last executing test programs: 17.039814497s ago: executing program 0 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 16.781574472s ago: executing program 0 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x200000000000, 0x200000000030, 0x200000000060], 0x0, 0x0, 0x0}, 0x108) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000240)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080), 0x12) 16.014312147s ago: executing program 0 (id=507): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 15.812030538s ago: executing program 0 (id=510): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0x0) 15.293392999s ago: executing program 0 (id=513): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="ff9f121ebeb3acf0"}}) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 13.224073769s ago: executing program 0 (id=526): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa16ac1414bbaaaaaaaaaa14ac"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 12.954757335s ago: executing program 32 (id=526): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa16ac1414bbaaaaaaaaaa14ac"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.499218809s ago: executing program 4 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000022, 0x0, 0x8000}]}) 5.332538449s ago: executing program 4 (id=575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)={[{@resgid}, {@mblk_io_submit}, {@nobh}, {@nouid32}, {@delalloc}, {@mblk_io_submit}, {@nogrpid}]}, 0xff, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 5.172734438s ago: executing program 3 (id=577): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1, 0x3ff}}, {{0xa, 0x4e23, 0xfffffffd, @empty, 0x8}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}}}, 0x108) 4.836221588s ago: executing program 3 (id=579): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.509344497s ago: executing program 4 (id=581): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x10, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0) 3.364978953s ago: executing program 2 (id=584): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2.693600293s ago: executing program 2 (id=586): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400481c) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001400)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) 2.658980825s ago: executing program 4 (id=587): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 2.528332662s ago: executing program 3 (id=589): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000140), 0xd, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) creat(&(0x7f0000000240)='./file1\x00', 0x0) 2.38380169s ago: executing program 4 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0xaba64f4add525e83, 0x1, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfd, 0x1, 0xfe, 0x2, 0x100}, [@RTA_OIF={0x8, 0x4, r2}]}, 0x24}, 0x1, 0xffffff7f}, 0x40084) 1.36996305s ago: executing program 4 (id=591): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b24, 0x0) 1.096272826s ago: executing program 2 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b00)={r0, &(0x7f0000000980)="dbf080a4f4", &(0x7f0000000a80)=""/111}, 0x20) 1.041230439s ago: executing program 3 (id=593): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x2) 995.512992ms ago: executing program 1 (id=594): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10) sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x2) 852.34556ms ago: executing program 2 (id=595): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 612.772334ms ago: executing program 1 (id=596): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0) 524.352059ms ago: executing program 2 (id=597): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 524.172229ms ago: executing program 1 (id=598): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local}, @local, 0x8, 0x6, 0x343, 0xffffffff7fffffe1, 0x7, 0x100, 0x9}) 356.454449ms ago: executing program 1 (id=599): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x2) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x7) 272.884424ms ago: executing program 3 (id=600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a8000000000000800000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 216.278817ms ago: executing program 1 (id=601): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3d2bf7eea3"}]}]}, 0x3c}}, 0x0) 173.51305ms ago: executing program 5 (id=528): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e23, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xbc2, 0xe3]}}, 0x5c) 147.384721ms ago: executing program 1 (id=602): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fdatasync(0xffffffffffffffff) 85.991825ms ago: executing program 3 (id=603): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000000)=[{0x1e, 0x1, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x2}) 24.290648ms ago: executing program 2 (id=604): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x1}}}}]}, 0x40}}, 0xc0) 0s ago: executing program 5 (id=605): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000001040)={0xa, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x1, 0x0, 0x5, 0x0}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1000001, &(0x7f00000010c0)=ANY=[@ANYBLOB="646f74732c646f74732c646f733178666c6f7070792c646f74732c757365667265652c666c7573682c61707072616973655f747970653d696d617369672c646f6e745f686173682c726f6f74636f6e746578743d726f6f742c00dd2e8237bd2f0257fd2304bbe1b2fd3439d70f9c625670f6c69fc8259a8f72c01e65"], 0x1, 0x11c5, &(0x7f0000001240)="$eJzs3U9rHHUYB/AnTbTp1sT4r9pefNCLXgbbgycviyQgXVDartAKwpRsdNl1N+zsYVc8BLx58nWIR2+C+Abiq/AWBNFLTo7oSkJkxWgwG8vnc5kHvjPD82Ng4DfMb+bgjc8/6u1UxU45jktLS7FyJSIOMzIuxXLM7MWrn279/Nnd+w9uN1utzTuZW817N1/PzPUXv3nvky9f+nZ89d2v1r++HPsb7x/8eOv7/Wv71w9+ufdht8pulYPhOMt8OByOy4f9Tm53q16R+U6/U1ad7A6qzuhEvtMf7u5OsxxsrzV2R52qynIwzV5nmuNhjkfTLD8ou4MsiiLXGsFZtL84rOs6oq4fi8ejruv6SjTiajwRa7EeT8ZGPBVPxzPxbDwX1+L5eCGu/77XovsGAAAAAAAAAAAAAAAAAACAR4v1/wAAAAAAAAAAAAAAAAAAALB4p17//93U+n8AAAAAAAAAAAAAAAAAAAD4j/j/PwAAAAAAAAAAAAAAAAAAACze3fsPbjdbrc07masRP+xN2pP2bDvLt95qbb6Wq5mZG8dH/TSZtJeP8ps5czK/HI0/8ltz89V45eVZ/lv25tutP+U3Yvvv2/clAgAAADiFIo/Mnd8XxV/ls2r2fGDe/H4lbqyc2zD4l6rpx72y3++MFIr/U9GMiAvQxsUolmNOtHS2My/6zsR5OL7oi+4EAAAAAAAAAACAf+I83k9c9BgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVQEAAP//EIOVMQ==") wait4(0x0, 0x0, 0x8, 0x0) getpriority(0x0, r6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x4b000) kernel console output (not intermixed with test programs): ocal softirq work is pending, handler #28a!!! [ 67.549243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 67.558421][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 67.754628][ T4351] exfat: Deprecated parameter 'utf8' [ 67.762384][ T4317] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 67.762384][ T4317] [ 67.770381][ T4358] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.805128][ T4358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.805797][ T4351] exfat: Deprecated parameter 'utf8' [ 67.820911][ T4351] exfat: Deprecated parameter 'utf8' [ 67.829732][ T4314] JBD2: Ignoring recovery information on journal [ 67.849604][ T4351] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 67.918643][ T4314] JBD2: recovery failed [ 67.932695][ T4314] (syz.3.4,4314,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 67.954482][ T4314] (syz.3.4,4314,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 68.000639][ T4353] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.001646][ T4314] (syz.3.4,4314,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 68.099673][ T4314] (syz.3.4,4314,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 68.252323][ T4314] (syz.3.4,4314,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 68.308336][ T4363] EXT4-fs (loop2): Ignoring removed orlov option [ 68.359241][ T4346] Alternate GPT is invalid, using primary GPT. [ 68.393719][ T4346] loop0: p1 p2 p3 [ 68.398929][ T4346] loop0: partition table partially beyond EOD, truncated [ 68.415936][ T4363] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,jqfmt=vfsv0,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,usrjquota=,,errors=continue. Quota mode: none. [ 68.444033][ T4367] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 68.608539][ T4362] Alternate GPT is invalid, using primary GPT. [ 68.623165][ T4362] loop0: p1 p2 p3 [ 68.630321][ T4362] loop0: partition table partially beyond EOD, truncated [ 68.843637][ T4356] set_capacity_and_notify: 6 callbacks suppressed [ 68.843654][ T4356] loop1: detected capacity change from 0 to 32768 [ 68.964866][ T4371] loop3: detected capacity change from 0 to 1024 [ 69.255733][ T4377] syz.4.21 (4377) used greatest stack depth: 17240 bytes left [ 69.274576][ T4297] udevd[4297]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 69.286119][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 69.298969][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 69.567078][ T4356] XFS (loop1): Mounting V5 Filesystem [ 69.899000][ T4385] loop0: detected capacity change from 0 to 1024 [ 69.918287][ T4356] XFS (loop1): Ending clean mount [ 69.930870][ T4388] loop4: detected capacity change from 0 to 512 [ 69.986024][ T4356] XFS (loop1): Quotacheck needed: Please wait. [ 70.068907][ T4388] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 70.190756][ T4356] XFS (loop1): Quotacheck: Done. [ 70.195088][ T145] hfsplus: b-tree write err: -5, ino 4 [ 70.420536][ T4184] XFS (loop1): Unmounting Filesystem [ 71.073328][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 71.087342][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 71.097556][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 72.494871][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.501487][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.969813][ T4412] loop3: detected capacity change from 0 to 64 [ 73.700716][ T4416] loop2: detected capacity change from 0 to 64 [ 74.062692][ T4413] loop0: detected capacity change from 0 to 32768 [ 74.098757][ T4422] loop2: detected capacity change from 0 to 512 [ 74.203041][ T4413] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (4413) [ 74.283759][ T4426] loop3: detected capacity change from 0 to 8192 [ 75.662825][ C1] sched: RT throttling activated [ 75.735074][ T4426] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 76.049187][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.093981][ T4413] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 76.137522][ T4413] BTRFS info (device loop0): using free space tree [ 76.165961][ T4413] BTRFS info (device loop0): has skinny extents [ 77.242226][ T4413] BTRFS error (device loop0): open_ctree failed: -12 [ 77.264704][ T4452] loop1: detected capacity change from 0 to 4096 [ 77.296307][ T4336] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (4336) [ 78.199627][ T4452] ntfs3: loop1: failed to convert "0000" to cp949 [ 80.655029][ T4495] loop4: detected capacity change from 0 to 1024 [ 80.681653][ T4497] loop1: detected capacity change from 0 to 512 [ 80.758843][ T4495] hfsplus: bad catalog entry type [ 80.802993][ T4497] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 80.802993][ T4497] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.802993][ T4497] [ 80.926449][ T4497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.988872][ T4464] hfsplus: b-tree write err: -5, ino 4 [ 81.000394][ T4497] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.124076][ T4497] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 81.184290][ T4501] loop0: detected capacity change from 0 to 4096 [ 81.213020][ T4508] loop4: detected capacity change from 0 to 2048 [ 81.230867][ T4503] loop3: detected capacity change from 0 to 4096 [ 81.239029][ T4497] EXT4-fs (loop1): 1 truncate cleaned up [ 81.245875][ T4497] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 81.283465][ T4503] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 81.299883][ T4508] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.311926][ T4478] loop2: detected capacity change from 0 to 32768 [ 81.330133][ T4508] UDF-fs: Scanning with blocksize 512 failed [ 81.338013][ T4428] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 81.423105][ T4428] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 1 [ 81.437355][ T4508] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.487815][ T4503] ntfs3: loop3: failed to convert "c46c" to cp1251 [ 81.537093][ T4508] UDF-fs: Scanning with blocksize 1024 failed [ 81.566927][ T4508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=515, location=515 [ 81.744046][ T4508] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.751756][ T4508] UDF-fs: Scanning with blocksize 2048 failed [ 81.784157][ T4508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=259, location=259 [ 81.810850][ T4508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=515, location=515 [ 81.828214][ T4508] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 81.849147][ T4508] UDF-fs: Scanning with blocksize 4096 failed [ 81.883029][ T4508] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 82.139838][ T4510] loop0: detected capacity change from 0 to 4096 [ 82.174872][ T4512] loop3: detected capacity change from 0 to 32768 [ 82.191674][ T4512] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.203537][ T4512] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 82.231089][ T4512] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error [ 82.231089][ T4512] inode = 1 19 [ 82.231089][ T4512] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 82.250008][ T4512] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 82.257649][ T4512] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 82.266566][ T4512] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 82.284425][ T4512] gfs2: fsid=syz:syz.s: File system withdrawn [ 82.290700][ T4512] CPU: 1 PID: 4512 Comm: syz.3.56 Not tainted syzkaller #0 [ 82.297918][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 82.308086][ T4512] Call Trace: [ 82.311401][ T4512] [ 82.314363][ T4512] dump_stack_lvl+0x188/0x250 [ 82.319077][ T4512] ? kobject_uevent_env+0x371/0x890 [ 82.324498][ T4512] ? show_regs_print_info+0x20/0x20 [ 82.329741][ T4512] ? load_image+0x400/0x400 [ 82.334283][ T4512] ? kobject_uevent_env+0x371/0x890 [ 82.339507][ T4512] ? preempt_schedule_thunk+0x16/0x18 [ 82.344908][ T4512] gfs2_withdraw+0x1149/0x1490 [ 82.349706][ T4512] ? gfs2_lm+0x240/0x240 [ 82.353970][ T4512] ? _raw_spin_unlock+0x24/0x40 [ 82.358837][ T4512] ? gfs2_glock_nq+0xcb0/0x1550 [ 82.363715][ T4512] ? gfs2_consist_inode_i+0xc0/0xe0 [ 82.368937][ T4512] gfs2_jdesc_check+0x137/0x290 [ 82.373813][ T4512] check_journal_clean+0x186/0x360 [ 82.378965][ T4512] ? gfs2_trans_remove_revoke+0x370/0x370 [ 82.384699][ T4512] ? preempt_schedule+0xbc/0xd0 [ 82.389571][ T4512] ? check_journal_clean+0x142/0x360 [ 82.394874][ T4512] ? __rwlock_init+0x140/0x140 [ 82.399672][ T4512] ? _raw_spin_unlock+0x36/0x40 [ 82.404553][ T4512] ? gfs2_jdesc_find+0xa7/0xc0 [ 82.409361][ T4512] init_journal+0x17a5/0x22f0 [ 82.414089][ T4512] ? end_bio_io_page+0x100/0x100 [ 82.419227][ T4512] ? vsnprintf+0x1b21/0x1c20 [ 82.423850][ T4512] ? snprintf+0xe5/0x140 [ 82.428122][ T4512] ? init_journal+0x74d/0x22f0 [ 82.432931][ T4512] ? vscnprintf+0x80/0x80 [ 82.437282][ T4512] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 82.442419][ T4512] init_inodes+0xdb/0x320 [ 82.446880][ T4512] gfs2_fill_super+0x16b2/0x1f00 [ 82.451952][ T4512] ? gfs2_reconfigure+0xd30/0xd30 [ 82.457000][ T4512] ? gfs2_glock_nq_num+0x82/0x1b0 [ 82.462064][ T4512] ? sb_set_blocksize+0xa5/0xe0 [ 82.466949][ T4512] get_tree_bdev+0x3f1/0x610 [ 82.471562][ T4512] ? gfs2_reconfigure+0xd30/0xd30 [ 82.476632][ T4512] gfs2_get_tree+0x4d/0x1e0 [ 82.481165][ T4512] vfs_get_tree+0x88/0x270 [ 82.485604][ T4512] do_new_mount+0x24a/0xa40 [ 82.490137][ T4512] __se_sys_mount+0x2e3/0x3d0 [ 82.494837][ T4512] ? __x64_sys_mount+0xc0/0xc0 [ 82.499626][ T4512] ? lockdep_hardirqs_on+0x94/0x140 [ 82.504928][ T4512] ? __x64_sys_mount+0x1c/0xc0 [ 82.509711][ T4512] do_syscall_64+0x4c/0xa0 [ 82.514144][ T4512] ? clear_bhb_loop+0x30/0x80 [ 82.518835][ T4512] ? clear_bhb_loop+0x30/0x80 [ 82.523532][ T4512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.529535][ T4512] RIP: 0033:0x7fbe9cbc520a [ 82.533968][ T4512] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.553594][ T4512] RSP: 002b:00007fbe9ae1de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.562033][ T4512] RAX: ffffffffffffffda RBX: 00007fbe9ae1dee0 RCX: 00007fbe9cbc520a [ 82.570021][ T4512] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fbe9ae1dea0 [ 82.578007][ T4512] RBP: 0000200000000400 R08: 00007fbe9ae1dee0 R09: 0000000000200001 [ 82.586002][ T4512] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 82.594096][ T4512] R13: 00007fbe9ae1dea0 R14: 0000000000012608 R15: 0000200000000440 [ 82.602270][ T4512] [ 82.605843][ T4512] gfs2: fsid=syz:syz.s: Error checking journal for spectator mount. [ 84.250999][ T4191] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 84.266216][ T4191] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 84.440930][ T4530] loop1: detected capacity change from 0 to 764 [ 84.554197][ T4530] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 85.790459][ T4549] loop2: detected capacity change from 0 to 128 [ 85.803981][ T4546] loop4: detected capacity change from 0 to 512 [ 85.846936][ T4550] loop0: detected capacity change from 0 to 2048 [ 85.957475][ T4544] loop1: detected capacity change from 0 to 8192 [ 85.969746][ T4546] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 86.100832][ T4546] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.638811][ T4559] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.044566][ T4564] loop0: detected capacity change from 0 to 256 [ 88.262665][ T4564] FAT-fs (loop0): Directory bread(block 64) failed [ 88.335078][ T4564] FAT-fs (loop0): Directory bread(block 65) failed [ 88.571026][ T4564] FAT-fs (loop0): Directory bread(block 66) failed [ 88.621445][ T4568] loop4: detected capacity change from 0 to 4096 [ 88.791274][ T4564] FAT-fs (loop0): Directory bread(block 67) failed [ 89.004239][ T4564] FAT-fs (loop0): Directory bread(block 68) failed [ 89.064122][ T4564] FAT-fs (loop0): Directory bread(block 69) failed [ 89.086226][ T4572] loop3: detected capacity change from 0 to 512 [ 89.110100][ T4564] FAT-fs (loop0): Directory bread(block 70) failed [ 89.120631][ T4564] FAT-fs (loop0): Directory bread(block 71) failed [ 89.120777][ T4568] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 89.128230][ T4564] FAT-fs (loop0): Directory bread(block 72) failed [ 89.153805][ T4564] FAT-fs (loop0): Directory bread(block 73) failed [ 89.177912][ T4242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.178135][ T4574] loop1: detected capacity change from 0 to 512 [ 89.229476][ T4568] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 89.280985][ T4572] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 89.358606][ T4572] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.388951][ T4574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.482050][ T4574] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.621914][ T4581] loop0: detected capacity change from 0 to 4096 [ 89.669459][ T4242] usb 3-1: device not accepting address 2, error -71 [ 89.769036][ T4588] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.401841][ T4581] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 90.552166][ T4586] loop4: detected capacity change from 0 to 1024 [ 90.617546][ T4586] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.755344][ T4586] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 90.871572][ T4594] loop2: detected capacity change from 0 to 2048 [ 91.016932][ T4346] loop2: p1 p2 p3 [ 91.016932][ T4346] p1: [ 91.080889][ T4346] loop2: p2 size 458752 extends beyond EOD, truncated [ 91.125048][ T4346] loop2: p3 start 65280 is beyond EOD, truncated [ 91.189380][ T4594] loop2: p1 p2 p3 [ 91.189380][ T4594] p1: [ 91.245108][ T4603] loop4: detected capacity change from 0 to 256 [ 91.289899][ T4594] loop2: p2 size 458752 extends beyond EOD, truncated [ 91.334997][ T4594] loop2: p3 start 65280 is beyond EOD, truncated [ 91.359773][ T4605] loop3: detected capacity change from 0 to 1764 [ 91.405698][ T4607] loop1: detected capacity change from 0 to 512 [ 91.444025][ T4603] FAT-fs (loop4): Directory bread(block 64) failed [ 91.450639][ T4603] FAT-fs (loop4): Directory bread(block 65) failed [ 91.470341][ T4603] FAT-fs (loop4): Directory bread(block 66) failed [ 91.498071][ T4609] loop0: detected capacity change from 0 to 64 [ 91.506904][ T4603] FAT-fs (loop4): Directory bread(block 67) failed [ 91.521358][ T4603] FAT-fs (loop4): Directory bread(block 68) failed [ 91.529953][ T4603] FAT-fs (loop4): Directory bread(block 69) failed [ 91.538654][ T4607] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 91.561893][ T4603] FAT-fs (loop4): Directory bread(block 70) failed [ 91.592367][ T4607] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.616531][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 91.617166][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 91.667820][ T4603] FAT-fs (loop4): Directory bread(block 71) failed [ 91.672356][ T4615] loop2: detected capacity change from 0 to 512 [ 91.731283][ T4603] FAT-fs (loop4): Directory bread(block 72) failed [ 91.843165][ T4603] FAT-fs (loop4): Directory bread(block 73) failed [ 92.028253][ T4619] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.175319][ T4615] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.86: inode has both inline data and extents flags [ 92.207098][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 92.223246][ T4621] loop0: detected capacity change from 0 to 1024 [ 92.247260][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 92.281656][ T4615] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.86: couldn't read orphan inode 15 (err -117) [ 92.371569][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.387098][ T4615] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.490853][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 92.511824][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.221838][ T4626] loop0: detected capacity change from 0 to 8192 [ 93.346135][ T4626] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 93.419066][ T4626] REISERFS (device loop0): using journaled data mode [ 93.463767][ T4626] reiserfs: using flush barriers [ 93.540145][ T4626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.621941][ T4613] loop3: detected capacity change from 0 to 32768 [ 93.648248][ T4626] REISERFS (device loop0): checking transaction log (loop0) [ 93.656631][ T4629] loop1: detected capacity change from 0 to 131072 [ 93.708163][ T4626] REISERFS (device loop0): Using r5 hash to sort names [ 93.725068][ T4626] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 93.755728][ T4629] F2FS-fs (loop1): Zoned block device path is missing [ 93.764974][ T4629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.817464][ T4626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 93.843266][ T4613] jfs_lookup: dtSearch returned -5 [ 94.113377][ T4629] F2FS-fs (loop1): Test dummy encryption mode enabled [ 94.134986][ T4629] F2FS-fs (loop1): invalid crc value [ 94.192771][ T4629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.271236][ T4629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.278801][ T4629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.384456][ T4630] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.520183][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 94.560659][ T145] hfsplus: b-tree write err: -5, ino 4 [ 94.691932][ T4632] XFS: attr2 mount option is deprecated. [ 94.861484][ T4632] XFS (loop2): Mounting V5 Filesystem [ 94.912967][ T4461] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.959531][ T4632] XFS (loop2): Ending clean mount [ 95.000971][ T4653] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.074089][ T4632] XFS (loop2): Quotacheck needed: Please wait. [ 95.162910][ T4461] usb 1-1: Using ep0 maxpacket: 16 [ 95.183615][ T4632] XFS (loop2): Quotacheck: Done. [ 95.286341][ T4461] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.332947][ T4461] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.381993][ T4193] XFS (loop2): Unmounting Filesystem [ 95.533314][ T4461] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.555798][ T4461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.564031][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 95.564157][ T4673] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.664919][ T4461] usb 1-1: Product: syz [ 95.669164][ T4461] usb 1-1: Manufacturer: syz [ 95.703028][ T4461] usb 1-1: SerialNumber: syz [ 95.824287][ T4668] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 96.693332][ T4461] usb 1-1: 0:2 : does not exist [ 96.714092][ T4682] set_capacity_and_notify: 6 callbacks suppressed [ 96.714108][ T4682] loop4: detected capacity change from 0 to 512 [ 96.839285][ T4685] loop2: detected capacity change from 0 to 512 [ 96.881001][ T4461] usb 1-1: USB disconnect, device number 2 [ 96.967607][ T4682] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.976841][ T4694] loop1: detected capacity change from 0 to 1024 [ 96.996825][ T4685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 97.008566][ T4694] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 97.017194][ T4685] System zones: 1-12 [ 97.040258][ T4687] loop0: detected capacity change from 0 to 4096 [ 97.051252][ T4682] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 97.075167][ T4685] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.102: Directory hole found for htree index block 0 [ 97.088340][ T4694] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 97.137523][ T4292] udevd[4292]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.154406][ T4685] EXT4-fs (loop2): Remounting filesystem read-only [ 97.176766][ T4694] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,nogrpid,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,discard,init_itable,mblk_io_submit,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 97.266769][ T4695] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 97.283541][ T4685] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 97.288097][ T4693] loop3: detected capacity change from 0 to 32768 [ 97.301486][ T4698] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.323201][ T4685] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.102: Directory hole found for htree index block 0 [ 97.346000][ T4685] EXT4-fs (loop2): Remounting filesystem read-only [ 97.397136][ T4685] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 97.438802][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 97.538929][ T4700] loop4: detected capacity change from 0 to 2048 [ 97.635642][ T4700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.813462][ T4704] loop0: detected capacity change from 0 to 1024 [ 97.915259][ T4704] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.933277][ T4704] EXT4-fs (loop0): inline encryption not supported [ 97.955629][ T4710] loop3: detected capacity change from 0 to 256 [ 97.997866][ T4704] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 98.054470][ T4704] EXT4-fs error (device loop0): ext4_remount:6060: comm syz.0.107: Abort forced by user [ 98.110421][ T4704] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 98.140657][ T4710] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x38eabd95, utbl_chksum : 0xe619d30d) [ 98.172929][ T4429] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.198446][ T4715] loop4: detected capacity change from 0 to 1024 [ 98.288332][ T4715] EXT4-fs (loop4): Ignoring removed bh option [ 98.341108][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 98.420079][ T4706] loop1: detected capacity change from 0 to 32768 [ 98.435794][ T4706] XFS: noikeep mount option is deprecated. [ 98.533311][ T4429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.549895][ T4429] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.654079][ T4462] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.662204][ T4429] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 98.690522][ T4429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.741265][ T4429] usb 3-1: config 0 descriptor?? [ 98.800173][ T4706] XFS (loop1): Mounting V5 Filesystem [ 98.953167][ T4706] XFS (loop1): Ending clean mount [ 98.966962][ T4706] XFS (loop1): Quotacheck needed: Please wait. [ 99.013837][ T4462] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.024096][ T4462] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.035620][ T4738] hpfs: [ 99.035620][ T4738] HPFS filesystem options: [ 99.035620][ T4738] help do not mount and display this text [ 99.035620][ T4738] uid=xxx set uid of files that don't have uid specified in eas [ 99.035620][ T4738] gid=xxx set gid of files that don't have gid specified in eas [ 99.035620][ T4738] umask=xxx set mode of files that don't have mode specified in eas [ 99.035620][ T4738] case=lower lowercase all files [ 99.035620][ T4738] case=asis do not lowercase files (default) [ 99.035620][ T4738] check=none no fs checks - kernel may crash on corrupted filesystem [ 99.035620][ T4738] check=normal do some checks - it should not crash (default) [ 99.035620][ T4738] check=strict do extra time-consuming checks, used for debugging [ 99.035620][ T4738] errors=continue continue on errors [ 99.036821][ T4462] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 99.147765][ T4462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.182493][ T4462] usb 1-1: config 0 descriptor?? [ 99.212076][ T4722] XFS (loop3): Mounting V5 Filesystem [ 99.222493][ T4706] XFS (loop1): Quotacheck: Done. [ 99.301506][ T4184] XFS (loop1): Unmounting Filesystem [ 99.357291][ T4429] sony 0003:054C:0268.0001: unknown main item tag 0x3 [ 99.373620][ T4429] sony 0003:054C:0268.0001: item fetching failed at offset 1/5 [ 99.397482][ T4429] sony 0003:054C:0268.0001: parse failed [ 99.403306][ T4429] sony: probe of 0003:054C:0268.0001 failed with error -22 [ 99.471041][ T4722] XFS (loop3): Ending clean mount [ 99.489618][ T4722] XFS (loop3): Quotacheck needed: Please wait. [ 99.524291][ T4722] XFS (loop3): Quotacheck: Done. [ 99.543091][ T4467] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.598802][ T4300] usb 3-1: USB disconnect, device number 4 [ 99.636379][ T4194] XFS (loop3): Unmounting Filesystem [ 99.696387][ T4462] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 100.028745][ T4300] usb 1-1: USB disconnect, device number 3 [ 100.115641][ T4750] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 100.130962][ T4750] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 100.148777][ T4750] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: journal 0 mapped with 16 extents in 0ms [ 100.163350][ T4461] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0, already locked for use [ 100.175563][ T4461] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Looking at journal... [ 100.214675][ T4467] usb 5-1: config 0 has an invalid interface number: 222 but max is 0 [ 100.223180][ T4467] usb 5-1: config 0 has no interface number 0 [ 100.241899][ T4467] usb 5-1: too many endpoints for config 0 interface 222 altsetting 26: 224, using maximum allowed: 30 [ 100.263383][ T4467] usb 5-1: config 0 interface 222 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 100.278210][ T4461] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Journal head lookup took 102ms [ 100.290609][ T4461] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: jid=0: Done [ 100.299332][ T4467] usb 5-1: config 0 interface 222 has no altsetting 0 [ 100.307892][ T4750] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: first mount done, others may mount [ 100.313637][ T4752] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.451468][ T4755] SQUASHFS error: zlib decompression failed, data probably corrupt [ 100.460060][ T4755] SQUASHFS error: Failed to read block 0x9b: -5 [ 100.466879][ T4755] SQUASHFS error: Unable to read metadata cache entry [99] [ 100.474798][ T4755] SQUASHFS error: Unable to read inode 0x127 [ 100.483544][ T4467] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 100.492655][ T4467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.501693][ T4467] usb 5-1: Product: syz [ 100.506232][ T4467] usb 5-1: Manufacturer: syz [ 100.510861][ T4467] usb 5-1: SerialNumber: syz [ 100.520525][ T4467] usb 5-1: config 0 descriptor?? [ 100.823359][ T4467] hub 5-1:0.222: bad descriptor, ignoring hub [ 100.829820][ T4467] hub: probe of 5-1:0.222 failed with error -5 [ 100.847740][ T4467] f81232 5-1:0.222: f81534a converter detected [ 101.043716][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.433226][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 101.584122][ T21] usb 3-1: config 0 interface 0 altsetting 41 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.619183][ T21] usb 3-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.664406][ T4467] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 101.671633][ T4467] f81534a: probe of ttyUSB0 failed with error -5 [ 101.705440][ T4764] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 101.723819][ T4467] usb 5-1: USB disconnect, device number 2 [ 101.732932][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.740264][ T4467] f81232 5-1:0.222: device disconnected [ 101.760259][ T21] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 101.780030][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.791780][ T4764] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 101.844246][ T21] usb 3-1: config 0 descriptor?? [ 101.883399][ T4764] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 101.932959][ T4764] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 101.962947][ T4764] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 102.297079][ T4764] ntfs: volume version 3.1. [ 102.447720][ T4764] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 102.637423][ T21] logitech-hidpp-device 0003:046D:C086.0003: hidraw0: USB HID v0.86 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 102.773423][ T4764] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 102.803542][ T4764] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 102.823303][ T21] usb 3-1: USB disconnect, device number 5 [ 102.892125][ T4764] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 102.953026][ T4764] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 102.980320][ T4774] fido_id[4774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 103.024428][ T4760] set_capacity_and_notify: 6 callbacks suppressed [ 103.024444][ T4760] loop1: detected capacity change from 0 to 32768 [ 103.152044][ T4760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.123 (4760) [ 104.182023][ T4769] loop4: detected capacity change from 0 to 32768 [ 104.292483][ T4769] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 104.363479][ T4760] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 104.372197][ T4760] BTRFS info (device loop1): using free space tree [ 104.380916][ T4780] loop0: detected capacity change from 0 to 32768 [ 104.391712][ T4769] (syz.4.126,4769,0):ocfs2_clear_journal_error:1085 ERROR: File system error -318767104 recorded in journal 0. [ 104.453438][ T4769] (syz.4.126,4769,1):ocfs2_clear_journal_error:1087 ERROR: File system on device loop4 needs checking. [ 104.464924][ T4760] BTRFS info (device loop1): has skinny extents [ 104.562492][ T4796] loop2: detected capacity change from 0 to 512 [ 104.618741][ T4780] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.627009][ T4780] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 104.650130][ T4780] gfs2: fsid=syz:syz.s: fatal: invalid metadata block [ 104.650130][ T4780] bh = 2073 (magic number) [ 104.650130][ T4780] function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 493 [ 104.652676][ T4796] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 104.669456][ T4780] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 104.669705][ T4780] gfs2: fsid=syz:syz.s: File system withdrawn [ 104.677970][ T4769] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.684853][ T4780] CPU: 1 PID: 4780 Comm: syz.0.129 Not tainted syzkaller #0 [ 104.691621][ T4802] loop3: detected capacity change from 0 to 512 [ 104.699872][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 104.699888][ T4780] Call Trace: [ 104.699897][ T4780] [ 104.699906][ T4780] dump_stack_lvl+0x188/0x250 [ 104.734532][ T4780] ? kobject_uevent_env+0x371/0x890 [ 104.739776][ T4780] ? show_regs_print_info+0x20/0x20 [ 104.745015][ T4780] ? load_image+0x400/0x400 [ 104.749549][ T4780] ? kobject_uevent_env+0x371/0x890 [ 104.754787][ T4780] ? load_image+0x400/0x400 [ 104.759337][ T4780] gfs2_withdraw+0x1149/0x1490 [ 104.764302][ T4780] ? gfs2_lm+0x240/0x240 [ 104.768580][ T4780] ? gfs2_meta_read+0x8a9/0xa60 [ 104.773483][ T4780] ? gfs2_meta_new+0x160/0x160 [ 104.778372][ T4780] gfs2_meta_check_ii+0x6e/0x80 [ 104.783254][ T4780] gfs2_meta_buffer+0x232/0x310 [ 104.788140][ T4780] gfs2_inode_refresh+0xbb/0xff0 [ 104.793109][ T4780] ? do_promote+0x71a/0xab0 [ 104.797647][ T4780] ? gfs2_inode_metasync+0xf0/0xf0 [ 104.802785][ T4780] ? __lock_acquire+0x7d10/0x7d10 [ 104.807842][ T4780] inode_go_lock+0x127/0x470 [ 104.812469][ T4780] do_promote+0x741/0xab0 [ 104.816862][ T4780] finish_xmote+0x4df/0xb00 [ 104.821406][ T4780] do_xmote+0x7b6/0x1120 [ 104.825693][ T4780] gfs2_glock_nq+0xc7a/0x1550 [ 104.830423][ T4780] gfs2_lookupi+0x416/0x600 [ 104.834960][ T4780] ? verify_lock_unused+0x140/0x140 [ 104.840197][ T4780] ? gfs2_lookup_simple+0x100/0x100 [ 104.845429][ T4780] ? gfs2_lookupi+0x40e/0x600 [ 104.850140][ T4780] ? crc32_le_base+0x755/0xcf0 [ 104.854950][ T4780] gfs2_lookup_simple+0xab/0x100 [ 104.859920][ T4780] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 104.865072][ T4780] ? lockref_put_or_lock+0x6e/0xb0 [ 104.870219][ T4780] init_journal+0x1c3/0x22f0 [ 104.874842][ T4780] ? __rwlock_init+0x140/0x140 [ 104.879650][ T4780] ? format_decode+0x19d/0x1300 [ 104.881658][ T4796] System zones: [ 104.884528][ T4780] ? vsnprintf+0x14e/0x1c20 [ 104.884559][ T4780] ? end_bio_io_page+0x100/0x100 [ 104.884581][ T4780] ? vsnprintf+0x1b21/0x1c20 [ 104.884620][ T4780] ? snprintf+0xe5/0x140 [ 104.884650][ T4780] ? vscnprintf+0x80/0x80 [ 104.884673][ T4780] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 104.884700][ T4780] init_inodes+0xdb/0x320 [ 104.884725][ T4780] gfs2_fill_super+0x16b2/0x1f00 [ 104.884762][ T4780] ? gfs2_reconfigure+0xd30/0xd30 [ 104.884787][ T4780] ? gfs2_glock_nq_num+0x82/0x1b0 [ 104.884823][ T4780] ? sb_set_blocksize+0xa5/0xe0 [ 104.884846][ T4780] get_tree_bdev+0x3f1/0x610 [ 104.884871][ T4780] ? gfs2_reconfigure+0xd30/0xd30 [ 104.884894][ T4780] gfs2_get_tree+0x4d/0x1e0 [ 104.920600][ T4796] 0-2 [ 104.920958][ T4780] vfs_get_tree+0x88/0x270 [ 104.949655][ T4796] , 18-18 [ 104.950684][ T4780] do_new_mount+0x24a/0xa40 [ 104.950724][ T4780] __se_sys_mount+0x2e3/0x3d0 [ 104.965514][ T4796] , 34-34 [ 104.969764][ T4780] ? __x64_sys_mount+0xc0/0xc0 [ 104.969798][ T4780] ? lockdep_hardirqs_on+0x94/0x140 [ 104.980517][ T4796] [ 104.982149][ T4780] ? __x64_sys_mount+0x1c/0xc0 [ 104.994443][ T4780] do_syscall_64+0x4c/0xa0 [ 104.998574][ T4796] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.140: bg 0: block 248: padding at end of block bitmap is not set [ 104.998992][ T4780] ? clear_bhb_loop+0x30/0x80 [ 104.999020][ T4780] ? clear_bhb_loop+0x30/0x80 [ 105.018023][ T4796] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.140: Failed to acquire dquot type 1 [ 105.018523][ T4780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.034306][ T4780] RIP: 0033:0x7fc83181b20a [ 105.034332][ T4780] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.034349][ T4780] RSP: 002b:00007fc82fa73e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.034373][ T4780] RAX: ffffffffffffffda RBX: 00007fc82fa73ee0 RCX: 00007fc83181b20a [ 105.034389][ T4780] RDX: 0000200000000400 RSI: 0000200000000000 RDI: 00007fc82fa73ea0 [ 105.034403][ T4780] RBP: 0000200000000400 R08: 00007fc82fa73ee0 R09: 0000000000200001 [ 105.055579][ T4796] EXT4-fs (loop2): 1 truncate cleaned up [ 105.064401][ T4780] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000000000 [ 105.064421][ T4780] R13: 00007fc82fa73ea0 R14: 00000000000125d5 R15: 0000200000000040 [ 105.064451][ T4780] [ 105.065035][ T4780] gfs2: fsid=syz:syz.s: can't lookup journal index: 0 [ 105.079448][ T4796] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 105.177922][ T4760] BTRFS error (device loop1): open_ctree failed: -12 [ 105.178269][ T4346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4346) [ 105.235396][ T4802] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 105.292408][ T4802] System zones: 1-12 [ 105.303232][ T4796] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.387751][ T4802] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.130: Directory hole found for htree index block 0 [ 105.469665][ T4811] loop0: detected capacity change from 0 to 16 [ 105.476719][ T4185] ocfs2: Unmounting device (7,4) on (node local) [ 105.507398][ T4802] EXT4-fs (loop3): Remounting filesystem read-only [ 105.515698][ T4811] erofs: Unknown parameter './file3' [ 105.542952][ T4802] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 105.551240][ T4802] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.130: Directory hole found for htree index block 0 [ 105.629673][ T4802] EXT4-fs (loop3): Remounting filesystem read-only [ 105.646791][ T4802] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 105.677224][ T4802] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 105.694911][ T4815] device netdevsim0 entered promiscuous mode [ 105.781921][ T4815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.260884][ T4820] loop1: detected capacity change from 0 to 4096 [ 106.291501][ T4823] loop2: detected capacity change from 0 to 8192 [ 106.364660][ T4823] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 106.484335][ T4820] ntfs: volume version 3.1. [ 106.587527][ T4827] loop4: detected capacity change from 0 to 8192 [ 106.695821][ T4827] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 107.124068][ T4834] device veth0_to_team entered promiscuous mode [ 107.482923][ T4837] loop0: detected capacity change from 0 to 1024 [ 107.812994][ T4837] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 107.820328][ T4837] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 108.388889][ T4837] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,nogrpid,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,discard,init_itable,mblk_io_submit,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 108.853126][ T4429] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 109.153331][ T4807] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.154815][ T4826] loop3: detected capacity change from 0 to 32768 [ 109.251955][ T4826] XFS (loop3): Mounting V5 Filesystem [ 109.310238][ T4826] XFS (loop3): Ending clean mount [ 109.349758][ T4194] XFS (loop3): Unmounting Filesystem [ 109.353187][ T4429] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.447449][ T4429] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 109.523167][ T4242] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.583537][ T4807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.601512][ T4807] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 109.613188][ T4429] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 109.625146][ T4429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.642414][ T4429] usb 3-1: Product: syz [ 109.653767][ T4429] usb 3-1: Manufacturer: syz [ 109.661486][ T4429] usb 3-1: SerialNumber: syz [ 109.758040][ T4807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.775914][ T4807] usb 5-1: config 0 descriptor?? [ 109.871825][ T4871] loop3: detected capacity change from 0 to 8192 [ 109.882441][ T4874] loop0: detected capacity change from 0 to 16 [ 109.883032][ T4242] usb 2-1: Using ep0 maxpacket: 32 [ 109.924542][ T4871] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 109.944210][ T4874] erofs: Unknown parameter './file3' [ 110.053170][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.077714][ T4242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.111427][ T4242] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 110.139927][ T4242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.191053][ T4242] usb 2-1: config 0 descriptor?? [ 110.273147][ T4807] wacom 0003:056A:00B0.0004: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 110.301807][ T4807] wacom 0003:056A:00B0.0004: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.4-1/input0 [ 110.338815][ T4807] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B0.0004/input/input5 [ 110.515939][ T4429] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 110.538854][ T4807] usb 5-1: USB disconnect, device number 3 [ 110.718727][ T4242] koneplus 0003:1E7D:2D51.0005: invalid report_size 58443 [ 110.727616][ T4242] koneplus 0003:1E7D:2D51.0005: item 0 2 1 7 parsing failed [ 110.735624][ T4242] koneplus 0003:1E7D:2D51.0005: parse failed [ 110.742914][ T4242] koneplus: probe of 0003:1E7D:2D51.0005 failed with error -22 [ 110.835513][ T4881] loop3: detected capacity change from 0 to 8192 [ 110.853823][ T4880] fido_id[4880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 110.872497][ T4881] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 110.923085][ T4429] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.990839][ T4462] usb 2-1: USB disconnect, device number 2 [ 111.003150][ T4429] usb 3-1: device firmware changed [ 111.039157][ T4429] usb 3-1: USB disconnect, device number 6 [ 111.118310][ T4885] loop4: detected capacity change from 0 to 512 [ 111.245396][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 111.324933][ T4885] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.532251][ T4885] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.152: invalid size [ 111.551777][ T4891] loop2: detected capacity change from 0 to 512 [ 111.593388][ T4885] EXT4-fs (loop4): Remounting filesystem read-only [ 111.612748][ T4891] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 111.673485][ T4891] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.153: invalid indirect mapped block 10 (level 1) [ 111.841238][ T4891] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.153: invalid indirect mapped block 8 (level 1) [ 111.871515][ T4897] loop0: detected capacity change from 0 to 16 [ 111.941600][ T4897] erofs: Unknown parameter './file3' [ 111.950765][ T4891] EXT4-fs (loop2): 1 truncate cleaned up [ 111.985316][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 112.392783][ T4902] loop4: detected capacity change from 0 to 1024 [ 112.437451][ T4902] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 112.448566][ T4902] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 112.538453][ T4902] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,nogrpid,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,discard,init_itable,mblk_io_submit,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 112.575049][ T4889] loop3: detected capacity change from 0 to 32768 [ 112.917342][ T4910] loop2: detected capacity change from 0 to 512 [ 112.977220][ T4910] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.040422][ T4910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e11c, mo2=0002] [ 113.056148][ T4910] System zones: 1-12 [ 113.061197][ T4910] EXT4-fs (loop2): orphan cleanup on readonly fs [ 113.088905][ T4910] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.161: bg 0: block 361: padding at end of block bitmap is not set [ 113.110329][ T4910] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 113.120509][ T4910] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.161: invalid indirect mapped block 12 (level 1) [ 113.136982][ T4910] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.161: invalid indirect mapped block 2 (level 2) [ 113.151741][ T4910] EXT4-fs (loop2): 1 truncate cleaned up [ 113.158602][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv0,errors=continue. Quota mode: none. [ 113.253046][ T4467] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.470950][ T4917] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 113.502931][ T4467] usb 5-1: Using ep0 maxpacket: 8 [ 113.564650][ T4336] udevd[4336]: incorrect ext4 checksum on /dev/loop2 [ 113.576952][ T4899] jfs_lookup: dtSearch returned -5 [ 113.629409][ T4467] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 113.665297][ T4467] usb 5-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.697182][ T4467] usb 5-1: config 0 interface 0 has no altsetting 0 [ 113.717460][ T4467] usb 5-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 113.767020][ T4467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.860487][ T4467] usb 5-1: config 0 descriptor?? [ 113.947685][ T4461] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.323095][ T4461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.333839][ T4461] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 114.342761][ T4461] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 114.352403][ T4461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.363849][ T4467] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 114.370744][ T4467] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 114.379725][ T4467] wacom 0003:056A:032A.0006: unknown main item tag 0x0 [ 114.387768][ T4461] usb 3-1: config 0 descriptor?? [ 114.397484][ T4467] wacom 0003:056A:032A.0006: hidraw0: USB HID v0.03 Device [HID 056a:032a] on usb-dummy_hcd.4-1/input0 [ 114.568761][ T4467] usb 5-1: USB disconnect, device number 4 [ 114.653033][ T4461] Bluetooth: Can't get state to change to load ram patch err [ 114.660562][ T4461] Bluetooth: Loading patch file failed [ 114.666272][ T4461] ath3k: probe of 3-1:0.0 failed with error -71 [ 114.675968][ T4461] usb 3-1: USB disconnect, device number 7 [ 114.877614][ T4939] set_capacity_and_notify: 3 callbacks suppressed [ 114.877633][ T4939] loop3: detected capacity change from 0 to 1024 [ 115.032330][ T4939] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 115.053035][ T4939] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 115.131132][ T4939] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,nogrpid,discard,max_batch_time=0x0000000000000003,data=ordered,mblk_io_submit,discard,init_itable,mblk_io_submit,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 115.148889][ T4940] loop1: detected capacity change from 0 to 8192 [ 115.214094][ T4940] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 116.262717][ T4954] loop2: detected capacity change from 0 to 4096 [ 116.300391][ T4938] loop0: detected capacity change from 0 to 32768 [ 116.335054][ T4954] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 116.367054][ T4963] loop1: detected capacity change from 0 to 16 [ 116.385075][ T4954] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 116.411334][ T4938] XFS (loop0): Mounting V5 Filesystem [ 116.417574][ T4963] erofs: Unknown parameter './file3' [ 116.432563][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 116.432580][ T26] audit: type=1800 audit(1770737475.492:2): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 116.480383][ T4807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.481008][ T4938] XFS (loop0): Ending clean mount [ 116.495931][ T4193] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 116.506661][ T4249] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.718236][ T4191] XFS (loop0): Unmounting Filesystem [ 116.753134][ T4807] usb 4-1: Using ep0 maxpacket: 16 [ 116.781136][ T4249] usb 5-1: Using ep0 maxpacket: 16 [ 116.801923][ T4974] loop2: detected capacity change from 0 to 256 [ 116.850094][ T4974] exfat: Deprecated parameter 'utf8' [ 116.892714][ T4974] exfat: Deprecated parameter 'namecase' [ 116.899378][ T4807] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.920701][ T4807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.937258][ T4974] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 116.953232][ T4807] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 116.966288][ T4807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.991411][ T4807] usb 4-1: config 0 descriptor?? [ 117.157139][ T4249] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.186994][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.216334][ T4249] usb 5-1: Product: syz [ 117.226518][ T4249] usb 5-1: Manufacturer: syz [ 117.241637][ T4249] usb 5-1: SerialNumber: syz [ 117.259446][ T4249] r8152-cfgselector 5-1: config 0 descriptor?? [ 117.421352][ T4985] loop0: detected capacity change from 0 to 256 [ 117.483943][ T4985] exfat: Deprecated parameter 'utf8' [ 117.491970][ T4985] exfat: Deprecated parameter 'namecase' [ 117.526432][ T4807] apple 0003:05AC:0274.0007: unbalanced delimiter at end of report description [ 117.537756][ T4807] apple 0003:05AC:0274.0007: parse failed [ 117.544655][ T4985] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001015b, chksum : 0xeba6baed, utbl_chksum : 0xe619d30d) [ 117.550725][ T4807] apple: probe of 0003:05AC:0274.0007 failed with error -22 [ 117.729630][ T4462] usb 4-1: USB disconnect, device number 2 [ 117.782997][ T4249] r8152-cfgselector 5-1: Unknown version 0x0000 [ 117.791896][ T4249] r8152-cfgselector 5-1: bad CDC descriptors [ 117.793534][ T4987] loop0: detected capacity change from 0 to 512 [ 117.840171][ T4249] r8152-cfgselector 5-1: Unknown version 0x0000 [ 117.867774][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 117.890934][ T4249] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 117.971170][ T4987] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.129478][ T4991] loop2: detected capacity change from 0 to 512 [ 118.199347][ T4991] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 118.348745][ T4997] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.641445][ T4996] loop3: detected capacity change from 0 to 4096 [ 119.676504][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 119.900103][ T5020] loop0: detected capacity change from 0 to 16 [ 120.038062][ T5020] erofs: Unknown parameter './file3' [ 120.119339][ T5021] loop4: detected capacity change from 0 to 8192 [ 120.126476][ T4461] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.163735][ T4235] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 120.204032][ T5021] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 120.462928][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 120.539256][ T5031] loop3: detected capacity change from 0 to 512 [ 120.603279][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.623447][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.642698][ T4235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.653105][ T4461] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 120.662376][ T5031] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 120.666532][ T4461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.680190][ T4235] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.697496][ T4235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.698493][ T5031] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.715604][ T4235] usb 3-1: config 0 descriptor?? [ 120.725712][ T4461] usb 2-1: config 0 descriptor?? [ 120.952942][ T4249] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.293172][ T4249] usb 1-1: Using ep0 maxpacket: 32 [ 121.475460][ T4235] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 121.494026][ T4235] HID 045e:07da: Invalid code 65791 type 1 [ 121.500606][ T4235] HID 045e:07da: Invalid code 768 type 1 [ 121.520464][ T4235] HID 045e:07da: Invalid code 769 type 1 [ 121.527132][ T4235] HID 045e:07da: Invalid code 770 type 1 [ 121.542280][ T4235] HID 045e:07da: Invalid code 771 type 1 [ 121.548789][ T4235] HID 045e:07da: Invalid code 772 type 1 [ 121.561323][ T4235] HID 045e:07da: Invalid code 773 type 1 [ 121.567554][ T4235] HID 045e:07da: Invalid code 774 type 1 [ 121.580205][ T4235] HID 045e:07da: Invalid code 775 type 1 [ 121.586687][ T4235] HID 045e:07da: Invalid code 776 type 1 [ 121.606901][ T4249] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 121.626427][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 121.647688][ T4249] usb 1-1: Product: syz [ 121.656054][ T4235] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input11 [ 121.699176][ T4461] wacom 0003:056A:00B4.0009: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 121.716392][ T4249] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 121.723045][ T4461] wacom 0003:056A:00B4.0009: hidraw0: USB HID v0.00 Device [HID 056a:00b4] on usb-dummy_hcd.1-1/input0 [ 121.738232][ T4461] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B4.0009/input/input12 [ 121.756114][ T4235] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 121.791566][ T4235] usb 3-1: USB disconnect, device number 8 [ 121.904013][ T5039] fido_id[5039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 121.906520][ T4467] usb 2-1: USB disconnect, device number 3 [ 122.007269][ T5041] fido_id[5041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 122.325576][ T5047] loop4: detected capacity change from 0 to 512 [ 122.351708][ T5047] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 122.375833][ T4249] usb 1-1: USB disconnect, device number 4 [ 122.473563][ T5046] loop3: detected capacity change from 0 to 8192 [ 122.654110][ T5046] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 122.670671][ T5054] loop1: detected capacity change from 0 to 1024 [ 122.681959][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 122.708731][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 123.280611][ T5054] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 123.333912][ T5054] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 123.433842][ T5062] loop4: detected capacity change from 0 to 512 [ 123.492194][ T4465] hfsplus: b-tree write err: -5, ino 4 [ 123.636409][ T5062] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 123.651422][ T5062] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.784459][ T5071] loop2: detected capacity change from 0 to 8192 [ 124.074207][ T5071] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 125.023927][ T5082] loop0: detected capacity change from 0 to 8192 [ 125.115672][ T5082] FAT-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 125.248054][ T5087] mmap: syz.2.218 (5087) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 126.260016][ T5101] capability: warning: `syz.0.221' uses deprecated v2 capabilities in a way that may be insecure [ 126.394022][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 126.512110][ T5104] loop2: detected capacity change from 0 to 512 [ 126.520764][ T5106] loop0: detected capacity change from 0 to 512 [ 126.541969][ T5104] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 126.693542][ T5106] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 126.863126][ T4462] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.102964][ T4462] usb 5-1: Using ep0 maxpacket: 16 [ 127.115331][ T5106] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 127.223891][ T4462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 127.414851][ T4462] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 127.505561][ T4462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.594163][ T4462] usb 5-1: config 0 descriptor?? [ 127.863036][ T4467] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.929169][ T5120] loop0: detected capacity change from 0 to 512 [ 127.979251][ T5118] loop2: detected capacity change from 0 to 8192 [ 128.005503][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.230: iget: bad extra_isize 90 (inode size 256) [ 128.035379][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.230: error while reading EA inode 11 err=-117 [ 128.052057][ T5120] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.084367][ T5118] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 128.097594][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.230: iget: bad extra_isize 90 (inode size 256) [ 128.104857][ T4462] logitech 0003:046D:C50C.000A: unknown main item tag 0x0 [ 128.127002][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.230: error while reading EA inode 11 err=-117 [ 128.139686][ T4467] usb 4-1: Using ep0 maxpacket: 8 [ 128.145800][ T4462] logitech 0003:046D:C50C.000A: unknown main item tag 0x0 [ 128.159995][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.230: iget: bad extra_isize 90 (inode size 256) [ 128.174191][ T4462] logitech 0003:046D:C50C.000A: unknown main item tag 0x0 [ 128.181360][ T4462] logitech 0003:046D:C50C.000A: unknown main item tag 0x0 [ 128.247842][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.230: error while reading EA inode 18 err=-117 [ 128.273385][ T4467] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.294476][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.230: iget: bad extra_isize 90 (inode size 256) [ 128.310037][ T4467] usb 4-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.333870][ T4462] logitech 0003:046D:C50C.000A: unknown main item tag 0x0 [ 128.369927][ T4462] logitech 0003:046D:C50C.000A: hidraw0: USB HID v0.83 Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 128.382094][ T4467] usb 4-1: config 2 interface 0 has no altsetting 0 [ 128.526614][ T5120] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.230: error while reading EA inode 18 err=-117 [ 128.573308][ T4462] usb 5-1: USB disconnect, device number 6 [ 128.606519][ T5131] loop1: detected capacity change from 0 to 8192 [ 128.620398][ T5120] EXT4-fs (loop0): 1 orphan inode deleted [ 128.707390][ T5131] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 128.723531][ T4467] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 128.866234][ T4467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.894302][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nodiscard,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue. Quota mode: none. [ 129.259041][ T4467] usb 4-1: Product: syz [ 129.273900][ T4467] usb 4-1: Manufacturer: syz [ 129.278673][ T4467] usb 4-1: SerialNumber: syz [ 129.341694][ T5135] fido_id[5135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 129.604561][ T4467] usb 4-1: USB disconnect, device number 3 [ 129.723306][ T5145] loop1: detected capacity change from 0 to 512 [ 129.780704][ T5145] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 130.933078][ T4173] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.018267][ T5141] loop2: detected capacity change from 0 to 32768 [ 131.068154][ T5141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.236 (5141) [ 131.097200][ T4242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.146994][ T5141] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 131.173149][ T4173] usb 2-1: Using ep0 maxpacket: 32 [ 131.240384][ T5141] BTRFS info (device loop2): setting nodatacow, compression disabled [ 131.352176][ T5141] BTRFS info (device loop2): turning on sync discard [ 131.373714][ T4173] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 131.412548][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 131.456241][ T5141] BTRFS info (device loop2): turning on flush-on-commit [ 131.507815][ T4173] usb 2-1: Product: syz [ 131.545483][ T5141] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.737070][ T4173] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 131.759177][ T5141] BTRFS info (device loop2): trying to use backup root at mount time [ 131.853031][ T5141] BTRFS info (device loop2): using free space tree [ 131.869947][ T5141] BTRFS info (device loop2): has skinny extents [ 132.102774][ T5161] loop4: detected capacity change from 0 to 8192 [ 132.120905][ T9] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 132.134813][ T5141] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 132.164331][ T5161] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 132.208543][ T5197] loop3: detected capacity change from 0 to 512 [ 132.251237][ T5197] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 132.303174][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.336684][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.383254][ T4242] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 132.392359][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.413726][ T4242] usb 1-1: config 0 descriptor?? [ 132.431338][ T4803] usb 2-1: USB disconnect, device number 4 [ 132.843628][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850407][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.054137][ T4242] playstation 0003:054C:0DF2.000B: item fetching failed at offset 1/5 [ 133.109808][ T4242] playstation 0003:054C:0DF2.000B: Parse failed [ 133.164361][ T4242] playstation: probe of 0003:054C:0DF2.000B failed with error -22 [ 133.250112][ T4346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4346) [ 133.266031][ T4242] usb 1-1: USB disconnect, device number 5 [ 133.328115][ T5203] loop1: detected capacity change from 0 to 256 [ 133.468402][ T5203] FAT-fs (loop1): Directory bread(block 64) failed [ 133.487369][ T5203] FAT-fs (loop1): Directory bread(block 65) failed [ 133.513911][ T5203] FAT-fs (loop1): Directory bread(block 66) failed [ 133.541398][ T5203] FAT-fs (loop1): Directory bread(block 67) failed [ 133.582084][ T5203] FAT-fs (loop1): Directory bread(block 68) failed [ 133.596910][ T5203] FAT-fs (loop1): Directory bread(block 69) failed [ 133.604157][ T5203] FAT-fs (loop1): Directory bread(block 70) failed [ 133.610730][ T5203] FAT-fs (loop1): Directory bread(block 71) failed [ 133.637157][ T5203] FAT-fs (loop1): Directory bread(block 72) failed [ 133.661658][ T5203] FAT-fs (loop1): Directory bread(block 73) failed [ 134.192996][ T4173] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.226108][ T5237] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 134.367042][ T5244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.263'. [ 134.437739][ T4173] usb 2-1: Using ep0 maxpacket: 32 [ 134.563218][ T4173] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.571429][ T4173] usb 2-1: config 0 has no interface number 0 [ 134.783241][ T4173] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 134.810205][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.874784][ T4173] usb 2-1: Product: syz [ 134.881079][ T4173] usb 2-1: Manufacturer: syz [ 134.904054][ T4173] usb 2-1: SerialNumber: syz [ 134.922533][ T4173] usb 2-1: config 0 descriptor?? [ 134.966155][ T4173] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 134.993160][ T4173] usb 2-1: selecting invalid altsetting 1 [ 135.003253][ T4173] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 135.055688][ T4173] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.099029][ T4173] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 135.118431][ T4173] usb 2-1: media controller created [ 135.164104][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.144365][ T4173] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 136.335676][ T4173] zl10353_read_register: readreg error (reg=127, ret==-71) [ 136.406071][ T4173] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 136.632100][ T4173] usb 2-1: USB disconnect, device number 5 [ 136.691003][ T5301] loop2: detected capacity change from 0 to 16 [ 136.764286][ T5301] erofs: Unknown parameter './file3' [ 137.057066][ T5264] loop0: detected capacity change from 0 to 32768 [ 137.149888][ T5310] loop1: detected capacity change from 0 to 8192 [ 137.204328][ T5310] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 138.019147][ T5328] loop2: detected capacity change from 0 to 24 [ 138.110556][ T5328] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 138.158784][ T5328] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 140.108956][ T5355] loop4: detected capacity change from 0 to 64 [ 140.131126][ T5357] loop2: detected capacity change from 0 to 16 [ 140.179799][ T5361] loop0: detected capacity change from 0 to 512 [ 140.213102][ T4467] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.221449][ T5357] erofs: Unknown parameter './file3' [ 140.249709][ T5361] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 140.473294][ T4467] usb 4-1: Using ep0 maxpacket: 16 [ 140.562957][ T4235] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.593194][ T4467] usb 4-1: config 7 has an invalid interface number: 181 but max is 0 [ 140.611114][ T4467] usb 4-1: config 7 has no interface number 0 [ 140.630947][ T4467] usb 4-1: config 7 interface 181 altsetting 4 endpoint 0x1 has invalid maxpacket 17594, setting to 64 [ 140.650879][ T4467] usb 4-1: config 7 interface 181 has no altsetting 0 [ 141.056141][ T5368] loop0: detected capacity change from 0 to 8192 [ 141.073613][ T5372] loop4: detected capacity change from 0 to 8192 [ 141.124562][ T5368] FAT-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 141.135141][ T5372] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 141.209234][ T4467] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=db.4d [ 141.218623][ T4467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.226721][ T4467] usb 4-1: Product: syz [ 141.230899][ T4467] usb 4-1: Manufacturer: syz [ 141.243138][ T4467] usb 4-1: SerialNumber: syz [ 141.283755][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.302999][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.325716][ T4235] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 141.339346][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.361309][ T4235] usb 2-1: config 0 descriptor?? [ 141.568076][ T5217] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.637000][ T4467] usb 4-1: USB disconnect, device number 4 [ 141.863015][ T5217] usb 3-1: Using ep0 maxpacket: 16 [ 142.003327][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.026895][ T5217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.059387][ T5217] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.083216][ T4235] hid-led: probe of 0003:0FC5:B080.000C failed with error -71 [ 142.108933][ T4235] usb 2-1: USB disconnect, device number 6 [ 142.136712][ T5217] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.176563][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.205633][ T5217] usb 3-1: config 0 descriptor?? [ 142.345518][ T5390] loop0: detected capacity change from 0 to 512 [ 142.801777][ T5390] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 143.030218][ T5390] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.233179][ T26] audit: type=1326 audit(1770737502.272:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dbf69cf79 code=0x0 [ 143.889547][ T5217] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000D/input/input15 [ 144.441988][ T5217] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 144.462660][ T5217] usb 3-1: USB disconnect, device number 9 [ 144.483097][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 144.492512][ T5410] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 144.730205][ T5413] fido_id[5413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.847762][ T5423] loop3: detected capacity change from 0 to 8192 [ 144.884075][ T5423] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 144.971647][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 145.185834][ T5432] loop0: detected capacity change from 0 to 4096 [ 145.245289][ T5434] loop2: detected capacity change from 0 to 4096 [ 145.267728][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 145.371039][ T5432] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 145.403053][ T5432] ntfs3: loop0: Failed to load $Extend. [ 145.418729][ T5434] ntfs: (device loop2): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 145.512291][ T5434] ntfs: volume version 3.1. [ 145.767815][ T4191] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 145.779634][ T4191] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 145.867303][ T5446] loop3: detected capacity change from 0 to 8192 [ 145.921472][ T5452] loop4: detected capacity change from 0 to 512 [ 145.944051][ T5446] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 146.041101][ T5452] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 148.610242][ T5465] loop0: detected capacity change from 0 to 512 [ 149.345593][ T5465] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 149.516943][ T26] audit: type=1326 audit(1770737508.582:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5472 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e18eaf79 code=0x7fc00000 [ 149.763531][ T5465] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.843411][ T26] audit: type=1326 audit(1770737508.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5472 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99e18eaf79 code=0x7fc00000 [ 149.877450][ T5486] loop3: detected capacity change from 0 to 4096 [ 149.888230][ T5490] loop1: detected capacity change from 0 to 512 [ 149.974253][ T5493] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.107917][ T5490] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 150.682160][ T5502] loop0: detected capacity change from 0 to 8192 [ 150.872738][ T5494] loop2: detected capacity change from 0 to 8192 [ 150.994106][ T5502] FAT-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 151.036515][ T5494] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 151.141561][ T5510] loop1: detected capacity change from 0 to 16 [ 151.222662][ T5510] erofs: (device loop1): mounted with root inode @ nid 36. [ 151.305675][ T5510] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 151.442407][ T5510] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 151.543507][ T5521] attempt to access beyond end of device [ 151.543507][ T5521] loop1: rw=524288, want=1342177304, limit=16 [ 151.648516][ T5521] attempt to access beyond end of device [ 151.648516][ T5521] loop1: rw=0, want=1342177280, limit=16 [ 151.737553][ T5523] loop3: detected capacity change from 0 to 512 [ 151.763098][ T26] audit: type=1800 audit(1770737510.812:6): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.348" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 151.967218][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 152.100964][ T5523] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.501958][ T5533] loop3: detected capacity change from 0 to 512 [ 152.746832][ T5533] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 152.764162][ T5533] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.491173][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 154.022470][ T5559] loop3: detected capacity change from 0 to 8192 [ 154.030150][ T5559] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 154.333070][ T4300] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.454035][ T5577] netlink: 6 bytes leftover after parsing attributes in process `syz.0.370'. [ 154.487214][ T5577] netlink: 6 bytes leftover after parsing attributes in process `syz.0.370'. [ 154.525655][ T5577] Zero length message leads to an empty skb [ 154.754021][ T4300] usb 2-1: Using ep0 maxpacket: 8 [ 154.810388][ T5590] loop3: detected capacity change from 0 to 512 [ 154.903042][ T4300] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.935361][ T4300] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.969730][ T5590] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 154.989124][ T4300] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.006528][ T5590] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.036955][ T4300] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.049522][ T4300] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.063221][ T4300] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.072845][ T4300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.034487][ T4300] usb 2-1: GET_CAPABILITIES returned 0 [ 157.040082][ T4300] usbtmc 2-1:16.0: can't read capabilities [ 157.058380][ T5609] device erspan0 entered promiscuous mode [ 157.133084][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.250480][ T5611] loop3: detected capacity change from 0 to 1024 [ 157.282072][ T4300] usb 2-1: USB disconnect, device number 7 [ 157.412872][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 157.413406][ T4267] hfsplus: b-tree write err: -5, ino 4 [ 157.553046][ T7] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 157.562172][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.603476][ T7] usb 1-1: config 0 descriptor?? [ 157.863028][ T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 157.895913][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.956406][ T5616] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 157.964906][ T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 157.972094][ T7] usb 1-1: media controller created [ 158.002184][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.064797][ T5607] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 158.171134][ T5622] loop1: detected capacity change from 0 to 8192 [ 158.265316][ T5622] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 158.275900][ T7] az6027: usb out operation failed. (-71) [ 158.303949][ T7] az6027: usb out operation failed. (-71) [ 158.309750][ T7] stb0899_attach: Driver disabled by Kconfig [ 158.346750][ T7] az6027: no front-end attached [ 158.346750][ T7] [ 158.412576][ T5621] loop4: detected capacity change from 0 to 32768 [ 158.453074][ T7] az6027: usb out operation failed. (-71) [ 158.464322][ T5621] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.472575][ T5621] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 158.483293][ T5621] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 158.483293][ T5621] inode = 1 19 [ 158.483293][ T5621] function = gfs2_check_internal_file_size, file = fs/gfs2/inode.h, line = 87 [ 158.503398][ T5621] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 158.517154][ T5621] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 158.526107][ T5621] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 158.534421][ T5621] gfs2: fsid=syz:syz.0: File system withdrawn [ 158.540538][ T5621] CPU: 0 PID: 5621 Comm: syz.4.386 Not tainted syzkaller #0 [ 158.547852][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.557949][ T5621] Call Trace: [ 158.561259][ T5621] [ 158.564211][ T5621] dump_stack_lvl+0x188/0x250 [ 158.568924][ T5621] ? kobject_uevent_env+0x371/0x890 [ 158.574158][ T5621] ? show_regs_print_info+0x20/0x20 [ 158.579394][ T5621] ? load_image+0x400/0x400 [ 158.583967][ T5621] ? kobject_uevent_env+0x371/0x890 [ 158.589310][ T5621] ? lockref_put_or_lock+0x6e/0xb0 [ 158.594469][ T5621] gfs2_withdraw+0x1149/0x1490 [ 158.599287][ T5621] ? gfs2_lm+0x240/0x240 [ 158.603948][ T5621] ? gfs2_glock_nq+0xcb0/0x1550 [ 158.609306][ T5621] ? gfs2_consist_inode_i+0xc0/0xe0 [ 158.614553][ T5621] gfs2_jdesc_check+0x137/0x290 [ 158.619444][ T5621] init_journal+0xd02/0x22f0 [ 158.624096][ T5621] ? end_bio_io_page+0x100/0x100 [ 158.629090][ T5621] ? vsnprintf+0x1b21/0x1c20 [ 158.633736][ T5621] ? snprintf+0xe5/0x140 [ 158.638023][ T5621] ? init_journal+0x74d/0x22f0 [ 158.642961][ T5621] ? vscnprintf+0x80/0x80 [ 158.647331][ T5621] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 158.652480][ T5621] init_inodes+0xdb/0x320 [ 158.656848][ T5621] gfs2_fill_super+0x16b2/0x1f00 [ 158.661844][ T5621] ? gfs2_reconfigure+0xd30/0xd30 [ 158.666907][ T5621] ? gfs2_glock_nq_num+0x82/0x1b0 [ 158.671979][ T5621] ? sb_set_blocksize+0xa5/0xe0 [ 158.676872][ T5621] get_tree_bdev+0x3f1/0x610 [ 158.681499][ T5621] ? gfs2_reconfigure+0xd30/0xd30 [ 158.686556][ T5621] gfs2_get_tree+0x4d/0x1e0 [ 158.691104][ T5621] vfs_get_tree+0x88/0x270 [ 158.695657][ T5621] do_new_mount+0x24a/0xa40 [ 158.700381][ T5621] __se_sys_mount+0x2e3/0x3d0 [ 158.705104][ T5621] ? __x64_sys_mount+0xc0/0xc0 [ 158.709909][ T5621] ? lockdep_hardirqs_on+0x94/0x140 [ 158.715140][ T5621] ? __x64_sys_mount+0x1c/0xc0 [ 158.719948][ T5621] do_syscall_64+0x4c/0xa0 [ 158.724391][ T5621] ? clear_bhb_loop+0x30/0x80 [ 158.729166][ T5621] ? clear_bhb_loop+0x30/0x80 [ 158.733852][ T5621] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.739749][ T5621] RIP: 0033:0x7f99e18ec20a [ 158.744180][ T5621] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.763918][ T5621] RSP: 002b:00007f99dfb44e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.772339][ T5621] RAX: ffffffffffffffda RBX: 00007f99dfb44ee0 RCX: 00007f99e18ec20a [ 158.780313][ T5621] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f99dfb44ea0 [ 158.788374][ T5621] RBP: 0000200000000100 R08: 00007f99dfb44ee0 R09: 0000000000000010 [ 158.796349][ T5621] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000012500 [ 158.804351][ T5621] R13: 00007f99dfb44ea0 R14: 000000000001260c R15: 0000200000000040 [ 158.812341][ T5621] [ 158.815526][ T5621] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 158.829432][ T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 158.839519][ T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 158.866689][ T7] dvb-usb: schedule remote query interval to 400 msecs. [ 158.874122][ T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 158.913494][ T7] usb 1-1: USB disconnect, device number 6 [ 159.093170][ T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.153284][ T5629] loop4: detected capacity change from 0 to 64 [ 160.997184][ T5660] loop4: detected capacity change from 0 to 8192 [ 161.034600][ T5660] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 162.349081][ T5673] loop0: detected capacity change from 0 to 512 [ 162.447025][ T5675] loop4: detected capacity change from 0 to 8 [ 162.486600][ T5675] squashfs image failed sanity check [ 162.781238][ T5681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 162.791110][ T5681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 162.812971][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.900934][ T5679] loop3: detected capacity change from 0 to 4096 [ 163.090311][ T5686] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.207739][ T7] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.222735][ T7] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.233798][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.249261][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.303418][ T5677] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.537749][ T5700] loop3: detected capacity change from 0 to 512 [ 164.667732][ T5700] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 164.693396][ T5700] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.887258][ T5606] Set syz1 is full, maxelem 65536 reached [ 165.916717][ T7] usb 1-1: USB disconnect, device number 7 [ 166.036070][ T5715] loop3: detected capacity change from 0 to 256 [ 166.140129][ T5715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 166.890358][ T5728] loop0: detected capacity change from 0 to 8192 [ 167.075828][ T5728] FAT-fs (loop0): Unrecognized mount option "appraise_type=imasig" or missing value [ 167.832596][ T5742] loop2: detected capacity change from 0 to 256 [ 167.907303][ T5742] exfat: Deprecated parameter 'utf8' [ 167.912698][ T5742] exfat: Deprecated parameter 'namecase' [ 167.956439][ T5742] exfat: Deprecated parameter 'utf8' [ 167.988540][ T5742] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 168.013490][ T5749] loop3: detected capacity change from 0 to 512 [ 168.162389][ T5742] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 168.183107][ T5749] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 168.236629][ T5753] loop0: detected capacity change from 0 to 512 [ 168.252999][ T5749] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.289830][ T5742] exFAT-fs (loop2): hint_cluster is invalid (1) [ 168.401964][ T5753] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.451931][ T5742] exFAT-fs (loop2): error, invalid access to exfat cache (entry 0x00000000) [ 168.473010][ T5753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.508650][ T5742] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805fd114e0 iblock : 9, err : -5) [ 168.525730][ T5742] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 168.550427][ T5753] EXT4-fs (loop0): 1 truncate cleaned up [ 168.560591][ T5742] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 168.803265][ T5753] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001df,init_itable,dioread_nolock,,errors=continue. Quota mode: none. [ 169.068135][ T5762] loop1: detected capacity change from 0 to 256 [ 169.171848][ T5762] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 169.287346][ T5764] loop0: detected capacity change from 0 to 512 [ 169.344450][ T1444] attempt to access beyond end of device [ 169.344450][ T1444] loop2: rw=1, want=34359738496, limit=256 [ 169.470021][ T5764] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 169.584241][ T5764] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.788480][ T5784] loop2: detected capacity change from 0 to 512 [ 169.876676][ T5787] loop4: detected capacity change from 0 to 512 [ 169.911779][ T5791] syz.3.444[5791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.911886][ T5791] syz.3.444[5791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.950082][ T5784] EXT4-fs (loop2): Ignoring removed nobh option [ 169.991503][ T5787] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 170.027954][ T5784] EXT4-fs error (device loop2): __ext4_iget:4912: inode #11: block 1: comm syz.2.440: invalid block [ 170.050582][ T5784] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.440: couldn't read orphan inode 11 (err -117) [ 170.064350][ T5787] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.101262][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nodiscard,sysvgroups,jqfmt=vfsold,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback. [ 170.300891][ T5807] loop1: detected capacity change from 0 to 256 [ 171.103919][ T5814] loop3: detected capacity change from 0 to 1024 [ 171.270200][ T5814] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 171.355961][ T5814] hfsplus: xattr search failed [ 171.524602][ T5817] loop4: detected capacity change from 0 to 4096 [ 171.648932][ T144] hfsplus: b-tree write err: -5, ino 4 [ 171.852911][ T5817] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 171.932467][ T5831] loop2: detected capacity change from 0 to 512 [ 171.978565][ T1444] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 171.991357][ T4185] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 171.998429][ T4185] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.184144][ T4185] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 172.214039][ T1444] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 172.232367][ T4185] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 172.983154][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 173.089286][ T5831] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.547805][ T5860] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.783476][ T5858] loop4: detected capacity change from 0 to 256 [ 173.863614][ T5858] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 174.331006][ T5849] loop0: detected capacity change from 0 to 32768 [ 174.599578][ T5849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.461 (5849) [ 175.119272][ T5879] loop4: detected capacity change from 0 to 8192 [ 175.204219][ T5879] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 175.273405][ T5849] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 175.292174][ T5849] BTRFS info (device loop0): enabling auto defrag [ 175.306403][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 175.331631][ T5849] BTRFS info (device loop0): use no compression [ 175.339249][ T5849] BTRFS info (device loop0): force clearing of disk cache [ 175.533092][ T5849] BTRFS info (device loop0): max_inline at 4096 [ 175.542454][ T5849] BTRFS info (device loop0): disabling free space tree [ 175.704529][ T5849] BTRFS info (device loop0): has skinny extents [ 176.426242][ T5849] BTRFS error (device loop0): open_ctree failed: -12 [ 177.167436][ T5927] loop4: detected capacity change from 0 to 8192 [ 177.351858][ T5927] FAT-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 177.679145][ T5930] loop3: detected capacity change from 0 to 16 [ 177.718187][ T5930] erofs: Unknown parameter './file3' [ 178.522981][ T5936] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.904833][ T4346] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4346) [ 179.576135][ T5961] capability: warning: `syz.0.491' uses 32-bit capabilities (legacy support in use) [ 179.605901][ T5966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.491'. [ 179.822955][ T5936] usb 3-1: device not accepting address 10, error -71 [ 179.884191][ T5972] syz.0.495[5972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.884350][ T5972] syz.0.495[5972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.134462][ T5980] netlink: 7 bytes leftover after parsing attributes in process `syz.3.498'. [ 180.202878][ T5936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 180.523524][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 180.963241][ T5217] Bluetooth: hci3: command 0x0406 tx timeout [ 180.969335][ T5217] Bluetooth: hci4: command 0x0406 tx timeout [ 181.033387][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 181.042487][ T5217] Bluetooth: hci2: command 0x0406 tx timeout [ 181.042558][ T4228] Bluetooth: hci0: command 0x0406 tx timeout [ 181.055446][ T5936] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 181.085250][ T5936] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.117052][ T5936] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.148576][ T5936] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.329018][ T6012] loop0: detected capacity change from 0 to 64 [ 181.347065][ T5936] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.357837][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.611393][ T6019] genirq: Flags mismatch irq 1. 00000000 (dt2814) vs. 00000080 (i8042) [ 181.687814][ T4191] VFS: Lookup of '.¨' in minix loop0 would have caused loop [ 181.727678][ T4191] VFS: Lookup of '.¨' in minix loop0 would have caused loop [ 181.843878][ T5936] usb 3-1: GET_CAPABILITIES returned 0 [ 181.851050][ T5936] usbtmc 3-1:16.0: can't read capabilities [ 182.013425][ T6022] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 182.596456][ T4235] usb 3-1: USB disconnect, device number 11 [ 183.026011][ T6030] loop3: detected capacity change from 0 to 1024 [ 183.645066][ T6045] input: syz0 as /devices/virtual/input/input17 [ 183.872385][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.031869][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.094398][ T6062] loop3: detected capacity change from 0 to 256 [ 184.224054][ T6062] exfat: Deprecated parameter 'utf8' [ 184.241946][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.255062][ T6062] exfat: Deprecated parameter 'utf8' [ 184.260426][ T6062] exfat: Deprecated parameter 'utf8' [ 184.333764][ T6062] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 184.397272][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.192987][ T5936] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 185.333173][ T5935] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 185.570595][ T6117] loop2: detected capacity change from 0 to 512 [ 185.583311][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 185.652133][ T6117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.703028][ T5935] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 185.722926][ T5935] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.733482][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.742558][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.759180][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 185.773205][ T5935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.784069][ T6117] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.795118][ T5936] usb 2-1: Product: syz [ 185.799318][ T5936] usb 2-1: Manufacturer: syz [ 185.804537][ T5935] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.814631][ T5936] usb 2-1: SerialNumber: syz [ 185.820070][ T5935] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.832822][ T6117] EXT4-fs (loop2): shut down requested (1) [ 185.834293][ T5936] usb 2-1: config 0 descriptor?? [ 185.844963][ T5935] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.854278][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.012193][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.063338][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.067067][ T6137] loop2: detected capacity change from 0 to 512 [ 186.081041][ T6088] device bridge_slave_0 entered promiscuous mode [ 186.099214][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.103396][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 186.107071][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.133020][ T5935] usb 4-1: GET_CAPABILITIES returned 0 [ 186.138818][ T5935] usbtmc 4-1:16.0: can't read capabilities [ 186.140051][ T6088] device bridge_slave_1 entered promiscuous mode [ 186.210204][ T6137] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.548: inode #1: comm syz.2.548: iget: illegal inode # [ 186.262268][ T6137] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.548: error while reading EA inode 1 err=-117 [ 186.299745][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.368765][ T6137] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.548: inode #1: comm syz.2.548: iget: illegal inode # [ 186.407878][ T4300] usb 4-1: USB disconnect, device number 5 [ 186.445511][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.504410][ T6137] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.548: error while reading EA inode 1 err=-117 [ 186.550393][ T6137] EXT4-fs (loop2): 1 orphan inode deleted [ 186.582307][ T6137] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 186.611883][ T5936] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 186.628607][ T6088] team0: Port device team_slave_0 added [ 186.653862][ T5936] usb 2-1: USB disconnect, device number 8 [ 186.814296][ T6088] team0: Port device team_slave_1 added [ 186.901081][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.940657][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.011235][ T6152] loop4: detected capacity change from 0 to 64 [ 187.042217][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.053716][ T5936] Bluetooth: hci2: command 0x0409 tx timeout [ 187.111728][ T6154] netlink: 284 bytes leftover after parsing attributes in process `syz.3.553'. [ 187.154830][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.179290][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.248501][ T4467] hid-generic 0005:046D:0A0E.000E: item fetching failed at offset 0/1 [ 187.281507][ T4467] hid-generic: probe of 0005:046D:0A0E.000E failed with error -22 [ 187.288192][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.337502][ T6167] loop4: detected capacity change from 0 to 256 [ 187.349208][ T6168] loop3: detected capacity change from 0 to 1024 [ 187.440236][ T6167] FAT-fs (loop4): Directory bread(block 64) failed [ 187.447455][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 187.513487][ T6167] FAT-fs (loop4): Directory bread(block 65) failed [ 187.549192][ T6167] FAT-fs (loop4): Directory bread(block 66) failed [ 187.585718][ T6167] FAT-fs (loop4): Directory bread(block 67) failed [ 187.616250][ T6167] FAT-fs (loop4): Directory bread(block 68) failed [ 187.638344][ T6175] program syz.1.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.647859][ T6167] FAT-fs (loop4): Directory bread(block 69) failed [ 187.666005][ T6088] device hsr_slave_0 entered promiscuous mode [ 187.673219][ T6167] FAT-fs (loop4): Directory bread(block 70) failed [ 187.689152][ T6088] device hsr_slave_1 entered promiscuous mode [ 187.695975][ T6167] FAT-fs (loop4): Directory bread(block 71) failed [ 187.717141][ T6088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.723072][ T6167] FAT-fs (loop4): Directory bread(block 72) failed [ 187.731451][ T6167] FAT-fs (loop4): Directory bread(block 73) failed [ 187.748316][ T6088] Cannot create hsr debugfs directory [ 188.080679][ T9] device hsr_slave_0 left promiscuous mode [ 188.102908][ T4235] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.140179][ T9] device hsr_slave_1 left promiscuous mode [ 188.183295][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.223027][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.265604][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.303093][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.319100][ T9] device bridge_slave_1 left promiscuous mode [ 188.332110][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.436245][ T9] device bridge_slave_0 left promiscuous mode [ 188.442477][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.475559][ T9] device veth1_macvtap left promiscuous mode [ 188.481956][ T9] device veth0_macvtap left promiscuous mode [ 188.492600][ T9] device veth1_vlan left promiscuous mode [ 188.499003][ T9] device veth0_vlan left promiscuous mode [ 188.523130][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 188.622934][ T4235] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 188.720787][ T9] team0 (unregistering): Port device team_slave_1 removed [ 188.738619][ T9] team0 (unregistering): Port device team_slave_0 removed [ 188.754948][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.773544][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.833245][ T4235] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 188.842340][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.851032][ T4235] usb 4-1: Product: syz [ 188.856537][ T4235] usb 4-1: Manufacturer: syz [ 188.861172][ T4235] usb 4-1: SerialNumber: syz [ 188.871192][ T9] bond0 (unregistering): Released all slaves [ 188.971539][ T6191] netlink: 'syz.2.563': attribute type 8 has an invalid length. [ 189.168658][ T5936] Bluetooth: hci2: command 0x041b tx timeout [ 189.210969][ T6201] loop4: detected capacity change from 0 to 256 [ 189.304144][ T6201] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d) [ 189.362597][ T26] audit: type=1800 audit(1770737548.422:7): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.567" name="file1" dev="loop4" ino=1048715 res=0 errno=0 [ 189.392960][ T5218] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.437777][ T26] audit: type=1800 audit(1770737548.482:8): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.567" name="file1" dev="loop4" ino=1048715 res=0 errno=0 [ 189.494608][ T6088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.512260][ T6088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.548150][ T6088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.584671][ T6088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.693614][ T4235] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 189.802492][ T6227] loop4: detected capacity change from 0 to 16 [ 189.841693][ T6227] erofs: Unknown parameter './file3' [ 189.853051][ T5218] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.873134][ T5218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.889489][ T5218] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 189.914573][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.925494][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.938469][ T4300] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 189.946039][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.984525][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.020826][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.046137][ T5218] usb 2-1: config 0 descriptor?? [ 190.072320][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.098931][ T4235] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.132620][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.172260][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.179401][ T4428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.187444][ T4235] usb 4-1: device firmware changed [ 190.203904][ T4235] usb 4-1: USB disconnect, device number 6 [ 190.733283][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.003481][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.031305][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.037957][ T5218] lenovo 0003:17EF:60A3.000F: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0 [ 191.086817][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.093549][ T6236] loop3: detected capacity change from 0 to 256 [ 191.094010][ T4428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.113169][ T4300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.133037][ T4300] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 191.151405][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.167731][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.176219][ T6236] FAT-fs (loop3): Directory bread(block 64) failed [ 191.196467][ T6236] FAT-fs (loop3): Directory bread(block 65) failed [ 191.201038][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.205255][ T4300] usb 3-1: config 0 descriptor?? [ 191.212353][ T4467] Bluetooth: hci2: command 0x040f tx timeout [ 191.226674][ T6236] FAT-fs (loop3): Directory bread(block 66) failed [ 191.243345][ T6236] FAT-fs (loop3): Directory bread(block 67) failed [ 191.272018][ T6236] FAT-fs (loop3): Directory bread(block 68) failed [ 191.280852][ T4467] usb 2-1: USB disconnect, device number 9 [ 191.289365][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.304008][ T6236] FAT-fs (loop3): Directory bread(block 69) failed [ 191.310684][ T6236] FAT-fs (loop3): Directory bread(block 70) failed [ 191.362603][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.364666][ T6236] FAT-fs (loop3): Directory bread(block 71) failed [ 191.397570][ T6237] fido_id[6237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 191.428459][ T6236] FAT-fs (loop3): Directory bread(block 72) failed [ 191.433872][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.442863][ T6236] FAT-fs (loop3): Directory bread(block 73) failed [ 191.477093][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.526739][ T6088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.564754][ T6088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.588256][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.617588][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.643701][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.665646][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.694030][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.720478][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.730079][ T6243] loop4: detected capacity change from 0 to 512 [ 191.737993][ T4300] wacom 0003:056A:00BC.0010: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 191.781119][ T4300] wacom 0003:056A:00BC.0010: hidraw0: USB HID v10.00 Device [HID 056a:00bc] on usb-dummy_hcd.2-1/input0 [ 191.833783][ T6243] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 191.854032][ T6243] EXT4-fs (loop4): Ignoring removed nobh option [ 191.855548][ T4300] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BC.0010/input/input18 [ 191.860511][ T6243] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 191.882899][ T6243] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 191.923266][ T6248] netlink: 'syz.1.576': attribute type 8 has an invalid length. [ 192.035291][ T4300] usb 3-1: USB disconnect, device number 12 [ 192.332183][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.336976][ T6257] fido_id[6257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 192.341778][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.410804][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.532970][ T4228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.772887][ T4228] usb 4-1: Using ep0 maxpacket: 8 [ 192.803005][ T4300] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.896873][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.926818][ T4228] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 192.955722][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.989813][ T4228] usb 4-1: config 0 descriptor?? [ 193.024945][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.045141][ T4228] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 193.050631][ T6255] loop1: detected capacity change from 0 to 32768 [ 193.052704][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.072939][ T4300] usb 5-1: Using ep0 maxpacket: 8 [ 193.130515][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.173617][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.191955][ T6255] JBD2: Ignoring recovery information on journal [ 193.203110][ T4300] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 193.221733][ T4300] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.242824][ T4300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.256417][ T4300] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.260807][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.273978][ T4300] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.287427][ T4300] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.296560][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.347493][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.355340][ T4467] Bluetooth: hci2: command 0x0419 tx timeout [ 193.377542][ T6255] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 193.398357][ T6088] device veth0_vlan entered promiscuous mode [ 193.456467][ T6088] device veth1_vlan entered promiscuous mode [ 193.514169][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.553525][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.563300][ T4300] usb 5-1: GET_CAPABILITIES returned 0 [ 193.570175][ T4300] usbtmc 5-1:16.0: can't read capabilities [ 193.585508][ T6088] device veth0_macvtap entered promiscuous mode [ 193.622521][ T6088] device veth1_macvtap entered promiscuous mode [ 193.688095][ T6292] loop2: detected capacity change from 0 to 512 [ 193.698523][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.722707][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 193.756888][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.788097][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.788950][ T4235] usb 5-1: USB disconnect, device number 7 [ 193.813467][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.833362][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.864679][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.883136][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.904086][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.915633][ T4228] gspca_vc032x: reg_w err -71 [ 193.920481][ T4228] vc032x: probe of 4-1:0.0 failed with error -71 [ 193.935203][ T4228] usb 4-1: USB disconnect, device number 7 [ 193.945997][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.960348][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.015018][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.040888][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.068797][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.086706][ T6292] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000000008,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 194.118456][ T6292] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.156015][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.207808][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.234806][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.241193][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.250056][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.308970][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.358630][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.412882][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.424009][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.462883][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.522087][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.552736][ T6088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.562168][ T6088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.588879][ T6316] loop3: detected capacity change from 0 to 2048 [ 194.604247][ T6088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.661747][ T6088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.731693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.742600][ T6316] NILFS (loop3): invalid segment: Magic number mismatch [ 194.748439][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.218465][ T6321] loop1: detected capacity change from 0 to 8192 [ 195.542978][ T6316] NILFS (loop3): trying rollback from an earlier position [ 195.684197][ T6321] FAT-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 195.711315][ T6316] NILFS (loop3): recovery complete [ 195.801736][ T6328] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.003048][ T5931] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.090859][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.133002][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.194570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.222545][ T4464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.240143][ T4464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.272921][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 196.296026][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.394667][ T5931] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 196.421217][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.495307][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.499310][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 196.525919][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.597'. [ 196.527246][ T5931] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.541835][ T6347] bridge0: port 3(vlan2) entered blocking state [ 196.548818][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.560156][ T6347] bridge0: port 3(vlan2) entered disabled state [ 196.582906][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.601064][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.785273][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.600'. [ 196.814863][ T6358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.600'. [ 196.986057][ T6366] loop1: detected capacity change from 0 to 512 [ 197.003048][ T5931] usb 5-1: GET_CAPABILITIES returned 0 [ 197.008740][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 197.095749][ T6366] EXT4-fs (loop1): 1 truncate cleaned up [ 197.112182][ T6366] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 197.303065][ T4228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.339282][ T4300] usb 5-1: USB disconnect, device number 8 [ 197.811039][ T6380] loop5: detected capacity change from 0 to 8192 [ 198.061216][ T6380] FAT-fs (loop5): Unrecognized mount option "appraise_type=imasig" or missing value [ 198.116541][ T6366] [ 198.118931][ T6366] ====================================================== [ 198.125959][ T6366] WARNING: possible circular locking dependency detected [ 198.133004][ T6366] syzkaller #0 Not tainted [ 198.137426][ T6366] ------------------------------------------------------ [ 198.144455][ T6366] syz.1.602/6366 is trying to acquire lock: [ 198.150360][ T6366] ffff88807139da80 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 198.160120][ T6366] [ 198.160120][ T6366] but task is already holding lock: [ 198.167503][ T6366] ffff888077704bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 198.177643][ T6366] [ 198.177643][ T6366] which lock already depends on the new lock. [ 198.177643][ T6366] [ 198.188066][ T6366] [ 198.188066][ T6366] the existing dependency chain (in reverse order) is: [ 198.197102][ T6366] [ 198.197102][ T6366] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 198.205563][ T6366] percpu_down_read+0x46/0x1b0 [ 198.210883][ T6366] ext4_writepages+0x20f/0x2df0 [ 198.216297][ T6366] do_writepages+0x476/0x6e0 [ 198.221441][ T6366] __writeback_single_inode+0x153/0xda0 [ 198.227539][ T6366] writeback_single_inode+0x3cb/0x8e0 [ 198.233473][ T6366] write_inode_now+0x23b/0x2c0 [ 198.238790][ T6366] iput+0x5ab/0x8a0 [ 198.243145][ T6366] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 198.249068][ T6366] ext4_xattr_block_set+0x4fd/0x2d20 [ 198.254901][ T6366] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 198.261261][ T6366] __ext4_expand_extra_isize+0x301/0x3e0 [ 198.262913][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 198.267432][ T6366] __ext4_mark_inode_dirty+0x469/0x700 [ 198.267458][ T6366] ext4_evict_inode+0xa8d/0x1090 [ 198.284102][ T6366] evict+0x4c9/0x8d0 [ 198.288554][ T6366] ext4_orphan_cleanup+0xad2/0x1320 [ 198.294304][ T6366] ext4_fill_super+0x8e25/0x95a0 [ 198.299788][ T6366] mount_bdev+0x287/0x3c0 [ 198.304663][ T6366] legacy_get_tree+0xe6/0x180 [ 198.309902][ T6366] vfs_get_tree+0x88/0x270 [ 198.314878][ T6366] do_new_mount+0x24a/0xa40 [ 198.319940][ T6366] __se_sys_mount+0x2e3/0x3d0 [ 198.325166][ T6366] do_syscall_64+0x4c/0xa0 [ 198.330127][ T6366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.336573][ T6366] [ 198.336573][ T6366] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 198.344161][ T6366] __lock_acquire+0x2c42/0x7d10 [ 198.349575][ T6366] lock_acquire+0x19e/0x400 [ 198.354644][ T6366] down_write+0x38/0x60 [ 198.359364][ T6366] ext4_destroy_inline_data+0x24/0xe0 [ 198.365285][ T6366] ext4_writepages+0x670/0x2df0 [ 198.370685][ T6366] do_writepages+0x476/0x6e0 [ 198.375822][ T6366] filemap_fdatawrite_wbc+0x1eb/0x240 [ 198.381743][ T6366] file_write_and_wait_range+0x14d/0x220 [ 198.387935][ T6366] ext4_sync_file+0x1ff/0xae0 [ 198.393171][ T6366] ext4_buffered_write_iter+0x338/0x3b0 [ 198.394700][ T4228] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.399269][ T6366] ext4_file_write_iter+0x74d/0x1700 [ 198.413076][ T6366] vfs_write+0x745/0xd60 [ 198.416610][ T4228] usb 4-1: config 0 has no interface number 0 [ 198.417859][ T6366] __x64_sys_pwrite64+0x19a/0x220 [ 198.417884][ T6366] do_syscall_64+0x4c/0xa0 [ 198.434450][ T6366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.440896][ T6366] [ 198.440896][ T6366] other info that might help us debug this: [ 198.440896][ T6366] [ 198.451151][ T6366] Possible unsafe locking scenario: [ 198.451151][ T6366] [ 198.458618][ T6366] CPU0 CPU1 [ 198.464002][ T6366] ---- ---- [ 198.469384][ T6366] lock(&sbi->s_writepages_rwsem); [ 198.474609][ T6366] lock(&ei->xattr_sem); [ 198.481517][ T6366] lock(&sbi->s_writepages_rwsem); [ 198.489266][ T6366] lock(&ei->xattr_sem); [ 198.493626][ T6366] [ 198.493626][ T6366] *** DEADLOCK *** [ 198.493626][ T6366] [ 198.501785][ T6366] 2 locks held by syz.1.602/6366: [ 198.506826][ T6366] #0: ffff888077702460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 198.515764][ T6366] #1: ffff888077704bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 198.526336][ T6366] [ 198.526336][ T6366] stack backtrace: [ 198.532251][ T6366] CPU: 1 PID: 6366 Comm: syz.1.602 Not tainted syzkaller #0 [ 198.539568][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 198.549641][ T6366] Call Trace: [ 198.552948][ T6366] [ 198.555903][ T6366] dump_stack_lvl+0x188/0x250 [ 198.560621][ T6366] ? load_image+0x400/0x400 [ 198.565151][ T6366] ? show_regs_print_info+0x20/0x20 [ 198.570386][ T6366] ? print_circular_bug+0x12b/0x1a0 [ 198.575629][ T6366] check_noncircular+0x296/0x330 [ 198.580603][ T6366] ? add_chain_block+0x940/0x940 [ 198.585646][ T6366] ? lockdep_lock+0xf1/0x1f0 [ 198.590267][ T6366] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 198.595884][ T4228] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 198.596276][ T6366] ? mark_lock+0x94/0x320 [ 198.609613][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.609626][ T6366] __lock_acquire+0x2c42/0x7d10 [ 198.622467][ T6366] ? __schedule+0x11f7/0x43c0 [ 198.625428][ T4228] usb 4-1: Product: syz [ 198.627166][ T6366] ? verify_lock_unused+0x140/0x140 [ 198.634594][ T4228] usb 4-1: Manufacturer: syz [ 198.636520][ T6366] ? verify_lock_unused+0x140/0x140 [ 198.636547][ T6366] ? mark_lock+0x94/0x320 [ 198.636570][ T6366] lock_acquire+0x19e/0x400 [ 198.636590][ T6366] ? ext4_destroy_inline_data+0x24/0xe0 [ 198.636613][ T6366] ? preempt_schedule_common+0xa5/0xd0 [ 198.636635][ T6366] ? read_lock_is_recursive+0x10/0x10 [ 198.636657][ T6366] ? preempt_schedule+0xbc/0xd0 [ 198.636676][ T6366] ? schedule_preempt_disabled+0x20/0x20 [ 198.636698][ T6366] ? rcu_read_lock_any_held+0xb0/0x130 [ 198.636722][ T6366] ? ext4_journal_check_start+0x180/0x250 [ 198.636745][ T6366] down_write+0x38/0x60 [ 198.636765][ T6366] ? ext4_destroy_inline_data+0x24/0xe0 [ 198.636784][ T6366] ext4_destroy_inline_data+0x24/0xe0 [ 198.636804][ T6366] ext4_writepages+0x670/0x2df0 [ 198.636831][ T6366] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 198.636855][ T6366] ? lock_chain_count+0x20/0x20 [ 198.636876][ T6366] ? verify_lock_unused+0x140/0x140 [ 198.636902][ T6366] ? lockdep_hardirqs_on+0x94/0x140 [ 198.636930][ T6366] ? ext4_readpage+0x2e0/0x2e0 [ 198.636949][ T6366] ? finish_lock_switch+0x12f/0x280 [ 198.636970][ T6366] ? finish_task_switch+0x12f/0x640 [ 198.636992][ T6366] ? __switch_to_asm+0x34/0x60 [ 198.637019][ T6366] ? __lock_acquire+0x7d10/0x7d10 [ 198.637040][ T6366] ? do_raw_spin_lock+0x128/0x2f0 [ 198.637062][ T6366] ? do_raw_spin_unlock+0x11d/0x230 [ 198.637081][ T6366] ? ext4_readpage+0x2e0/0x2e0 [ 198.637102][ T6366] do_writepages+0x476/0x6e0 [ 198.637126][ T6366] ? preempt_schedule+0xbc/0xd0 [ 198.637146][ T6366] ? preempt_schedule_common+0xa5/0xd0 [ 198.637167][ T6366] ? preempt_schedule+0xbc/0xd0 [ 198.637186][ T6366] ? __writepage+0x130/0x130 [ 198.647954][ T4228] usb 4-1: SerialNumber: syz [ 198.651297][ T6366] ? __lock_acquire+0x7d10/0x7d10 [ 198.695220][ T4228] usb 4-1: config 0 descriptor?? [ 198.697982][ T6366] ? __rwlock_init+0x140/0x140 [ 198.744084][ T4228] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 198.744930][ T6366] ? preempt_schedule_thunk+0x16/0x18 [ 198.750128][ T4228] usb 4-1: selecting invalid altsetting 1 [ 198.754965][ T6366] filemap_fdatawrite_wbc+0x1eb/0x240 [ 198.754994][ T6366] file_write_and_wait_range+0x14d/0x220 [ 198.755016][ T6366] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 198.755043][ T6366] ext4_sync_file+0x1ff/0xae0 [ 198.755068][ T6366] ext4_buffered_write_iter+0x338/0x3b0 [ 198.755093][ T6366] ext4_file_write_iter+0x74d/0x1700 [ 198.755122][ T6366] ? rcu_read_lock_any_held+0xb0/0x130 [ 198.755141][ T6366] ? ext4_file_read_iter+0x700/0x700 [ 198.755160][ T6366] ? end_current_label_crit_section+0x14b/0x170 [ 198.769201][ T4228] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 198.770382][ T6366] ? memset+0x1e/0x40 [ 198.785168][ T4228] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.790136][ T6366] ? iov_iter_init+0xb4/0x170 [ 198.807726][ T4228] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 198.809191][ T6366] vfs_write+0x745/0xd60 [ 198.822619][ T4228] usb 4-1: media controller created [ 198.827661][ T6366] ? file_end_write+0x250/0x250 [ 198.827691][ T6366] ? __fget_files+0x40f/0x480 [ 198.827713][ T6366] ? __fdget+0x18b/0x210 [ 198.827729][ T6366] ? __x64_sys_pwrite64+0xf2/0x220 [ 198.827749][ T6366] __x64_sys_pwrite64+0x19a/0x220 [ 198.879253][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.881610][ T6366] ? ksys_pwrite64+0x1c0/0x1c0 [ 198.968553][ T6366] ? lockdep_hardirqs_on+0x94/0x140 [ 198.973795][ T6366] do_syscall_64+0x4c/0xa0 [ 198.978242][ T6366] ? clear_bhb_loop+0x30/0x80 [ 198.982947][ T6366] ? clear_bhb_loop+0x30/0x80 [ 198.987656][ T6366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.993578][ T6366] RIP: 0033:0x7f9dbf69cf79 [ 198.998018][ T6366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.017816][ T6366] RSP: 002b:00007f9dbd8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 199.026255][ T6366] RAX: ffffffffffffffda RBX: 00007f9dbf916fa0 RCX: 00007f9dbf69cf79 [ 199.034235][ T6366] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 199.042238][ T6366] RBP: 00007f9dbf7337e0 R08: 0000000000000000 R09: 0000000000000000 [ 199.050206][ T6366] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 199.058177][ T6366] R13: 00007f9dbf917038 R14: 00007f9dbf916fa0 R15: 00007ffc3fd05638 [ 199.066147][ T6366] [ 199.078074][ T6366] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.602: bg 0: block 465: padding at end of block bitmap is not set [ 199.107336][ T4464] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 199.120500][ T6366] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 364 with error 28 [ 199.140922][ T4464] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.140922][ T4464] [ 199.152173][ T6366] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.152173][ T6366] [ 199.162234][ T4464] EXT4-fs (loop1): Total free blocks count 0 [ 199.170494][ T6366] EXT4-fs (loop1): Total free blocks count 0 [ 199.177127][ T4464] EXT4-fs (loop1): Free/Dirty block details [ 199.184881][ T6366] EXT4-fs (loop1): Free/Dirty block details [ 199.190909][ T4464] EXT4-fs (loop1): free_blocks=0 [ 199.194704][ T6366] EXT4-fs (loop1): free_blocks=0 [ 200.002914][ T4228] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 200.010175][ T4228] zl10353_read_register: readreg error (reg=127, ret==-110) [ 200.033016][ T4228] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 200.052052][ T4228] usb 4-1: USB disconnect, device number 8