop4): Quotacheck: Done. [ 139.049897][ T5632] loop5: detected capacity change from 0 to 128 [ 139.286501][ T4277] XFS (loop4): Unmounting Filesystem [ 139.700811][ T952] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.891320][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 139.898351][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.929670][ T952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.970287][ T952] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.998606][ T952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.035082][ T952] usb 2-1: config 0 descriptor?? [ 140.127108][ T4548] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.324742][ T4548] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.343667][ T4548] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.386684][ T4548] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.424004][ T4548] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.450662][ T4548] usb 1-1: Manufacturer: syz [ 140.457409][ T952] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 140.485395][ T952] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 140.486672][ T4548] usb 1-1: config 0 descriptor?? [ 140.505802][ T952] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 140.551111][ T952] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 140.588837][ T952] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 140.619831][ T952] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 140.672460][ T5644] loop5: detected capacity change from 0 to 40427 [ 140.698970][ T5644] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 140.751198][ T5644] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 140.795317][ T5644] F2FS-fs (loop5): invalid crc value [ 140.805076][ T4548] rc_core: IR keymap rc-hauppauge not found [ 140.807318][ T952] usb 2-1: USB disconnect, device number 4 [ 140.828344][ T4548] Registered IR keymap rc-empty [ 140.836329][ T5644] F2FS-fs (loop5): Found nat_bits in checkpoint [ 140.837547][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 140.888326][ T4548] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.966229][ T4548] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 141.024155][ T5644] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 141.050266][ T5644] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 141.071052][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 141.138861][ T4338] usb 1-1: USB disconnect, device number 5 [ 141.286332][ T5655] loop4: detected capacity change from 0 to 32768 [ 141.347216][ T5655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.374 (5655) [ 141.440370][ T5655] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.470817][ T5655] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 141.485047][ T5644] syz.5.377: attempt to access beyond end of device [ 141.485047][ T5644] loop5: rw=34817, sector=77824, nr_sectors = 2072 limit=40427 [ 141.511692][ T5655] BTRFS info (device loop4): using free space tree [ 141.794049][ T4338] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 141.846634][ T5655] BTRFS info (device loop4): enabling ssd optimizations [ 142.002369][ T4338] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.061402][ T4338] usb 2-1: config 0 has no interface number 0 [ 142.067669][ T4338] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 142.142633][ T4338] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 142.167235][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.187457][ T4338] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.210625][ T4338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.254485][ T4338] usb 2-1: config 0 descriptor?? [ 142.276492][ T5686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.310353][ T4338] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 142.582464][ T952] usb 2-1: USB disconnect, device number 5 [ 142.588381][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 142.977851][ T5733] loop4: detected capacity change from 0 to 4096 [ 143.046463][ T5733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.294822][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 143.646078][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 144.629158][ T5773] loop4: detected capacity change from 0 to 1024 [ 144.722287][ T5773] EXT4-fs: Ignoring removed oldalloc option [ 144.768845][ T5773] EXT4-fs: Ignoring removed bh option [ 144.839785][ T5773] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.019699][ T5773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.120508][ T5742] loop5: detected capacity change from 0 to 32768 [ 145.336015][ T5742] XFS (loop5): Mounting V5 Filesystem [ 145.474236][ T5742] XFS (loop5): Ending clean mount [ 145.503916][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 145.744844][ T5757] loop1: detected capacity change from 0 to 262144 [ 145.761951][ T5757] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.399 (5757) [ 145.858066][ T5757] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 145.868484][ T5757] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 145.877889][ T5757] BTRFS info (device loop1): using free space tree [ 145.968086][ T4850] XFS (loop5): Unmounting Filesystem [ 146.201034][ T5757] BTRFS info (device loop1): enabling ssd optimizations [ 146.380697][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.450658][ T5817] loop0: detected capacity change from 0 to 2048 [ 146.539378][ T5817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.584961][ T26] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.623368][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.665255][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.706090][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.782757][ T26] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.858183][ T26] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.900371][ T4266] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 146.913798][ T26] usb 3-1: Manufacturer: syz [ 146.933417][ T26] usb 3-1: config 0 descriptor?? [ 147.250803][ T952] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.389509][ T26] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 147.399845][ T4274] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 147.409263][ T4274] Bluetooth: hci2: Injecting HCI hardware error event [ 147.419956][ T4282] Bluetooth: hci2: hardware error 0x00 [ 147.449351][ T26] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 147.462360][ T952] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.480624][ T952] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.505687][ T952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.539074][ T952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.568088][ T26] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 147.602678][ T952] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.644219][ T952] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.691117][ T952] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.699188][ T952] usb 1-1: Product: syz [ 147.733984][ T952] usb 1-1: Manufacturer: syz [ 147.747840][ T4555] usb 3-1: USB disconnect, device number 4 [ 147.792031][ T5818] loop4: detected capacity change from 0 to 32768 [ 147.812020][ T5818] XFS: ikeep mount option is deprecated. [ 147.816254][ T952] cdc_wdm 1-1:1.0: skipping garbage [ 147.872271][ T952] cdc_wdm 1-1:1.0: skipping garbage [ 147.921862][ T952] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 147.927931][ T952] cdc_wdm 1-1:1.0: Unknown control protocol [ 148.030915][ T4274] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 148.039891][ T4274] Bluetooth: hci4: Injecting HCI hardware error event [ 148.049903][ T4283] Bluetooth: hci4: hardware error 0x00 [ 148.066509][ T5818] XFS (loop4): Mounting V5 Filesystem [ 148.066959][ T5834] fido_id[5834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.188509][ T5818] XFS (loop4): Ending clean mount [ 148.210651][ T4331] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.229808][ T5818] XFS (loop4): Quotacheck needed: Please wait. [ 148.357639][ T5818] XFS (loop4): Quotacheck: Done. [ 148.413027][ T4331] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.442998][ T4331] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.470912][ T4331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.491374][ T4331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 148.551029][ T4331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 148.589521][ T4331] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.635692][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.680688][ T4331] usb 2-1: Product: syz [ 148.684959][ T4331] usb 2-1: Manufacturer: syz [ 148.735992][ T4331] cdc_wdm 2-1:1.0: skipping garbage [ 148.736395][ T5851] loop2: detected capacity change from 0 to 4096 [ 148.753470][ T4331] cdc_wdm 2-1:1.0: skipping garbage [ 148.777298][ T4331] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 148.813490][ T5826] loop5: detected capacity change from 0 to 40427 [ 148.822185][ T5851] NILFS (loop2): invalid segment: Checksum error in segment payload [ 148.840820][ T4331] cdc_wdm 2-1:1.0: Unknown control protocol [ 148.870376][ T5851] NILFS (loop2): trying rollback from an earlier position [ 148.886763][ T5826] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 148.909625][ T4331] usb 1-1: USB disconnect, device number 6 [ 148.942647][ T5826] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 148.977342][ T5851] NILFS (loop2): recovery complete [ 148.989972][ T4376] usb 2-1: USB disconnect, device number 6 [ 149.033949][ T5826] F2FS-fs (loop5): Found nat_bits in checkpoint [ 149.048299][ T4277] XFS (loop4): Unmounting Filesystem [ 149.106859][ T5859] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.174828][ T5826] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 149.196716][ T5826] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 149.619475][ T4850] syz-executor: attempt to access beyond end of device [ 149.619475][ T4850] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.870929][ T4282] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 149.900316][ T5867] device syzkaller1 entered promiscuous mode [ 150.030744][ T4331] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.190866][ T4283] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 150.243735][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.280878][ T4331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.311162][ T4331] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.323549][ T4331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.361367][ T4331] usb 3-1: config 0 descriptor?? [ 150.829487][ T4331] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 150.851076][ T4331] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 150.899181][ T4331] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0009/input/input11 [ 150.984788][ T4331] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 151.067083][ T5862] loop0: detected capacity change from 0 to 32768 [ 151.152970][ T4376] usb 3-1: USB disconnect, device number 5 [ 151.227927][ T5862] XFS (loop0): Mounting V5 Filesystem [ 151.306516][ T5881] fido_id[5881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 151.361549][ T952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 151.391656][ T5862] XFS (loop0): Ending clean mount [ 151.418739][ T5862] XFS (loop0): Quotacheck needed: Please wait. [ 151.439398][ T5871] loop1: detected capacity change from 0 to 32768 [ 151.480752][ T4331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.496730][ T5871] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 151.539189][ T5862] XFS (loop0): Quotacheck: Done. [ 151.562888][ T952] usb 6-1: Using ep0 maxpacket: 16 [ 151.571581][ T5871] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 151.589495][ T952] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 151.620854][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.631976][ T952] usb 6-1: Product: syz [ 151.636225][ T952] usb 6-1: Manufacturer: syz [ 151.641216][ T952] usb 6-1: SerialNumber: syz [ 151.655483][ T952] usb 6-1: config 0 descriptor?? [ 151.669492][ T952] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 151.696183][ T952] usb 6-1: Detected FT232H [ 151.700979][ T4331] usb 5-1: Using ep0 maxpacket: 32 [ 151.710290][ T4331] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.760894][ T4331] usb 5-1: config 0 has no interface number 0 [ 151.792549][ T4331] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.841946][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.853024][ T4331] usb 5-1: Product: syz [ 151.883927][ T952] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 151.903384][ T4331] usb 5-1: Manufacturer: syz [ 151.908053][ T4331] usb 5-1: SerialNumber: syz [ 151.961268][ T4331] usb 5-1: config 0 descriptor?? [ 151.996122][ T4270] XFS (loop0): Unmounting Filesystem [ 152.014042][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 152.029297][ T4331] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.324221][ T952] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 152.365949][ T5904] loop1: detected capacity change from 0 to 1024 [ 152.382204][ T5904] EXT4-fs: Ignoring removed nobh option [ 152.413755][ T5904] EXT4-fs: Ignoring removed bh option [ 152.467628][ T5904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.529231][ T4331] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.549154][ T4345] usb 6-1: USB disconnect, device number 2 [ 152.565333][ T4331] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 152.605147][ T5904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.673285][ T4345] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 152.722019][ T5904] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.424: Allocating blocks 385-513 which overlap fs metadata [ 152.763912][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 152.773242][ T4345] ftdi_sio 6-1:0.0: device disconnected [ 152.796097][ T5904] EXT4-fs (loop1): pa ffff8880743a40e0: logic 16, phys. 129, len 24 [ 152.802267][ T4555] usb 5-1: USB disconnect, device number 5 [ 152.804798][ T5904] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 152.829123][ T4555] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.870132][ T4555] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 152.873749][ T5900] loop2: detected capacity change from 0 to 40427 [ 152.893572][ T5900] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 152.910923][ T5900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.927426][ T5900] F2FS-fs (loop2): invalid crc value [ 152.943359][ T4555] quatech2 5-1:0.51: device disconnected [ 152.982279][ T5900] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.009437][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 153.184019][ T5900] F2FS-fs (loop2): Start checkpoint disabled! [ 153.319325][ T5900] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.349353][ T5900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 153.505546][ T5900] syz.2.422: attempt to access beyond end of device [ 153.505546][ T5900] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.614970][ T5928] loop4: detected capacity change from 0 to 256 [ 153.621688][ T4331] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.641669][ T5928] exfat: Deprecated parameter 'utf8' [ 153.674776][ T5928] exfat: Deprecated parameter 'utf8' [ 153.713373][ T5928] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 153.836965][ T4331] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 153.860700][ T4331] usb 2-1: config 0 has no interface number 0 [ 153.894661][ T4331] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 153.944925][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.974183][ T75] kworker/u4:4: attempt to access beyond end of device [ 153.974183][ T75] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 153.980610][ T4331] usb 2-1: Product: syz [ 154.014777][ T75] kworker/u4:4: attempt to access beyond end of device [ 154.014777][ T75] loop2: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 154.052152][ T4331] usb 2-1: Manufacturer: syz [ 154.065309][ T4331] usb 2-1: SerialNumber: syz [ 154.089784][ T4331] usb 2-1: config 0 descriptor?? [ 154.310795][ T127] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.318472][ T4331] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 154.329851][ T4331] usb 2-1: No valid video chain found. [ 154.357260][ T4331] usb 2-1: USB disconnect, device number 7 [ 154.520657][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 154.527765][ T127] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 154.552619][ T127] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.600662][ T127] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 154.636455][ T127] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.690739][ T127] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.730898][ T127] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.759159][ T127] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.768643][ T5950] loop2: detected capacity change from 0 to 1024 [ 154.780688][ T127] usb 1-1: Product: syz [ 154.784909][ T127] usb 1-1: Manufacturer: syz [ 154.802155][ T5950] EXT4-fs: inline encryption not supported [ 154.808678][ T5950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.828438][ T127] usb 1-1: SerialNumber: syz [ 154.848514][ T127] usb 1-1: config 0 descriptor?? [ 154.869419][ T127] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.872759][ T5953] loop4: detected capacity change from 0 to 2048 [ 154.917719][ T127] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.926881][ T5950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.067622][ T5953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.151270][ T127] usb 1-1: USB disconnect, device number 7 [ 155.160736][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 155.200842][ T127] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 155.274827][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 155.362199][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 156.240652][ T127] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.431139][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 156.438825][ T127] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 156.459789][ T127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.530646][ T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.590657][ T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.620763][ T127] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.660632][ T127] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.700255][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.765738][ T5981] loop5: detected capacity change from 0 to 32768 [ 156.959226][ T127] usb 3-1: usb_control_msg returned -32 [ 156.982942][ T127] usbtmc 3-1:16.0: can't read capabilities [ 156.996366][ T6000] loop0: detected capacity change from 0 to 8192 [ 157.012115][ T27] audit: type=1800 audit(1759759102.884:135): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.435" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 157.081400][ T6000] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 157.121101][ T6000] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 157.130674][ T6000] REISERFS (device loop0): using ordered data mode [ 157.137244][ T6000] reiserfs: using flush barriers [ 157.260791][ T6000] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.341284][ T6000] REISERFS (device loop0): checking transaction log (loop0) [ 157.386077][ T6012] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 157.459483][ T3654] usb 3-1: USB disconnect, device number 6 [ 157.728790][ T6000] REISERFS (device loop0): Using tea hash to sort names [ 157.749194][ T6000] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 157.896469][ T6029] loop1: detected capacity change from 0 to 512 [ 158.062862][ T6029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.106591][ T6029] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.287326][ T6042] "syz.2.459" (6042) uses obsolete ecb(arc4) skcipher [ 158.450982][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 158.806881][ T6061] loop4: detected capacity change from 0 to 1024 [ 159.031248][ T4480] hfsplus: b-tree write err: -5, ino 4 [ 159.160528][ T6069] device macvlan1 entered promiscuous mode [ 159.168313][ T6069] device macvlan1 left promiscuous mode [ 159.949952][ T6094] loop2: detected capacity change from 0 to 2048 [ 160.016150][ T6094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.143140][ T6072] loop5: detected capacity change from 0 to 32768 [ 160.187620][ T6072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.469 (6072) [ 160.254940][ T6072] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.315409][ T6072] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 160.327967][ T6072] BTRFS info (device loop5): using free space tree [ 160.576204][ T6072] BTRFS info (device loop5): enabling ssd optimizations [ 160.617351][ T6093] loop1: detected capacity change from 0 to 40427 [ 160.638222][ T6093] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50010) [ 160.686965][ T6093] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 160.702844][ T6093] F2FS-fs (loop1): invalid crc value [ 160.753884][ T6093] F2FS-fs (loop1): invalid journal entries nats 0 sits 16390 [ 160.785801][ T6093] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-22) [ 160.828789][ T6129] loop2: detected capacity change from 0 to 1024 [ 161.020076][ T6129] hfsplus: request for non-existent node 262144 in B*Tree [ 161.047529][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.078795][ T6129] hfsplus: request for non-existent node 262144 in B*Tree [ 161.120014][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.139694][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.162570][ T6093] sctp: failed to load transform for md5: -2 [ 161.176823][ T6132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 161.246582][ T4850] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.280256][ T6134] hfsplus: request for non-existent node 262144 in B*Tree [ 161.298009][ T6134] hfsplus: request for non-existent node 262144 in B*Tree [ 161.532691][ T6143] loop1: detected capacity change from 0 to 64 [ 161.552386][ T4585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4585) [ 161.774853][ T6143] syz.1.487: attempt to access beyond end of device [ 161.774853][ T6143] loop1: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 161.806212][ T6143] syz.1.487: attempt to access beyond end of device [ 161.806212][ T6143] loop1: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 161.858668][ T6143] syz.1.487: attempt to access beyond end of device [ 161.858668][ T6143] loop1: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 161.875833][ T6143] syz.1.487: attempt to access beyond end of device [ 161.875833][ T6143] loop1: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 161.962787][ T6143] syz.1.487: attempt to access beyond end of device [ 161.962787][ T6143] loop1: rw=34817, sector=179, nr_sectors = 740 limit=64 [ 162.030900][ T4548] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.255343][ T4548] usb 1-1: Using ep0 maxpacket: 8 [ 162.267832][ T4548] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 162.286584][ T4548] usb 1-1: config 0 has no interface number 0 [ 162.320176][ T4548] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 162.373506][ T4548] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.401828][ T4548] usb 1-1: Product: syz [ 162.417553][ T4548] usb 1-1: Manufacturer: syz [ 162.446948][ T4548] usb 1-1: SerialNumber: syz [ 162.469201][ T4548] usb 1-1: config 0 descriptor?? [ 162.488900][ T4548] redrat3 1-1:0.31: Couldn't find all endpoints [ 162.628982][ T6162] loop2: detected capacity change from 0 to 8192 [ 162.652266][ T6162] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.666259][ T6162] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 162.676435][ T6162] REISERFS (device loop2): using ordered data mode [ 162.683514][ T6162] reiserfs: using flush barriers [ 162.708937][ T6162] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.731565][ T6162] REISERFS (device loop2): checking transaction log (loop2) [ 162.775102][ T6162] REISERFS (device loop2): Using r5 hash to sort names [ 162.813159][ T6162] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 162.856310][ T6140] sp0: Synchronizing with TNC [ 162.887812][ T6139] [U] è [ 163.016275][ T4548] usb 1-1: USB disconnect, device number 8 [ 163.873942][ T27] audit: type=1326 audit(1759759109.744:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 163.893199][ T6203] capability: warning: `syz.1.513' uses deprecated v2 capabilities in a way that may be insecure [ 163.937351][ T27] audit: type=1326 audit(1759759109.744:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.080439][ T27] audit: type=1326 audit(1759759109.744:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.184935][ T27] audit: type=1326 audit(1759759109.744:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.308131][ T27] audit: type=1326 audit(1759759109.744:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.394963][ T27] audit: type=1326 audit(1759759109.744:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.480442][ T6208] loop0: detected capacity change from 0 to 8192 [ 164.524370][ T27] audit: type=1326 audit(1759759109.744:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.687394][ T27] audit: type=1326 audit(1759759109.804:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.733096][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 164.774499][ T27] audit: type=1326 audit(1759759109.804:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.1.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8dd8eec9 code=0x7ffc0000 [ 164.864478][ T6195] loop4: detected capacity change from 0 to 32768 [ 164.996489][ T6195] XFS (loop4): Mounting V5 Filesystem [ 165.061536][ T6233] program syz.2.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.166048][ T6195] XFS (loop4): Ending clean mount [ 165.175981][ T6195] XFS (loop4): Quotacheck needed: Please wait. [ 165.291371][ T6195] XFS (loop4): Quotacheck: Done. [ 165.378644][ T6211] loop5: detected capacity change from 0 to 32768 [ 165.498759][ T6211] XFS (loop5): Mounting V5 Filesystem [ 165.602127][ T4277] XFS (loop4): Unmounting Filesystem [ 165.677647][ T6251] loop2: detected capacity change from 0 to 256 [ 165.760724][ T6211] XFS (loop5): Ending clean mount [ 165.871028][ T4282] Bluetooth: hci0: command 0x0401 tx timeout [ 165.879690][ T4283] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.888731][ T6211] XFS (loop5): Quotacheck needed: Please wait. [ 166.040424][ T6211] XFS (loop5): Quotacheck: Done. [ 166.055727][ T3654] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 166.098513][ T3654] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.238296][ T6264] loop1: detected capacity change from 0 to 164 [ 166.502382][ T4850] XFS (loop5): Unmounting Filesystem [ 166.726246][ T6270] loop4: detected capacity change from 0 to 1024 [ 166.816463][ T6266] loop0: detected capacity change from 0 to 8192 [ 166.878196][ T6270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.947750][ T6266] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.994708][ T6266] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 167.004294][ T6266] REISERFS (device loop0): using ordered data mode [ 167.010912][ T6266] reiserfs: using flush barriers [ 167.036945][ T6266] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.121160][ T6266] REISERFS (device loop0): checking transaction log (loop0) [ 167.309975][ T6268] loop1: detected capacity change from 0 to 32768 [ 167.372501][ T6266] REISERFS (device loop0): Using tea hash to sort names [ 167.384709][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 167.402773][ T6268] JBD2: Ignoring recovery information on journal [ 167.410350][ T6266] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 167.507293][ T6268] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.619572][ T6280] device syzkaller1 entered promiscuous mode [ 167.835525][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 167.950724][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.285797][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 168.527170][ T6303] device syzkaller1 entered promiscuous mode [ 168.605707][ T6308] loop1: detected capacity change from 0 to 64 [ 169.126923][ T6318] loop1: detected capacity change from 0 to 1024 [ 169.255664][ T6318] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.343930][ T6316] loop0: detected capacity change from 0 to 32768 [ 169.351630][ T6318] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 169.353232][ T6316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.554 (6316) [ 169.369806][ T6325] loop4: detected capacity change from 0 to 512 [ 169.380130][ T6316] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.391055][ T6316] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.399814][ T6316] BTRFS info (device loop0): enabling ssd optimizations [ 169.407258][ T6316] BTRFS info (device loop0): using spread ssd allocation scheme [ 169.415011][ T6316] BTRFS info (device loop0): setting nodatacow, compression disabled [ 169.423178][ T6316] BTRFS info (device loop0): not using ssd optimizations [ 169.430246][ T6316] BTRFS info (device loop0): not using spread ssd allocation scheme [ 169.438327][ T6316] BTRFS info (device loop0): use zlib compression, level 3 [ 169.445620][ T6316] BTRFS info (device loop0): setting nodatasum [ 169.451917][ T6316] BTRFS info (device loop0): max_inline at 0 [ 169.457957][ T6316] BTRFS info (device loop0): using free space tree [ 169.610796][ T4553] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 169.679993][ T6344] loop5: detected capacity change from 0 to 2048 [ 169.716219][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 169.736561][ T4480] BTRFS warning (device loop0): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x566da5bc level 0 [ 169.833387][ T4553] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.848802][ T4553] usb 3-1: not running at top speed; connect to a high speed hub [ 169.868538][ T4553] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 169.887606][ T4553] usb 3-1: config 0 has no interface number 0 [ 169.900683][ T4553] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 169.913558][ T4553] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 169.923684][ T4553] usb 3-1: config 0 interface 88 has no altsetting 0 [ 169.932891][ T4553] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 169.934908][ T6344] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.950667][ T4553] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 169.950695][ T4553] usb 3-1: Product: syz [ 169.950711][ T4553] usb 3-1: Manufacturer: syz [ 169.950727][ T4553] usb 3-1: SerialNumber: syz [ 169.973730][ T4553] usb 3-1: config 0 descriptor?? [ 170.049077][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 170.241145][ T4432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4432) [ 170.370451][ T6360] overlayfs: upper fs does not support file handles, falling back to index=off. [ 170.418119][ T6360] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 170.448680][ T4553] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input12 [ 170.523936][ T4553] usb 3-1: USB disconnect, device number 7 [ 170.652874][ T4347] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 170.667724][ T6364] loop1: detected capacity change from 0 to 512 [ 170.713474][ T4347] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.769923][ T6364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.789435][ T6364] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.801585][ T4347] EXT4-fs (loop5): This should not happen!! Data will be lost [ 170.801585][ T4347] [ 170.818655][ T4347] EXT4-fs (loop5): Total free blocks count 0 [ 170.824749][ T4347] EXT4-fs (loop5): Free/Dirty block details [ 170.830880][ T4347] EXT4-fs (loop5): free_blocks=4096 [ 170.836188][ T4347] EXT4-fs (loop5): dirty_blocks=512 [ 170.841479][ T4347] EXT4-fs (loop5): Block reservation details [ 170.847486][ T4347] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 170.855901][ T4347] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 171.435474][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 171.454613][ T6380] loop5: detected capacity change from 0 to 2048 [ 171.489787][ T6380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.506591][ T6386] loop4: detected capacity change from 0 to 128 [ 171.583113][ T6386] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.715058][ T6386] hpfs: filesystem error: improperly stopped [ 171.731508][ T6386] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.759687][ T6386] hpfs: You really don't want any checks? You are crazy... [ 171.806753][ T6386] hpfs: hpfs_map_sector(): read error [ 171.812344][ T6386] hpfs: code page support is disabled [ 171.820006][ T6386] hpfs: hpfs_map_4sectors(): unaligned read [ 171.831119][ T6386] hpfs: hpfs_map_4sectors(): unaligned read [ 171.837208][ T6386] hpfs: filesystem error: unable to find root dir [ 172.716648][ T6382] loop0: detected capacity change from 0 to 40427 [ 172.773755][ T6382] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 172.782115][ T6391] loop2: detected capacity change from 0 to 32768 [ 172.816272][ T6382] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 172.846778][ T6382] F2FS-fs (loop0): invalid crc value [ 172.858963][ T6391] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 172.957052][ T6382] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.017766][ T6391] (syz.2.575,6391,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 173.061785][ T6420] ptrace attach of "./syz-executor exec"[4277] was attempted by ""[6420] [ 173.141157][ T6382] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.148384][ T6382] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.204742][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 173.410399][ T6382] syz.0.570: attempt to access beyond end of device [ 173.410399][ T6382] loop0: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 173.426904][ T6427] loop4: detected capacity change from 0 to 1024 [ 173.513672][ T6427] EXT4-fs: inline encryption not supported [ 173.548738][ T6427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.636738][ T6427] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 174.006563][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 174.227378][ T6431] loop1: detected capacity change from 0 to 32768 [ 174.240697][ T6361] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 174.250160][ T6431] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 174.379251][ T6444] device syz_tun entered promiscuous mode [ 174.405395][ T6444] device batadv_slave_0 entered promiscuous mode [ 174.452515][ T6444] device syz_tun left promiscuous mode [ 174.459619][ T6361] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.473039][ T6361] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.482465][ T6444] device batadv_slave_0 left promiscuous mode [ 174.507367][ T6361] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.543888][ T6361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.563117][ T6361] usb 3-1: SerialNumber: syz [ 174.636031][ T4377] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 174.636532][ T6451] loop0: detected capacity change from 0 to 512 [ 174.661584][ T6451] EXT4-fs: Ignoring removed bh option [ 174.668269][ T6451] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.696340][ T6451] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 174.727821][ T6451] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 174.744757][ T6451] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 174.760064][ T6451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.760806][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 174.795926][ T6361] usb 3-1: 0:2 : does not exist [ 174.843811][ T6361] usb 3-1: USB disconnect, device number 8 [ 174.878661][ T6452] loop4: detected capacity change from 0 to 4096 [ 174.936313][ T6452] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 175.000929][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 175.008036][ T22] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 175.038291][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.077605][ T22] usb 2-1: config 0 descriptor?? [ 175.084345][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 175.088983][ T4585] udevd[4585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.139249][ T22] as10x_usb: device has been detected [ 175.154399][ T22] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 175.207607][ T27] audit: type=1800 audit(1759759121.074:145): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.599" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 175.235906][ T6458] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 175.249327][ T22] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 175.286803][ T22] as10x_usb: error during firmware upload part1 [ 175.294469][ T22] Registered device nBox DVB-T Dongle [ 175.364643][ T6456] loop5: detected capacity change from 0 to 4096 [ 175.397897][ T22] usb 2-1: USB disconnect, device number 8 [ 175.437229][ T6456] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 175.453129][ T22] Unregistered device nBox DVB-T Dongle [ 175.482791][ T22] as10x_usb: device has been disconnected [ 175.629127][ T6456] ntfs3: loop5: failed to convert "c46c" to koi8-r [ 175.883997][ T6463] loop2: detected capacity change from 0 to 8192 [ 175.901880][ T6472] loop5: detected capacity change from 0 to 128 [ 175.924207][ T6463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.975079][ T6472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 175.989304][ T6463] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 176.015414][ T6472] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.087734][ T6463] REISERFS (device loop2): using ordered data mode [ 176.112844][ T4274] Bluetooth: hci0: command 0x1407 tx timeout [ 176.119166][ T4283] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 176.122045][ T6463] reiserfs: using flush barriers [ 176.144969][ T6472] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm syz.5.605: bg 0: bad block bitmap checksum [ 176.227044][ T6463] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.231311][ T6466] loop4: detected capacity change from 0 to 32768 [ 176.251880][ T6478] loop0: detected capacity change from 0 to 1024 [ 176.314764][ T6463] REISERFS (device loop2): checking transaction log (loop2) [ 176.355553][ T6466] JBD2: Ignoring recovery information on journal [ 176.443306][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 176.507455][ T6466] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 176.607924][ T6481] loop1: detected capacity change from 0 to 1024 [ 176.628469][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 176.701501][ T6481] EXT4-fs: inline encryption not supported [ 176.740155][ T6481] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.763801][ T6463] REISERFS (device loop2): Using tea hash to sort names [ 176.808716][ T6463] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 176.821568][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 176.858730][ T6486] loop0: detected capacity change from 0 to 256 [ 176.877325][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 176.986123][ T4422] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.147353][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 177.343894][ T6492] loop1: detected capacity change from 0 to 128 [ 177.391806][ T6492] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.502188][ T6492] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.566387][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 177.786304][ T4368] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.977908][ T6507] loop4: detected capacity change from 0 to 2048 [ 178.107271][ T6507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.314484][ T6484] loop5: detected capacity change from 0 to 40427 [ 178.388796][ T6484] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 178.412850][ T6517] loop0: detected capacity change from 0 to 4096 [ 178.420237][ T6484] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 178.490290][ T6484] F2FS-fs (loop5): invalid crc value [ 178.520295][ T6484] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.523790][ T6517] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 178.644232][ T4368] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 178.703548][ T6484] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 178.719865][ T4368] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.788887][ T4368] EXT4-fs (loop4): This should not happen!! Data will be lost [ 178.788887][ T4368] [ 178.818536][ T6517] ntfs3: loop0: ino=5, "/" directory corrupted [ 178.828595][ T4368] EXT4-fs (loop4): Total free blocks count 0 [ 178.852653][ T27] audit: type=1800 audit(1759759124.724:146): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.608" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 178.883670][ T4368] EXT4-fs (loop4): Free/Dirty block details [ 178.901434][ T6530] loop1: detected capacity change from 0 to 1024 [ 178.909909][ T4368] EXT4-fs (loop4): free_blocks=4096 [ 178.918342][ T6484] syz.5.608: attempt to access beyond end of device [ 178.918342][ T6484] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.948539][ T6530] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.953802][ T4368] EXT4-fs (loop4): dirty_blocks=512 [ 178.986847][ T6530] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.010899][ T4368] EXT4-fs (loop4): Block reservation details [ 179.029197][ T4368] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 179.057037][ T6530] JBD2: no valid journal superblock found [ 179.072432][ T4368] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 179.137247][ T6530] EXT4-fs (loop1): error loading journal [ 179.332840][ T6532] ptrace attach of "./syz-executor exec"[4270] was attempted by ""[6532] [ 179.676475][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 180.067381][ T6548] loop5: detected capacity change from 0 to 512 [ 180.113568][ T6548] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 180.155631][ T6534] loop4: detected capacity change from 0 to 32768 [ 180.190888][ T4548] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.383797][ T4548] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.405576][ T4548] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.427204][ T4548] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.437340][ T4548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.447563][ T4548] usb 1-1: SerialNumber: syz [ 180.596056][ T6557] loop1: detected capacity change from 0 to 2048 [ 180.666488][ T6557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.674356][ T4548] usb 1-1: 0:2 : does not exist [ 180.707090][ T4548] usb 1-1: USB disconnect, device number 9 [ 180.725579][ T4432] udevd[4432]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 180.800635][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 180.998447][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.016729][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.037954][ T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 181.057421][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.071348][ T4368] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 181.088034][ T22] usb 6-1: config 0 descriptor?? [ 181.109512][ T4368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.130604][ T4368] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.130604][ T4368] [ 181.150863][ T4368] EXT4-fs (loop1): Total free blocks count 0 [ 181.157676][ T4368] EXT4-fs (loop1): Free/Dirty block details [ 181.163787][ T4368] EXT4-fs (loop1): free_blocks=4096 [ 181.177557][ T4368] EXT4-fs (loop1): dirty_blocks=512 [ 181.188521][ T4368] EXT4-fs (loop1): Block reservation details [ 181.200635][ T4368] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 181.237311][ T4368] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 181.532746][ T22] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 181.557506][ T22] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 181.568783][ T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000B/input/input13 [ 181.616801][ T22] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 181.735030][ T4553] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.783585][ T6362] usb 6-1: USB disconnect, device number 3 [ 181.902906][ T6578] fido_id[6578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 181.942785][ T4553] usb 1-1: Using ep0 maxpacket: 8 [ 181.955997][ T4553] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 181.982728][ T4553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.010688][ T4553] usb 1-1: Product: syz [ 182.015037][ T4553] usb 1-1: Manufacturer: syz [ 182.019689][ T4553] usb 1-1: SerialNumber: syz [ 182.037328][ T4553] usb 1-1: config 0 descriptor?? [ 182.052098][ T4553] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 182.391977][ T6577] loop4: detected capacity change from 0 to 40427 [ 182.435612][ T6577] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 182.466391][ T6577] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 182.493645][ T6577] F2FS-fs (loop4): invalid crc value [ 182.547003][ T6577] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.697820][ T6577] F2FS-fs (loop4): Start checkpoint disabled! [ 182.758030][ T6577] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 182.780832][ T6577] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 182.913508][ T6577] syz.4.642: attempt to access beyond end of device [ 182.913508][ T6577] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.062258][ T4553] gspca_sonixj: reg_w1 err -71 [ 183.180873][ T4553] sonixj: probe of 1-1:0.0 failed with error -71 [ 183.187062][ T4347] kworker/u4:5: attempt to access beyond end of device [ 183.187062][ T4347] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 183.196792][ T4553] usb 1-1: USB disconnect, device number 10 [ 183.247077][ T4347] kworker/u4:5: attempt to access beyond end of device [ 183.247077][ T4347] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 183.534141][ T6599] loop2: detected capacity change from 0 to 32768 [ 183.576334][ T6599] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.649 (6599) [ 183.640478][ T6599] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 183.680709][ T6599] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 183.702051][ T6599] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.741711][ T6599] BTRFS info (device loop2): use zstd compression, level 3 [ 183.775758][ T6599] BTRFS info (device loop2): using free space tree [ 183.934603][ T6605] loop1: detected capacity change from 0 to 32768 [ 184.000942][ T6605] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.654 (6605) [ 184.063160][ T6605] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 184.085905][ T6599] BTRFS info (device loop2): enabling ssd optimizations [ 184.131137][ T6605] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 184.173547][ T6605] BTRFS info (device loop1): using free space tree [ 184.454696][ T6631] loop5: detected capacity change from 0 to 8192 [ 184.493353][ T6631] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 184.510698][ T6362] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.512189][ T6658] loop0: detected capacity change from 0 to 16 [ 184.518378][ T6605] BTRFS info (device loop1): enabling ssd optimizations [ 184.532288][ T6658] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.588110][ T6658] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 184.624216][ T6631] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 184.652210][ T4283] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 184.663724][ T6658] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 184.681881][ T6631] REISERFS (device loop5): using journaled data mode [ 184.722047][ T6631] reiserfs: using flush barriers [ 184.751452][ T27] audit: type=1800 audit(1759759130.624:147): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.660" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 184.756040][ T6362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.840989][ T6631] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.846965][ T6362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.909578][ T6362] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 184.948789][ T6362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.953840][ T6631] REISERFS (device loop5): checking transaction log (loop5) [ 184.978377][ T6362] usb 5-1: config 0 descriptor?? [ 185.026349][ T6631] REISERFS (device loop5): Using r5 hash to sort names [ 185.063228][ T6631] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.135698][ T6662] loop0: detected capacity change from 0 to 1024 [ 185.151337][ T6631] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 185.182072][ T6662] EXT4-fs: inline encryption not supported [ 185.198526][ T6662] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.286177][ T6631] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.304892][ T4266] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 185.337600][ T6662] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.394082][ T6631] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.410438][ T6631] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.446673][ T6362] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 185.482504][ T6362] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 185.524740][ T6362] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000C/input/input14 [ 185.607705][ T6362] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 186.002215][ T4267] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 186.021774][ T4553] usb 5-1: USB disconnect, device number 6 [ 186.044991][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 186.405560][ T6676] loop5: detected capacity change from 0 to 512 [ 186.513843][ T6676] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.587646][ T6676] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.770638][ T4553] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 186.878844][ T6690] loop2: detected capacity change from 0 to 1024 [ 186.912081][ T6690] EXT4-fs: Ignoring removed orlov option [ 186.935929][ T6690] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.980804][ T4553] usb 1-1: Using ep0 maxpacket: 8 [ 186.989134][ T6694] sctp: [Deprecated]: syz.1.673 (pid 6694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.989134][ T6694] Use struct sctp_sack_info instead [ 187.002381][ T4553] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.029000][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 187.029676][ T6690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.080723][ T4553] usb 1-1: config 0 has no interface number 0 [ 187.087026][ T4553] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.122853][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 187.199579][ T4553] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.225978][ T6696] loop4: detected capacity change from 0 to 2048 [ 187.239725][ T4553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.276038][ T4553] usb 1-1: config 0 descriptor?? [ 187.281739][ T6703] loop1: detected capacity change from 0 to 512 [ 187.311842][ T4553] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.352911][ T6703] EXT4-fs: Ignoring removed orlov option [ 187.361233][ T6696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.399198][ T6703] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 187.430850][ T6696] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.672: bit already cleared for inode 15 [ 187.515379][ T6707] loop2: detected capacity change from 0 to 2048 [ 187.523463][ T6703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 187.590056][ T6703] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.677: corrupted in-inode xattr [ 187.592471][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 187.675663][ T6707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.703402][ T6703] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.677: couldn't read orphan inode 15 (err -117) [ 187.783284][ T6703] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 187.987527][ T6717] loop5: detected capacity change from 0 to 512 [ 188.019154][ T6717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.034418][ T51] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 188.085214][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.109621][ T6717] EXT4-fs (loop5): 1 truncate cleaned up [ 188.113616][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.113616][ T51] [ 188.142620][ T6717] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.171483][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 188.192443][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 188.212998][ T51] EXT4-fs (loop2): Free/Dirty block details [ 188.246227][ T51] EXT4-fs (loop2): free_blocks=4096 [ 188.254429][ T27] audit: type=1800 audit(1759759134.124:148): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.680" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 188.277168][ T6714] loop4: detected capacity change from 0 to 32768 [ 188.293687][ T51] EXT4-fs (loop2): dirty_blocks=512 [ 188.295668][ T27] audit: type=1804 audit(1759759134.154:149): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.680" name="/newroot/76/file0/bus" dev="loop5" ino=18 res=1 errno=0 [ 188.321164][ T51] EXT4-fs (loop2): Block reservation details [ 188.331784][ T51] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 188.343117][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 188.377529][ T6714] XFS (loop4): Mounting V5 Filesystem [ 188.544763][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 188.562576][ T6714] XFS (loop4): Ending clean mount [ 188.625940][ T4734] usb 1-1: USB disconnect, device number 11 [ 188.647884][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.665318][ T6714] XFS (loop4): Quotacheck needed: Please wait. [ 188.737471][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.746064][ T6714] XFS (loop4): Quotacheck: Done. [ 188.751504][ T6728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.766878][ T6728] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 188.894429][ T6730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.924671][ T4277] XFS (loop4): Unmounting Filesystem [ 189.143521][ T6730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.417087][ T6730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.545992][ T4734] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 189.667189][ T6730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.703764][ T6744] loop4: detected capacity change from 0 to 512 [ 189.730045][ T6746] input: syz0 as /devices/virtual/input/input15 [ 189.748003][ T4734] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 189.767662][ T4734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.800360][ T4734] usb 6-1: config 0 descriptor?? [ 189.825042][ T4734] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 189.854312][ T6744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 189.904352][ T6744] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.025255][ T4734] gp8psk: usb in 128 operation failed. [ 190.036806][ T4734] gp8psk: usb in 137 operation failed. [ 190.067307][ T4734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.089689][ T6730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.100470][ T4734] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 190.115089][ T4734] usb 6-1: media controller created [ 190.148269][ T4734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.177257][ T6730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.226135][ T4734] gp8psk_fe: Frontend attached [ 190.245945][ T4734] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 190.267816][ T6730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.288995][ T4734] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 190.303329][ T6730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.402968][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 190.425772][ T4734] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 190.450676][ T4734] gp8psk: found Genpix USB device pID = 203 (hex) [ 190.507409][ T6765] loop0: detected capacity change from 0 to 64 [ 190.646003][ T4741] usb 6-1: USB disconnect, device number 4 [ 190.707780][ T6765] minix_free_block (loop0:2): bit already cleared [ 190.756607][ T6765] minix_free_block (loop0:3): bit already cleared [ 190.822248][ T6765] minix_free_block (loop0:4): bit already cleared [ 190.897570][ T4741] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 191.068699][ T6777] loop2: detected capacity change from 0 to 512 [ 191.183365][ T6777] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 191.237446][ T6777] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 191.248075][ T6777] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.697: Failed to acquire dquot type 1 [ 191.250710][ T6668] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.281001][ T6777] EXT4-fs (loop2): 1 truncate cleaned up [ 191.286756][ T6777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 191.360880][ T6777] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.502641][ T6668] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 191.528795][ T6668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.549265][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 191.571454][ T6668] usb 2-1: config 0 descriptor?? [ 191.597711][ T6792] loop0: detected capacity change from 0 to 512 [ 191.613506][ T6668] gspca_main: spca508-2.14.0 probing 8086:0110 [ 191.627151][ T6792] EXT4-fs: Ignoring removed orlov option [ 191.664932][ T6792] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 191.714836][ T6792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880ee02c, mo2=0102] [ 191.737848][ T6792] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.752478][ T6792] EXT4-fs error (device loop0): __ext4_iget:5077: inode #11: block 16777236: comm syz.0.701: invalid block [ 191.774609][ T6791] loop4: detected capacity change from 0 to 8192 [ 191.808010][ T6792] EXT4-fs (loop0): Remounting filesystem read-only [ 191.815188][ T6791] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 191.864576][ T6792] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.701: couldn't read orphan inode 11 (err -117) [ 191.927010][ T6791] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 191.948805][ T6792] EXT4-fs (loop0): Remounting filesystem read-only [ 191.959198][ T6791] REISERFS (device loop4): using ordered data mode [ 191.975220][ T6791] reiserfs: using flush barriers [ 191.981594][ T6792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.003640][ T6791] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.062419][ T6791] REISERFS (device loop4): checking transaction log (loop4) [ 192.108117][ T6792] EXT4-fs (loop0): shut down requested (2) [ 192.141047][ T6668] gspca_spca508: reg_read err -110 [ 192.150169][ T6668] gspca_spca508: reg_read err -32 [ 192.179036][ T6668] gspca_spca508: reg_read err -71 [ 192.203523][ T6668] gspca_spca508: reg_read err -71 [ 192.226655][ T6668] gspca_spca508: reg_read err -71 [ 192.241006][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 192.271187][ T6668] gspca_spca508: reg write: error -71 [ 192.279586][ T6668] spca508: probe of 2-1:0.0 failed with error -71 [ 192.320187][ T6668] usb 2-1: USB disconnect, device number 9 [ 192.349236][ T6791] REISERFS (device loop4): Using tea hash to sort names [ 192.431171][ T6791] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 192.510742][ T6791] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 192.672050][ T6791] [ 192.674444][ T6791] ====================================================== [ 192.681752][ T6791] WARNING: possible circular locking dependency detected [ 192.688809][ T6791] syzkaller #0 Not tainted [ 192.693249][ T6791] ------------------------------------------------------ [ 192.700299][ T6791] syz.4.702/6791 is trying to acquire lock: [ 192.706219][ T6791] ffff8880682716c0 (&type->i_mutex_dir_key#9/3){+.+.}-{3:3}, at: open_xa_dir+0x11e/0x6f0 [ 192.716131][ T6791] [ 192.716131][ T6791] but task is already holding lock: [ 192.723526][ T6791] ffff88807d7dc090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 192.733155][ T6791] [ 192.733155][ T6791] which lock already depends on the new lock. [ 192.733155][ T6791] [ 192.743593][ T6791] [ 192.743593][ T6791] the existing dependency chain (in reverse order) is: [ 192.752630][ T6791] [ 192.752630][ T6791] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 192.759887][ T6791] __mutex_lock+0x120/0xaf0 [ 192.765022][ T6791] reiserfs_write_lock+0x75/0xd0 [ 192.770518][ T6791] reiserfs_mkdir+0x30c/0x970 [ 192.775747][ T6791] open_xa_dir+0x316/0x6f0 [ 192.780705][ T6791] xattr_lookup+0x22/0x2a0 [ 192.785655][ T6791] reiserfs_xattr_set_handle+0xf3/0xca0 [ 192.791733][ T6791] reiserfs_xattr_set+0x435/0x550 [ 192.797288][ T6791] __vfs_setxattr+0x3e0/0x420 [ 192.802495][ T6791] __vfs_setxattr_noperm+0x129/0x5e0 [ 192.808317][ T6791] vfs_setxattr+0x168/0x2f0 [ 192.813350][ T6791] setxattr+0x2b2/0x2d0 [ 192.818038][ T6791] __se_sys_fsetxattr+0x15e/0x1d0 [ 192.823600][ T6791] do_syscall_64+0x4c/0xa0 [ 192.828547][ T6791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.835063][ T6791] [ 192.835063][ T6791] -> #0 (&type->i_mutex_dir_key#9/3){+.+.}-{3:3}: [ 192.843690][ T6791] __lock_acquire+0x2cf8/0x7c50 [ 192.849082][ T6791] lock_acquire+0x1b4/0x490 [ 192.854122][ T6791] down_write_nested+0x39/0x60 [ 192.859440][ T6791] open_xa_dir+0x11e/0x6f0 [ 192.864392][ T6791] reiserfs_for_each_xattr+0x174/0x7b0 [ 192.870397][ T6791] reiserfs_delete_xattrs+0x1c/0x80 [ 192.876128][ T6791] reiserfs_evict_inode+0x221/0x490 [ 192.881861][ T6791] evict+0x485/0x870 [ 192.886291][ T6791] reiserfs_create+0x336/0x680 [ 192.891585][ T6791] path_openat+0x1187/0x2e70 [ 192.896700][ T6791] do_filp_open+0x1c1/0x3c0 [ 192.901744][ T6791] do_sys_openat2+0x142/0x490 [ 192.906950][ T6791] __x64_sys_openat+0x135/0x160 [ 192.912332][ T6791] do_syscall_64+0x4c/0xa0 [ 192.917275][ T6791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.923695][ T6791] [ 192.923695][ T6791] other info that might help us debug this: [ 192.923695][ T6791] [ 192.933926][ T6791] Possible unsafe locking scenario: [ 192.933926][ T6791] [ 192.941380][ T6791] CPU0 CPU1 [ 192.946743][ T6791] ---- ---- [ 192.952125][ T6791] lock(&sbi->lock); [ 192.956118][ T6791] lock(&type->i_mutex_dir_key#9/3); [ 192.964036][ T6791] lock(&sbi->lock); [ 192.970547][ T6791] lock(&type->i_mutex_dir_key#9/3); [ 192.975949][ T6791] [ 192.975949][ T6791] *** DEADLOCK *** [ 192.975949][ T6791] [ 192.984093][ T6791] 3 locks held by syz.4.702/6791: [ 192.989118][ T6791] #0: ffff8880767a6460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 192.998475][ T6791] #1: ffff888068271d60 (&type->i_mutex_dir_key#9){++++}-{3:3}, at: path_openat+0x7c2/0x2e70 [ 193.008671][ T6791] #2: ffff88807d7dc090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 193.018696][ T6791] [ 193.018696][ T6791] stack backtrace: [ 193.024596][ T6791] CPU: 1 PID: 6791 Comm: syz.4.702 Not tainted syzkaller #0 [ 193.031885][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.042009][ T6791] Call Trace: [ 193.045295][ T6791] [ 193.048233][ T6791] dump_stack_lvl+0x168/0x22e [ 193.052940][ T6791] ? load_image+0x3b0/0x3b0 [ 193.057486][ T6791] ? show_regs_print_info+0x12/0x12 [ 193.062699][ T6791] ? print_circular_bug+0x12b/0x1a0 [ 193.067922][ T6791] check_noncircular+0x274/0x310 [ 193.072877][ T6791] ? add_chain_block+0x940/0x940 [ 193.077861][ T6791] ? lockdep_lock+0xdc/0x1e0 [ 193.082470][ T6791] ? _find_first_zero_bit+0xcf/0x100 [ 193.087794][ T6791] __lock_acquire+0x2cf8/0x7c50 [ 193.092672][ T6791] ? verify_lock_unused+0x140/0x140 [ 193.097881][ T6791] ? is_bpf_text_address+0x22/0x2a0 [ 193.103127][ T6791] ? kernel_text_address+0x9c/0xd0 [ 193.108255][ T6791] ? __kernel_text_address+0x9/0x30 [ 193.113464][ T6791] ? unwind_get_return_address+0x49/0x80 [ 193.119105][ T6791] ? stack_trace_save+0xe0/0xe0 [ 193.123982][ T6791] ? arch_stack_walk+0xf2/0x140 [ 193.128858][ T6791] lock_acquire+0x1b4/0x490 [ 193.133397][ T6791] ? open_xa_dir+0x11e/0x6f0 [ 193.138026][ T6791] ? __might_sleep+0xd0/0xd0 [ 193.142687][ T6791] ? read_lock_is_recursive+0x10/0x10 [ 193.148108][ T6791] down_write_nested+0x39/0x60 [ 193.152896][ T6791] ? open_xa_dir+0x11e/0x6f0 [ 193.157503][ T6791] open_xa_dir+0x11e/0x6f0 [ 193.161935][ T6791] ? verify_lock_unused+0x140/0x140 [ 193.167158][ T6791] ? listxattr_filler+0x3f0/0x3f0 [ 193.172198][ T6791] ? truncate_inode_pages_range+0x34d/0xff0 [ 193.178105][ T6791] reiserfs_for_each_xattr+0x174/0x7b0 [ 193.183594][ T6791] ? mapping_evict_folio+0x520/0x520 [ 193.188893][ T6791] ? reiserfs_for_each_xattr+0x7b0/0x7b0 [ 193.194539][ T6791] ? reiserfs_delete_xattrs+0x80/0x80 [ 193.199922][ T6791] ? reiserfs_xattr_init+0x720/0x720 [ 193.205226][ T6791] ? dquot_initialize+0x20/0x20 [ 193.210085][ T6791] ? __rwlock_init+0x140/0x140 [ 193.214880][ T6791] reiserfs_delete_xattrs+0x1c/0x80 [ 193.220092][ T6791] reiserfs_evict_inode+0x221/0x490 [ 193.225311][ T6791] ? entry_points_to_object+0x7d0/0x7d0 [ 193.230872][ T6791] ? do_raw_spin_lock+0x11d/0x280 [ 193.235922][ T6791] ? do_raw_spin_unlock+0x11d/0x230 [ 193.241151][ T6791] ? entry_points_to_object+0x7d0/0x7d0 [ 193.246706][ T6791] evict+0x485/0x870 [ 193.250636][ T6791] ? __lock_acquire+0x7c50/0x7c50 [ 193.255679][ T6791] ? proc_nr_inodes+0x2f0/0x2f0 [ 193.260564][ T6791] ? do_raw_spin_unlock+0x11d/0x230 [ 193.265810][ T6791] ? _raw_spin_unlock+0x24/0x40 [ 193.270720][ T6791] ? iput+0x768/0x980 [ 193.274748][ T6791] reiserfs_create+0x336/0x680 [ 193.279537][ T6791] ? reiserfs_lookup+0x420/0x420 [ 193.284501][ T6791] ? inode_permission+0xef/0x480 [ 193.289457][ T6791] ? bpf_lsm_inode_create+0x5/0x10 [ 193.294588][ T6791] ? security_inode_create+0xb3/0x100 [ 193.299990][ T6791] ? reiserfs_lookup+0x420/0x420 [ 193.304950][ T6791] path_openat+0x1187/0x2e70 [ 193.309562][ T6791] ? do_filp_open+0x3c0/0x3c0 [ 193.314250][ T6791] do_filp_open+0x1c1/0x3c0 [ 193.318761][ T6791] ? vfs_tmpfile+0x480/0x480 [ 193.323390][ T6791] ? _raw_spin_unlock+0x24/0x40 [ 193.328263][ T6791] ? alloc_fd+0x58f/0x630 [ 193.332609][ T6791] do_sys_openat2+0x142/0x490 [ 193.337300][ T6791] ? do_sys_open+0xe0/0xe0 [ 193.341731][ T6791] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 193.347730][ T6791] ? lock_chain_count+0x20/0x20 [ 193.352637][ T6791] __x64_sys_openat+0x135/0x160 [ 193.357510][ T6791] do_syscall_64+0x4c/0xa0 [ 193.361941][ T6791] ? clear_bhb_loop+0x60/0xb0 [ 193.366623][ T6791] ? clear_bhb_loop+0x60/0xb0 [ 193.371329][ T6791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.377232][ T6791] RIP: 0033:0x7ff64e58eec9 [ 193.381669][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.401292][ T6791] RSP: 002b:00007ff64f512038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.409717][ T6791] RAX: ffffffffffffffda RBX: 00007ff64e7e5fa0 RCX: 00007ff64e58eec9 [ 193.417709][ T6791] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 193.425698][ T6791] RBP: 00007ff64e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.433699][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.441680][ T6791] R13: 00007ff64e7e6038 R14: 00007ff64e7e5fa0 R15: 00007ffcff3620e8 [ 193.449673][ T6791] [ 193.513371][ T6819] loop5: detected capacity change from 0 to 512 [ 193.553543][ T6819] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 193.576029][ T6819] EXT4-fs (loop5): invalid journal inode [ 193.589979][ T6819] EXT4-fs (loop5): can't get journal size [ 193.603524][ T6819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c198, mo2=0002] [ 193.618557][ T6819] System zones: 1-12, 13-13 [ 193.631976][ T6819] EXT4-fs (loop5): ext4_process_orphan: truncating inode 15 to 10 bytes [ 193.640852][ T6819] EXT4-fs (loop5): 1 truncate cleaned up [ 193.646641][ T6819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 193.713451][ T4850] EXT4-fs (loop5): unmounting filesystem. [ 194.283253][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.289625][ T1277] ieee802154 phy1 wpan1: encryption failed: -22