last executing test programs: 1m11.483164248s ago: executing program 0 (id=959): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0) 1m11.287097092s ago: executing program 0 (id=961): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 1m11.210268823s ago: executing program 0 (id=962): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x200402, &(0x7f0000000200)=ANY=[], 0x1, 0x19c, &(0x7f0000000040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r0, &(0x7f00000000c0)=""/43, 0x2b) getdents(r0, 0x0, 0x58) 1m11.099200305s ago: executing program 0 (id=963): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000500)='./bus\x00', 0x2000006, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f636f6c61a3ea000073683c000e1c906ec52a91a85a14cb7fb0c282c5737a29f37a113e"], 0x28, 0x363, &(0x7f0000000100)="$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") syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r0, &(0x7f0000000080)=""/203, 0xcb) 1m10.30627452s ago: executing program 0 (id=969): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ppoll(&(0x7f0000000180)=[{r0, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) 1m9.584155264s ago: executing program 0 (id=976): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r2, 0x0, 0x0}) 1m9.127972882s ago: executing program 32 (id=976): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000300)={0x28, 0x0, r2, 0x0, 0x0}) 4.410488178s ago: executing program 4 (id=1484): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x291, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchown(r0, 0x0, 0xee01) 4.29272142s ago: executing program 4 (id=1485): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x3, 0x6b2, &(0x7f0000000280)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 3.981402066s ago: executing program 4 (id=1488): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804458, &(0x7f0000003b80), 0x1, 0x502, &(0x7f0000000240)="$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") syz_usb_connect(0x2, 0x10e, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 3.925217527s ago: executing program 1 (id=1489): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.229196928s ago: executing program 1 (id=1508): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0) 2.032371522s ago: executing program 1 (id=1502): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 1.832170486s ago: executing program 1 (id=1506): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000380)='./file1\x00', 0x1014845, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], 0x1, 0xda6, &(0x7f0000003c80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000300)={[{@noquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fff}}, {@quota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x54c, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00b\x00\x00\x00'], 0x0) 1.779221467s ago: executing program 3 (id=1507): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 1.62495814s ago: executing program 2 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.543524051s ago: executing program 4 (id=1510): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2a060400) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 1.343961625s ago: executing program 1 (id=1511): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 1.274968506s ago: executing program 2 (id=1512): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0x32) close(r0) 1.177249938s ago: executing program 3 (id=1513): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, &(0x7f000000ae80)={0x2020}, 0x2020) pread64(r0, &(0x7f00000002c0)=""/220, 0xdc, 0x0) read$FUSE(r0, &(0x7f0000004b80)={0x2020}, 0x2020) 1.05999027s ago: executing program 4 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2ea2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.046652831s ago: executing program 2 (id=1515): socket(0x2000000000000021, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 998.789401ms ago: executing program 3 (id=1516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d000000000a24c0000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff000000000000000000000000ff0100000000000000000000000000010000fffd000000200000000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d56c000000fe8000f5ffffff00000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000feffffffffffffff00000000ffffffff000000002bbd700000000000020000002200000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) 921.905113ms ago: executing program 4 (id=1517): r0 = syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc259"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 840.056995ms ago: executing program 2 (id=1518): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000004c00)="b3dc9fe7478480c33fc6be5a279d9eb6", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000004fc0)="06088180b0429ab331ab13f480078d22", 0x10) 834.455694ms ago: executing program 3 (id=1519): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 752.650536ms ago: executing program 2 (id=1520): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 600.808649ms ago: executing program 2 (id=1521): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="4015490000005ebfca646a017afd44a1694b859e7e010372e9cc92e9fc911bd821b8c4a76169c6f83bd52d2dccc7ddc6b59a0902000000310500000000000000f37cb0f7e2daae21a8bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 191.790766ms ago: executing program 1 (id=1522): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$eJzs3UFr1E4Yx/HfJNvt/v8tNbYVQTxVBU+lrRcRRJF9B148idrdQnGpoBXUi9Vz8eCxd9+CL8KTeBa8efIFFDxEZpI0yW6S3XbZxq3fD3TJJvMk83SyyTwLSwTgn3Wv/ePTjZ/2z0i+fKkpyZPUkhqSLuhi6+XO7vZur9up2pHvIuyfURRpBtps7nSLQm2ci4gF9l1D85l1zeIgjKv1/dghPv/8s8eEYRgWrPek2exon5WR36u7AzUzhzrUbN29AADUzc3+o4m/L/nz8fzd86Rr8W3fbk/v/9N7A/0dRuruR63c/f+VFpLKKzR2fM+5TWm950o4u91LqsTKnXrFq5vxNj/XgWFVpeuL99/Wdq+7uvms1/H0XndimWbL7rWTP3i2t+8Gd71SUJtWGCn3I28zJ9acy2HG5rBR0v+l8Y/ozJRu6RsV88V8NQ9NoAN13PhbjdDYYXIjFfSNVNT/NeWL9AyXZRC1KsnyvIu+lC/kK7P01deNrGa8z0Y2+SDtZ0XUYl8WUXbrQ6KWCqM2hkQt90elZ3N55KSZD+aBWdEvfVb7aPztWeJHl/rhn0zbxrWMz4zKfBquZeDuJ/Gnbu9yYcuSqwcmYl9PdFMLL16/efq41+s+Z2G0heQ6+7f050QLyUlw6kf33cJHSXXkvr96e8um7dYonuJO9KAazNTXiOGNcY6e3HdO3vkarkk4demgHzOweCqI6eO5r/9d/ZepV9bcZM2+BBXz9KFFdGaP6yW1waJ7/b+8gssx7quHufIKbtSa68p16WrJEdsHA7sN4n5OtbtKvsIxbX3To8z8HwAAAAAAAAAAAAAAAAAAAFNhvJ83hGH684aWyhrXnSMAAAAAAAAAAAAAAAAAAAAAANNu8Pm/ulXr83/vK3qXf/4vgAn4EwAA////Xngs") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'hfs\x00', 0x3a, '#! ', 0x3a, './file2'}, 0x2e) 188.256887ms ago: executing program 3 (id=1523): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff02, 0xfff0, 0xffff, 0xffff, 0x14, "5f730000a9003f00"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) 0s ago: executing program 3 (id=1524): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) kernel console output (not intermixed with test programs): 4] netlink: 'syz.1.763': attribute type 4 has an invalid length. [ 149.447667][ T7814] netlink: 17 bytes leftover after parsing attributes in process `syz.1.763'. [ 149.551470][ T7812] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 149.659195][ T7812] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 149.702288][ T7812] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.762: Failed to acquire dquot type 1 [ 149.729813][ T7812] EXT4-fs (loop2): 1 truncate cleaned up [ 149.744888][ T7812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.757841][ T7812] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.880462][ T7812] EXT4-fs: can't change dax mount option while remounting [ 149.964938][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.987800][ T7833] loop1: detected capacity change from 0 to 256 [ 150.142394][ T7833] FAT-fs (loop1): Directory bread(block 64) failed [ 150.168682][ T7833] FAT-fs (loop1): Directory bread(block 65) failed [ 150.205903][ T7833] FAT-fs (loop1): Directory bread(block 66) failed [ 150.223403][ T7833] FAT-fs (loop1): Directory bread(block 67) failed [ 150.255790][ T7833] FAT-fs (loop1): Directory bread(block 68) failed [ 150.265816][ T7833] FAT-fs (loop1): Directory bread(block 69) failed [ 150.293632][ T7833] FAT-fs (loop1): Directory bread(block 70) failed [ 150.303147][ T7833] FAT-fs (loop1): Directory bread(block 71) failed [ 150.317594][ T7833] FAT-fs (loop1): Directory bread(block 72) failed [ 150.334498][ T7833] FAT-fs (loop1): Directory bread(block 73) failed [ 150.774894][ T7837] loop2: detected capacity change from 0 to 32768 [ 150.827506][ T7837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.772 (7837) [ 150.876350][ T7837] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.917517][ T7837] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.945746][ T7854] loop1: detected capacity change from 0 to 256 [ 150.946672][ T7837] BTRFS info (device loop2): setting nodatacow, compression disabled [ 150.978084][ T7837] BTRFS info (device loop2): enabling ssd optimizations [ 150.995383][ T7837] BTRFS info (device loop2): setting datacow [ 151.002738][ T7854] exfat: Deprecated parameter 'namecase' [ 151.007411][ T7837] BTRFS info (device loop2): doing ref verification [ 151.015093][ T7837] BTRFS info (device loop2): force clearing of disk cache [ 151.043164][ T7837] BTRFS info (device loop2): turning off barriers [ 151.043700][ T7854] exfat: Deprecated parameter 'utf8' [ 151.073721][ T7837] BTRFS info (device loop2): using spread ssd allocation scheme [ 151.075166][ T7854] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 151.105012][ T7837] BTRFS info (device loop2): using free space tree [ 151.130543][ T7854] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 151.335824][ T7846] loop0: detected capacity change from 0 to 32768 [ 151.355751][ T7837] BTRFS info (device loop2): auto enabling async discard [ 151.374779][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 151.430778][ T7837] BTRFS info (device loop2): rebuilding free space tree [ 151.559782][ T28] audit: type=1800 audit(1751804232.785:28): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.772" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 151.690904][ T7846] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 151.802514][ T7878] loop1: detected capacity change from 0 to 2048 [ 151.843990][ T7878] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 151.923103][ T7881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.053785][ T5788] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.181212][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 152.673946][ T7890] QAT: Invalid ioctl 1075883590 [ 152.707802][ T7890] QAT: Invalid ioctl 1075883590 [ 152.712779][ T7890] QAT: Invalid ioctl 1075883590 [ 152.757874][ T7890] QAT: Invalid ioctl 1075883590 [ 152.763546][ T7890] QAT: Invalid ioctl 1075883590 [ 152.817896][ T7890] QAT: Invalid ioctl 1075883590 [ 152.828141][ T7890] QAT: Invalid ioctl 1075883590 [ 152.833109][ T7890] QAT: Invalid ioctl 1075883590 [ 152.867761][ T7890] QAT: Invalid ioctl 1075883590 [ 152.878118][ T7890] QAT: Invalid ioctl 1075883590 [ 152.990683][ T7883] loop3: detected capacity change from 0 to 32768 [ 153.038994][ T7894] devtmpfs: Unknown parameter 'fscontext' [ 153.092916][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 153.493047][ T7908] Zero length message leads to an empty skb [ 153.814471][ T7920] loop2: detected capacity change from 0 to 512 [ 153.962172][ T7920] EXT4-fs (loop2): 1 orphan inode deleted [ 153.976437][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.001904][ T7920] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.014292][ T3494] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.046954][ T3494] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:8: Failed to release dquot type 1 [ 154.067695][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 154.201769][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.277435][ T5824] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.287013][ T9] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 154.308582][ T9] usb 4-1: config 0 has no interface number 0 [ 154.314712][ T9] usb 4-1: config 0 interface 29 has no altsetting 0 [ 154.355533][ T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 154.385277][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.405532][ T9] usb 4-1: Product: syz [ 154.412532][ T9] usb 4-1: Manufacturer: syz [ 154.431862][ T9] usb 4-1: SerialNumber: syz [ 154.448070][ T9] usb 4-1: config 0 descriptor?? [ 154.497699][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 154.500069][ T7915] loop1: detected capacity change from 0 to 32768 [ 154.532506][ T5824] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 154.557881][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.573198][ T5824] usb 1-1: Product: syz [ 154.583645][ T7915] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 154.587360][ T5824] usb 1-1: Manufacturer: syz [ 154.597122][ T5824] usb 1-1: SerialNumber: syz [ 154.631887][ T5824] usb 1-1: config 0 descriptor?? [ 154.651696][ T5824] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 154.668870][ T7929] loop2: detected capacity change from 0 to 4096 [ 154.675658][ T5824] usb 1-1: setting power ON [ 154.680992][ T5824] dvb-usb: bulk message failed: -22 (2/0) [ 154.692195][ T9] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 154.693205][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.713651][ T5824] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 154.733375][ T5824] usb 1-1: media controller created [ 154.766371][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.782882][ T7915] XFS (loop1): Ending clean mount [ 154.794692][ T7929] ntfs: volume version 3.1. [ 154.818056][ T7915] XFS (loop1): Quotacheck needed: Please wait. [ 154.859322][ T5824] usb 1-1: selecting invalid altsetting 6 [ 154.876754][ T5824] usb 1-1: digital interface selection failed (-22) [ 154.899996][ T7915] XFS (loop1): Quotacheck: Done. [ 154.910196][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 154.917455][ T5824] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 154.917488][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 154.934304][ T9] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 154.952715][ T7929] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 154.969355][ T5824] usb 1-1: setting power OFF [ 154.997181][ T7929] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 155.014366][ T7925] dvb-usb: bulk message failed: -22 (3/0) [ 155.031989][ T7929] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 155.043732][ T7925] cxusb: i2c wr: len=78 is too big! [ 155.043732][ T7925] [ 155.043752][ T5824] dvb-usb: bulk message failed: -22 (2/0) [ 155.064210][ T7929] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 155.082918][ T9] peak_usb: probe of 4-1:0.29 failed with error -8 [ 155.091589][ T5824] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 155.133297][ T5824] (NULL device *): no alternate interface [ 155.196731][ T9] usb 4-1: USB disconnect, device number 6 [ 155.240146][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 155.273774][ T5824] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 155.328782][ T5824] usb 1-1: USB disconnect, device number 12 [ 155.995445][ T9] kernel read not supported for file /swradio7 (pid: 9 comm: kworker/0:1) [ 156.239409][ T7958] loop3: detected capacity change from 0 to 1024 [ 156.246843][ T7958] hfsplus: unable to parse mount options [ 156.409358][ T7960] loop0: detected capacity change from 0 to 2048 [ 156.612977][ T7960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.018405][ T3494] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 157.070089][ T3494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 157.099149][ T3494] EXT4-fs (loop0): This should not happen!! Data will be lost [ 157.099149][ T3494] [ 157.112355][ T3494] EXT4-fs (loop0): Total free blocks count 0 [ 157.119179][ T3494] EXT4-fs (loop0): Free/Dirty block details [ 157.125305][ T3494] EXT4-fs (loop0): free_blocks=4096 [ 157.131112][ T3494] EXT4-fs (loop0): dirty_blocks=544 [ 157.134180][ T7984] loop3: detected capacity change from 0 to 512 [ 157.136525][ T3494] EXT4-fs (loop0): Block reservation details [ 157.153619][ T3494] EXT4-fs (loop0): i_reserved_data_blocks=34 [ 157.165008][ T3494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 512 with error 28 [ 157.212773][ T28] audit: type=1326 audit(1751804238.435:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7fc00000 [ 157.329106][ T7984] EXT4-fs (loop3): 1 orphan inode deleted [ 157.336067][ T7984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.369590][ T1300] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.397667][ T1300] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:7: Failed to release dquot type 1 [ 157.433654][ T7984] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.463790][ T7982] loop2: detected capacity change from 0 to 32768 [ 157.609443][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.883452][ T7999] loop1: detected capacity change from 0 to 1024 [ 157.890263][ T7994] loop0: detected capacity change from 0 to 4096 [ 158.001796][ T7999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.118855][ T8007] loop2: detected capacity change from 0 to 8 [ 158.214305][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.653358][ T8015] loop1: detected capacity change from 0 to 4096 [ 158.749369][ T8015] ntfs: volume version 3.1. [ 158.865125][ T8015] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 158.923096][ T8015] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 158.970819][ T8015] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 158.987632][ T8015] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 159.553918][ T8047] loop2: detected capacity change from 0 to 512 [ 159.593117][ T8047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.645149][ T8047] EXT4-fs (loop2): 1 truncate cleaned up [ 159.659829][ T8047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.857159][ T8042] loop0: detected capacity change from 0 to 32768 [ 159.922836][ T8042] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.852 (8042) [ 159.954139][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.003709][ T8042] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.084050][ T8042] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 160.133350][ T8042] BTRFS info (device loop0): setting nodatacow, compression disabled [ 160.190996][ T8042] BTRFS info (device loop0): enabling ssd optimizations [ 160.235495][ T8042] BTRFS info (device loop0): setting datacow [ 160.270035][ T8053] loop2: detected capacity change from 0 to 512 [ 160.276438][ T8042] BTRFS info (device loop0): doing ref verification [ 160.315101][ T8042] BTRFS info (device loop0): force clearing of disk cache [ 160.322799][ T8053] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.386888][ T8042] BTRFS info (device loop0): turning off barriers [ 160.418337][ T8053] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.437539][ T8042] BTRFS info (device loop0): using spread ssd allocation scheme [ 160.463628][ T8053] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 160.482590][ T8042] BTRFS info (device loop0): using free space tree [ 160.551740][ T8053] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.857: attempt to clear invalid blocks 2 len 1 [ 160.607164][ T8035] loop3: detected capacity change from 0 to 32768 [ 160.624543][ T8053] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 160.657331][ C0] sched: RT throttling activated [ 160.762115][ T8042] BTRFS info (device loop0): auto enabling async discard [ 160.771581][ T8053] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.857: invalid indirect mapped block 1819239214 (level 0) [ 160.809373][ T8035] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 160.839031][ T8042] BTRFS info (device loop0): rebuilding free space tree [ 160.885231][ T3494] (kworker/u4:8,3494,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 160.917732][ T8053] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.857: invalid indirect mapped block 1819239214 (level 1) [ 161.027281][ T8053] EXT4-fs (loop2): 1 truncate cleaned up [ 161.034382][ T8053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.211336][ T28] audit: type=1800 audit(1751804242.435:30): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.852" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 161.236148][ T8035] (syz.3.850,8035,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 161.335746][ T8035] (syz.3.850,8035,1):ocfs2_orphan_del:2382 ERROR: status = -117 [ 161.402927][ T8035] (syz.3.850,8035,1):ocfs2_orphan_del:2404 ERROR: status = -117 [ 161.462979][ T8035] (syz.3.850,8035,1):ocfs2_remove_inode:676 ERROR: status = -117 [ 161.561768][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.571816][ T8035] (syz.3.850,8035,1):ocfs2_wipe_inode:821 ERROR: status = -117 [ 161.583003][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.608135][ T8035] (syz.3.850,8035,1):ocfs2_delete_inode:1082 ERROR: status = -117 [ 161.763225][ T8035] syz.3.850 (8035) used greatest stack depth: 18736 bytes left [ 161.849521][ T8051] loop1: detected capacity change from 0 to 262144 [ 161.859938][ T8051] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 scanned by syz.1.856 (8051) [ 161.894940][ T8051] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 161.905438][ T8051] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.914766][ T8051] BTRFS info (device loop1): doing ref verification [ 161.922484][ T8051] BTRFS info (device loop1): enabling ssd optimizations [ 161.929556][ T8051] BTRFS info (device loop1): using spread ssd allocation scheme [ 161.937216][ T8051] BTRFS info (device loop1): using free space tree [ 161.945166][ T5784] (syz-executor,5784,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 162.012219][ T5784] (syz-executor,5784,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 162.067071][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 162.150292][ T8051] BTRFS info (device loop1): auto enabling async discard [ 162.373929][ T5791] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 163.316910][ T8095] loop3: detected capacity change from 0 to 32768 [ 163.367500][ T8095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.860 (8095) [ 163.429264][ T8095] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.467588][ T8095] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 163.496761][ T8095] BTRFS info (device loop3): setting nodatacow, compression disabled [ 163.518099][ T8095] BTRFS info (device loop3): max_inline at 0 [ 163.524144][ T8095] BTRFS info (device loop3): enabling disk space caching [ 163.567283][ T8095] BTRFS info (device loop3): turning off barriers [ 163.597412][ T8095] BTRFS info (device loop3): turning on flush-on-commit [ 163.611786][ T8095] BTRFS info (device loop3): doing ref verification [ 163.647671][ T8095] BTRFS info (device loop3): force clearing of disk cache [ 163.667624][ T8095] BTRFS info (device loop3): enabling ssd optimizations [ 163.674664][ T8095] BTRFS info (device loop3): max_inline at 4096 [ 163.711614][ T8095] BTRFS info (device loop3): disk space caching is enabled [ 163.900880][ T8111] loop1: detected capacity change from 0 to 32768 [ 163.920646][ T8111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.867 (8111) [ 163.943638][ T8095] BTRFS info (device loop3): auto enabling async discard [ 163.958106][ T8111] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.989302][ T8095] BTRFS info (device loop3): rebuilding free space tree [ 163.996628][ T8111] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.027138][ T8105] loop0: detected capacity change from 0 to 40427 [ 164.057191][ T8111] BTRFS info (device loop1): setting nodatacow, compression disabled [ 164.066125][ T8111] BTRFS info (device loop1): enabling ssd optimizations [ 164.074177][ T8095] BTRFS info (device loop3): disabling free space tree [ 164.074525][ T8111] BTRFS info (device loop1): setting datacow [ 164.087878][ T8111] BTRFS info (device loop1): doing ref verification [ 164.092387][ T8105] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 164.094481][ T8111] BTRFS info (device loop1): force clearing of disk cache [ 164.110870][ T8111] BTRFS info (device loop1): turning off barriers [ 164.116310][ T8113] loop2: detected capacity change from 0 to 32768 [ 164.117731][ T8111] BTRFS info (device loop1): using spread ssd allocation scheme [ 164.132570][ T8105] F2FS-fs (loop0): Image doesn't support compression [ 164.145819][ T8095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.159631][ T8105] F2FS-fs (loop0): Image doesn't support compression [ 164.166564][ T8111] BTRFS info (device loop1): using free space tree [ 164.185972][ T8095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.200058][ T8105] F2FS-fs (loop0): invalid crc value [ 164.247272][ T8105] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.248764][ T8113] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 164.401823][ T8111] BTRFS info (device loop1): auto enabling async discard [ 164.470985][ T8111] BTRFS info (device loop1): rebuilding free space tree [ 164.551619][ T8105] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.628467][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 164.670727][ T28] audit: type=1800 audit(1751804245.895:31): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.867" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 164.671368][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.916420][ T5787] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 164.962679][ T5787] F2FS-fs (loop0): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 165.104678][ T5791] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.979164][ T8166] Bluetooth: MGMT ver 1.22 [ 166.056010][ T8170] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 166.064929][ T8152] loop2: detected capacity change from 0 to 32768 [ 166.107868][ T8152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.869 (8152) [ 166.153532][ T8170] team0: Port device dummy0 added [ 166.185707][ T8152] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.216075][ T8152] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 166.226970][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 166.249238][ T8152] BTRFS info (device loop2): metadata ratio 2 [ 166.255382][ T8152] BTRFS info (device loop2): allowing degraded mounts [ 166.294726][ T8152] BTRFS info (device loop2): force zlib compression, level 3 [ 166.327627][ T8152] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.371121][ T8152] BTRFS info (device loop2): use zstd compression, level 3 [ 166.428810][ T8152] BTRFS info (device loop2): force clearing of disk cache [ 166.436036][ T8152] BTRFS info (device loop2): max_inline at 0 [ 166.493707][ T8152] BTRFS info (device loop2): using free space tree [ 166.598270][ T8152] BTRFS info (device loop2): enabling ssd optimizations [ 166.617034][ T8152] BTRFS info (device loop2): rebuilding free space tree [ 166.855983][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.261729][ T8209] loop3: detected capacity change from 0 to 512 [ 167.355354][ T8209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 167.455198][ T8209] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.507756][ T8215] loop0: detected capacity change from 0 to 1024 [ 167.556056][ T8215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.631578][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 167.792030][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.976719][ T8210] loop2: detected capacity change from 0 to 32768 [ 168.056683][ T28] audit: type=1800 audit(1751804249.275:32): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.883" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 168.260617][ T8234] loop0: detected capacity change from 0 to 128 [ 168.333858][ T8234] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.390021][ T8221] loop1: detected capacity change from 0 to 40427 [ 168.441743][ T8221] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 168.456722][ T8234] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.505556][ T8221] F2FS-fs (loop1): invalid crc value [ 168.544848][ T8221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.568319][ T8234] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 168.726401][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.738726][ T8221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.960776][ T8221] F2FS-fs (loop1): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x97f/0x19e0 [ 168.998163][ T8221] syz.1.888: attempt to access beyond end of device [ 168.998163][ T8221] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 169.214966][ T5791] syz-executor: attempt to access beyond end of device [ 169.214966][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.236286][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 169.238435][ T8261] loop3: detected capacity change from 0 to 64 [ 169.321122][ T8263] loop2: detected capacity change from 0 to 128 [ 169.372645][ T28] audit: type=1800 audit(1751804250.595:33): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.907" name="file2" dev="loop2" ino=1048677 res=0 errno=0 [ 169.410048][ T8263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 169.425565][ T8263] FAT-fs (loop2): Filesystem has been set read-only [ 169.438008][ T8263] syz.2.907: attempt to access beyond end of device [ 169.438008][ T8263] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 169.471187][ T8263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 169.492296][ T8263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 169.528027][ T8263] syz.2.907: attempt to access beyond end of device [ 169.528027][ T8263] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 169.568846][ T8263] syz.2.907: attempt to access beyond end of device [ 169.568846][ T8263] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 169.588330][ T8263] syz.2.907: attempt to access beyond end of device [ 169.588330][ T8263] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 169.644657][ T8263] syz.2.907: attempt to access beyond end of device [ 169.644657][ T8263] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 169.803072][ T8267] loop3: detected capacity change from 0 to 2048 [ 169.930000][ T8272] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.167560][ T8300] loop1: detected capacity change from 0 to 2048 [ 171.203221][ T8300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.480369][ T8312] loop1: detected capacity change from 0 to 256 [ 171.927531][ T28] audit: type=1326 audit(1751804253.145:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.004380][ T28] audit: type=1326 audit(1751804253.145:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.078944][ T28] audit: type=1326 audit(1751804253.155:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.108347][ T28] audit: type=1326 audit(1751804253.155:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.184334][ T28] audit: type=1326 audit(1751804253.155:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.212201][ T28] audit: type=1326 audit(1751804253.155:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72b838d290 code=0x7ffc0000 [ 172.239574][ T28] audit: type=1326 audit(1751804253.155:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.272232][ T28] audit: type=1326 audit(1751804253.155:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8322 comm="syz.1.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 172.329098][ T8337] loop3: detected capacity change from 0 to 64 [ 172.365998][ T8337] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 173.007907][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 173.037733][ T8362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.046882][ T8362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.068933][ T8362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.078941][ T8362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.207487][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 173.217652][ T23] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 173.240024][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.254235][ T8368] loop0: detected capacity change from 0 to 512 [ 173.259751][ T23] usb 2-1: config 0 descriptor?? [ 173.275474][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 173.279598][ T8368] EXT4-fs: Ignoring removed bh option [ 173.314737][ T8368] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 173.390970][ T8373] loop3: detected capacity change from 0 to 512 [ 173.398641][ T8373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.406033][ T8373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.426658][ T8368] EXT4-fs (loop0): 1 truncate cleaned up [ 173.434514][ T8368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.455650][ T8373] EXT4-fs (loop3): 1 truncate cleaned up [ 173.576356][ T8373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.622966][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 173.622979][ T28] audit: type=1800 audit(1751804254.825:44): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.953" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 173.710762][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.796912][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.141498][ T23] gspca_sonixj: reg_r err -71 [ 174.146284][ T23] sonixj: probe of 2-1:0.0 failed with error -71 [ 174.161138][ T8389] loop3: detected capacity change from 0 to 512 [ 174.166890][ T23] usb 2-1: USB disconnect, device number 8 [ 174.286131][ T8389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.331831][ T8396] loop0: detected capacity change from 0 to 8 [ 174.377916][ T8389] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.486337][ T8399] loop0: detected capacity change from 0 to 256 [ 174.551844][ T8389] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 10: comm syz.3.960: lblock 15 mapped to illegal pblock 10 (length 19) [ 174.583636][ T8399] FAT-fs (loop0): Directory bread(block 64) failed [ 174.591307][ T8389] EXT4-fs (loop3): Remounting filesystem read-only [ 174.601313][ T8399] FAT-fs (loop0): Directory bread(block 65) failed [ 174.627974][ T8399] FAT-fs (loop0): Directory bread(block 66) failed [ 174.647691][ T8399] FAT-fs (loop0): Directory bread(block 67) failed [ 174.667207][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.675861][ T8399] FAT-fs (loop0): Directory bread(block 68) failed [ 174.691558][ T8399] FAT-fs (loop0): Directory bread(block 69) failed [ 174.708544][ T8399] FAT-fs (loop0): Directory bread(block 70) failed [ 174.738400][ T8399] FAT-fs (loop0): Directory bread(block 71) failed [ 174.756253][ T8399] FAT-fs (loop0): Directory bread(block 72) failed [ 174.773107][ T8399] FAT-fs (loop0): Directory bread(block 73) failed [ 174.989121][ T8405] loop2: detected capacity change from 0 to 2048 [ 175.045103][ T8405] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 175.068524][ T8405] UDF-fs: Scanning with blocksize 512 failed [ 175.162950][ T8410] vxcan0: tx address claim with dlc 0 [ 175.176261][ T8405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.223821][ T5787] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 175.256739][ T5787] FAT-fs (loop0): Filesystem has been set read-only [ 175.467696][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.657584][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 175.681144][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 175.693818][ T9] usb 4-1: config 0 has no interface number 0 [ 175.705418][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 175.725001][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.734867][ T9] usb 4-1: Product: syz [ 175.741632][ T9] usb 4-1: Manufacturer: syz [ 175.750357][ T9] usb 4-1: SerialNumber: syz [ 175.762316][ T9] usb 4-1: config 0 descriptor?? [ 175.772373][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 175.830279][ T3494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.016502][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.032081][ T3494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.043056][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.053972][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.076175][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 176.095803][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.118315][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.133237][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.177901][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.206031][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.257944][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.290182][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.306124][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.314140][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.322310][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.330512][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.338375][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.345988][ T1186] hid-generic 00A1:0009:0003.000A: unknown main item tag 0x0 [ 176.362790][ T3494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.389827][ T1186] hid-generic 00A1:0009:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 176.532661][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 176.563495][ T3494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.566816][ T1186] usb 4-1: USB disconnect, device number 7 [ 176.618210][ T1186] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.662563][ T1186] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.708133][ T1186] quatech2 4-1:0.51: device disconnected [ 177.024069][ T8436] loop1: detected capacity change from 0 to 2048 [ 177.123296][ T8436] loop1: p1 < > p4 [ 177.149828][ T8436] loop1: p4 size 8388608 extends beyond EOD, truncated [ 177.276985][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.290129][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.301831][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.313825][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.327725][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 177.336498][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.425948][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 177.441123][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 177.896611][ T8465] loop1: detected capacity change from 0 to 2048 [ 177.968144][ T8469] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.127120][ T8473] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 178.147706][ T8473] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 178.180322][ T8473] netlink: 192 bytes leftover after parsing attributes in process `syz.3.989'. [ 178.200053][ T8475] loop1: detected capacity change from 0 to 64 [ 178.397211][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 179.019792][ T8501] bond_slave_0: entered promiscuous mode [ 179.025893][ T8501] bond_slave_1: entered promiscuous mode [ 179.035598][ T8501] macsec1: entered allmulticast mode [ 179.041836][ T8501] bond0: entered allmulticast mode [ 179.047159][ T8501] bond_slave_0: entered allmulticast mode [ 179.055584][ T8501] bond_slave_1: entered allmulticast mode [ 179.066300][ T8501] bond0: left allmulticast mode [ 179.075925][ T8501] bond_slave_0: left allmulticast mode [ 179.082976][ T8501] bond_slave_1: left allmulticast mode [ 179.093776][ T8501] bond_slave_0: left promiscuous mode [ 179.099325][ T8501] bond_slave_1: left promiscuous mode [ 179.140716][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.153672][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.163843][ T8442] bridge_slave_0: entered allmulticast mode [ 179.181884][ T8442] bridge_slave_0: entered promiscuous mode [ 179.193593][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.214765][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.240604][ T8442] bridge_slave_1: entered allmulticast mode [ 179.255466][ T8442] bridge_slave_1: entered promiscuous mode [ 179.388571][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.418057][ T5786] Bluetooth: hci1: command tx timeout [ 179.492677][ T8517] loop3: detected capacity change from 0 to 64 [ 179.657080][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.814727][ T8523] loop3: detected capacity change from 0 to 1024 [ 179.985187][ T8523] hfsplus: catalog searching failed [ 180.033715][ T8442] team0: Port device team_slave_0 added [ 180.050999][ T48] hfsplus: bad catalog file entry [ 180.056430][ T48] hfsplus: b-tree write err: -5, ino 3 [ 180.063637][ T8442] team0: Port device team_slave_1 added [ 180.073574][ T8528] loop1: detected capacity change from 0 to 512 [ 180.206296][ T8528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.231799][ T8528] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.385982][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.393254][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.420285][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.433344][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.446936][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.483460][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.498381][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.602948][ T3494] hsr_slave_0: left promiscuous mode [ 180.672828][ T3494] hsr_slave_1: left promiscuous mode [ 180.686977][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.700593][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.731383][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.747506][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.756355][ T3494] bridge_slave_1: left allmulticast mode [ 180.766948][ T3494] bridge_slave_1: left promiscuous mode [ 180.776542][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.796664][ T3494] bridge_slave_0: left allmulticast mode [ 180.806654][ T3494] bridge_slave_0: left promiscuous mode [ 180.831809][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.876610][ T3494] veth1_macvtap: left promiscuous mode [ 180.893270][ T3494] veth0_macvtap: left promiscuous mode [ 180.904872][ T3494] veth1_vlan: left promiscuous mode [ 180.915592][ T3494] veth0_vlan: left promiscuous mode [ 180.937459][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.048660][ T5824] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.117450][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 181.125013][ T5832] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.140041][ T5832] usb 3-1: config 0 has no interface number 0 [ 181.146186][ T5832] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.159116][ T5832] usb 3-1: config 0 interface 85 has no altsetting 0 [ 181.168757][ T5832] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.179600][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.187935][ T5832] usb 3-1: Product: syz [ 181.192115][ T5832] usb 3-1: Manufacturer: syz [ 181.196752][ T5832] usb 3-1: SerialNumber: syz [ 181.211177][ T5832] usb 3-1: config 0 descriptor?? [ 181.258817][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 181.284079][ T5824] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 181.294364][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.319094][ T5824] usb 2-1: config 0 descriptor?? [ 181.491099][ T5786] Bluetooth: hci1: command tx timeout [ 181.545373][ T5824] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 181.573302][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.584155][ T5824] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 181.591477][ T5824] usb 2-1: media controller created [ 181.625544][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.750659][ T5824] az6027: usb out operation failed. (-71) [ 181.762546][ T5824] az6027: usb out operation failed. (-71) [ 181.763338][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 181.769771][ T5824] stb0899_attach: Driver disabled by Kconfig [ 181.786938][ T5824] az6027: no front-end attached [ 181.786938][ T5824] [ 181.809953][ T5824] az6027: usb out operation failed. (-71) [ 181.815799][ T5824] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 181.833203][ T5824] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 181.853354][ T5824] dvb-usb: schedule remote query interval to 400 msecs. [ 181.860717][ T5824] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 181.863775][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 181.880343][ T5832] appletouch 3-1:0.85: Geyser mode initialized. [ 181.899043][ T5824] usb 2-1: USB disconnect, device number 9 [ 181.911235][ T5832] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input13 [ 182.025681][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.033923][ T5824] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 182.158382][ T5832] usb 3-1: USB disconnect, device number 7 [ 182.186637][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.198372][ T5832] appletouch 3-1:0.85: input: appletouch disconnected [ 182.954748][ T3494] bond0 (unregistering): Released all slaves [ 183.079358][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 183.182966][ T8442] hsr_slave_0: entered promiscuous mode [ 183.197769][ T8442] hsr_slave_1: entered promiscuous mode [ 183.211011][ T8442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.228899][ T8442] Cannot create hsr debugfs directory [ 183.567556][ T5798] Bluetooth: hci1: command tx timeout [ 183.874582][ T8590] loop1: detected capacity change from 0 to 128 [ 183.932006][ T8590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 183.942090][ T8590] System zones: 1-3, 19-19, 35-36 [ 183.950665][ T8590] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 183.976248][ T8590] ext4 filesystem being mounted at /248/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.998019][ T5831] kernel write not supported for file /input/mouse0 (pid: 5831 comm: kworker/1:5) [ 184.024034][ T8442] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.044621][ T8442] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.077675][ T8442] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.104030][ T8442] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.172497][ T8590] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 184.298785][ T5791] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.307473][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.388141][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.411746][ T28] audit: type=1326 audit(1751804265.635:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 184.481223][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.488453][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.527557][ T28] audit: type=1326 audit(1751804265.635:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 184.554862][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.562080][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.613328][ T28] audit: type=1326 audit(1751804265.635:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 184.667673][ T28] audit: type=1326 audit(1751804265.635:48): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 184.734133][ T28] audit: type=1326 audit(1751804265.635:49): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 184.794021][ T28] audit: type=1326 audit(1751804265.635:50): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x7ffc0000 [ 185.093808][ T8609] loop3: detected capacity change from 0 to 32768 [ 185.372015][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.455411][ T8616] loop1: detected capacity change from 0 to 32768 [ 185.465954][ T8633] loop2: detected capacity change from 0 to 256 [ 185.544490][ T8616] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.647666][ T5798] Bluetooth: hci1: command tx timeout [ 185.757663][ T5832] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 185.765283][ T8616] XFS (loop1): Ending clean mount [ 185.804155][ T8616] XFS (loop1): Quotacheck needed: Please wait. [ 185.939799][ T8616] XFS (loop1): Quotacheck: Done. [ 186.007469][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 186.017195][ T5832] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 186.072257][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.114392][ T5832] usb 4-1: Product: syz [ 186.125877][ T8442] veth0_vlan: entered promiscuous mode [ 186.136493][ T5832] usb 4-1: Manufacturer: syz [ 186.142370][ T5832] usb 4-1: SerialNumber: syz [ 186.175177][ T5832] usb 4-1: config 0 descriptor?? [ 186.186885][ T8442] veth1_vlan: entered promiscuous mode [ 186.210701][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 186.211492][ T8659] loop2: detected capacity change from 0 to 512 [ 186.297296][ T8442] veth0_macvtap: entered promiscuous mode [ 186.303482][ T8659] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1035: invalid indirect mapped block 10 (level 1) [ 186.344159][ T8442] veth1_macvtap: entered promiscuous mode [ 186.374689][ T8659] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1035: invalid indirect mapped block 8 (level 1) [ 186.394107][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.405126][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.419482][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.430246][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.439627][ T8659] EXT4-fs (loop2): 1 truncate cleaned up [ 186.447691][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.460680][ T8659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.473488][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.511201][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.530111][ T5791] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 186.542249][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.572015][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.593674][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.617656][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.640171][ T8442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.651429][ T5832] gspca_se401: Too many frame sizes [ 186.677603][ T8442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.699100][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.726540][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.759677][ T8442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.787499][ T8442] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.796242][ T8442] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.831898][ T8442] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.895285][ T5824] usb 4-1: USB disconnect, device number 8 [ 187.088623][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.123818][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.202062][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.231611][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.560025][ T8688] loop2: detected capacity change from 0 to 512 [ 187.575708][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 187.606344][ T8688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.615137][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 187.615159][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 187.619216][ T8691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 187.701453][ T8688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.729501][ T5798] Bluetooth: hci1: command tx timeout [ 187.743153][ T8688] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.914075][ T8688] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1041: corrupted xattr block 19: overlapping e_value [ 188.054948][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.172631][ T8708] loop4: detected capacity change from 0 to 4096 [ 188.229177][ T8708] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 188.431303][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.507193][ T8708] ntfs3: loop4: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 188.614928][ T1300] ntfs3: loop4: ino=1e, failed to parse mft record [ 188.637645][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 188.645117][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 188.655491][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.716017][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 188.765586][ T8] pvrusb2: ********** [ 188.787579][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 188.828276][ T8] pvrusb2: Important functionality might not be entirely working. [ 188.843848][ T8725] loop2: detected capacity change from 0 to 4096 [ 188.861927][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.892643][ T8] pvrusb2: ********** [ 188.936445][ T2319] pvrusb2: Invalid write control endpoint [ 189.006831][ T8734] loop1: detected capacity change from 0 to 128 [ 189.016170][ T8734] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.237065][ T5832] usb 4-1: USB disconnect, device number 9 [ 189.265263][ T2319] pvrusb2: Invalid write control endpoint [ 189.299342][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 189.356270][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 189.379498][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 189.417696][ T2319] pvrusb2: Device being rendered inoperable [ 189.431177][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 189.439097][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 189.483574][ T2319] pvrusb2: Attached sub-driver cx25840 [ 189.509284][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 189.533508][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 189.556156][ T8748] loop2: detected capacity change from 0 to 256 [ 189.726777][ T8751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1059'. [ 189.875659][ T8754] netlink: 'syz.1.1060': attribute type 11 has an invalid length. [ 189.912211][ T8754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1060'. [ 189.983730][ T8756] loop3: detected capacity change from 0 to 2048 [ 190.088798][ T8756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.191618][ T8756] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 190.210776][ T8756] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 190.227639][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.237639][ T8756] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.237639][ T8756] [ 190.256445][ T8756] EXT4-fs (loop3): Total free blocks count 0 [ 190.299638][ T8756] EXT4-fs (loop3): Free/Dirty block details [ 190.337517][ T8756] EXT4-fs (loop3): free_blocks=2415919104 [ 190.343323][ T8756] EXT4-fs (loop3): dirty_blocks=16 [ 190.364713][ T8756] EXT4-fs (loop3): Block reservation details [ 190.372159][ T58] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.400960][ T8756] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 190.413441][ T8780] loop1: detected capacity change from 0 to 256 [ 190.450916][ T8780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 190.467437][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 190.475541][ T5831] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 190.486641][ T8780] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 190.495448][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.530495][ T5831] usb 5-1: config 0 descriptor?? [ 190.760152][ T5831] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 190.783933][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.820459][ T5831] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 190.833055][ T5831] usb 5-1: media controller created [ 190.877122][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.978424][ T5831] az6027: usb out operation failed. (-71) [ 190.998173][ T5831] az6027: usb out operation failed. (-71) [ 191.004983][ T5831] stb0899_attach: Driver disabled by Kconfig [ 191.031424][ T5831] az6027: no front-end attached [ 191.031424][ T5831] [ 191.059215][ T5831] az6027: usb out operation failed. (-71) [ 191.067751][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 191.075667][ T5831] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 191.109673][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 191.153841][ T5831] dvb-usb: schedule remote query interval to 400 msecs. [ 191.177900][ T5831] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 191.221069][ T5831] usb 5-1: USB disconnect, device number 2 [ 191.365189][ T5831] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.048701][ T8826] loop4: detected capacity change from 0 to 512 [ 192.094966][ T8826] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1082: invalid indirect mapped block 10 (level 1) [ 192.140155][ T8826] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1082: invalid indirect mapped block 8 (level 1) [ 192.180531][ T8826] EXT4-fs (loop4): 1 truncate cleaned up [ 192.200902][ T8826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.385922][ T8442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.396081][ T8866] loop4: detected capacity change from 0 to 128 [ 193.444115][ T8866] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 193.523347][ T8870] loop3: detected capacity change from 0 to 128 [ 193.717572][ T8874] mmap: syz.2.1098 (8874) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 193.834957][ T8878] ip6erspan0: tun_chr_ioctl cmd 1074025677 [ 193.843727][ T8878] ip6erspan0: linktype set to 768 [ 194.054620][ T5798] block nbd0: Receive control failed (result -32) [ 194.066343][ T5786] block nbd0: Receive control failed (result -32) [ 194.281453][ T8891] loop2: detected capacity change from 0 to 512 [ 194.384239][ T8891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.409095][ T8891] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.470259][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.485967][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.498289][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.519701][ T8891] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 194.596827][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.694095][ T8887] loop3: detected capacity change from 0 to 32768 [ 194.708543][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 194.716710][ T5832] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 194.737627][ T5832] usb 2-1: config 0 has no interface number 0 [ 194.760499][ T8887] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 194.785289][ T5832] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 194.828238][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.836311][ T5832] usb 2-1: Product: syz [ 194.849667][ T5832] usb 2-1: Manufacturer: syz [ 194.854305][ T5832] usb 2-1: SerialNumber: syz [ 194.882144][ T5832] usb 2-1: config 0 descriptor?? [ 194.934234][ T5832] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 194.948901][ T8887] XFS (loop3): Ending clean mount [ 194.991255][ T8887] XFS (loop3): Quotacheck needed: Please wait. [ 195.065826][ T8887] XFS (loop3): Quotacheck: Done. [ 195.174471][ T5832] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.197904][ T5832] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.210825][ T8921] loop4: detected capacity change from 0 to 128 [ 195.242297][ T8921] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.276022][ T8921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 195.416034][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 195.484225][ T8925] loop2: detected capacity change from 0 to 1024 [ 195.545078][ T8925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.617209][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.618456][ T5831] usb 2-1: USB disconnect, device number 10 [ 195.648212][ T5831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.673630][ T5831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.684667][ T5784] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.709237][ T5831] quatech2 2-1:0.51: device disconnected [ 195.797177][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.016666][ T8931] loop2: detected capacity change from 0 to 2048 [ 196.110926][ T8931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.173713][ T8937] loop3: detected capacity change from 0 to 512 [ 196.262571][ T8931] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 196.297602][ T8931] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 196.328706][ T8937] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1120: inode #15: comm syz.3.1120: iget: illegal inode # [ 196.345974][ T8931] EXT4-fs (loop2): This should not happen!! Data will be lost [ 196.345974][ T8931] [ 196.351686][ T8929] loop4: detected capacity change from 0 to 32768 [ 196.355900][ T8931] EXT4-fs (loop2): Total free blocks count 0 [ 196.369320][ T8931] EXT4-fs (loop2): Free/Dirty block details [ 196.375449][ T8931] EXT4-fs (loop2): free_blocks=2415919104 [ 196.379643][ T8937] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1120: couldn't read orphan inode 15 (err -117) [ 196.382171][ T8931] EXT4-fs (loop2): dirty_blocks=16 [ 196.398660][ T8931] EXT4-fs (loop2): Block reservation details [ 196.404663][ T8931] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 196.422516][ T8937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.461893][ T8929] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.528623][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 196.528637][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 196.622511][ T4426] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.647474][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.772550][ T8929] XFS (loop4): Ending clean mount [ 196.916198][ T8442] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.118100][ T5831] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 197.300725][ T5831] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 197.342033][ T5831] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.349376][ T8959] loop4: detected capacity change from 0 to 4096 [ 197.367735][ T5831] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 197.376953][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.415910][ T8959] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 197.417111][ T5831] usb 3-1: config 0 descriptor?? [ 197.455865][ T8959] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 197.470457][ T8953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 197.489089][ T8959] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 197.523182][ T8959] ntfs: volume version 3.1. [ 197.603538][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 197.677807][ T1186] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 197.758690][ T8968] loop3: detected capacity change from 0 to 1024 [ 197.778607][ T58] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 197.810485][ T8442] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 197.887414][ T1186] usb 2-1: Using ep0 maxpacket: 32 [ 197.905595][ T1186] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 197.909207][ T5831] waltop 0003:172F:0032.000B: unknown main item tag 0x1 [ 197.951901][ T1186] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 197.971727][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.989354][ T5831] waltop 0003:172F:0032.000B: hidraw0: USB HID v0.04 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 197.992001][ T1186] usb 2-1: Product: syz [ 198.037648][ T1186] usb 2-1: Manufacturer: syz [ 198.042305][ T1186] usb 2-1: SerialNumber: syz [ 198.089407][ T1186] usb 2-1: config 0 descriptor?? [ 198.097880][ T8961] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 198.122613][ T1186] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 198.133962][ T5824] usb 3-1: USB disconnect, device number 8 [ 198.183507][ T8975] fido_id[8975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 198.411030][ T28] audit: type=1326 audit(1751804279.635:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.3.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5798e929 code=0x0 [ 198.504988][ T1186] usb 2-1: USB disconnect, device number 11 [ 198.511063][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 198.925627][ T8996] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 198.932198][ T8996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.945215][ T8996] vhci_hcd vhci_hcd.0: Device attached [ 199.034112][ T9002] loop2: detected capacity change from 0 to 256 [ 199.194811][ T9004] loop1: detected capacity change from 0 to 4096 [ 199.217742][ T1186] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.225328][ T5832] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 199.237030][ T9006] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.428022][ T1186] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 199.429203][ T9009] loop3: detected capacity change from 0 to 2048 [ 199.457748][ T1186] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.480897][ T1186] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.528789][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.543013][ T9009] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.547985][ T1186] usb 5-1: config 0 descriptor?? [ 199.852246][ T8997] usb 41-1: recv xbuf, 0 [ 199.858084][ T8] usb 5-1: USB disconnect, device number 3 [ 199.879122][ T58] vhci_hcd: stop threads [ 199.892534][ T58] vhci_hcd: release socket [ 199.905907][ T58] vhci_hcd: disconnect device [ 199.947456][ T5832] vhci_hcd: vhci_device speed not set [ 200.132559][ T9028] loop3: detected capacity change from 0 to 2048 [ 200.203095][ T9030] loop1: detected capacity change from 0 to 16 [ 200.216128][ T9031] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.232413][ T9030] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 200.379047][ T9031] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 200.426130][ T9031] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 200.448593][ T9031] Remounting filesystem read-only [ 200.453740][ T78] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 200.480922][ T78] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 200.508662][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.557370][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.566306][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.581988][ T78] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 200.595473][ T78] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 200.602957][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.611933][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.621020][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.662605][ T78] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 200.677392][ T78] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 200.694910][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.712666][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.737470][ T78] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 200.769115][ T5784] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 200.805192][ T9047] loop2: detected capacity change from 0 to 2048 [ 200.807995][ T5784] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 200.826066][ T5784] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 200.842410][ T5784] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 200.855027][ T9047] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 200.858200][ T5784] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 200.882843][ T5784] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 200.895169][ T9047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.126679][ T9057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 201.146175][ T9057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 201.176389][ T9052] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 201.210005][ T9054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1162'. [ 201.227973][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.228598][ T9059] tap0: tun_chr_ioctl cmd 2180551740 [ 201.419545][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 201.442993][ T5831] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.456731][ T5831] usb 5-1: config 0 has no interface number 0 [ 201.473000][ T5831] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.484755][ T5831] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.523799][ T5831] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 201.550771][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.572628][ T5831] usb 5-1: config 0 descriptor?? [ 201.994563][ T5831] hid (null): invalid report_count 1405183649 [ 202.102624][ T9068] loop2: detected capacity change from 0 to 32768 [ 202.154378][ T9068] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.220304][ T5831] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input17 [ 202.247604][ T5831] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input18 [ 202.317692][ T5831] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 202.511202][ T1762] usb 5-1: USB disconnect, device number 4 [ 202.559641][ T9089] fido_id[9089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 202.622938][ T9068] XFS (loop2): Ending clean mount [ 202.888918][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.931493][ T9122] loop2: detected capacity change from 0 to 128 [ 204.026845][ T9122] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.129201][ T9122] ext4 filesystem being mounted at /330/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.425203][ T5788] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.108556][ T28] audit: type=1326 audit(1751804286.325:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.1.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72b838e929 code=0x0 [ 205.368560][ T9154] tipc: Started in network mode [ 205.377525][ T9154] tipc: Node identity ac14140f, cluster identity 4711 [ 205.398324][ T9154] tipc: New replicast peer: 255.255.255.255 [ 205.421914][ T9154] tipc: Enabled bearer , priority 10 [ 205.661507][ T9165] loop2: detected capacity change from 0 to 128 [ 205.672301][ T9078] syz.3.1173 (9078): drop_caches: 1 [ 205.762889][ T9165] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.786925][ T9165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.162593][ T9173] ax25_connect(): syz.2.1196 uses autobind, please contact jreuter@yaina.de [ 206.532464][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1201'. [ 206.542999][ T1762] tipc: Node number set to 2886997007 [ 206.700930][ T9193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1202'. [ 207.002407][ T9169] loop4: detected capacity change from 0 to 32768 [ 207.096165][ T9169] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 207.099031][ T9208] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 207.133450][ T9169] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 207.187752][ T9169] gfs2: fsid=syz:syz.s: journal 0 mapped with 10 extents in 0ms [ 207.208271][ T9208] bond1: entered promiscuous mode [ 207.256259][ T9208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.432069][ T9169] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 207.705379][ T9228] pim6reg1: renamed from bridge0 (while UP) [ 207.756858][ T9228] pim6reg1: entered allmulticast mode [ 208.192162][ T9242] overlayfs: upper fs does not support tmpfile. [ 208.770395][ T9256] loop4: detected capacity change from 0 to 4096 [ 208.791316][ T9256] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 209.588659][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.702987][ T9253] loop2: detected capacity change from 0 to 32768 [ 209.725591][ T9253] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.730269][ T9262] loop1: detected capacity change from 0 to 32768 [ 209.787818][ T9253] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 209.800537][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 209.839118][ T9262] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 209.851456][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 209.889150][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.904124][ T9253] gfs2: fsid=syz:syz.s: journal 0 mapped with 10 extents in 0ms [ 209.946814][ T23] usb 5-1: config 0 descriptor?? [ 210.017090][ T9262] XFS (loop1): Ending clean mount [ 210.108190][ T9253] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 210.118644][ T9262] XFS (loop1): Quotacheck needed: Please wait. [ 210.227984][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 210.277214][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.281819][ T9262] XFS (loop1): Quotacheck: Done. [ 210.335730][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 210.372757][ T23] usb 5-1: media controller created [ 210.454491][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.549481][ T23] az6027: usb out operation failed. (-71) [ 210.569838][ T23] az6027: usb out operation failed. (-71) [ 210.575608][ T23] stb0899_attach: Driver disabled by Kconfig [ 210.593096][ T5791] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.605490][ T23] az6027: no front-end attached [ 210.605490][ T23] [ 210.617774][ T23] az6027: usb out operation failed. (-71) [ 210.623534][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 210.651662][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 210.686030][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 210.704332][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 210.766116][ T23] usb 5-1: USB disconnect, device number 5 [ 210.938279][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 211.470393][ T9327] loop1: detected capacity change from 0 to 2048 [ 211.533718][ T9327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.560212][ T9327] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.677465][ T28] audit: type=1800 audit(1751804292.895:53): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1238" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 211.709902][ T9316] loop2: detected capacity change from 0 to 32768 [ 211.723026][ T9316] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1234 (9316) [ 211.754822][ T9316] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.798600][ T9316] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 211.807879][ T9316] BTRFS info (device loop2): force clearing of disk cache [ 211.840442][ T9316] BTRFS info (device loop2): enabling auto defrag [ 211.859674][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.864133][ T9316] BTRFS info (device loop2): max_inline at 0 [ 211.907457][ T9316] BTRFS info (device loop2): enabling disk space caching [ 211.920713][ T9316] BTRFS info (device loop2): disk space caching is enabled [ 212.134441][ T9316] BTRFS info (device loop2): enabling ssd optimizations [ 212.147672][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.168425][ T9316] BTRFS info (device loop2): rebuilding free space tree [ 212.249994][ T9316] BTRFS info (device loop2): disabling free space tree [ 212.256980][ T9316] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.337451][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 212.349710][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.365088][ T9316] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.369046][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.395556][ T8] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 212.400330][ T9372] loop1: detected capacity change from 0 to 16 [ 212.439881][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.447583][ T9372] erofs: (device loop1): mounted with root inode @ nid 36. [ 212.498908][ T8] usb 5-1: config 0 descriptor?? [ 212.593193][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.992202][ T8] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 213.072081][ T9338] loop3: detected capacity change from 0 to 40427 [ 213.143820][ T9338] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 213.179174][ T8] corsair 0003:1B1C:1B02.000D: Read invalid backlight brightness: f7. [ 213.197496][ T9338] F2FS-fs (loop3): Image doesn't support compression [ 213.228900][ T9338] F2FS-fs (loop3): heap/no_heap options were deprecated [ 213.235903][ T9338] F2FS-fs (loop3): Image doesn't support compression [ 213.330771][ T9338] F2FS-fs (loop3): invalid crc value [ 213.373032][ T9338] F2FS-fs (loop3): Found nat_bits in checkpoint [ 213.528151][ T5832] usb 5-1: USB disconnect, device number 6 [ 213.617918][ T9338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 213.803844][ T9338] syz.3.1241: attempt to access beyond end of device [ 213.803844][ T9338] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 213.832941][ T9382] loop1: detected capacity change from 0 to 32768 [ 213.864273][ T9338] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 213.907452][ T9338] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 213.926672][ T9382] JBD2: Ignoring recovery information on journal [ 214.031646][ T9382] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 214.240027][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 214.785926][ T9422] loop1: detected capacity change from 0 to 1024 [ 214.985248][ T9427] loop3: detected capacity change from 0 to 16 [ 214.987109][ T48] hfsplus: b-tree write err: -5, ino 4 [ 215.009954][ T9427] erofs: (device loop3): mounted with root inode @ nid 36. [ 215.524417][ T9441] loop2: detected capacity change from 0 to 512 [ 215.683903][ T9441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.728040][ T9441] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.827903][ T9441] Bluetooth: MGMT ver 1.22 [ 215.962694][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.273080][ T9431] loop1: detected capacity change from 0 to 32768 [ 216.332621][ T9431] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.523871][ T9431] XFS (loop1): Ending clean mount [ 216.586489][ T9431] XFS (loop1): Quotacheck needed: Please wait. [ 216.699718][ T9431] XFS (loop1): Quotacheck: Done. [ 216.877453][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.272284][ T9483] loop2: detected capacity change from 0 to 1024 [ 217.285214][ T9483] EXT4-fs: Ignoring removed orlov option [ 217.317582][ T9483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.347014][ T9483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.471942][ T9487] loop1: detected capacity change from 0 to 4096 [ 217.541828][ T9487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.664211][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.676187][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.636159][ T9521] loop1: detected capacity change from 0 to 2048 [ 218.709895][ T9521] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.848216][ T5798] Bluetooth: hci1: command tx timeout [ 219.042023][ T9527] loop3: detected capacity change from 0 to 1024 [ 219.363970][ T1300] hfsplus: b-tree write err: -5, ino 4 [ 219.779557][ T9532] loop1: detected capacity change from 0 to 32768 [ 219.865399][ T9532] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 219.865399][ T9532] [ 219.905633][ T9532] ERROR: (device loop1): remounting filesystem as read-only [ 219.952701][ T9519] loop4: detected capacity change from 0 to 40427 [ 220.017432][ T112] blkno = 5002c, nblocks = 1 [ 220.022068][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 220.022068][ T112] [ 220.049712][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.051450][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 220.109097][ T9519] F2FS-fs (loop4): invalid crc value [ 220.113502][ T9536] loop3: detected capacity change from 0 to 4096 [ 220.234450][ T9536] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 220.256932][ T9519] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.504046][ T28] audit: type=1800 audit(1751804301.725:54): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1298" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 220.583531][ T9519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.592391][ T28] audit: type=1800 audit(1751804301.775:55): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1298" name="file3" dev="loop3" ino=31 res=0 errno=0 [ 220.825820][ T9537] f2fs_ckpt-7:4: attempt to access beyond end of device [ 220.825820][ T9537] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.906213][ T9537] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 221.322477][ T9553] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 221.518499][ T9559] loop1: detected capacity change from 0 to 1024 [ 222.031910][ T9565] loop1: detected capacity change from 0 to 512 [ 222.134478][ T9567] loop3: detected capacity change from 0 to 164 [ 222.163651][ T9565] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 222.187451][ T9565] System zones: 0-2, 18-18, 34-35 [ 222.215274][ T9565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.247665][ T9565] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.364655][ T9573] loop2: detected capacity change from 0 to 512 [ 222.403151][ T9573] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.480044][ T9576] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1304'. [ 222.480124][ T9573] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1312: corrupted in-inode xattr: overlapping e_value [ 222.533458][ T9573] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1312: couldn't read orphan inode 15 (err -117) [ 222.538607][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.630725][ T9573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.823062][ T9583] loop4: detected capacity change from 0 to 1024 [ 222.925692][ T9583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.968488][ T9589] netlink: 'syz.1.1317': attribute type 11 has an invalid length. [ 223.020818][ T9583] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.1316: reserved inode found cleared - inode=18 [ 223.072968][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.173821][ T8442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.277480][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.507387][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 223.529165][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 223.550981][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 223.574612][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 223.592985][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.607860][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.656291][ T9605] loop2: detected capacity change from 0 to 512 [ 223.662809][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.705918][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.748556][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.788704][ T9] usb 4-1: config 0 descriptor?? [ 223.814289][ T9605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.832085][ T9605] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.935178][ T28] audit: type=1800 audit(1751804305.155:56): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1325" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 224.000097][ T28] audit: type=1800 audit(1751804305.185:57): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1325" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 224.102469][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.113848][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 224.343486][ T9] usb 4-1: USB disconnect, device number 10 [ 224.361657][ T9] usblp0: removed [ 224.750898][ T9629] loop4: detected capacity change from 0 to 1024 [ 224.804132][ T9629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.007572][ T1762] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.033509][ T8442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.056842][ T9625] loop1: detected capacity change from 0 to 32768 [ 225.142156][ T9625] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 225.197493][ T1762] usb 3-1: Using ep0 maxpacket: 32 [ 225.205404][ T1762] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 225.217806][ T28] audit: type=1800 audit(1751804306.435:58): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1333" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 225.258293][ T1762] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 225.267531][ T1762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.275538][ T1762] usb 3-1: Product: syz [ 225.290116][ T1762] usb 3-1: Manufacturer: syz [ 225.294752][ T1762] usb 3-1: SerialNumber: syz [ 225.297758][ T9639] tun0: tun_chr_ioctl cmd 1074025677 [ 225.315874][ T1762] usb 3-1: config 0 descriptor?? [ 225.321013][ T9639] tun0: linktype set to 270 [ 225.355058][ T9627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.383682][ T1762] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 225.405980][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 225.937394][ T1762] usb 3-1: USB disconnect, device number 9 [ 225.937555][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 226.187115][ T9655] loop3: detected capacity change from 0 to 8192 [ 226.221428][ T9655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.273134][ T9655] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 226.283532][ T9655] REISERFS (device loop3): using ordered data mode [ 226.290683][ T9655] reiserfs: using flush barriers [ 226.309607][ T9655] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.334576][ T9655] REISERFS (device loop3): checking transaction log (loop3) [ 226.409053][ T9655] REISERFS (device loop3): Using r5 hash to sort names [ 226.449464][ T9655] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 226.748801][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 226.957465][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 226.964893][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.997528][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.009313][ T9675] loop3: detected capacity change from 0 to 512 [ 227.018916][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.042839][ T9675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.042842][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.048269][ T9] usb 5-1: config 0 descriptor?? [ 227.070658][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 227.103408][ T9] hub 5-1:0.0: USB hub found [ 227.123840][ T9675] EXT4-fs (loop3): 1 truncate cleaned up [ 227.153000][ T9675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.216949][ T9675] fscrypt (loop3, inode 18): Direct key flag not allowed with different contents and filenames modes [ 227.252445][ T9683] loop6: detected capacity change from 0 to 64 [ 227.319073][ T9] hub 5-1:0.0: 1 port detected [ 227.392470][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.741359][ T9] usb 5-1: USB disconnect, device number 7 [ 228.041485][ T9705] tun0: tun_chr_ioctl cmd 1074812118 [ 228.400140][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1374'. [ 228.680466][ T9727] loop4: detected capacity change from 0 to 24 [ 228.708984][ T9727] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 228.734773][ T9727] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 228.816823][ T9727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.675596][ T9734] loop3: detected capacity change from 0 to 32768 [ 229.789873][ T9734] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 229.914142][ T28] audit: type=1800 audit(1751804311.135:59): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1380" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 230.077889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 230.124928][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1395'. [ 230.218793][ T9734] syz.3.1380 (9734) used greatest stack depth: 18288 bytes left [ 230.342411][ T5784] ocfs2: Unmounting device (7,3) on (node local) [ 230.671559][ T9789] loop1: detected capacity change from 0 to 256 [ 230.688340][ T9789] exfat: Deprecated parameter 'namecase' [ 230.743081][ T9789] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 231.087528][ T1762] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 231.177418][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.269448][ T1762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.279648][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 231.290657][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 231.300743][ T1762] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 231.314921][ T1762] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 231.324078][ T1762] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 231.332662][ T1762] usb 2-1: Manufacturer: syz [ 231.339832][ T1762] usb 2-1: config 0 descriptor?? [ 231.377500][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 231.384649][ T23] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 231.393165][ T23] usb 3-1: config 0 has no interface number 0 [ 231.402620][ T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 231.412862][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.421402][ T23] usb 3-1: Product: syz [ 231.425616][ T23] usb 3-1: Manufacturer: syz [ 231.430279][ T23] usb 3-1: SerialNumber: syz [ 231.437564][ T23] usb 3-1: config 0 descriptor?? [ 231.447761][ T23] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 231.627618][ T1762] rc_core: IR keymap rc-hauppauge not found [ 231.633738][ T1762] Registered IR keymap rc-empty [ 231.638960][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.667479][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.676627][ T9796] loop2: detected capacity change from 0 to 1024 [ 231.711384][ T1762] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 231.735077][ T23] usb 3-1: qt2_attach - failed to power on unit: -71 [ 231.746046][ T1762] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 231.762674][ T23] quatech2: probe of 3-1:0.51 failed with error -71 [ 231.773576][ T23] usb 3-1: USB disconnect, device number 10 [ 231.787191][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.837512][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.898365][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.927817][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.968643][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.025874][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.087455][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.120808][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.166772][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.197758][ T1762] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.236675][ T1762] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 232.262880][ T1762] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.282882][ T1762] usb 2-1: USB disconnect, device number 12 [ 232.353358][ T3494] hfsplus: b-tree write err: -5, ino 4 [ 232.409412][ T9824] loop3: detected capacity change from 0 to 64 [ 232.759901][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.970134][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.996555][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.011787][ T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 233.023151][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.048214][ T9] usb 3-1: config 0 descriptor?? [ 233.227647][ T9844] PKCS8: Unsupported PKCS#8 version [ 233.341545][ T9843] loop4: detected capacity change from 0 to 8192 [ 233.355367][ T9843] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 233.368722][ T9843] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 233.378033][ T9843] REISERFS (device loop4): using ordered data mode [ 233.384876][ T9843] reiserfs: using flush barriers [ 233.391760][ T9843] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 233.411105][ T9843] REISERFS (device loop4): checking transaction log (loop4) [ 233.433927][ T9843] REISERFS (device loop4): Using r5 hash to sort names [ 233.459799][ T9843] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 233.505504][ T9] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 233.557239][ T9851] loop1: detected capacity change from 0 to 64 [ 233.696499][ T9] hid-led 0003:1D34:0004.000E: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 233.736663][ T9] hid-led 0003:1D34:0004.000E: Dream Cheeky Webmail Notifier initialized [ 233.991521][ T9] usb 3-1: USB disconnect, device number 11 [ 234.225452][ T9849] loop3: detected capacity change from 0 to 32768 [ 234.256241][ T9849] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1429 (9849) [ 234.282641][ T9849] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.300236][ T9849] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 234.336395][ T9849] BTRFS info (device loop3): force zlib compression, level 3 [ 234.346633][ T9849] BTRFS info (device loop3): force clearing of disk cache [ 234.357906][ T9849] BTRFS info (device loop3): setting nodatasum [ 234.364106][ T9849] BTRFS info (device loop3): doing ref verification [ 234.375471][ T9849] BTRFS info (device loop3): allowing degraded mounts [ 234.382631][ T9849] BTRFS info (device loop3): enabling disk space caching [ 234.394535][ T9849] BTRFS info (device loop3): disk space caching is enabled [ 234.491986][ T9849] BTRFS info (device loop3): enabling ssd optimizations [ 234.499754][ T9849] BTRFS info (device loop3): auto enabling async discard [ 234.525142][ T9849] BTRFS info (device loop3): rebuilding free space tree [ 234.571458][ T9849] BTRFS info (device loop3): disabling free space tree [ 234.588226][ T9849] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.602961][ T9887] loop1: detected capacity change from 0 to 8 [ 234.611909][ T9849] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.712801][ T28] audit: type=1800 audit(1751804315.935:60): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1429" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 234.885990][ T5784] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.967198][ T9893] input: syz1 as /devices/virtual/input/input22 [ 235.048015][ T28] audit: type=1326 audit(1751804316.265:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9863 comm="syz.4.1434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4705f8e929 code=0x7fc00000 [ 235.473205][ T9910] loop1: detected capacity change from 0 to 2048 [ 235.485888][ T9910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.971326][ T9925] loop3: detected capacity change from 0 to 128 [ 235.987146][ T9925] EXT4-fs: Ignoring removed oldalloc option [ 235.993900][ T9925] EXT4-fs: inline encryption not supported [ 236.033487][ T9926] loop1: detected capacity change from 0 to 512 [ 236.049103][ T9925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.066256][ T9926] EXT4-fs (loop1): #blocks per group too big: 262144 [ 236.075695][ T9925] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.210784][ T5784] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.267636][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 236.497405][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 236.512270][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.527513][ T9] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 236.561833][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 236.587965][ T9] usb 3-1: can't read configurations, error -71 [ 236.875771][ T9935] loop3: detected capacity change from 0 to 32768 [ 236.895230][ T9935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1456 (9935) [ 236.913544][ T9932] loop4: detected capacity change from 0 to 40427 [ 236.942633][ T9932] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 236.968276][ T9932] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.976988][ T9935] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.997135][ T9935] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 237.021633][ T9932] F2FS-fs (loop4): build fault injection attr: rate: 18446, type: 0x7ffff [ 237.028247][ T9935] BTRFS info (device loop3): force clearing of disk cache [ 237.068873][ T9935] BTRFS info (device loop3): enabling disk space caching [ 237.077078][ T9932] F2FS-fs (loop4): invalid crc value [ 237.086584][ T9935] BTRFS info (device loop3): turning on sync discard [ 237.112266][ T9935] BTRFS info (device loop3): disabling tree log [ 237.133983][ T9932] F2FS-fs (loop4): Found nat_bits in checkpoint [ 237.136364][ T9935] BTRFS info (device loop3): metadata ratio 5 [ 237.170081][ T9935] BTRFS info (device loop3): disk space caching is enabled [ 237.385272][ T9932] F2FS-fs (loop4): Start checkpoint disabled! [ 237.422717][ T9935] BTRFS info (device loop3): enabling ssd optimizations [ 237.428447][ T9932] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 237.457377][ T9935] BTRFS info (device loop3): rebuilding free space tree [ 237.466057][ T9932] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 237.510249][ T9935] BTRFS info (device loop3): disabling free space tree [ 237.517866][ T9935] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.551849][ T9935] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.625965][ T9942] loop1: detected capacity change from 0 to 32768 [ 237.643985][ T9947] loop2: detected capacity change from 0 to 32768 [ 237.684065][ T9947] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1461 (9947) [ 237.742121][ T5777] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.936446][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 238.066276][ T4426] kworker/u4:9: attempt to access beyond end of device [ 238.066276][ T4426] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 238.099973][ T5779] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5779) [ 238.118644][ T4426] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 238.125555][ T4426] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 238.267478][ T4426] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 238.773855][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 238.819428][ T9977] macsec0: entered promiscuous mode [ 238.837679][ T5832] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.929122][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 239.039292][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.053575][ T5832] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.085636][ T9967] loop2: detected capacity change from 0 to 40427 [ 239.087588][ T5832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.111805][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.130929][ T9967] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 239.144401][ T5832] usb 2-1: Product: syz [ 239.157048][ T5832] usb 2-1: Manufacturer: syz [ 239.171721][ T9967] F2FS-fs (loop2): Image doesn't support compression [ 239.176991][ T5832] usb 2-1: SerialNumber: syz [ 239.202043][ T9967] F2FS-fs (loop2): Image doesn't support compression [ 239.227091][ T9967] F2FS-fs (loop2): invalid crc value [ 239.263608][ T9967] F2FS-fs (loop2): Found nat_bits in checkpoint [ 239.347050][ T9967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 239.450549][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.477557][ T1186] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 239.485642][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.494906][ T5788] syz-executor: attempt to access beyond end of device [ 239.494906][ T5788] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.523378][ T5832] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 239.524106][ T5788] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 239.557558][ T5832] usb 2-1: USB disconnect, device number 13 [ 239.677416][ T1186] usb 5-1: Using ep0 maxpacket: 32 [ 239.684473][ T1186] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.697656][ T1186] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.718801][ T1186] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.744780][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.762656][ T1186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.790854][ T1186] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.824517][ T1186] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.834065][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.855043][ T1186] usb 5-1: config 0 descriptor?? [ 240.057449][ T23] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 240.092595][ T1186] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.237140][T10001] loop2: detected capacity change from 0 to 7 [ 240.251389][ T5940] Dev loop2: unable to read RDB block 7 [ 240.258622][ T5940] loop2: unable to read partition table [ 240.264539][ T5940] loop2: partition table beyond EOD, truncated [ 240.271973][ T23] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 240.280812][ T23] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 240.299002][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.317481][T10001] Dev loop2: unable to read RDB block 7 [ 240.323078][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 240.334146][T10001] loop2: unable to read partition table [ 240.340829][T10001] loop2: partition table beyond EOD, truncated [ 240.347019][T10001] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.360424][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.372115][ T5824] usb 5-1: USB disconnect, device number 8 [ 240.383061][ T5824] usblp0: removed [ 240.387183][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.404759][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.424217][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.613117][T10003] loop3: detected capacity change from 0 to 4096 [ 240.628876][T10003] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 240.673152][ T23] usb 2-1: usb_control_msg returned -71 [ 240.680159][ T23] usbtmc 2-1:16.0: can't read capabilities [ 240.694187][ T23] usbtmc 2-1:16.0: Failed to submit iin_urb [ 240.701856][ T23] usbtmc: probe of 2-1:16.0 failed with error -90 [ 240.714615][ T23] usb 2-1: USB disconnect, device number 14 [ 240.954476][T10012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1481'. [ 241.144718][T10020] loop4: detected capacity change from 0 to 64 [ 241.327045][T10022] loop4: detected capacity change from 0 to 1024 [ 241.337435][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 241.447599][ T28] audit: type=1800 audit(1751804322.665:62): pid=10022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1485" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 241.537916][ T12] hfsplus: b-tree write err: -5, ino 4 [ 241.541820][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 241.546845][T10017] loop3: detected capacity change from 0 to 32768 [ 241.561083][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.582198][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.591892][T10017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1480 (10017) [ 241.606157][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.637273][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.658188][T10017] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.695398][T10017] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 241.710573][ T23] usb 3-1: config 0 descriptor?? [ 241.717796][T10017] BTRFS info (device loop3): setting nodatacow, compression disabled [ 241.725958][T10017] BTRFS info (device loop3): max_inline at 0 [ 241.734597][ T23] hub 3-1:0.0: USB hub found [ 241.755755][T10017] BTRFS info (device loop3): turning off barriers [ 241.763014][T10017] BTRFS info (device loop3): force zlib compression, level 3 [ 241.772381][T10030] loop4: detected capacity change from 0 to 512 [ 241.779271][T10017] BTRFS info (device loop3): doing ref verification [ 241.800539][T10017] BTRFS info (device loop3): force clearing of disk cache [ 241.813173][T10017] BTRFS info (device loop3): enabling ssd optimizations [ 241.822705][T10017] BTRFS info (device loop3): max_inline at 4096 [ 241.829468][T10017] BTRFS info (device loop3): using free space tree [ 241.832664][T10030] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 241.864349][T10030] System zones: 0-2, 18-18, 34-34 [ 241.902075][T10030] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1488: corrupted inode contents [ 241.949058][ T1186] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.965123][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 241.969429][T10030] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #3: comm syz.4.1488: mark_inode_dirty error [ 241.993823][T10017] BTRFS info (device loop3): auto enabling async discard [ 242.000649][T10030] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #3: comm syz.4.1488: corrupted inode contents [ 242.018710][T10030] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1488: mark_inode_dirty error [ 242.022009][T10017] BTRFS info (device loop3): rebuilding free space tree [ 242.060127][T10030] Quota error (device loop4): write_blk: dquota write failed [ 242.068130][T10030] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 242.079254][T10030] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1488: Failed to acquire dquot type 0 [ 242.137450][ T1186] usb 2-1: Using ep0 maxpacket: 16 [ 242.144628][T10030] EXT4-fs (loop4): 1 orphan inode deleted [ 242.159086][ T1186] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.175586][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 242.181861][T10030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.186926][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 242.207611][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.221179][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:1: Failed to release dquot type 1 [ 242.232985][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 242.235170][ T1186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.261364][T10030] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.289558][ T1186] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.295052][ T23] usb 3-1: USB disconnect, device number 14 [ 242.307381][ T1186] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.345974][ T1186] usb 2-1: Manufacturer: syz [ 242.399919][ T1186] usb 2-1: config 0 descriptor?? [ 242.453963][ T5784] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.673121][ T8] usb 2-1: USB disconnect, device number 15 [ 242.679933][ T5832] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 242.880775][ T5832] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 242.914845][ T5832] usb 5-1: config 135 has an invalid descriptor of length 237, skipping remainder of the config [ 242.940482][ T5832] usb 5-1: config 135 has no interface number 0 [ 242.956394][ T5832] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 242.987488][ T5832] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 243.008828][ T5832] usb 5-1: config 135 interface 230 has no altsetting 0 [ 243.028703][ T5832] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 243.038508][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.046521][ T5832] usb 5-1: Product: syz [ 243.061132][ T5832] usb 5-1: Manufacturer: syz [ 243.065780][ T5832] usb 5-1: SerialNumber: syz [ 243.338460][ T5832] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 243.357416][ T5832] usb 5-1: No valid video chain found. [ 243.378101][ T5832] usb 5-1: USB disconnect, device number 9 [ 243.705228][T10080] loop2: detected capacity change from 0 to 4096 [ 243.852226][T10086] loop1: detected capacity change from 0 to 4096 [ 243.882370][T10086] NILFS (loop1): invalid segment: Checksum error in segment payload [ 243.931690][T10086] NILFS (loop1): trying rollback from an earlier position [ 243.973396][ T8442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.027629][T10086] NILFS (loop1): recovery complete [ 244.894677][T10096] loop1: detected capacity change from 0 to 32768 [ 244.931506][T10096] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 244.958648][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 244.995865][ T28] audit: type=1800 audit(1751804326.215:63): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1511" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 245.179870][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 245.191302][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 245.212648][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.222426][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.237218][ T23] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.249183][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.257203][ T23] usb 5-1: Product: syz [ 245.261495][ T23] usb 5-1: Manufacturer: syz [ 245.266101][ T23] usb 5-1: SerialNumber: syz [ 245.326606][ T5824] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.354587][ T5791] ocfs2: Unmounting device (7,1) on (node local) [ 245.529918][ T5824] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 245.539649][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.551222][ T5824] usb 3-1: config 0 descriptor?? [ 245.566617][ T5824] cp210x 3-1:0.0: cp210x converter detected [ 245.600140][T10126] loop1: detected capacity change from 0 to 64 [ 245.634045][T10126] [ 245.636408][T10126] ====================================================== [ 245.643428][T10126] WARNING: possible circular locking dependency detected [ 245.650460][T10126] 6.6.96-syzkaller #0 Not tainted [ 245.655529][T10126] ------------------------------------------------------ [ 245.662543][T10126] syz.1.1522/10126 is trying to acquire lock: [ 245.668595][T10126] ffff88802fdc3b78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 245.679390][T10126] [ 245.679390][T10126] but task is already holding lock: [ 245.686754][T10126] ffff88802ddde0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 245.696262][T10126] [ 245.696262][T10126] which lock already depends on the new lock. [ 245.696262][T10126] [ 245.706651][T10126] [ 245.706651][T10126] the existing dependency chain (in reverse order) is: [ 245.715648][T10126] [ 245.715648][T10126] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 245.723735][T10126] __mutex_lock+0x129/0xcc0 [ 245.728757][T10126] hfs_find_init+0x15f/0x1d0 [ 245.733854][T10126] hfs_extend_file+0x2ef/0x1220 [ 245.739215][T10126] hfs_bmap_reserve+0x107/0x430 [ 245.744574][T10126] hfs_cat_create+0x1b4/0x620 [ 245.749759][T10126] hfs_create+0x66/0xd0 [ 245.754420][T10126] path_openat+0x1277/0x3190 [ 245.759519][T10126] do_filp_open+0x1c5/0x3d0 [ 245.764530][T10126] do_sys_openat2+0x12c/0x1c0 [ 245.769715][T10126] __x64_sys_openat+0x139/0x160 [ 245.775075][T10126] do_syscall_64+0x55/0xb0 [ 245.780001][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.786402][T10126] [ 245.786402][T10126] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 245.795599][T10126] __lock_acquire+0x2ddb/0x7c80 [ 245.800958][T10126] lock_acquire+0x197/0x410 [ 245.805967][T10126] __mutex_lock+0x129/0xcc0 [ 245.810979][T10126] hfs_extend_file+0xdb/0x1220 [ 245.816247][T10126] hfs_bmap_reserve+0x107/0x430 [ 245.821602][T10126] __hfs_ext_write_extent+0x1fa/0x470 [ 245.827484][T10126] __hfs_ext_cache_extent+0x6b/0x9b0 [ 245.833280][T10126] hfs_extend_file+0x317/0x1220 [ 245.838643][T10126] hfs_get_block+0x3d8/0xbd0 [ 245.843743][T10126] __block_write_begin_int+0x566/0x1ad0 [ 245.849796][T10126] block_write_begin+0x9a/0x1e0 [ 245.855151][T10126] cont_write_begin+0x5c8/0x7e0 [ 245.860506][T10126] hfs_write_begin+0x8b/0xd0 [ 245.865605][T10126] generic_perform_write+0x2fb/0x5b0 [ 245.871402][T10126] generic_file_write_iter+0xaf/0x2e0 [ 245.877283][T10126] vfs_write+0x43b/0x940 [ 245.882047][T10126] ksys_write+0x147/0x250 [ 245.886880][T10126] do_syscall_64+0x55/0xb0 [ 245.891805][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.898213][T10126] [ 245.898213][T10126] other info that might help us debug this: [ 245.898213][T10126] [ 245.908427][T10126] Possible unsafe locking scenario: [ 245.908427][T10126] [ 245.915865][T10126] CPU0 CPU1 [ 245.921214][T10126] ---- ---- [ 245.926559][T10126] lock(&tree->tree_lock#2/1); [ 245.931412][T10126] lock(&HFS_I(tree->inode)->extents_lock); [ 245.939898][T10126] lock(&tree->tree_lock#2/1); [ 245.947264][T10126] lock(&HFS_I(tree->inode)->extents_lock); [ 245.953226][T10126] [ 245.953226][T10126] *** DEADLOCK *** [ 245.953226][T10126] [ 245.961355][T10126] 5 locks held by syz.1.1522/10126: [ 245.966531][T10126] #0: ffff88802dc08348 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 245.975746][T10126] #1: ffff88805b6be418 (sb_writers#21){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 245.984716][T10126] #2: ffff88802fdc2338 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: generic_file_write_iter+0x83/0x2e0 [ 245.996020][T10126] #3: ffff88802fdc2178 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 246.006709][T10126] #4: ffff88802ddde0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 246.016623][T10126] [ 246.016623][T10126] stack backtrace: [ 246.022500][T10126] CPU: 0 PID: 10126 Comm: syz.1.1522 Not tainted 6.6.96-syzkaller #0 [ 246.030551][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.040601][T10126] Call Trace: [ 246.043872][T10126] [ 246.046796][T10126] dump_stack_lvl+0x16c/0x230 [ 246.051472][T10126] ? load_image+0x3b0/0x3b0 [ 246.055958][T10126] ? show_regs_print_info+0x20/0x20 [ 246.061146][T10126] ? print_circular_bug+0x12b/0x1a0 [ 246.066330][T10126] check_noncircular+0x2bd/0x3c0 [ 246.071259][T10126] ? look_up_lock_class+0x75/0x140 [ 246.076371][T10126] ? print_deadlock_bug+0x5d0/0x5d0 [ 246.081558][T10126] ? lockdep_lock+0xe0/0x220 [ 246.086136][T10126] ? check_noncircular+0x175/0x3c0 [ 246.091239][T10126] ? _find_first_zero_bit+0xd3/0x100 [ 246.096514][T10126] __lock_acquire+0x2ddb/0x7c80 [ 246.101374][T10126] ? hlock_conflict+0x5d/0x1f0 [ 246.106130][T10126] ? verify_lock_unused+0x140/0x140 [ 246.111322][T10126] ? __bfs+0x2a3/0x5c0 [ 246.115385][T10126] ? check_path+0x40/0x40 [ 246.119706][T10126] ? check_path+0x21/0x40 [ 246.124022][T10126] ? check_noncircular+0x175/0x3c0 [ 246.129123][T10126] ? look_up_lock_class+0x75/0x140 [ 246.134226][T10126] lock_acquire+0x197/0x410 [ 246.138729][T10126] ? hfs_extend_file+0xdb/0x1220 [ 246.143667][T10126] ? __might_sleep+0xe0/0xe0 [ 246.148265][T10126] ? __lock_acquire+0x2b6b/0x7c80 [ 246.153374][T10126] ? read_lock_is_recursive+0x20/0x20 [ 246.158738][T10126] __mutex_lock+0x129/0xcc0 [ 246.163233][T10126] ? hfs_extend_file+0xdb/0x1220 [ 246.168163][T10126] ? lock_chain_count+0x20/0x20 [ 246.172997][T10126] ? hfs_extend_file+0xdb/0x1220 [ 246.177920][T10126] ? verify_lock_unused+0x140/0x140 [ 246.183105][T10126] ? mutex_lock_nested+0x20/0x20 [ 246.188038][T10126] hfs_extend_file+0xdb/0x1220 [ 246.192794][T10126] ? hfs_get_block+0xbd0/0xbd0 [ 246.197548][T10126] ? __mutex_trylock_common+0x153/0x250 [ 246.203082][T10126] ? trace_raw_output_contention_end+0xd0/0xd0 [ 246.209226][T10126] ? rcu_is_watching+0x15/0xb0 [ 246.213982][T10126] ? hfs_brec_find+0x18f/0x500 [ 246.218728][T10126] ? __mutex_lock+0x304/0xcc0 [ 246.223398][T10126] hfs_bmap_reserve+0x107/0x430 [ 246.228278][T10126] __hfs_ext_write_extent+0x1fa/0x470 [ 246.233727][T10126] __hfs_ext_cache_extent+0x6b/0x9b0 [ 246.238996][T10126] ? hfs_find_init+0x15f/0x1d0 [ 246.243743][T10126] hfs_extend_file+0x317/0x1220 [ 246.248581][T10126] ? filemap_get_folios+0xe5/0x7b0 [ 246.253677][T10126] ? hfs_get_block+0xbd0/0xbd0 [ 246.258438][T10126] ? find_lock_entries+0xfe0/0xfe0 [ 246.263543][T10126] ? clean_bdev_aliases+0x55f/0x630 [ 246.268732][T10126] hfs_get_block+0x3d8/0xbd0 [ 246.273314][T10126] ? hfs_free_extents+0x430/0x430 [ 246.278327][T10126] ? _raw_spin_unlock+0x28/0x40 [ 246.283163][T10126] ? folio_add_lru+0x320/0xd50 [ 246.287913][T10126] __block_write_begin_int+0x566/0x1ad0 [ 246.293473][T10126] ? hfs_free_extents+0x430/0x430 [ 246.298497][T10126] ? folio_zero_new_buffers+0x550/0x550 [ 246.304038][T10126] ? hfs_free_extents+0x430/0x430 [ 246.309052][T10126] block_write_begin+0x9a/0x1e0 [ 246.313893][T10126] ? hfs_free_extents+0x430/0x430 [ 246.318906][T10126] cont_write_begin+0x5c8/0x7e0 [ 246.323747][T10126] ? generic_cont_expand_simple+0x200/0x200 [ 246.329630][T10126] ? fault_in_readable+0xcb/0x160 [ 246.334646][T10126] ? fault_in_readable+0xd0/0x160 [ 246.339662][T10126] hfs_write_begin+0x8b/0xd0 [ 246.344243][T10126] ? hfs_free_extents+0x430/0x430 [ 246.349261][T10126] generic_perform_write+0x2fb/0x5b0 [ 246.354539][T10126] ? generic_file_direct_write+0x3e0/0x3e0 [ 246.360335][T10126] ? __generic_file_write_iter+0xf7/0x230 [ 246.366038][T10126] ? generic_file_write_iter+0x9b/0x2e0 [ 246.371587][T10126] generic_file_write_iter+0xaf/0x2e0 [ 246.376951][T10126] vfs_write+0x43b/0x940 [ 246.381186][T10126] ? file_end_write+0x250/0x250 [ 246.386027][T10126] ? __fget_files+0x44a/0x4d0 [ 246.390699][T10126] ? __fdget_pos+0x2a3/0x330 [ 246.395278][T10126] ? ksys_write+0x75/0x250 [ 246.399686][T10126] ksys_write+0x147/0x250 [ 246.404010][T10126] ? __ia32_sys_read+0x90/0x90 [ 246.408766][T10126] ? lockdep_hardirqs_on+0x98/0x150 [ 246.413948][T10126] do_syscall_64+0x55/0xb0 [ 246.418358][T10126] ? clear_bhb_loop+0x40/0x90 [ 246.423019][T10126] ? clear_bhb_loop+0x40/0x90 [ 246.427681][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.433562][T10126] RIP: 0033:0x7f72b838e929 [ 246.437975][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.457566][T10126] RSP: 002b:00007f72b9256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 246.465964][T10126] RAX: ffffffffffffffda RBX: 00007f72b85b5fa0 RCX: 00007f72b838e929 [ 246.473925][T10126] RDX: 000000000000fea7 RSI: 0000200000000040 RDI: 0000000000000004 [ 246.481882][T10126] RBP: 00007f72b8410b39 R08: 0000000000000000 R09: 0000000000000000 [ 246.489835][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.497787][T10126] R13: 0000000000000000 R14: 00007f72b85b5fa0 R15: 00007ffd227a3018 [ 246.505748][T10126] [ 246.529516][ T23] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 246.719202][ T5824] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 246.733018][ T5824] usb 3-1: cp210x converter now attached to ttyUSB0 [ 246.798255][ T5832] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 246.944023][ T1186] usb 3-1: USB disconnect, device number 15 [ 246.959973][ T1186] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.974510][ T5824] usb 5-1: USB disconnect, device number 10 [ 246.984352][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.993372][ T1186] cp210x 3-1:0.0: device disconnected [ 247.001393][ T5832] usb 4-1: no configurations [ 247.007115][ T5832] usb 4-1: can't read configurations, error -22