last executing test programs: 1m26.732497897s ago: executing program 1 (id=2494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getdents64(r0, 0x0, 0x22) 1m26.55341807s ago: executing program 1 (id=2499): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0xc10c3000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1m26.344437813s ago: executing program 1 (id=2503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m26.111815906s ago: executing program 1 (id=2505): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1m25.328847178s ago: executing program 1 (id=2511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1m24.204176675s ago: executing program 1 (id=2519): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) 1m23.90409959s ago: executing program 32 (id=2519): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) 59.447500727s ago: executing program 5 (id=2721): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'default'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6c5, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&'], 0x0, 0x0, 0x0) 59.192759421s ago: executing program 5 (id=2723): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) 58.845696056s ago: executing program 5 (id=2727): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 58.745974758s ago: executing program 5 (id=2729): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 58.670814899s ago: executing program 5 (id=2730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x1ff00000) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000080)=r0, 0x4) 58.132246027s ago: executing program 5 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 57.94114247s ago: executing program 33 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) 5.717845894s ago: executing program 2 (id=3245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.440203608s ago: executing program 4 (id=3269): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.130701063s ago: executing program 4 (id=3272): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.907366416s ago: executing program 4 (id=3274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) 2.788211588s ago: executing program 4 (id=3276): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90", 0xe}], 0x1}, 0x20000840) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.523870342s ago: executing program 3 (id=3280): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x1200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@debug}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000000380)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x161443, 0x12d) 2.455206843s ago: executing program 2 (id=3281): setgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getgroups(0x0, 0x0) 2.276162986s ago: executing program 3 (id=3282): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x21, 0x4cc, &(0x7f0000000b80)="$eJzs3c9vVFsdAPDvvf35+vpe+/Qt1KggomgIM+0ADWEFG40hJEbiygXUdmiaznSazhRpZVH+BxNJXOmf4MLEhQkr9+505wYXJqhEpSYuxtw7d0otHaihzpDO55Oc3HvuGfo9Z27uOcMXOieAoXU2InYjYjwi7kXETHE9KUrc6JTsdS9fPFrae/FoKYl2+85fk7w9uxYH/kzmw+JnTkbE974d8cPk9bjN7Z21xVqtulnUy636Rrm5vXNptb64Ul2prlcqC/MLc9cuX62c2FjP1H/5/Furt77/m19/6dnvdr/546xb00XbwXGcpM7Qx/bjZEYj4tb/I9gAjBTjGT90/YhbznsojYjPRMS5/PmfiZH8bgIAp1m7PRPtmYN1AOC0S/McWJKWilzAdKRpqdTJ4X0aU2mt0WxdvN/YWl/u5MpmYyy9v1qrzhW5wtkYS7L6fH7+ql45VL8cEZ9ExE8mPsjrpaVGbXmQH3wAYIh9eGj9/8dEZ/0HAE65yUF3AADoO+s/AAwf6z8ADB/rPwAMH+s/AAwf6z8ADB/rPwAMle/evp2V9l7x/dfLD7a31hoPLi1Xm2ul+tZSaamxuVFaaTRW8u/sqb/t59UajY35K7H1sNyqNlvl5vbO3Xpja711N/9e77vVsb6MCgB4k0/OPP1DEhG71z/ISxzYy8FaDadbOugOAAMzMugOAANjty8YXv6OD7xtv9ae/0Xoycn3BeiPC5+X/4dhJf8Pw0v+H4aX/D8Mr3Y7sec/AAwZOX7Av/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/246L0laKvYCn440LZUiPoqI2RhL7q/WqnMR8XFE/H5ibCKrzw+60wDAO0r/nMQ/i20Az08fbh1P/jWRHyPiRz+789OHi63W5nx2/W/711tPiuuVvnceADiG7jrdXce7Xr54tNQt/ezP85udzUWzuHtF6bSMxmh+nIzsw8nU35Oi3pFExMgJxN99HBGf644/jVfjT/LcyGyx8+nh+Fnsj048/sH3/3D89L/ip3lb55i9F589gb7AsHmazT83jnr+0jibH49+/ifzGerddee/vdfmv3R//hvpMf+dPW6MK7/9znivtscRXxg9Kn6yHz/pEf/8MeP/8YtfPterrf3ziAtxdPyDscqt+ka5ub1zabW+uFJdqa5XKgvzC3PXLl+tlPMcdbmbqX7dX65f/LhX/Gz8Uz3i53f+9nTP8X/tmOP/xb/v/eArb4j/ja8eff8/zY9Hv//Zmvj1Y8ZfnPpVz+27s/jLPcZf3P+b14vXHh7/xWPGf/anneVjvhQA6IPm9s7aYq1W3XTiZP+k+0nvfelP75P2TKen70t/Ts/JIGcloB9ePfSD7gkAAAAAAAAAAAAAANBLP36daNBjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6TwAAAP//pTjTPg==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2.241799516s ago: executing program 2 (id=3283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 2.090070429s ago: executing program 2 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 1.932255871s ago: executing program 2 (id=3285): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x6d) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) 1.607870376s ago: executing program 2 (id=3286): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) r1 = syz_io_uring_setup(0x3e4, &(0x7f00000020c0)={0x0, 0x6e9a, 0x1, 0x5, 0x59}, &(0x7f0000000040), &(0x7f0000002180), &(0x7f0000002080)) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000280)={{r1}, 0x0, 0x0, 0x0, 0xb}) 1.395497768s ago: executing program 3 (id=3288): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008000) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/75, 0x4b}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x2) 1.177833942s ago: executing program 0 (id=3290): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 792.204748ms ago: executing program 6 (id=3291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 791.869488ms ago: executing program 0 (id=3292): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xf}, &(0x7f0000000080)=0x8) 760.018578ms ago: executing program 6 (id=3293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 709.808749ms ago: executing program 6 (id=3294): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x38, r0, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x52}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x4004880) 651.8907ms ago: executing program 0 (id=3295): r0 = socket(0x18, 0x800, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{&(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000032c0)="ec3e5809090878828aabe787506003f99ff952deaba49d3659c80bb432fc5f134b72b9dfc11b6f98e2e3b94491bbd1be6a664c803c3bf240a540500663545efa43e6f00517bc368127", 0x49}], 0x1}}], 0x3, 0x20020800) 588.189881ms ago: executing program 6 (id=3296): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 505.038902ms ago: executing program 0 (id=3297): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 419.045783ms ago: executing program 6 (id=3298): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 418.800144ms ago: executing program 4 (id=3299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x122, 0x0, 0xff}]}) 311.585665ms ago: executing program 0 (id=3300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008807}, 0x20060000) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r0) 277.307756ms ago: executing program 3 (id=3301): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700ecb10000000000800000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xf5) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 179.919577ms ago: executing program 3 (id=3302): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 88.263348ms ago: executing program 6 (id=3303): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 71.241169ms ago: executing program 0 (id=3304): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) 44.326499ms ago: executing program 3 (id=3305): syz_mount_image$xfs(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0xa00086, &(0x7f0000000200)={[{@quota}]}, 0x1, 0x9759, &(0x7f000000e040)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) 0s ago: executing program 4 (id=3306): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22004d0, &(0x7f0000000100)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d372c696f636861727365743d63703935302c00ba266516f6fa4924d9fba264348e497675bf335802186301933c289a656051fe8b3ae727ac44171791dc80"], 0x4, 0x33a, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) kernel console output (not intermixed with test programs): dx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 297.393091][T10370] netlink: 'syz.1.2382': attribute type 7 has an invalid length. [ 297.596466][T10385] sctp: Trying to GSO but underlying device doesn't support it. [ 297.635977][T10327] BTRFS info (device loop3): enabling ssd optimizations [ 297.908913][ T6408] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 298.148892][ T4405] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 298.244980][T10383] loop4: detected capacity change from 0 to 32768 [ 298.383593][ T6408] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.399145][ T26] audit: type=1800 audit(1782417776.723:33): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2385" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 298.405884][ T6408] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.528413][ T5612] read_mapping_page failed! [ 298.533789][ T5612] ERROR: (device loop4): txCommit: [ 298.533789][ T5612] [ 298.549938][ T6408] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 298.564009][ T5612] jfs_write_inode: jfs_commit_inode failed! [ 298.570122][ T6408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.578997][ T4405] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 298.592534][ T4405] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.602147][ T6408] usb 2-1: SerialNumber: syz [ 298.628582][ T4405] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.648753][ T4405] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 298.669540][ T4405] usb 3-1: config 0 interface 0 has no altsetting 0 [ 298.676276][ T4405] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 298.686811][ T4405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.731725][ T4405] usb 3-1: config 0 descriptor?? [ 298.890449][T10409] overlayfs: conflicting lowerdir path [ 298.918203][ T4235] kernel write not supported for file /input/mice (pid: 4235 comm: kworker/0:5) [ 298.932020][ T6408] usb 2-1: 0:2 : does not exist [ 298.963435][ T6408] usb 2-1: USB disconnect, device number 16 [ 299.205329][ T4282] udevd[4282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.215781][ T4405] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 299.239698][ T4405] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 299.246775][ T4405] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 299.268681][ T4405] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 299.285976][ T4405] ryos 0003:1E7D:3138.0028: unknown main item tag 0x0 [ 299.318367][ T4405] ryos 0003:1E7D:3138.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 299.465180][ T4235] usb 3-1: USB disconnect, device number 24 [ 299.498908][ T4405] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.534232][T10429] loop3: detected capacity change from 0 to 512 [ 299.561371][T10431] loop1: detected capacity change from 0 to 1024 [ 299.616182][T10429] EXT4-fs (loop3): Ignoring removed nobh option [ 299.690576][T10429] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.2401: corrupted in-inode xattr [ 299.739318][ T4405] usb 5-1: Using ep0 maxpacket: 32 [ 299.747456][T10429] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2401: couldn't read orphan inode 15 (err -117) [ 299.763492][T10429] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,delalloc,debug_want_extra_isize=0x000000000000005a,usrjquota=,nouid32,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 299.859255][ T4405] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.872833][ T4405] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.883947][ T4405] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.064833][ T4405] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 300.066499][T10443] ubi31: attaching mtd0 [ 300.083276][T10443] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 300.086667][ T4405] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 300.108415][ T4405] usb 5-1: Product: syz [ 300.124476][ T4405] usb 5-1: Manufacturer: syz [ 300.136798][ T4405] usb 5-1: SerialNumber: syz [ 300.202994][ T4405] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input22 [ 300.226925][T10449] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2409'. [ 300.295479][T10453] loop2: detected capacity change from 0 to 128 [ 300.359181][T10453] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 300.411229][T10455] loop3: detected capacity change from 0 to 256 [ 300.422086][T10453] hpfs: filesystem error: improperly stopped [ 300.441196][T10453] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 300.458573][T10453] hpfs: You really don't want any checks? You are crazy... [ 300.473212][T10453] hpfs: hpfs_map_sector(): read error [ 300.483890][ T4407] usb 5-1: USB disconnect, device number 17 [ 300.497197][T10453] hpfs: code page support is disabled [ 300.505341][T10453] hpfs: hpfs_map_4sectors(): unaligned read [ 300.533951][T10453] hpfs: hpfs_map_4sectors(): unaligned read [ 300.564515][ T4407] appletouch 5-1:1.0: input: appletouch disconnected [ 300.617944][T10453] hpfs: filesystem error: unable to find root dir [ 300.672627][T10453] hpfs: hpfs_map_4sectors(): unaligned read [ 300.700205][T10453] hpfs: hpfs_map_sector(): read error [ 300.728911][T10453] hpfs: hpfs_map_4sectors(): unaligned read [ 300.832361][T10466] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 300.941092][ T4235] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 301.220852][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 301.231462][T10485] netlink: 'syz.0.2425': attribute type 15 has an invalid length. [ 301.240875][T10485] netlink: 'syz.0.2425': attribute type 25 has an invalid length. [ 301.257153][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'. [ 301.309004][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.330538][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.348857][ T4235] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 301.358381][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.370169][ T4235] usb 2-1: config 0 descriptor?? [ 301.454670][T10493] loop4: detected capacity change from 0 to 512 [ 301.522719][T10493] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.611471][T10496] loop3: detected capacity change from 0 to 256 [ 301.892322][ T4235] playstation 0003:054C:0DF2.0029: unknown main item tag 0x4 [ 301.907828][ T4235] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 301.951001][ T4235] playstation 0003:054C:0DF2.0029: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 302.108767][ T4235] playstation 0003:054C:0DF2.0029: Failed to retrieve feature with reportID 9: -71 [ 302.138937][ T4235] playstation 0003:054C:0DF2.0029: Failed to retrieve DualSense pairing info: -71 [ 302.148835][T10505] loop4: detected capacity change from 0 to 4096 [ 302.155609][ T4235] playstation 0003:054C:0DF2.0029: Failed to get MAC address from DualSense [ 302.165388][ T4235] playstation 0003:054C:0DF2.0029: Failed to create dualsense. [ 302.180048][ T4235] playstation: probe of 0003:054C:0DF2.0029 failed with error -71 [ 302.193154][ T4235] usb 2-1: USB disconnect, device number 17 [ 302.276490][T10505] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 302.400893][T10514] device veth0 entered promiscuous mode [ 302.423547][T10513] device veth0 left promiscuous mode [ 302.479789][ T4200] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 302.604317][T10516] fido_id[10516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 302.661511][T10522] loop3: detected capacity change from 0 to 512 [ 302.717369][T10522] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.799437][T10522] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 302.863717][T10522] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2441: invalid indirect mapped block 2683928664 (level 1) [ 302.892397][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.986290][T10522] EXT4-fs (loop3): Remounting filesystem read-only [ 303.008027][T10522] EXT4-fs (loop3): 1 truncate cleaned up [ 303.017492][T10522] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 303.037297][T10527] loop4: detected capacity change from 0 to 2048 [ 303.123897][T10522] EXT4-fs (loop3): can't change dax mount option while remounting [ 303.184248][T10527] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.2443: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 303.203814][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.236012][T10527] EXT4-fs (loop4): get root inode failed [ 303.245896][T10527] EXT4-fs (loop4): mount failed [ 303.368402][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.544012][T10518] loop2: detected capacity change from 0 to 32768 [ 303.626551][T10547] loop3: detected capacity change from 0 to 16 [ 303.695151][T10547] erofs: (device loop3): mounted with root inode @ nid 36. [ 303.734333][T10547] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 303.808915][T10547] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 303.868720][T10547] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 304.008393][T10554] rtc_cmos 00:00: Alarms can be up to one day in the future [ 304.311288][ T4266] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 304.394473][ T4235] rtc_cmos 00:00: Alarms can be up to one day in the future [ 304.422348][ T4235] rtc_cmos 00:00: Alarms can be up to one day in the future [ 304.443887][ T4235] rtc_cmos 00:00: Alarms can be up to one day in the future [ 304.462303][ T4235] rtc_cmos 00:00: Alarms can be up to one day in the future [ 304.478632][ T4235] rtc rtc0: __rtc_set_alarm: err=-22 [ 304.566235][T10552] loop1: detected capacity change from 0 to 32768 [ 304.576053][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 304.778657][ T4266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 304.828013][T10566] loop4: detected capacity change from 0 to 32768 [ 304.838764][ T4266] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 304.857939][ T4266] usb 3-1: can't read configurations, error -71 [ 304.965678][T10566] XFS (loop4): Mounting V5 Filesystem [ 305.099050][T10568] loop3: detected capacity change from 0 to 40427 [ 305.182514][T10568] F2FS-fs (loop3): invalid crc value [ 305.200152][T10566] XFS (loop4): Ending clean mount [ 305.216447][T10566] XFS (loop4): Quotacheck needed: Please wait. [ 305.225967][T10568] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 305.256241][T10583] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 305.336273][T10583] FAT-fs (loop1): Filesystem has been set read-only [ 305.400145][T10587] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 305.563328][T10566] XFS (loop4): Quotacheck: Done. [ 305.617352][T10568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 305.851409][ T4200] XFS (loop4): Unmounting Filesystem [ 305.921815][T10596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.018219][ T4190] handle_bad_sector: 111 callbacks suppressed [ 306.018243][ T4190] attempt to access beyond end of device [ 306.018243][ T4190] loop3: rw=2049, want=45104, limit=40427 [ 306.483505][T10612] set_capacity_and_notify: 2 callbacks suppressed [ 306.483524][T10612] loop2: detected capacity change from 0 to 128 [ 306.625994][T10612] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.935714][T10627] loop0: detected capacity change from 0 to 512 [ 306.960459][T10624] loop1: detected capacity change from 0 to 1024 [ 307.053076][T10627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 307.071879][T10624] EXT4-fs (loop1): Ignoring removed orlov option [ 307.101702][T10635] loop3: detected capacity change from 0 to 128 [ 307.228985][T10624] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 307.264020][T10627] EXT4-fs (loop0): 1 truncate cleaned up [ 307.270174][T10627] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 307.459471][T10647] EXT4-fs error (device loop1): __ext4_new_inode:1292: comm syz.1.2479: failed to insert inode 16: doubly allocated? [ 308.054152][T10672] vivid-001: disconnect [ 308.086208][T10671] vivid-001: reconnect [ 308.402251][T10682] loop3: detected capacity change from 0 to 1024 [ 308.445063][T10684] loop1: detected capacity change from 0 to 512 [ 308.534850][T10684] EXT4-fs (loop1): Test dummy encryption mode enabled [ 308.576947][T10684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 308.625019][ T26] audit: type=1326 audit(1782417786.953:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.2506" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecd3547e59 code=0x0 [ 308.667988][T10684] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.2505: bad orphan inode 131083 [ 308.799461][T10684] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000002,norecovery,,errors=continue. Quota mode: none. [ 308.867784][T10684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 308.914465][T10648] loop4: detected capacity change from 0 to 32768 [ 309.105051][T10648] XFS (loop4): Mounting V5 Filesystem [ 309.248120][T10648] XFS (loop4): Ending clean mount [ 309.449256][ T4200] XFS (loop4): Unmounting Filesystem [ 309.702194][T10717] loop0: detected capacity change from 0 to 256 [ 309.784819][T10717] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.816274][T10717] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 309.873702][T10717] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 309.902414][T10719] loop3: detected capacity change from 0 to 4096 [ 310.018914][T10719] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 310.055767][T10719] ntfs3: loop3: Failed to load $Extend. [ 310.566319][T10731] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2522'. [ 310.900863][T10743] loop3: detected capacity change from 0 to 512 [ 311.050806][T10743] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 311.477972][ T4246] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.761853][ T4246] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.870156][ T4246] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.935723][ T4246] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.970551][ T4406] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 312.062843][T10753] chnl_net:caif_netlink_parms(): no params data found [ 312.218429][T10778] loop2: detected capacity change from 0 to 8192 [ 312.250050][T10778] FAT-fs (loop2): Unrecognized mount option "dts" or missing value [ 312.358876][ T4406] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.369990][ T4406] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 312.380963][ T4406] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.394527][ T4406] usb 4-1: config 0 interface 0 has no altsetting 0 [ 312.402080][ T4406] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 312.422236][ T4406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.456859][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.474584][ T4406] usb 4-1: config 0 descriptor?? [ 312.498375][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.509150][T10770] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 312.564372][T10753] device bridge_slave_0 entered promiscuous mode [ 312.572637][T10790] [U] [ 312.576098][T10790] [U] [ 312.578983][T10790] [U] [ 312.581729][T10790] [U] [ 312.587410][T10790] [U] [ 312.590203][T10790] [U] [ 312.593689][T10790] [U] [ 312.596795][T10790] [U] [ 312.601960][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.617212][T10790] [U] [ 312.620013][T10790] [U] [ 312.622905][T10790] [U] [ 312.625737][T10790] [U] [ 312.639864][T10790] [U] [ 312.642672][T10790] [U] [ 312.645181][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.645411][T10790] [U] [ 312.655239][T10790] [U] [ 312.709256][T10753] device bridge_slave_1 entered promiscuous mode [ 312.768809][T10790] [U] [ 312.771599][T10790] [U] [ 312.774379][T10790] [U] [ 312.777150][T10790] [U] [ 312.782854][T10753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.807024][T10790] [U] [ 312.873319][T10753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.952375][T10803] program syz.2.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.971615][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.025132][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.046887][T10753] team0: Port device team_slave_0 added [ 313.065577][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.082369][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.107032][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.120124][T10753] team0: Port device team_slave_1 added [ 313.133704][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.176386][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.226980][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.249100][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.268185][T10753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.268195][ T4406] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0 [ 313.300493][ T4406] kovaplus 0003:1E7D:2D50.002A: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 313.321709][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.375196][ T4406] usb 4-1: USB disconnect, device number 16 [ 313.410320][ T6409] Bluetooth: hci2: command 0x0409 tx timeout [ 313.444573][T10753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.620581][T10812] fido_id[10812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 313.714230][T10753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.739623][T10753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.899301][T10753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.954697][T10828] loop3: detected capacity change from 0 to 512 [ 314.095285][T10828] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 314.120718][T10828] EXT4-fs (loop3): orphan cleanup on readonly fs [ 314.176756][T10828] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2558: invalid indirect mapped block 4294967295 (level 1) [ 314.211813][T10828] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2558: invalid indirect mapped block 4294967295 (level 1) [ 314.232508][T10753] device hsr_slave_0 entered promiscuous mode [ 314.287210][T10832] loop2: detected capacity change from 0 to 8192 [ 314.309036][T10828] EXT4-fs (loop3): 2 truncates cleaned up [ 314.314924][T10828] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,min_batch_time=0x0000000000000007,jqfmt=vfsv0,delalloc,,errors=continue. Quota mode: writeback. [ 314.333403][T10753] device hsr_slave_1 entered promiscuous mode [ 314.342859][T10753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.375681][T10753] Cannot create hsr debugfs directory [ 314.386550][T10832] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 314.421192][T10832] REISERFS (device loop2): using ordered data mode [ 314.427904][T10832] reiserfs: using flush barriers [ 314.442002][T10832] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 314.488186][T10832] REISERFS (device loop2): checking transaction log (loop2) [ 314.582507][T10832] REISERFS (device loop2): Using r5 hash to sort names [ 314.614043][T10832] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 314.969088][T10823] loop0: detected capacity change from 0 to 32768 [ 315.262564][T10848] loop3: detected capacity change from 0 to 4096 [ 315.402266][T10848] EXT4-fs (loop3): Test dummy encryption mode enabled [ 315.438950][T10848] EXT4-fs (loop3): Can't change test_dummy_encryption on remount [ 315.533733][T10848] binder: 10847:10848 ioctl c018620c 200000000000 returned -22 [ 315.539951][ T5189] Bluetooth: hci2: command 0x041b tx timeout [ 315.573732][T10753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.732661][T10860] loop0: detected capacity change from 0 to 1024 [ 315.819070][T10753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.851783][T10753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.912497][ T4246] IPVS: stopping backup sync thread 8953 ... [ 315.920814][T10753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.944948][T10862] loop4: detected capacity change from 0 to 4096 [ 316.084652][T10870] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.029226][T10753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.118737][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.127448][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.193037][T10753] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.285920][ T4246] device hsr_slave_0 left promiscuous mode [ 317.301258][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.307903][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.368478][ T4246] device hsr_slave_1 left promiscuous mode [ 317.375808][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.393902][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.415979][ T4246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.467253][ T4246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.493600][ T4246] device bridge_slave_1 left promiscuous mode [ 317.512508][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.578853][ T4246] device bridge_slave_0 left promiscuous mode [ 317.605507][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.622303][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 317.765489][ T4246] device veth1_macvtap left promiscuous mode [ 317.776561][ T4246] device veth0_macvtap left promiscuous mode [ 317.783116][ T4178] hid-generic 0005:4C4A:4155.002B: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 317.796877][ T4246] device veth1_vlan left promiscuous mode [ 317.805297][ T4246] device veth0_vlan left promiscuous mode [ 318.529083][ T4246] team0 (unregistering): Port device team_slave_1 removed [ 318.566275][ T4246] team0 (unregistering): Port device team_slave_0 removed [ 318.612138][ T4246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.653950][ T4246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.815408][ T4246] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 318.904478][ T4246] bond0 (unregistering): Released all slaves [ 319.037369][T10935] IPVS: ip_vs_add_dest(): server weight less than zero [ 319.114560][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.137169][T10937] loop4: detected capacity change from 0 to 1024 [ 319.156048][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.184004][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.191338][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.211746][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.221531][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.243312][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.250756][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.346215][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.388148][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.416161][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.474126][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.527458][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.600590][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.629930][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.660142][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.689709][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.698768][ T5189] Bluetooth: hci2: command 0x0419 tx timeout [ 319.717171][T10944] loop3: detected capacity change from 0 to 256 [ 319.739753][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.811263][T10753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.830416][ T26] audit: type=1804 audit(1782417798.163:35): pid=10944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2593" name="/newroot/565/file0/file0" dev="loop3" ino=1048719 res=1 errno=0 [ 319.890272][T10753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.917934][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.935419][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.375335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.388915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.422891][T10753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.640403][T10942] loop4: detected capacity change from 0 to 32768 [ 321.049062][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2600'. [ 321.139621][T10980] netlink: 580 bytes leftover after parsing attributes in process `syz.4.2600'. [ 321.463176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.514823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.592106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.618283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.669985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.709843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.738517][T10753] device veth0_vlan entered promiscuous mode [ 321.800848][T10753] device veth1_vlan entered promiscuous mode [ 321.915820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 321.925943][T10851] Set syz1 is full, maxelem 65536 reached [ 321.939868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 321.967196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.991611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.034327][T10753] device veth0_macvtap entered promiscuous mode [ 322.078375][T10753] device veth1_macvtap entered promiscuous mode [ 322.173845][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.222208][T11008] input: syz0 as /devices/virtual/input/input24 [ 322.238531][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.262733][T11003] loop2: detected capacity change from 0 to 4096 [ 322.275683][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.326512][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.398550][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.432012][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.452725][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.499327][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.554266][T10753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.600355][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.621598][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.695978][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.754527][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.818354][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.863443][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.902458][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.932450][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.980073][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.014224][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.052666][T10753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.096195][T10753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.110441][T11035] loop0: detected capacity change from 0 to 8 [ 323.134956][T10753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.202662][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.247507][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.315672][T10753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.370908][T10753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.398219][T10753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.421136][T10753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.577606][T11048] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2624'. [ 323.850110][ T517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.858207][ T517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.954975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.973295][T11067] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 324.047605][T11067] device dummy0 entered promiscuous mode [ 324.099186][T11067] team0: Port device dummy0 added [ 324.131388][ T4406] kernel write not supported for file /uinput (pid: 4406 comm: kworker/1:9) [ 324.145631][T11072] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 324.331909][T11071] loop3: detected capacity change from 0 to 4096 [ 324.347778][T11072] team0: Port device dummy0 removed [ 324.380493][T11072] device dummy0 left promiscuous mode [ 324.414298][T11072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 324.457441][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.483253][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.521575][T11071] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 324.594204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.760262][ T9] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 324.782829][ T4190] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 324.791893][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 324.848632][ T4190] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 324.855393][ T144] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 324.873531][ T4190] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 325.238207][T11103] loop3: detected capacity change from 0 to 32768 [ 325.451022][T11113] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 326.038324][T11136] loop5: detected capacity change from 0 to 512 [ 326.122617][T11136] EXT4-fs (loop5): unable to read superblock [ 326.179866][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2653'. [ 326.211608][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2653'. [ 326.384782][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2654'. [ 326.577703][T11105] loop2: detected capacity change from 0 to 32768 [ 326.728687][T11105] ERROR: (device loop2): diAllocBit: iag inconsistent [ 326.728687][T11105] [ 326.892776][T11105] ERROR: (device loop2): remounting filesystem as read-only [ 326.933448][T11105] ialloc: diAlloc returned -5! [ 327.214363][T11166] loop5: detected capacity change from 0 to 4096 [ 327.231672][T11134] loop3: detected capacity change from 0 to 32768 [ 327.372938][T11177] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.434365][ T26] audit: type=1800 audit(1782417805.763:36): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2661" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 327.490403][T11134] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 328.106889][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 328.458906][ T4405] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 328.547680][T11199] loop3: detected capacity change from 0 to 16 [ 328.585988][T11181] loop0: detected capacity change from 0 to 32768 [ 328.604586][T11140] loop4: detected capacity change from 0 to 65536 [ 328.697752][T11199] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.710356][ T4405] usb 6-1: Using ep0 maxpacket: 32 [ 328.741935][T11181] JBD2: Ignoring recovery information on journal [ 328.783888][T11199] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 328.826204][T11199] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 328.830293][ T4405] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 328.844454][ T4405] usb 6-1: config 0 has no interface number 0 [ 328.850817][ T4405] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.876933][ T4405] usb 6-1: config 0 interface 85 has no altsetting 0 [ 328.897463][T11140] XFS (loop4): Mounting V5 Filesystem [ 328.903736][T11199] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 40959 of nid 36 [ 328.914949][T11199] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 328.925842][T11199] attempt to access beyond end of device [ 328.925842][T11199] loop3: rw=524288, want=67108888, limit=16 [ 328.940274][T11199] attempt to access beyond end of device [ 328.940274][T11199] loop3: rw=524288, want=736, limit=16 [ 329.035516][T11181] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 329.045163][ T4405] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 329.078629][ T4405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.086823][ T4405] usb 6-1: Product: syz [ 329.142870][ T4405] usb 6-1: Manufacturer: syz [ 329.147578][ T4405] usb 6-1: SerialNumber: syz [ 329.159086][T11181] binfmt_misc: register: failed to install interpreter file ./file1 [ 329.232116][ T4405] usb 6-1: config 0 descriptor?? [ 329.246075][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 329.312773][T11188] loop2: detected capacity change from 0 to 32768 [ 329.361653][T11140] XFS (loop4): Ending clean mount [ 329.376673][T11188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2662 (11188) [ 329.432150][T11219] loop0: detected capacity change from 0 to 128 [ 329.485078][T11188] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 329.517488][ T4200] XFS (loop4): Unmounting Filesystem [ 329.529629][T11188] BTRFS info (device loop2): using free space tree [ 329.536363][T11188] BTRFS info (device loop2): has skinny extents [ 329.898654][T11188] BTRFS info (device loop2): enabling ssd optimizations [ 330.079016][ T4405] appletouch 6-1:0.85: Geyser mode initialized. [ 330.086807][ T4405] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input25 [ 330.198636][ C1] appletouch 6-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 330.473341][T11251] loop0: detected capacity change from 0 to 128 [ 330.506908][ T6409] usb 6-1: USB disconnect, device number 2 [ 330.546622][T11251] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 330.611429][T11251] hpfs: filesystem error: improperly stopped [ 330.646200][T11251] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 330.686009][T11251] hpfs: You really don't want any checks? You are crazy... [ 330.723314][T11251] hpfs: Code page index out of array [ 330.775485][T11251] hpfs: code page support is disabled [ 330.808755][T11251] hpfs: hpfs_map_4sectors(): unaligned read [ 330.814940][T11251] hpfs: hpfs_map_4sectors(): unaligned read [ 330.848895][T11251] hpfs: filesystem error: unable to find root dir [ 330.930337][T11251] hpfs: hpfs_map_4sectors(): unaligned read [ 331.104862][T11263] loop4: detected capacity change from 0 to 1024 [ 331.522810][ T6409] appletouch 6-1:0.85: input: appletouch disconnected [ 331.720656][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2685'. [ 331.720676][T11284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2686'. [ 331.773942][T11287] netlink: 'syz.2.2687': attribute type 3 has an invalid length. [ 331.843871][T11289] loop4: detected capacity change from 0 to 64 [ 331.853525][T11284] sch_fq: defrate 0 ignored. [ 332.308058][T11306] program syz.3.2695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 332.800479][T11320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.850876][T11320] bridge0: port 3(bond1) entered blocking state [ 332.873883][T11320] bridge0: port 3(bond1) entered disabled state [ 332.884413][T11320] device bond1 entered promiscuous mode [ 332.891199][T11320] bridge0: port 3(bond1) entered blocking state [ 332.897621][T11320] bridge0: port 3(bond1) entered forwarding state [ 332.965493][ T517] bridge0: port 3(bond1) entered disabled state [ 333.046156][T11331] loop5: detected capacity change from 0 to 128 [ 333.058732][ T4235] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 333.126903][T11331] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 333.166131][T11331] attempt to access beyond end of device [ 333.166131][T11331] loop5: rw=2051, want=1041, limit=128 [ 333.438780][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 333.469183][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 333.497974][T11303] loop2: detected capacity change from 0 to 40427 [ 333.509841][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 333.524135][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 333.620228][T11303] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 333.640419][T11303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 333.679022][T11303] F2FS-fs (loop2): invalid crc value [ 333.703424][ T4235] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 333.723012][T11303] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 333.748573][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.773449][ T4235] usb 4-1: Product: syz [ 333.781321][T11348] loop5: detected capacity change from 0 to 256 [ 333.793326][ T4235] usb 4-1: Manufacturer: syz [ 333.798019][ T4235] usb 4-1: SerialNumber: syz [ 333.819341][ T4235] usb 4-1: config 0 descriptor?? [ 333.869809][ T4235] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 333.888117][T11348] FAT-fs (loop5): Directory bread(block 64) failed [ 333.927790][T11348] FAT-fs (loop5): Directory bread(block 65) failed [ 333.948854][T11348] FAT-fs (loop5): Directory bread(block 66) failed [ 333.968742][T11348] FAT-fs (loop5): Directory bread(block 67) failed [ 333.998674][T11348] FAT-fs (loop5): Directory bread(block 68) failed [ 334.005307][T11348] FAT-fs (loop5): Directory bread(block 69) failed [ 334.015566][T11303] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 334.022829][T11348] FAT-fs (loop5): Directory bread(block 70) failed [ 334.028771][T11303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 334.038367][T11348] FAT-fs (loop5): Directory bread(block 71) failed [ 334.047726][T11348] FAT-fs (loop5): Directory bread(block 72) failed [ 334.054757][T11348] FAT-fs (loop5): Directory bread(block 73) failed [ 334.123121][ T4235] scsi host1: usb-storage 4-1:0.0 [ 334.139466][ T4405] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 334.150294][ T4235] usb 4-1: USB disconnect, device number 17 [ 334.452492][ T4197] attempt to access beyond end of device [ 334.452492][ T4197] loop2: rw=2049, want=45104, limit=40427 [ 334.508746][ T4405] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 334.520394][T11362] Bluetooth: hci5: Frame reassembly failed (-84) [ 334.550183][ T4405] usb 5-1: config 0 has no interface number 0 [ 334.556631][ T4405] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.590552][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 334.619805][T11364] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2717'. [ 334.729120][ T4405] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 334.738245][ T4405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.770263][ T4405] usb 5-1: Product: syz [ 334.774557][ T4405] usb 5-1: Manufacturer: syz [ 334.788797][ T4405] usb 5-1: SerialNumber: syz [ 334.819553][ T4405] usb 5-1: config 0 descriptor?? [ 334.866669][ T4405] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 335.054253][T11379] loop5: detected capacity change from 0 to 1024 [ 335.227167][ T5612] hfsplus: b-tree write err: -5, ino 25 [ 335.233240][ T5612] hfsplus: b-tree write err: -5, ino 4 [ 335.256978][ T5612] hfsplus: b-tree write err: -5, ino 2 [ 335.282087][ T5612] hfsplus: b-tree write err: -5, ino 26 [ 335.313787][ T5612] hfsplus: b-tree write err: -5, ino 27 [ 335.338357][T11386] netlink: 'syz.2.2716': attribute type 1 has an invalid length. [ 335.358514][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 335.375151][ T6409] usb 5-1: USB disconnect, device number 18 [ 335.426039][T11389] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2724'. [ 335.445252][ T6409] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 335.983517][T11416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2732'. [ 336.213423][T11425] loop3: detected capacity change from 0 to 4096 [ 336.291277][ T517] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.363237][T11428] loop4: detected capacity change from 0 to 4096 [ 336.408984][ T517] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.424458][T11431] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.454256][T11428] EXT4-fs (loop4): inline encryption not supported [ 336.512541][T11428] EXT4-fs (loop4): Test dummy encryption mode enabled [ 336.545400][T11428] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 336.578678][ T6409] Bluetooth: hci5: command 0x1003 tx timeout [ 336.592402][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 336.606985][ T517] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.609098][T11428] System zones: 0-5 [ 336.672912][T11428] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 336.792337][ T517] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.804428][ T26] audit: type=1800 audit(1782417815.143:37): pid=11428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2739" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 336.831313][T11428] fs-verity: sha512 using implementation "sha512-avx2" [ 337.264756][T11451] tmpfs: Bad value for 'size' [ 337.277979][T11451] overlayfs: unrecognized mount option "verity=on" or missing value [ 337.559760][ T6408] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 337.645748][T11470] loop2: detected capacity change from 0 to 128 [ 337.696347][T11470] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 337.745075][T11470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.763019][T11441] chnl_net:caif_netlink_parms(): no params data found [ 337.770223][ T4404] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 337.918128][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.926423][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.934931][T11441] device bridge_slave_0 entered promiscuous mode [ 337.958387][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.970351][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.979107][T11441] device bridge_slave_1 entered promiscuous mode [ 338.042004][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.057139][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.119657][T11441] team0: Port device team_slave_0 added [ 338.161112][T11441] team0: Port device team_slave_1 added [ 338.175768][ T6408] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 338.179706][ T4404] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.199023][ T6408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.212216][ T6408] usb 5-1: Product: syz [ 338.216475][ T6408] usb 5-1: Manufacturer: syz [ 338.226656][ T6408] usb 5-1: SerialNumber: syz [ 338.247432][ T6408] usb 5-1: config 0 descriptor?? [ 338.298802][ T4404] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 338.312324][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.324883][ T4404] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 338.325263][ T6408] hub 5-1:0.0: bad descriptor, ignoring hub [ 338.347199][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.374192][ T4404] usb 4-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.379375][ T6408] hub: probe of 5-1:0.0 failed with error -5 [ 338.400502][ T4404] usb 4-1: config 66 interface 0 has no altsetting 0 [ 338.418794][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.457429][T11441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.471539][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.530572][T11441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.579189][ T4404] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 338.594587][ T4404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.633237][ T4404] usb 4-1: Product: syz [ 338.637506][ T4404] usb 4-1: Manufacturer: syz [ 338.655100][ T4404] usb 4-1: SerialNumber: syz [ 338.668665][ T6409] Bluetooth: hci5: command 0x1001 tx timeout [ 338.682340][ T4204] Bluetooth: hci5: sending frame failed (-49) [ 338.711723][ T6408] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 338.726489][T11441] device hsr_slave_0 entered promiscuous mode [ 338.736522][T11441] device hsr_slave_1 entered promiscuous mode [ 338.743622][T11441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.752578][T11441] Cannot create hsr debugfs directory [ 338.852767][ T6408] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 338.871716][ T6408] dib0700: firmware download failed at 7 with -22 [ 338.929959][ T6408] usb 5-1: USB disconnect, device number 19 [ 338.948586][ T4405] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 338.978815][ T6409] Bluetooth: hci2: command 0x0409 tx timeout [ 339.036730][ T4404] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 339.065503][ T517] device hsr_slave_0 left promiscuous mode [ 339.079556][ T517] device hsr_slave_1 left promiscuous mode [ 339.086667][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.096177][ T4404] usb 4-1: USB disconnect, device number 18 [ 339.105287][ T517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.114289][ T517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.131838][ T517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.147956][ T517] device bond1 left promiscuous mode [ 339.157342][ T517] bridge0: port 3(bond1) entered disabled state [ 339.169366][ T517] device bridge_slave_1 left promiscuous mode [ 339.175898][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.188612][ T4405] usb 3-1: Using ep0 maxpacket: 8 [ 339.189603][ T517] device bridge_slave_0 left promiscuous mode [ 339.200957][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.216351][ T517] device veth1_macvtap left promiscuous mode [ 339.224180][ T517] device veth0_macvtap left promiscuous mode [ 339.239586][ T517] device veth1_vlan left promiscuous mode [ 339.245766][ T517] device veth0_vlan left promiscuous mode [ 339.309788][ T4405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.330251][ T4405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.351010][ T4405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 339.389659][ T4405] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 339.402647][ T4405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.413055][ T4405] usb 3-1: config 0 descriptor?? [ 339.516122][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'. [ 339.554782][ T517] bond1 (unregistering): Released all slaves [ 339.825112][ T517] team0 (unregistering): Port device team_slave_1 removed [ 339.849515][ T517] team0 (unregistering): Port device team_slave_0 removed [ 339.880651][ T517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.891734][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x3 [ 339.904419][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.912103][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.919465][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.926515][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.934214][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.942091][ T4405] elecom 0003:056E:00FE.002C: unknown main item tag 0x0 [ 339.949605][ T4405] elecom 0003:056E:00FE.002C: collection stack underflow [ 339.956906][ T4405] elecom 0003:056E:00FE.002C: item 0 2 0 12 parsing failed [ 339.965066][ T4405] elecom: probe of 0003:056E:00FE.002C failed with error -22 [ 340.005193][ T517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.056586][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'. [ 340.067247][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2763'. [ 340.122426][T11272] usb 3-1: USB disconnect, device number 27 [ 340.215479][ T517] bond0 (unregistering): Released all slaves [ 340.287433][T11513] tap0: tun_chr_ioctl cmd 2147767519 [ 340.537508][T11441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.557243][T11441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 340.597296][T11441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 340.638082][T11441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 340.738986][ T4404] Bluetooth: hci5: command 0x1009 tx timeout [ 340.820643][ T4404] hid-generic 0005:4C4A:0440.002D: item fetching failed at offset 2/3 [ 340.860547][ T4404] hid-generic: probe of 0005:4C4A:0440.002D failed with error -22 [ 340.915988][T11544] device ipvlan0 entered promiscuous mode [ 340.952630][T11544] device ipvlan0 left promiscuous mode [ 341.035394][T11531] loop3: detected capacity change from 0 to 32768 [ 341.065695][ T4404] Bluetooth: hci2: command 0x041b tx timeout [ 341.151093][T11441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.184174][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.216406][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.264130][T11441] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.326780][T11531] XFS (loop3): Mounting V5 Filesystem [ 341.364929][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.378162][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.392892][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.400338][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.418380][T11531] XFS (loop3): Ending clean mount [ 341.445177][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 341.467708][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.493860][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.537176][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.544915][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.629538][ T4190] XFS (loop3): Unmounting Filesystem [ 341.706348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.723188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.794184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.831227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.906878][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.956181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.989781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.003648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.034462][ T6409] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 342.043084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.060458][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.080369][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.109727][T11441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.509618][ T6409] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 342.536943][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.546068][ T6409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.558597][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.570811][ T6409] usb 5-1: config 0 descriptor?? [ 342.590163][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.059093][ T6409] [drm:udl_init] *ERROR* Selecting channel failed [ 343.082734][ T6409] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 343.107205][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 343.125288][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 343.130063][ T6409] [drm] Initialized udl on minor 2 [ 343.138843][ T4405] Bluetooth: hci2: command 0x040f tx timeout [ 343.178740][ T6409] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 343.187432][ T6409] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 343.212293][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 343.234384][ T6409] usb 5-1: USB disconnect, device number 20 [ 343.241722][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 343.269574][T11272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 343.282755][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 343.312412][T11272] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 343.331353][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 343.333287][T11272] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 343.380104][T11441] device veth0_vlan entered promiscuous mode [ 343.437705][T11441] device veth1_vlan entered promiscuous mode [ 343.476482][T11619] loop2: detected capacity change from 0 to 1024 [ 343.521993][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 343.565617][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.599981][T11441] device veth0_macvtap entered promiscuous mode [ 343.640423][T11619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.676139][T11441] device veth1_macvtap entered promiscuous mode [ 343.797825][T11629] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2783'. [ 343.840821][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.902876][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.924185][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.963098][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.997833][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.027602][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.053476][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.096409][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.143335][T11441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.178093][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.205756][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.231589][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.251033][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.288235][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.318521][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.348836][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.378527][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.406025][ T6408] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 344.408806][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.471121][T11619] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 344.473388][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.508013][T11619] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 423 with error 28 [ 344.525819][T11619] EXT4-fs (loop2): This should not happen!! Data will be lost [ 344.525819][T11619] [ 344.543760][T11441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.552753][T11619] EXT4-fs (loop2): Total free blocks count 0 [ 344.561183][T11619] EXT4-fs (loop2): Free/Dirty block details [ 344.567589][T11619] EXT4-fs (loop2): free_blocks=68451041280 [ 344.576780][T11619] EXT4-fs (loop2): dirty_blocks=432 [ 344.585346][T11640] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2786'. [ 344.594740][T11619] EXT4-fs (loop2): Block reservation details [ 344.601462][T11619] EXT4-fs (loop2): i_reserved_data_blocks=27 [ 344.607030][T11441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.640438][T11441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.649952][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.674147][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.688633][ T6408] usb 4-1: Using ep0 maxpacket: 16 [ 344.724157][T11441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.784623][T11441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.811606][T11441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.828189][T11441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.837662][ T6408] usb 4-1: config 0 has no interfaces? [ 345.067449][ T6408] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 345.097810][ T6408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.138549][ T6408] usb 4-1: Product: syz [ 345.164762][ T6408] usb 4-1: Manufacturer: syz [ 345.184271][ T6408] usb 4-1: SerialNumber: syz [ 345.219115][ T4403] Bluetooth: hci2: command 0x0419 tx timeout [ 345.255762][ T6408] r8152-cfgselector 4-1: config 0 descriptor?? [ 345.298917][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.330186][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.363358][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.437019][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.477482][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.495212][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.598287][T11670] loop4: detected capacity change from 0 to 256 [ 345.609224][ T6408] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 345.617773][ T4246] usb 4-1: config 0 descriptor?? [ 345.775731][T11670] FAT-fs (loop4): Directory bread(block 64) failed [ 345.806193][T11680] loop6: detected capacity change from 0 to 256 [ 345.813900][ T6409] usb 4-1: USB disconnect, device number 19 [ 345.820301][ T4246] usb 4-1: can't set config #0, error -71 [ 345.826209][T11670] FAT-fs (loop4): Directory bread(block 65) failed [ 345.856670][T11670] FAT-fs (loop4): Directory bread(block 66) failed [ 345.878622][T11670] FAT-fs (loop4): Directory bread(block 67) failed [ 345.885333][T11670] FAT-fs (loop4): Directory bread(block 68) failed [ 345.968618][T11670] FAT-fs (loop4): Directory bread(block 69) failed [ 345.975384][T11670] FAT-fs (loop4): Directory bread(block 70) failed [ 346.021366][T11670] FAT-fs (loop4): Directory bread(block 71) failed [ 346.040106][T11670] FAT-fs (loop4): Directory bread(block 72) failed [ 346.055199][T11670] FAT-fs (loop4): Directory bread(block 73) failed [ 346.157326][T11690] loop0: detected capacity change from 0 to 1024 [ 346.189124][T11689] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2801'. [ 346.672478][T11710] loop4: detected capacity change from 0 to 256 [ 346.737422][T11716] loop2: detected capacity change from 0 to 128 [ 346.760967][T11710] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e9a16ef, utbl_chksum : 0xe619d30d) [ 346.889423][T11716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 347.023913][ T26] audit: type=1800 audit(1782417825.353:38): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2810" name="file1" dev="loop4" ino=1048728 res=0 errno=0 [ 347.044340][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.044426][T11716] ext4 filesystem being mounted at /528/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.084129][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.138287][T11716] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 347.357885][T11713] loop3: detected capacity change from 0 to 32768 [ 347.577231][T11713] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 347.963864][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 348.477954][T11779] loop6: detected capacity change from 0 to 256 [ 348.555119][T11779] exfat: Deprecated parameter 'utf8' [ 348.560896][T11779] exfat: Deprecated parameter 'utf8' [ 348.655340][T11779] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 348.916271][T11798] loop2: detected capacity change from 0 to 128 [ 348.943803][T11797] loop6: detected capacity change from 0 to 2048 [ 349.053457][T11798] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 349.099682][T11797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 349.194019][T11798] hpfs: filesystem error: improperly stopped [ 349.221489][T11798] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 349.292280][T11798] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 349.346792][T11798] hpfs: You really don't want any checks? You are crazy... [ 349.369636][T11798] hpfs: hpfs_map_sector(): read error [ 349.382189][T11798] hpfs: code page support is disabled [ 349.395064][T11798] hpfs: hpfs_map_4sectors(): unaligned read [ 349.397939][T11757] loop0: detected capacity change from 0 to 32768 [ 349.428584][T11798] hpfs: hpfs_map_4sectors(): unaligned read [ 349.441625][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.465670][T11798] hpfs: filesystem error: unable to find root dir [ 349.583192][T11757] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 349.853939][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 349.995909][T11785] loop4: detected capacity change from 0 to 32768 [ 350.025439][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.044914][T11832] loop0: detected capacity change from 0 to 512 [ 350.108239][T11832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 350.143743][T11785] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 350.196274][T11834] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 350.216961][T11832] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.2845: bad orphan inode 131083 [ 350.265065][T11832] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 350.330343][T11834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.415322][T11847] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 350.593247][ T4200] ocfs2: Unmounting device (7,4) on (node local) [ 350.948781][ T4407] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 351.162617][T11876] set_capacity_and_notify: 1 callbacks suppressed [ 351.162635][T11876] loop0: detected capacity change from 0 to 1024 [ 351.244577][T11881] program syz.4.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.310688][T11884] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2863'. [ 351.336473][T11876] EXT4-fs (loop0): Ignoring removed bh option [ 351.358902][ T4407] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 351.388394][ T4407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.428588][T11876] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,usrquota,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,nogrpid,. Quota mode: writeback. [ 351.471177][ T4407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.499068][ T4407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 351.517801][T11893] loop6: detected capacity change from 0 to 256 [ 351.528213][ T4407] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 351.537697][ T4407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.558904][ T4407] usb 3-1: config 0 descriptor?? [ 351.604625][ T26] audit: type=1800 audit(1782418085.938:39): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2861" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 351.615370][T11893] exfat: Deprecated parameter 'utf8' [ 351.625122][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.717057][T11893] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 351.882782][T11902] loop3: detected capacity change from 0 to 1024 [ 352.066749][ T4407] holtek_kbd 0003:04D9:A055.002E: unbalanced delimiter at end of report description [ 352.091997][ T4407] holtek_kbd: probe of 0003:04D9:A055.002E failed with error -22 [ 352.100299][ T6408] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 352.360612][ T4401] usb 3-1: USB disconnect, device number 28 [ 352.548867][ T6408] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 352.562329][ T6408] usb 5-1: config 0 has no interface number 0 [ 352.754307][ T6408] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 352.787181][ T6408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.814929][ T6408] usb 5-1: Product: syz [ 352.832240][ T6408] usb 5-1: Manufacturer: syz [ 352.849770][ T6408] usb 5-1: SerialNumber: syz [ 352.866231][ T6408] usb 5-1: config 0 descriptor?? [ 352.935541][T11943] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2882'. [ 353.064511][T11949] program syz.6.2883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.154557][ T6408] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 353.171727][ T6408] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 353.206418][T11912] loop0: detected capacity change from 0 to 32768 [ 353.212090][ T6408] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 353.244378][ T6408] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 353.279146][ T6408] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 353.835648][ T6408] usb 5-1: USB disconnect, device number 21 [ 353.875339][ T6408] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 353.968985][ T6408] keyspan 5-1:0.133: device disconnected [ 354.190806][T11980] loop2: detected capacity change from 0 to 512 [ 354.228766][T11985] Attempt to restore checkpoint with obsolete wellknown handles [ 354.278833][T11980] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 354.449403][T11980] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 3: comm syz.2.2893: lblock 0 mapped to illegal pblock 3 (length 1) [ 354.516721][T11962] loop6: detected capacity change from 0 to 32768 [ 354.553602][T11980] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2893: error -117 reading directory block [ 354.567728][T11996] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 3: comm syz.2.2893: lblock 0 mapped to illegal pblock 3 (length 1) [ 354.624118][T11996] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2893: error -117 reading directory block [ 354.660780][T11962] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 354.678960][ T4401] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 354.856373][T11441] ocfs2: Unmounting device (7,6) on (node local) [ 355.176390][T12030] tap0: tun_chr_ioctl cmd 1074025676 [ 355.187620][T12030] tap0: owner set to 0 [ 355.208044][ T4401] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 355.235613][ T4401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.278348][ T4401] usb 4-1: Product: syz [ 355.288187][ T4401] usb 4-1: Manufacturer: syz [ 355.318665][ T4401] usb 4-1: SerialNumber: syz [ 355.335248][ T4401] usb 4-1: config 0 descriptor?? [ 355.622089][ T4401] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 355.800833][ T4405] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 355.838335][T12000] loop0: detected capacity change from 0 to 32768 [ 355.917374][T12000] XFS (loop0): Mounting V5 Filesystem [ 355.953552][T12053] loop6: detected capacity change from 0 to 8192 [ 356.024150][T12000] XFS (loop0): Ending clean mount [ 356.036740][T12053] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 356.068636][ T4405] usb 5-1: Using ep0 maxpacket: 16 [ 356.075622][T12053] REISERFS (device loop6): using ordered data mode [ 356.124550][T12053] reiserfs: using flush barriers [ 356.130375][ T4401] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 356.151288][T12053] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 356.177994][ T4401] usb 4-1: USB disconnect, device number 20 [ 356.189024][ T4405] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.228012][ T4405] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 356.238997][T12053] REISERFS (device loop6): checking transaction log (loop6) [ 356.246845][ T4405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.266723][T12053] REISERFS (device loop6): Using r5 hash to sort names [ 356.284657][ T4405] usb 5-1: config 0 descriptor?? [ 356.290582][T12053] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 356.307989][ T4189] XFS (loop0): Unmounting Filesystem [ 356.770038][ T4405] hid (null): report_id 0 is invalid [ 356.787621][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0xd [ 356.826667][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 356.869071][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 356.898754][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 356.906331][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 356.958603][ T4405] nzxt-kraken2 0003:1E71:170E.002F: unknown main item tag 0x0 [ 356.997500][ T4405] nzxt-kraken2 0003:1E71:170E.002F: report_id 0 is invalid [ 357.024453][ T4405] nzxt-kraken2 0003:1E71:170E.002F: item 0 0 1 8 parsing failed [ 357.061429][ T4405] nzxt-kraken2 0003:1E71:170E.002F: hid parse failed with -22 [ 357.082892][ T4405] nzxt-kraken2: probe of 0003:1E71:170E.002F failed with error -22 [ 357.139034][ T4235] usb 5-1: USB disconnect, device number 22 [ 357.745807][T12120] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 358.020859][T12132] loop0: detected capacity change from 0 to 512 [ 358.134592][T12132] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.226963][T12145] loop4: detected capacity change from 0 to 512 [ 358.243336][T12132] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.676682][ T26] audit: type=1326 audit(1782418093.008:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9cbb9e59 code=0x7ffc0000 [ 358.770022][T12164] loop0: detected capacity change from 0 to 256 [ 358.873627][T12164] exfat: Deprecated parameter 'utf8' [ 358.894493][ T26] audit: type=1326 audit(1782418093.088:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9cbb9e59 code=0x7ffc0000 [ 358.999302][T12164] exfat: Deprecated parameter 'utf8' [ 359.025171][T12164] exfat: Deprecated parameter 'utf8' [ 359.044327][ T26] audit: type=1326 audit(1782418093.088:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9cbb9e59 code=0x7ffc0000 [ 359.132520][T12164] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d) [ 359.191790][T12175] binder: 12170:12175 ioctl c0306201 0 returned -14 [ 359.226336][ T26] audit: type=1326 audit(1782418093.088:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1b9cbb9e59 code=0x7ffc0000 [ 359.226387][ T26] audit: type=1326 audit(1782418093.088:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b9cbb9bc2 code=0x7ffc0000 [ 359.226437][ T26] audit: type=1326 audit(1782418093.088:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1b9cb7a68e code=0x7ffc0000 [ 359.226476][ T26] audit: type=1326 audit(1782418093.088:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b9cbb9c87 code=0x7ffc0000 [ 359.226515][ T26] audit: type=1326 audit(1782418093.108:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b9cb7a68e code=0x7ffc0000 [ 359.226559][ T26] audit: type=1326 audit(1782418093.108:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b9cbb9aeb code=0x7ffc0000 [ 359.226596][ T26] audit: type=1326 audit(1782418093.118:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.0.2940" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9cbb9e59 code=0x7ffc0000 [ 359.410785][T12192] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2950'. [ 359.744681][T12208] program syz.0.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.778790][T12211] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2958'. [ 359.859127][ T4235] Bluetooth: hci2: command 0x0405 tx timeout [ 360.158746][T12231] loop2: detected capacity change from 0 to 128 [ 360.259308][T12231] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 360.259369][T12231] hpfs: filesystem error: improperly stopped [ 360.259388][T12231] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 360.259407][T12231] hpfs: You really don't want any checks? You are crazy... [ 360.259700][T12231] hpfs: hpfs_map_sector(): read error [ 360.259713][T12231] hpfs: code page support is disabled [ 360.259929][T12231] hpfs: hpfs_map_4sectors(): unaligned read [ 360.259976][T12231] hpfs: hpfs_map_4sectors(): unaligned read [ 360.259989][T12231] hpfs: filesystem error: unable to find root dir [ 360.269466][T12231] hpfs: hpfs_map_4sectors(): unaligned read [ 361.334402][T12220] loop4: detected capacity change from 0 to 32768 [ 361.556550][T12220] JBD2: Ignoring recovery information on journal [ 361.620791][T12254] loop2: detected capacity change from 0 to 32768 [ 361.721081][T12254] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 361.776466][T12254] JBD2: Ignoring recovery information on journal [ 361.779285][T12220] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 361.917025][T12251] loop0: detected capacity change from 0 to 32768 [ 361.945177][T12254] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 362.059879][T12220] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 362.131218][T12251] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 362.179286][T12220] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 362.190231][T12220] OCFS2: File system is now read-only. [ 362.197251][T12220] (syz.4.2962,12220,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 362.212787][T12251] JBD2: Ignoring recovery information on journal [ 362.221500][T12251] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 362.231231][T12251] JBD2: bad block at offset 32 [ 362.267588][T12220] (syz.4.2962,12220,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 362.277881][T12220] (syz.4.2962,12220,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 362.298677][T12220] (syz.4.2962,12220,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 362.307412][T12220] (syz.4.2962,12220,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 362.336989][T12220] (syz.4.2962,12220,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 362.356355][T12220] (syz.4.2962,12220,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 362.377489][T12251] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 362.390770][T12220] (syz.4.2962,12220,0):ocfs2_mknod:385 ERROR: status = -30 [ 362.401661][T12220] (syz.4.2962,12220,0):ocfs2_mknod:502 ERROR: status = -30 [ 362.428675][T12220] (syz.4.2962,12220,0):ocfs2_create:676 ERROR: status = -30 [ 362.632668][ T4200] ocfs2: Unmounting device (7,4) on (node local) [ 362.700935][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 362.830962][T12254] (syz.2.2975,12254,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 362.892732][T12254] (syz.2.2975,12254,1):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 363.037690][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 363.237869][T12325] loop6: detected capacity change from 0 to 256 [ 363.333135][T12325] FAT-fs (loop6): Directory bread(block 64) failed [ 363.364188][T12325] FAT-fs (loop6): Directory bread(block 65) failed [ 363.402726][T12325] FAT-fs (loop6): Directory bread(block 66) failed [ 363.451443][T12325] FAT-fs (loop6): Directory bread(block 67) failed [ 363.469160][T12332] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3002'. [ 363.478330][T12325] FAT-fs (loop6): Directory bread(block 68) failed [ 363.492164][T12325] FAT-fs (loop6): Directory bread(block 69) failed [ 363.512549][T12325] FAT-fs (loop6): Directory bread(block 70) failed [ 363.553178][T12325] FAT-fs (loop6): Directory bread(block 71) failed [ 363.578111][T12325] FAT-fs (loop6): Directory bread(block 72) failed [ 363.598925][T12325] FAT-fs (loop6): Directory bread(block 73) failed [ 363.655002][T12338] loop0: detected capacity change from 0 to 256 [ 363.699387][T12338] exfat: Deprecated parameter 'utf8' [ 363.719891][T12338] exfat: Deprecated parameter 'utf8' [ 363.734425][T12338] exfat: Bad value for 'errors' [ 363.968730][ T6409] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.981656][T12349] loop4: detected capacity change from 0 to 128 [ 364.114974][T12349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.127291][T12349] ext4 filesystem being mounted at /631/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.379231][ T6409] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 364.408305][ T6409] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.579109][ T6409] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 364.608696][ T6409] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 364.616795][ T6409] usb 3-1: Manufacturer: syz [ 364.660753][ T6409] usb 3-1: config 0 descriptor?? [ 364.731062][ T6409] igorplugusb 3-1:0.0: incorrect number of endpoints [ 364.952762][ T4409] usb 3-1: USB disconnect, device number 29 [ 365.030629][T12394] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 365.277367][ T4235] kernel read not supported for file /video9 (pid: 4235 comm: kworker/0:5) [ 365.350360][T12412] loop4: detected capacity change from 0 to 1024 [ 365.597440][T12417] mkiss: ax0: crc mode is auto. [ 365.856179][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'. [ 366.390086][T12445] loop3: detected capacity change from 0 to 4096 [ 366.400231][T12457] loop4: detected capacity change from 0 to 128 [ 366.490128][T12457] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.503166][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 366.534927][T12445] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 366.555377][T12460] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3052'. [ 366.566385][T12445] ntfs3: loop3: Failed to load $Extend. [ 366.897174][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3057'. [ 366.972538][T12474] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3057'. [ 367.139071][T12481] loop2: detected capacity change from 0 to 2048 [ 367.166129][T12484] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.199955][T12484] syzkaller1: linktype set to 6 [ 367.218377][T12481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.416828][T12490] loop2: detected capacity change from 0 to 256 [ 367.448305][T12492] loop0: detected capacity change from 0 to 128 [ 367.526425][T12490] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 367.533321][T12492] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 367.663704][T12492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.674329][T12490] exFAT-fs (loop2): hint_cluster is invalid (17) [ 367.767868][T12497] loop4: detected capacity change from 0 to 1024 [ 367.861052][T12497] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 367.975966][T12497] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 368.028661][T12497] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.215625][T12497] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.3066: lblock 0 mapped to illegal pblock 0 (length 6) [ 368.250605][T12499] ntfs3: Unknown parameter 'windows_names' [ 368.629995][T12514] set_capacity_and_notify: 1 callbacks suppressed [ 368.630013][T12514] loop4: detected capacity change from 0 to 1024 [ 368.731941][ T4190] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 368.865504][T12519] loop2: detected capacity change from 0 to 256 [ 368.935319][T12519] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.953116][T12519] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 368.992461][T12519] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 369.330498][T12529] loop0: detected capacity change from 0 to 512 [ 369.359078][T12532] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 369.395508][T12532] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 369.424144][T12529] EXT4-fs (loop0): inline encryption not supported [ 369.425496][T12532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.490452][ T4235] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 369.522796][T12532] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 369.546188][T12529] EXT4-fs (loop0): 1 orphan inode deleted [ 369.560447][T12532] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 369.584511][T12529] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,data_err=abort,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 369.619482][T12532] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 369.661070][T12532] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 369.694775][T12532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.710185][T12532] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 369.726780][T12532] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 369.735518][T12529] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.3078: Directory hole found for htree leaf block 0 [ 369.749917][T12532] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 369.848856][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.879265][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.900720][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.932525][ T4235] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.953246][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.978601][ T4235] usb 4-1: config 0 descriptor?? [ 370.124331][T12539] loop6: detected capacity change from 0 to 32768 [ 370.170430][T12549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3087'. [ 370.210850][T12539] XFS (loop6): Mounting V5 Filesystem [ 370.272359][T12539] XFS (loop6): Ending clean mount [ 370.293678][T12539] XFS (loop6): Quotacheck needed: Please wait. [ 370.305818][T12559] loop0: detected capacity change from 0 to 512 [ 370.384554][T12559] FAT-fs (loop0): Directory bread(block 199916) failed [ 370.433770][T12559] FAT-fs (loop0): Directory bread(block 199917) failed [ 370.454560][T12559] FAT-fs (loop0): Directory bread(block 199918) failed [ 370.509986][T12559] FAT-fs (loop0): Directory bread(block 199919) failed [ 370.517116][T12559] FAT-fs (loop0): Directory bread(block 199920) failed [ 370.525691][ T4235] plantronics 0003:047F:FFFF.0030: unbalanced delimiter at end of report description [ 370.545818][ T4235] plantronics 0003:047F:FFFF.0030: parse failed [ 370.555130][T12559] FAT-fs (loop0): Directory bread(block 199921) failed [ 370.566118][ T4235] plantronics: probe of 0003:047F:FFFF.0030 failed with error -22 [ 370.577250][T12559] FAT-fs (loop0): Directory bread(block 199922) failed [ 370.612533][T12559] FAT-fs (loop0): Directory bread(block 199923) failed [ 370.635396][T12539] XFS (loop6): Quotacheck: Done. [ 370.677213][ T4235] usb 4-1: USB disconnect, device number 21 [ 370.773106][T11441] XFS (loop6): Unmounting Filesystem [ 370.827589][ T4409] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 371.141440][ T4409] usb 5-1: Using ep0 maxpacket: 32 [ 371.283648][ T4409] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.324900][ T4409] usb 5-1: config 0 has no interface number 0 [ 371.360782][ T4409] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.424515][ T4409] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.458723][ T4409] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 371.498980][ T4409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.534493][ T4409] usb 5-1: config 0 descriptor?? [ 372.187860][T12625] loop0: detected capacity change from 0 to 1024 [ 372.252647][ T4409] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.0031/input/input28 [ 372.274152][T12625] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 372.302254][T12625] EXT4-fs (loop0): inline encryption not supported [ 372.336087][T12625] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 372.374359][ T4409] uclogic 0003:28BD:0094.0031: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 372.418396][T12625] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nomblk_io_submit,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 372.525740][ T4407] usb 5-1: USB disconnect, device number 23 [ 372.579869][T12625] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.608871][T12641] mmap: syz.6.3105 (12641) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 372.724934][T12625] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.3110: lblock 0 mapped to illegal pblock 0 (length 5) [ 372.755249][T12637] fido_id[12637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 372.888978][T12625] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 372.962668][T12625] EXT4-fs (loop0): This should not happen!! Data will be lost [ 372.962668][T12625] [ 373.450207][T12666] netlink: 2044 bytes leftover after parsing attributes in process `syz.0.3120'. [ 373.491585][T12666] netlink: 73 bytes leftover after parsing attributes in process `syz.0.3120'. [ 373.943573][T12680] loop0: detected capacity change from 0 to 2048 [ 373.953677][T12653] loop2: detected capacity change from 0 to 32768 [ 374.096932][T12653] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 374.096932][T12653] [ 374.150038][T12659] loop4: detected capacity change from 0 to 32768 [ 374.171197][T12653] ERROR: (device loop2): remounting filesystem as read-only [ 374.208071][T12659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3119 (12659) [ 374.242578][T12687] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 374.242578][T12687] [ 374.290918][T12653] jfs_create: dtInsert returned -EIO [ 374.325590][T12687] ERROR: (device loop2): dbDiscardAG: -EIO [ 374.325590][T12687] [ 374.326054][T12653] ERROR: (device loop2): jfs_create: [ 374.326054][T12653] [ 374.363186][T12659] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 374.412685][T12659] BTRFS info (device loop4): using free space tree [ 374.427487][T12659] BTRFS info (device loop4): has skinny extents [ 374.708734][T12659] BTRFS info (device loop4): enabling ssd optimizations [ 374.808401][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 374.858518][ T26] audit: type=1800 audit(1782418109.138:73): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3119" name="file3" dev="loop4" ino=261 res=0 errno=0 [ 375.313948][T12693] loop3: detected capacity change from 0 to 32768 [ 375.806031][T12693] XFS (loop3): Mounting V5 Filesystem [ 375.957188][T12693] XFS (loop3): Ending clean mount [ 376.010211][ T4190] XFS (loop3): Unmounting Filesystem [ 376.266767][T12778] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3139'. [ 376.381507][T12783] device gretap0 entered promiscuous mode [ 376.396966][T12781] loop0: detected capacity change from 0 to 1024 [ 376.404024][T12783] device vlan2 entered promiscuous mode [ 376.494834][T12781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.975879][T12805] loop9: detected capacity change from 0 to 7 [ 377.025287][T12805] Dev loop9: unable to read RDB block 7 [ 377.055126][T12805] loop9: unable to read partition table [ 377.076764][T12805] loop9: partition table beyond EOD, truncated [ 377.107432][T12805] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 377.145269][T12812] loop4: detected capacity change from 0 to 24 [ 377.286507][T12817] loop3: detected capacity change from 0 to 1024 [ 377.375120][T12817] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 377.393324][T12817] EXT4-fs (loop3): inline encryption not supported [ 377.413695][T12817] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 377.510893][T12817] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,nomblk_io_submit,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 377.534091][T12817] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.588567][ T4405] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 377.677023][T12781] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 377.710017][T12781] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 329 with error 28 [ 377.751769][T12781] EXT4-fs (loop0): This should not happen!! Data will be lost [ 377.751769][T12781] [ 377.815760][T12781] EXT4-fs (loop0): Total free blocks count 0 [ 377.830726][T12781] EXT4-fs (loop0): Free/Dirty block details [ 377.837064][T12781] EXT4-fs (loop0): free_blocks=68451041280 [ 377.908771][T12781] EXT4-fs (loop0): dirty_blocks=336 [ 377.914614][T12781] EXT4-fs (loop0): Block reservation details [ 377.926854][T12781] EXT4-fs (loop0): i_reserved_data_blocks=21 [ 377.959106][ T4405] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 377.984349][ T4405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 378.021116][ T4405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 378.048998][ T4405] usb 3-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 378.058131][ T4405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.091365][ T4405] usb 3-1: config 0 descriptor?? [ 378.099389][ T4404] Bluetooth: hci2: command 0x0405 tx timeout [ 378.109096][T12814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 378.590351][ T4405] wacom 0003:056A:00E5.0032: ignoring exceeding usage max [ 378.615311][ T4405] wacom 0003:056A:00E5.0032: unknown main item tag 0x0 [ 378.630016][ T4405] wacom 0003:056A:00E5.0032: unknown main item tag 0x2 [ 378.646626][ T4405] wacom 0003:056A:00E5.0032: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.2-1/input0 [ 378.741636][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.748140][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.793984][ T4214] usb 3-1: USB disconnect, device number 30 [ 378.904787][T12861] fido_id[12861]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00E5.0032/report_descriptor': No such file or directory [ 378.933270][T12869] loop4: detected capacity change from 0 to 1024 [ 379.189534][T12878] loop4: detected capacity change from 0 to 256 [ 379.848964][T12893] loop3: detected capacity change from 0 to 1024 [ 379.887643][T12893] EXT4-fs (loop3): Ignoring removed oldalloc option [ 379.926275][T12893] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,usrquota,barrier,block_validity,journal_dev=0x0000000000000002,nodelalloc,resuid=0x0000000000000000,oldalloc,,errors=continue. Quota mode: writeback. [ 379.961372][T12893] ext4 filesystem being mounted at /686/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.992932][ T4178] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 380.021183][T12892] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: comm syz.3.3170: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.082403][T12893] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.3170: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.112167][T12901] loop4: detected capacity change from 0 to 512 [ 380.133590][T12901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.150818][T12893] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: comm syz.3.3170: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.177962][T12901] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.3173: bad orphan inode 131083 [ 380.195642][T12901] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 380.385766][T12906] loop4: detected capacity change from 0 to 512 [ 380.434958][ T4178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.458400][ T4178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.471622][T12910] loop6: detected capacity change from 0 to 512 [ 380.478952][ T4178] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 380.488286][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.511751][T12906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.527865][T12910] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 380.543586][ T4178] usb 3-1: config 0 descriptor?? [ 380.556564][T12906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 380.614898][T12910] EXT4-fs (loop6): 1 truncate cleaned up [ 380.622917][T12910] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,noblock_validity,. Quota mode: none. [ 380.639096][T12906] System zones: 1-12 [ 380.661964][T12906] EXT4-fs (loop4): 1 truncate cleaned up [ 380.667697][T12906] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,nodiscard,,errors=continue. Quota mode: none. [ 380.697988][T12910] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.3177: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 380.817371][T12910] EXT4-fs (loop6): Remounting filesystem read-only [ 380.836684][T12910] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 380.847442][T12910] EXT4-fs (loop6): Remounting filesystem read-only [ 380.854676][T12910] EXT4-fs warning (device loop6): ext4_rename_delete:3792: inode #2: comm syz.6.3177: Deleting old file: nlink 4, error=-117 [ 381.052263][ T4178] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 381.062055][ T4178] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 381.071114][ T4178] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 381.109853][ T4178] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 381.117348][ T4178] playstation 0003:054C:0DF2.0033: unknown main item tag 0x0 [ 381.175638][ T4178] playstation 0003:054C:0DF2.0033: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 381.289160][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3183'. [ 381.309303][ T4178] playstation 0003:054C:0DF2.0033: Invalid byte count transferred, expected 20 got 0 [ 381.335049][ T4178] playstation 0003:054C:0DF2.0033: Failed to retrieve DualSense pairing info: -22 [ 381.354103][ T4178] playstation 0003:054C:0DF2.0033: Failed to get MAC address from DualSense [ 381.386061][ T4178] playstation 0003:054C:0DF2.0033: Failed to create dualsense. [ 381.408251][ T4178] playstation: probe of 0003:054C:0DF2.0033 failed with error -22 [ 381.419367][T12919] loop4: detected capacity change from 0 to 32768 [ 381.502275][ T26] audit: type=1800 audit(1782418115.838:74): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3180" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 381.544789][ T4235] usb 3-1: USB disconnect, device number 31 [ 381.772074][T12928] fido_id[12928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 381.979213][ T4178] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 382.231054][ T4178] usb 5-1: Using ep0 maxpacket: 8 [ 382.369047][ T4178] usb 5-1: config 0 has no interfaces? [ 382.374783][ T4178] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 382.404396][ T4178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.443491][ T4178] usb 5-1: config 0 descriptor?? [ 382.525377][T12948] loop6: detected capacity change from 0 to 32768 [ 382.604728][T12949] loop0: detected capacity change from 0 to 32768 [ 382.622918][T12948] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 382.622918][T12948] [ 382.674741][T12949] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3194 (12949) [ 382.682403][T12948] ERROR: (device loop6): remounting filesystem as read-only [ 382.720548][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 382.740590][T12949] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 382.750460][T12948] ialloc: diAlloc returned -5! [ 382.763475][T12949] BTRFS info (device loop0): force zlib compression, level 3 [ 382.783776][T12948] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 382.783776][T12948] [ 382.792441][ T4235] usb 5-1: USB disconnect, device number 24 [ 382.809834][T12949] BTRFS info (device loop0): turning on flush-on-commit [ 382.858600][T12949] BTRFS info (device loop0): max_inline at 4096 [ 382.864941][T12949] BTRFS info (device loop0): using free space tree [ 382.880159][T12949] BTRFS info (device loop0): has skinny extents [ 382.992540][T12951] loop2: detected capacity change from 0 to 32768 [ 383.082663][T12953] loop3: detected capacity change from 0 to 40427 [ 383.109765][T12953] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 383.134629][T12953] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 383.149519][T12951] XFS (loop2): Mounting V5 Filesystem [ 383.174957][T12949] BTRFS info (device loop0): enabling ssd optimizations [ 383.183783][T12953] F2FS-fs (loop3): invalid crc value [ 383.216452][T12953] F2FS-fs (loop3): Found nat_bits in checkpoint [ 383.339613][T12951] XFS (loop2): Ending clean mount [ 383.534330][T12986] program syz.4.3199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.620228][T12953] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 383.637811][T12953] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 384.112089][ T4197] XFS (loop2): Unmounting Filesystem [ 384.123926][ T4292] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4292) [ 384.398844][ T6410] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 384.645086][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3207'. [ 384.688879][ T6410] usb 5-1: Using ep0 maxpacket: 32 [ 384.834455][ T6410] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.862929][ T6410] usb 5-1: config 0 has no interface number 0 [ 385.094119][ T6410] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 385.108547][ T6410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.117422][ T6410] usb 5-1: Product: syz [ 385.138921][ T6410] usb 5-1: Manufacturer: syz [ 385.143621][ T6410] usb 5-1: SerialNumber: syz [ 385.170951][ T6410] usb 5-1: config 0 descriptor?? [ 385.240877][ T6410] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 385.253926][ T6410] usb 5-1: selecting invalid altsetting 1 [ 385.268532][ T6410] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 385.309147][ T6410] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 385.322704][ T6410] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 385.332542][ T6410] usb 5-1: media controller created [ 385.352713][ T6410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.532087][T13038] loop3: detected capacity change from 0 to 1024 [ 385.557748][T13040] loop2: detected capacity change from 0 to 2048 [ 385.577695][T13038] EXT4-fs (loop3): Ignoring removed nobh option [ 385.642704][T13041] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.924431][ T6407] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 386.318839][ T6407] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 386.327170][ T6407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 105, changing to 4 [ 386.339237][ T6407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 27758, setting to 1023 [ 386.408618][ T4235] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 386.529012][ T6410] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 386.539798][ T6410] zl10353_read_register: readreg error (reg=127, ret==-110) [ 386.558969][ T6407] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 386.575263][ T6407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.589592][ T6407] usb 4-1: Product: syz [ 386.594740][ T6407] usb 4-1: Manufacturer: syz [ 386.600128][T12991] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 386.613108][ T6407] usb 4-1: SerialNumber: syz [ 386.624632][ T6410] usb 5-1: USB disconnect, device number 25 [ 386.636982][ T6407] usb 4-1: config 0 descriptor?? [ 386.690066][ T6407] hub 4-1:0.0: bad descriptor, ignoring hub [ 386.697354][ T6407] hub: probe of 4-1:0.0 failed with error -5 [ 386.709365][ T6407] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 386.731715][ T6407] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 386.750188][ T6407] usbtouchscreen: probe of 4-1:0.0 failed with error -22 [ 386.808795][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 386.848760][ T4235] usb 3-1: not running at top speed; connect to a high speed hub [ 387.028899][ T6410] usb 4-1: USB disconnect, device number 22 [ 387.088873][ T4235] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 387.098224][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.106391][ T4235] usb 3-1: Product: syz [ 387.110904][ T4235] usb 3-1: Manufacturer: syz [ 387.115558][ T4235] usb 3-1: SerialNumber: syz [ 387.560657][T13063] loop0: detected capacity change from 0 to 32768 [ 387.581063][T13068] hugetlbfs: Bad value 'g' for mount option 'size' [ 387.581063][T13068] [ 387.701227][ T4235] usb 3-1: 1:1 : unsupported sample bitwidth 3 in 230 bytes [ 387.718135][T13063] JBD2: Ignoring recovery information on journal [ 387.726371][T13063] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 387.734746][T13063] JBD2: bad block at offset 32 [ 387.759067][ T4235] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 387.772297][T13063] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 387.789287][T13063] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 387.810128][T13063] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 387.820232][T13063] OCFS2: File system is now read-only. [ 387.826378][T13063] (syz.0.3229,13063,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 387.834417][T13063] (syz.0.3229,13063,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 387.843314][T13063] (syz.0.3229,13063,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 387.851269][T13063] (syz.0.3229,13063,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 387.859967][T13063] (syz.0.3229,13063,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 387.869557][T13063] (syz.0.3229,13063,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 387.877608][T13063] (syz.0.3229,13063,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 387.885968][T13063] (syz.0.3229,13063,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 387.894763][T13063] (syz.0.3229,13063,0):ocfs2_mknod:298 ERROR: status = -5 [ 387.902666][T13063] (syz.0.3229,13063,0):ocfs2_mknod:502 ERROR: status = -5 [ 387.909935][T13063] (syz.0.3229,13063,0):ocfs2_create:676 ERROR: status = -5 [ 387.978624][ T4235] usb 3-1: unit 36 not found! [ 387.983458][ T4235] usb 3-1: unit 0 not found! [ 388.041485][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 388.108617][T13077] loop3: detected capacity change from 0 to 4096 [ 388.230507][ T4235] usb 3-1: USB disconnect, device number 32 [ 388.264754][T13081] netlink: 'syz.2.3237': attribute type 3 has an invalid length. [ 388.298806][T13081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3237'. [ 388.418038][ T5145] udevd[5145]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 389.071810][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3249'. [ 389.433190][T13103] loop0: detected capacity change from 0 to 32768 [ 389.736892][ T6407] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 389.758611][T13134] loop3: detected capacity change from 0 to 1024 [ 389.786469][T13136] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 389.884960][T13134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.152103][T13149] netlink: 27 bytes leftover after parsing attributes in process `syz.6.3262'. [ 390.361906][ T6407] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 390.389144][ T6407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.407456][ T6407] usb 3-1: Product: syz [ 390.417584][ T6407] usb 3-1: Manufacturer: syz [ 390.428783][ T6407] usb 3-1: SerialNumber: syz [ 390.446766][ T6407] usb 3-1: config 0 descriptor?? [ 390.524846][ T6407] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 390.716377][T13134] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 390.739026][T13134] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 496 with error 28 [ 390.752243][T13134] EXT4-fs (loop3): This should not happen!! Data will be lost [ 390.752243][T13134] [ 390.762635][T13134] EXT4-fs (loop3): Total free blocks count 0 [ 390.770510][T13134] EXT4-fs (loop3): Free/Dirty block details [ 390.776753][T13134] EXT4-fs (loop3): free_blocks=68451041280 [ 390.783107][T13134] EXT4-fs (loop3): dirty_blocks=496 [ 390.788843][T13134] EXT4-fs (loop3): Block reservation details [ 390.794978][T13134] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 390.830152][T13127] loop4: detected capacity change from 0 to 32768 [ 390.866257][T13131] loop0: detected capacity change from 0 to 40427 [ 390.942231][T13131] F2FS-fs (loop0): invalid crc value [ 390.975842][T13131] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 391.024678][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 391.057015][T13166] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'. [ 391.179475][T13131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 391.289959][ T4189] attempt to access beyond end of device [ 391.289959][ T4189] loop0: rw=2049, want=45104, limit=40427 [ 391.398965][ T6407] gspca_sunplus: reg_w_riv err -71 [ 391.404941][ T6407] sunplus: probe of 3-1:0.0 failed with error -71 [ 391.426512][ T6407] usb 3-1: USB disconnect, device number 33 [ 391.798093][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3278'. [ 391.866312][T13192] loop6: detected capacity change from 0 to 1024 [ 391.915978][ T6410] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 391.957433][T13195] loop3: detected capacity change from 0 to 512 [ 392.009862][T13192] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.208923][ T6410] usb 5-1: Using ep0 maxpacket: 32 [ 392.257810][T13202] loop3: detected capacity change from 0 to 512 [ 392.349191][ T6410] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 392.358141][ T6410] usb 5-1: config 0 has no interface number 0 [ 392.395343][T13202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 392.433524][T13202] ext4 filesystem being mounted at /711/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.511744][T13210] loop2: detected capacity change from 0 to 512 [ 392.570643][ T6410] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 392.586390][T13202] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #12: comm syz.3.3282: corrupted xattr block 6 [ 392.602286][ T6410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.611969][T13210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.645693][ T6410] usb 5-1: Product: syz [ 392.656808][ T6410] usb 5-1: Manufacturer: syz [ 392.662618][T13210] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.3285: bad orphan inode 131083 [ 392.685354][ T6410] usb 5-1: SerialNumber: syz [ 392.698052][ T6410] usb 5-1: config 0 descriptor?? [ 392.729385][T13202] overlayfs: failed to get origin (-117) [ 392.742311][T13202] EXT4-fs error (device loop3): ext4_xattr_block_find:1857: inode #12: comm syz.3.3282: corrupted xattr block 6 [ 392.760536][ T6410] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 392.770939][T13210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.802832][T13202] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 392.851849][T13202] overlayfs: failed to verify upper root origin [ 392.884477][T13192] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 392.908583][T13192] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 330 with error 28 [ 392.943565][T13213] input: syz1 as /devices/virtual/input/input34 [ 392.946156][T13192] EXT4-fs (loop6): This should not happen!! Data will be lost [ 392.946156][T13192] [ 392.972946][T13192] EXT4-fs (loop6): Total free blocks count 0 [ 392.980093][T13192] EXT4-fs (loop6): Free/Dirty block details [ 392.986340][T13192] EXT4-fs (loop6): free_blocks=68451041280 [ 392.996515][T13192] EXT4-fs (loop6): dirty_blocks=336 [ 393.010319][T13192] EXT4-fs (loop6): Block reservation details [ 393.024750][T13192] EXT4-fs (loop6): i_reserved_data_blocks=21 [ 393.042878][ T6410] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 393.081591][ T6410] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 393.260840][T13220] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.270009][T13220] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.284743][T13220] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.298368][T13220] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 393.325751][T13220] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.336559][T13220] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.350625][T13220] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.363982][T13220] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 393.432758][ T4404] usb 5-1: USB disconnect, device number 26 [ 393.448481][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 393.470475][ T4404] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 393.534031][ T4404] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 393.589178][ T4404] quatech2 5-1:0.51: device disconnected [ 393.822653][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3296'. [ 393.840405][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3296'. [ 393.854679][T13216] loop2: detected capacity change from 0 to 32768 [ 393.869096][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3296'. [ 393.889194][T13216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3286 (13216) [ 393.906753][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3296'. [ 393.993826][T13216] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 394.028841][T13216] BTRFS info (device loop2): using free space tree [ 394.079604][T13216] BTRFS info (device loop2): has skinny extents [ 394.095766][T13243] loop6: detected capacity change from 0 to 64 [ 394.296328][T11441] hfs: node 4:3 still has 1 user(s)! [ 394.424444][T13271] loop4: detected capacity change from 0 to 64 [ 394.559655][T13271] [ 394.562075][T13271] ====================================================== [ 394.569399][T13271] WARNING: possible circular locking dependency detected [ 394.576556][T13271] syzkaller #0 Not tainted [ 394.581005][T13271] ------------------------------------------------------ [ 394.588085][T13271] syz.4.3306/13271 is trying to acquire lock: [ 394.594197][T13271] ffff88805899a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x14e/0x1d0 [ 394.603675][T13271] [ 394.603675][T13271] but task is already holding lock: [ 394.611173][T13271] ffff888058e18df8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe7/0x1380 [ 394.622032][T13271] [ 394.622032][T13271] which lock already depends on the new lock. [ 394.622032][T13271] [ 394.632486][T13271] [ 394.632486][T13271] the existing dependency chain (in reverse order) is: [ 394.641551][T13271] [ 394.641551][T13271] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 394.650957][T13271] __mutex_lock_common+0x1e5/0x2400 [ 394.656839][T13271] mutex_lock_nested+0x17/0x20 [ 394.662202][T13271] hfs_extend_file+0xe7/0x1380 [ 394.667741][T13271] hfs_bmap_reserve+0x104/0x420 [ 394.673161][T13271] __hfs_ext_write_extent+0x1fc/0x470 [ 394.679109][T13271] __hfs_ext_cache_extent+0x6e/0x9a0 [ 394.684973][T13271] hfs_extend_file+0x378/0x1380 [ 394.690392][T13271] hfs_get_block+0x3fe/0xbe0 [ 394.695637][T13271] __block_write_begin_int+0x565/0x15d0 [ 394.701845][T13271] cont_write_begin+0x598/0x7b0 [ 394.707404][T13271] hfs_write_begin+0x92/0xe0 [ 394.712668][T13271] cont_write_begin+0x263/0x7b0 [ 394.718183][T13271] hfs_write_begin+0x92/0xe0 [ 394.723338][T13271] hfs_file_truncate+0x1bf/0x9d0 [ 394.728863][T13271] hfs_inode_setattr+0x493/0x6d0 [ 394.734457][T13271] notify_change+0xbc6/0xee0 [ 394.739665][T13271] do_truncate+0x1ac/0x240 [ 394.745120][T13271] vfs_truncate+0x262/0x2f0 [ 394.750538][T13271] do_sys_truncate+0xf2/0x1c0 [ 394.755986][T13271] do_syscall_64+0x4c/0xa0 [ 394.761396][T13271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.768756][T13271] [ 394.768756][T13271] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 394.777192][T13271] __lock_acquire+0x2c66/0x7b50 [ 394.783238][T13271] lock_acquire+0x19e/0x400 [ 394.788324][T13271] __mutex_lock_common+0x1e5/0x2400 [ 394.794097][T13271] mutex_lock_nested+0x17/0x20 [ 394.799434][T13271] hfs_find_init+0x14e/0x1d0 [ 394.804672][T13271] hfs_extend_file+0x339/0x1380 [ 394.810097][T13271] hfs_bmap_reserve+0x104/0x420 [ 394.815976][T13271] hfs_cat_create+0x20a/0x900 [ 394.821226][T13271] hfs_create+0x62/0xd0 [ 394.825956][T13271] path_openat+0x120a/0x2fb0 [ 394.831260][T13271] do_filp_open+0x1df/0x400 [ 394.836350][T13271] do_sys_openat2+0x14b/0x500 [ 394.841699][T13271] __x64_sys_openat+0x135/0x160 [ 394.847236][T13271] do_syscall_64+0x4c/0xa0 [ 394.852316][T13271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 394.858790][T13271] [ 394.858790][T13271] other info that might help us debug this: [ 394.858790][T13271] [ 394.869437][T13271] Possible unsafe locking scenario: [ 394.869437][T13271] [ 394.877104][T13271] CPU0 CPU1 [ 394.882694][T13271] ---- ---- [ 394.888103][T13271] lock(&HFS_I(tree->inode)->extents_lock); [ 394.894135][T13271] lock(&tree->tree_lock/1); [ 394.901483][T13271] lock(&HFS_I(tree->inode)->extents_lock); [ 394.910032][T13271] lock(&tree->tree_lock/1); [ 394.914775][T13271] [ 394.914775][T13271] *** DEADLOCK *** [ 394.914775][T13271] [ 394.923040][T13271] 4 locks held by syz.4.3306/13271: [ 394.928281][T13271] #0: ffff888077162460 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 394.937579][T13271] #1: ffff888058e19ca8 (&type->i_mutex_dir_key#11){++++}-{3:3}, at: path_openat+0x821/0x2fb0 [ 394.948081][T13271] #2: ffff88805f49a0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x14e/0x1d0 [ 394.958015][T13271] #3: ffff888058e18df8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xe7/0x1380 [ 394.969401][T13271] [ 394.969401][T13271] stack backtrace: [ 394.975330][T13271] CPU: 1 PID: 13271 Comm: syz.4.3306 Not tainted syzkaller #0 [ 394.982842][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 394.993122][T13271] Call Trace: [ 394.996442][T13271] [ 394.999529][T13271] dump_stack_lvl+0x188/0x250 [ 395.004303][T13271] ? load_image+0x410/0x410 [ 395.008980][T13271] ? show_regs_print_info+0x20/0x20 [ 395.014230][T13271] ? print_circular_bug+0x12b/0x1a0 [ 395.019480][T13271] check_noncircular+0x296/0x330 [ 395.024478][T13271] ? look_up_lock_class+0x71/0x110 [ 395.029725][T13271] ? add_chain_block+0x9b0/0x9b0 [ 395.034708][T13271] ? lockdep_lock+0xf1/0x1f0 [ 395.039358][T13271] ? mark_lock+0x94/0x320 [ 395.043742][T13271] ? _find_first_zero_bit+0xd1/0xf0 [ 395.049037][T13271] __lock_acquire+0x2c66/0x7b50 [ 395.053949][T13271] ? __lock_acquire+0x7b50/0x7b50 [ 395.059040][T13271] ? mark_lock+0x94/0x320 [ 395.063412][T13271] ? verify_lock_unused+0x140/0x140 [ 395.068665][T13271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.074746][T13271] ? lock_chain_count+0x20/0x20 [ 395.079658][T13271] ? __rwlock_init+0x140/0x140 [ 395.084485][T13271] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 395.090439][T13271] ? lockdep_hardirqs_on+0x94/0x140 [ 395.095701][T13271] lock_acquire+0x19e/0x400 [ 395.100260][T13271] ? hfs_find_init+0x14e/0x1d0 [ 395.105089][T13271] ? __might_sleep+0xf0/0xf0 [ 395.109871][T13271] ? read_lock_is_recursive+0x10/0x10 [ 395.115371][T13271] ? __kasan_kmalloc+0xc6/0xe0 [ 395.120311][T13271] ? __kasan_kmalloc+0xaf/0xe0 [ 395.125128][T13271] ? hfs_find_init+0x83/0x1d0 [ 395.129863][T13271] ? hfs_bmap_reserve+0x104/0x420 [ 395.134937][T13271] ? hfs_cat_create+0x20a/0x900 [ 395.139839][T13271] ? hfs_create+0x62/0xd0 [ 395.144317][T13271] ? do_filp_open+0x1df/0x400 [ 395.149065][T13271] __mutex_lock_common+0x1e5/0x2400 [ 395.154325][T13271] ? hfs_find_init+0x14e/0x1d0 [ 395.159145][T13271] ? hfs_find_init+0x14e/0x1d0 [ 395.163966][T13271] ? mutex_lock_io_nested+0x60/0x60 [ 395.169239][T13271] mutex_lock_nested+0x17/0x20 [ 395.174075][T13271] hfs_find_init+0x14e/0x1d0 [ 395.178724][T13271] hfs_extend_file+0x339/0x1380 [ 395.183631][T13271] ? hfs_create+0x62/0xd0 [ 395.188011][T13271] ? do_filp_open+0x1df/0x400 [ 395.192860][T13271] ? hfs_get_block+0xbe0/0xbe0 [ 395.197905][T13271] ? __mutex_lock_common+0x435/0x2400 [ 395.203340][T13271] ? hfs_find_init+0x14e/0x1d0 [ 395.208178][T13271] ? mutex_lock_io_nested+0x60/0x60 [ 395.214136][T13271] hfs_bmap_reserve+0x104/0x420 [ 395.219071][T13271] hfs_cat_create+0x20a/0x900 [ 395.223805][T13271] ? hfs_cat_build_key+0x170/0x170 [ 395.229076][T13271] ? _raw_spin_unlock+0x24/0x40 [ 395.234076][T13271] ? hfs_new_inode+0x8c8/0xb50 [ 395.239116][T13271] hfs_create+0x62/0xd0 [ 395.243327][T13271] ? hfs_lookup+0x320/0x320 [ 395.247886][T13271] path_openat+0x120a/0x2fb0 [ 395.252547][T13271] ? do_filp_open+0x400/0x400 [ 395.257284][T13271] do_filp_open+0x1df/0x400 [ 395.261835][T13271] ? vfs_tmpfile+0x300/0x300 [ 395.266481][T13271] ? _raw_spin_unlock+0x24/0x40 [ 395.271375][T13271] ? alloc_fd+0x59e/0x650 [ 395.275845][T13271] do_sys_openat2+0x14b/0x500 [ 395.280571][T13271] ? __lock_acquire+0x7b50/0x7b50 [ 395.285669][T13271] ? do_sys_open+0xe0/0xe0 [ 395.290138][T13271] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.296189][T13271] ? lock_chain_count+0x20/0x20 [ 395.301272][T13271] __x64_sys_openat+0x135/0x160 [ 395.306185][T13271] do_syscall_64+0x4c/0xa0 [ 395.310652][T13271] ? clear_bhb_loop+0x30/0x80 [ 395.315382][T13271] ? clear_bhb_loop+0x30/0x80 [ 395.320183][T13271] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.326133][T13271] RIP: 0033:0x7fc73bb26e59 [ 395.330606][T13271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.351039][T13271] RSP: 002b:00007fc739d80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.359517][T13271] RAX: ffffffffffffffda RBX: 00007fc73bd9ffa0 RCX: 00007fc73bb26e59 [ 395.367554][T13271] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 395.375579][T13271] RBP: 00007fc73bbbce6f R08: 0000000000000000 R09: 0000000000000000 [ 395.383693][T13271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.391713][T13271] R13: 00007fc73bda0038 R14: 00007fc73bd9ffa0 R15: 00007ffea76b76d8 [ 395.399738][T13271] [ 395.411798][T13216] BTRFS info (device loop2): enabling ssd optimizations [ 395.633258][T13267] loop3: detected capacity change from 0 to 32768 [ 395.775986][T13267] XFS (loop3): Mounting V5 Filesystem [ 395.803366][T13267] XFS (loop3): Ending clean mount [ 395.811207][T13267] XFS (loop3): Quotacheck needed: Please wait. [ 395.840728][T13267] XFS (loop3): Quotacheck: Done. [ 395.870880][ T4190] XFS (loop3): Unmounting Filesystem