last executing test programs: 15m12.741487646s ago: executing program 3 (id=10): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="240000001e002907"], 0x24}], 0x1}, 0x0) 15m12.425079416s ago: executing program 3 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x28, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m12.038998994s ago: executing program 3 (id=14): unshare(0x20000400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0xfffffffffff7fff5, 0x1) 15m11.422139194s ago: executing program 3 (id=18): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 15m10.732536471s ago: executing program 3 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 15m10.065031156s ago: executing program 3 (id=29): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_SET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfe, {0x14, 0x1, 0x2, 0x0, 0x5, 0x2, 0x8, 0x1ff, 0x0, 0x8, 0xffff}}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x2008090) 15m9.71038142s ago: executing program 32 (id=29): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_SET(r0, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x3c, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfe, {0x14, 0x1, 0x2, 0x0, 0x5, 0x2, 0x8, 0x1ff, 0x0, 0x8, 0xffff}}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x2008090) 4m37.002001062s ago: executing program 5 (id=3865): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000300)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {}, {@errors_remount}, {@keep_last_dots}]}, 0x5, 0x1531, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOksMQksPEpHE+H3JOkleSJCEhyf6uKX3+b/3fq/7f2/t5/++s33Xd1+w1z7PWs+5nzTX34blmvu42vFaT2tUbERH8U/CXLykAEAMAgwHgGgAIAKB8fPn47MfzSEz5516E/bUeTL/SHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zC13LW87dLt3/jwG+/58D8fE/Z+P5/8fw3vf5Hyfx/HM2nn/OxvPP2Xj+ORvPP2fj+ecs9jcxz5+xnOwvuY+c+1Kxf/gc8b/5c4Zf36p/sk7x4Jcy/6o+g/+nvCv0Y8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLIc55y9TAPDr+kr3xRhjjDHGGGOMsb+Oz32lO2CMMcYYY4wxxti/HgIoCQoCyAW5IQbyQCxcBXFwNeSFayAC10I8XAf54HrIDwWgIBSCBCgMRUCDAQsEIRSFYhCF4lACboBEKAmloDQ4KANJcCOUhZugHNwM5eEWqAC3QkWoBJWhCtwGVeF2qAZ3QHW4E2pATagFteEuqIN3Q124B+rBvVAf7oMGcD80hAegETwIjeEhaAIPQ1NoBs2hBbSEVtD6t/nwZ/Kfh17wAvSGPpACfaEfvAj9YQAMhEEwGF6CIfAyDIVXIBWGwXB4FUbAazASXodRMBrGwBswFsbBeJgAE2ESpMGbMBneginwNkyFaTAdZkA6zIRZ8A7MhjkwF96FefAezIcFsBAWQQa8D4thCWTCB7AUPoQsWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFb4CLbBdtgBO2EX7IY98DHshU9gH3wK++Gz/2H+2d/kd0dAQIECFSrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBBQsKiWBSjGMUSWAITMRFLYSl06DAJk7As3oTlsByWx/JYAStgRayElbAKVsGqWBWrYTWsfusCAKyBtbAW3oV34d1YF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YjImYyfshJ2xM3bBLtgVu2I37IbdsQf2wOfxeXwBX8A+WEP0xX7YD/tjfxyIg3AQvoRD8GV8GV/BVByGw/FVfBVfw5F4BkfhaByDY7CqGIfjcQKSmIRpmIaTcTJOwSk4FafhNJyB6TgTZ+EsnI1zcA6+i/PwPXwPF+ACXIQZmIGLcQlmYiYuxbOYhctwOa7AlQC4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BTzAVmwHAATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsBnE75svLvkulQQ2ZRQIpfIJWJEjIgVsSJOxIm8Iq+IiIiIF/Ein8gn8ov8oqAoKBJEgigiiggjjCARiqKiqIiKqCghSohEkShKiVKir3AiSSSJsqKsKCfKifLiFlFB3Coqikqinasiqoiqor2rJu4Q1UV1UUPUFLVEbVFb1BF1RF1RV9QT9UR9UV8oAGgo+uJAfFBkT6aJGIZNxXBsLlqIlqKVeA0fEW3ESGwr2on24jExGkdhR9HGJYsnRScxHjuLp8UEfEZ0FZOwm3hOdBc9RE/xvOgl2rreoo+Yin1FPzED+4sBYqAYJGZjTZE9sVriFZEqhonh4lWxCF8TI8XrYpQYLcaIN8RYMU6MFxPERDFJpIk3xWTxlpgi3hZTxTQxXcwQ6WKmmCXeEbPFHDFXvCvmiffEfLFALBSLRIZ4XywWS0Sm+EAsFR+KLLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxkdgmtosdYqfYJXaLPeJjsVd8IvaJT8V+8Zk4IP4mDorPxSHxhTgsvhRHxFfiqPhaHBPfiOOijzghTopT4jtxWnwvzoiz4pz4QZwXP4oL4idxUXgBEqWQUioZyFwyt4yReWSsvErGyatlXnmNjMhrZby8TuaT18v8soAsKAvJBFlYFpFaGmklyVAWlcVkVBaXJeQNMlGWlKVkaelkGZkkb5Rl5U2ynLxZlpe3yAryVllRVpKVZRV5m6wqb5fV5B2yurxT1pA1ZS1ZW94l68i7ZV15j6wn75X15X2ygbxfNpQPyEbyQdlYPiSbyIdlU9lMNpctZEvZSraWj8g28lHZVraT7eVjsoN8XHaUT8hk+aTsJJ+SneXTsot8RnaVz8pu8jnZXfaQPeVP8qL0srfsI1NkX9lPvij7y+xj4SA5WL4kh8iX5VD5ikyVw+Rw+aocIV+TI+XrcpQcLcfIN+RYOU6OlxPkRDlJpsk35WT5lpwi35ZT5TQ5Xc6Q6XKmHHip0tw/kf/Wr/kefzkky5lyaEqqHJayRW6VH8ltcrvcIXfKXXK33CP3yL1yr9wn98n9cr88IA/Ig/KgPCQPycPysDwij8ij8qg8Jo/J4/K4PCFPyh/kd/K0/F6ekWflWfmDPC/PywuX3gNQqISSSqlA5VK5VYzKo2LVVSpOXa3yCgBQ16p4dZ3Kp65X+VUBVVAVUgmqsCqitDLKKlKhKqqKqagqrkqoG1SiKqlKqdLKqTIqSd2oIv9k/t/3J3/tb8X0X94p1Vq1Vm1UG9VWtVXtVXvVQXVQHVVHlaySVSfVSXVWnVUX1UV1VV1VN9VNdVfdVU/VU/VSvVRvBJWiUlQ/9aLqrwaogWqQGqxeUkPUEDVUDVWpKlUNV8PVCDVCjVQj1Sg1So1RY9RYNVaNV+PVRDVRpak0NVlNVlPUFDVVTVXT1XSVrtLVLDVLzVaz1Vw1V81T89R8NV8tVAtVhspQi9Vilaky1VK1VGWpZWqZWqFWqFVqlVqj1qh1ap3aoDaoTWqTylJb1Va1TW1TO9QOtUvtUnvUHrVX7VX71D61X+1XB9QBdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVKnVKn1Wl1Rp1R59Q5dV6dVxfUBXVRXcw+7QtEIAIVqCBXkCuICWKC2CA2iAvigrxB3iASRIL4ID7IF1wf5A8KBAWDQkFCUDgoEujABDagIAyKBsWCaFA8KBHcECQGJYNSQenABWWCpODGoGxwU1AuuDkoH9wSVAhuDSoGlYLKQZXgtqBqcHtQLbgjqB7cGdQIaga1gtrBXUGd4O6gbnBPUC+4N6gf3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAhaBq2C1n9Vfcyu7/2ZAo+63rqPzg19dT/9ou6vB+iBepAerF/SQ/TLeqh+RafqYXp4zKt6hH5Nj9Sv61F6tB6j39Bj9Tg9Xk/QE/Uknabf1JP1W3qKfltP1dP0dD1Dp+uZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0hn6fb1YL9GZ+gO9VH+os/QyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1R3qb3q536J16l96t9+iP9V79id6nP9X79Wf6gP6bPqg/14f0F/qw/lIf0V/po/prfUx/o4/rb/UJfVKf0t/p0/p7fUaf1ef0D/q8/lFf0D/pi9pnn9xnH96NMsrkMrlMjIkxsSbWxJk4k9fkNRETMfEm3uQz+Ux+k98UNAVNgkkwRUwRk40MmaKmqImaqClhSphEk2hKmVLGGWeSTJIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaW1amzamjWlr2pr2pr3pYDqYjqajSTbJppPpZDqbzqaL6WK6mq6mm+lmupvupqfpaXqZXqa36W1STIrpZ/qZ/qa/GWgGmsFmsBlihpihZqhJNalmuBluRpgRZqQZaUaZ0WaMecOMNePMeDPBTDSTTJpJM5PNZDPFTDFTzVQz3Uw36SbdzDKzzGwz28w1c808M8/MN/PNQrPQZJgMs9gsNpkm0yw1S02WyTLLzXKz0qw0q81qs9asNevNerPRbDSbzWaz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQRMDh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHnzo7lgfjIXjTcxNo+NtVfZOHu1zWuvsb+NC9pCNsEWtkWstvltgb+LjbU20Za0pWxp62wZm2Rv/F1c0VaylW0Ve5utam+31X4X17F327r2HlvP3mtr27v+Lq5v77MN7MO2oW1mG9kWtrFtZZvYh21T28w2ty1sS9vKdrCP2472CZtsn7Sd7FO/ixfbJXatXWfX2w12r/3EnrM/2KP2a3ve/mh72z52sH3JDrEv26H2FZtqh/0uHmPfsGPtODveTrAT7aTfxdPtDJtuZ9pZ9h072875XZxh37fzbKadbxfYhXbRz3F2T5n2A7vUfmiz7DK73K6wK+0qu9qu+b+9rrCb7Ga7xe6xH9ttdrvdYXfaXXb3z3H2fuyzn9r99jN7xH5lD9rP7SF7zB62X/4cZ+/fMfuNPW6/tSfsSXvKfmdP2+/tGXv25/3P3vfv7E/2ovUWCEmQJEUB5aLcFEN5KJauoji6mvLSNRShaymerqN8dD3lpwJUkApRAhWmIqTJkCWikIpSMYpScSpBN1AilaRSVJoclaEkupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk1o+bUglpSK2pNj1AbepTaUjtqT49RB3qcOtITlExPUid6ijrT09SFnqGu9Cx1o+eoO/WgnvQ89aIXqDf1oRTqS/3oRepPA2ggDaLB9FINAKCh9Aql0jAaTq/SCHqNRtLrNIpG0xh6g8bSOBpPE2giTaI0epMm01s0hd6mqTSNptMMSqeZNIveodk0h+bSuzSP3qP5tIAW0iLKoPdpMS2hTPqAltKHlEXLaDmtoJW0ilbTGp8bgNbTBtpIm2gzbaGt9BFto+2EtJN20W7aQx/TXvqE9tGntJ8+owOEeJA+p0P0BR2mL+kIfUVH6Ws6Rt/QcfqWTtBJOkXf0Wn6ns7QWTpHP9B5+pEu0E90kTxBiKEIZajCIMwV5g5jwjxhbHhVGBdeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdGweFgivCFMDEuGpcLSoQvLhEnhjWHZ8KawXHhzWD68JawQ3hpWDCuFD99bJbwtrBreHlYL7wirh3eGNcKaYa2wdnhXWCe8O6wb3hPWC+8Ny4X3hQ3C+8OG4QNho/DBsHH4UNgkfDhsGjYLm4ctwpZhq7B1+EjYJnw0bBu2C9uHj4UdwsfDjuETYXL4ZNgpfOoPH08J+4b9whfDF0Pv75ELo4uiGdH3o4ujS6KZ0Q+iS6MfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfODQ6dcNIpF7hcLreLcXlcrLvKxbmrXV53jYu4a128u87lc9e7/K6AK+gKuQRX2BVx2hlnHbnQFXXFXNQVdyXcDS7RlXSlXGnnXBmX5Fq51q61a+MedW1dO9fePeYec4+7x90T7gn3pOvknnKd3dOui3vGdXXPumfdc6676+F6uuddL/eC6+36uBSX4vq5fq6/6+8GuoFusBvshrghbqgb6lJdqhvuhrsRboQb6Ua6UW6UG+PGuLFurBvvxruJfqJLc2luspvsprgpbqqb6qa76S7dpbtZbpab7Wa7uW6um5c4z813891Ct9BluAy32C12mS7TLXVLXZbLcsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XP73X53wB04591Bd8h94Q67L90R95U76r52x9w37rj71p1wJ90p95077b53Z9xZd8794M67H90F95O76LxLi7wZmRx5KzIl8nZkamRaZHpkRiQ9MjMyK/JOZHZkTmRuBGFe5L3I/MiCyMLIokhG5P3I4siSSGbkg8jSyIeRrMiyyPLIisjKyKqI94W3hb6oL+ajvrgv4W/wib6kL+VLe+fL+CR/oy/rb/Ll/M2+vL/FV/C3+oq+kq/sm/nmvoVv6Vv51v4R38Y/6tv6dr69f8x38I/7jv4Jn+yf9J38U76zf9p38c/4rv5Z380/57v7Hr6nf9738i/43r6PT/F9fT//ou/vB/iBfpAf7F/yQ/zLfqh/xaf6YX64f9WP8K/5kf51P8qP9mP8G36sH+fH+wl+op/k0/ybfrJ/y0/xb/upfpqf7mf4dD/Tz/Lv+Nl+jp/r3/Xz/Ht+vl/gF/pFPsO/7xf7JT7Tf+CX+g99ll/ml/sVHmJW+dV+jV/r1/n1foPf6Df5zX6L3+o/8tv8dr/D7/S7/G6/x3/s9/pP/D7/qd/vP/MH/N/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf5L9ZY4wxxhj7U+QfPN73v/meuLRl6wcAV28vdPi3NTfm/2U9QCR0iADAk326PXjp042UGjVSUlIuPTdLQlBsAQBELufngsvxMmgPj0MytIOy/21/A0SP83Sp/q/bb+tHbwGI/S85MXA5vlz/pn9Qf9y8P6y/ACCx2OWcPHA5vly/3D+oX6DNH9TP83kaQNv/khMHl+PL9ZPgUXgKkv9ooL848KeexRhjjDHGGGPsP8YAUbnLH13fZl+fJ6jLObnhcvxH1+c/+3PXpIwxxhhjjDHGGPsXeaZHzyceSU5u1+VKLQCu5Kvz4s8scv17tPEftpD/Hm38o8WV/s3EGGOMMcYY+6tdPum/0p0wxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+Pfyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//tVgiNQ==") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 4m36.170282523s ago: executing program 5 (id=3867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m35.814327988s ago: executing program 5 (id=3870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r1, r0}, 0xc) 4m35.545170744s ago: executing program 5 (id=3874): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYBLOB="3ef628a9ecf9e1751ed9b65d6a5359bd9afb81136cbff69e1bdbcb39d60e9b32d9f142ac189ae0d659610ddf0bf8c95e8f1a51f27bbb9098900d07e5f0303418856a470de86ec769d69ea60f0ea33a2089c2a2d372ec5958bbc02c2b4d00f71d7062876aa812e57f7333fa60a4d976aba0ce610efbc27f6cd9f0eee7074c05c92ae57e5e1b9afed08d27df4b8b9fb9a30a14a0b4a82028df4924d31f4c15fe48e62ddf7437e325ec87679945ecbaeda079054d10574c0036c82e2fbc9d073f4f6644162662a8dc5700d5943d13b93f9868919746c86a6d48", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc666859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)) 4m34.833474433s ago: executing program 5 (id=3879): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000000480)={[{@quota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@usrquota}, {@gid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m31.735496503s ago: executing program 5 (id=3889): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0xfefc, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x4}, 0x4) 4m31.072391657s ago: executing program 33 (id=3889): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0xfefc, 0x5}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x4}, 0x4) 4.739708471s ago: executing program 0 (id=5400): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 4.119945271s ago: executing program 0 (id=5403): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) setresuid(0x0, 0xee00, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000140)={0x3, @null}) 4.02478296s ago: executing program 2 (id=5404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) 3.81630818s ago: executing program 0 (id=5406): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1, 0x2}}, 0x18) 3.568745984s ago: executing program 1 (id=5408): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 3.473532143s ago: executing program 0 (id=5410): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "0156adc1"}]}}, 0x0}, 0x0) 2.730934936s ago: executing program 2 (id=5415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x9000) 2.466025691s ago: executing program 1 (id=5416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.447333823s ago: executing program 4 (id=5417): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/icmp6\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchown(r0, 0x0, 0xee01) 2.184046549s ago: executing program 2 (id=5419): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) syz_clone(0x809600, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) 2.148684422s ago: executing program 4 (id=5420): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffde4) 2.032518523s ago: executing program 6 (id=5421): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}}, 0x0) 1.895692916s ago: executing program 4 (id=5422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.821890544s ago: executing program 2 (id=5423): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f00000000c0)) 1.790075867s ago: executing program 6 (id=5424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.725534353s ago: executing program 1 (id=5425): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) read$eventfd(r0, 0x0, 0x0) 1.627567662s ago: executing program 4 (id=5426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="add9ca0000e0278653344eadff000000", 0x10) 1.455290449s ago: executing program 6 (id=5427): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003b09000000e9"], 0x2, 0x1a2, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x2, 0x5}}, 0x202400) 1.415930653s ago: executing program 2 (id=5428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x2, 0x56d, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000340), 0x1000, r0}, 0x38) 1.374257957s ago: executing program 1 (id=5429): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x4, 0x3a}, 0x1c) 1.357384198s ago: executing program 4 (id=5430): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000caa000/0x3000)=nil, 0x4000) 1.13761212s ago: executing program 1 (id=5431): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 1.062784617s ago: executing program 4 (id=5432): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB="696f636861727365743d63703836342c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c757466383d312c757466383d312c757466383d302c756e695f786c6174653d312c756e695f786c61746500000000000000056c6174653d312c757466383d302c696f636861727365743d63703934392c757466383d302c756e695f786c6174653d302c096cf14f7f5636704720231adb5c8e6f757466383d302c636865636b3d7374726963742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d"], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGed+HbEYszFfC++d7WRUsrOf7a6sljriojddnf+WC9t1afjTG/+H8/E2vDCoz9I9yniwurKuVpvgPp6P74dsTe8UaGT/0LMxfcvDoZJqX8H4+rK5cV+0sP4rXo1Lg72woGfgAAAAAAAAAAAAAAAAAAAAAAAwG1ZqA3MD9bPSZ3nfKWchYUJ7d31cfL43vpAe/n6QKmaIqU/3nio/k4W+9YHGl2fZ8tCggAAAAAAAAAAAAAAAAAAADCwuV2JRqu1trG5vdMsFtobm9tTEdGpefXbT76ajfE+NymU8ymqEYMpar1pd5qNlPU7pyxiPDzrTN6v+ejzQcbFPtXBVkxMo3pwU6t1x30/vz+suTfrj/z3sE8WkzcwK6Tx6MjI63fmKd3KjhoUzhVrquOzX0kpFWreKoZffn58wChFlG/9wO00p+LgPqlT+Obqy3f3937jy5R74MG5p6+89+FvzUarM3N0j2BlY/NGajZK/c5HmL03XOoeguG5UYq8UCqeCeXDBtzbX9PIfvj9mXve/e5oOyEVa17vnM8jfbJ8cz4dDa/khU6aI02zw/Dp3ka01qYnnPw3K9zGMb3rgy8+TumnX488xdDU2MtG6d959QEAAAAAAAAAAAAAAAAAAIoK3xXvfem6nTdMHxb18BMnlB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnIjh//8vFPZ2Y6TmKIW/2hOiqmsbmxGV/3ozAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/snAAD//5laZwE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 886.934854ms ago: executing program 6 (id=5433): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0xffe0}}}}}}}, 0x0) 649.710827ms ago: executing program 6 (id=5434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) 432.107828ms ago: executing program 6 (id=5435): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x308, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x145142, 0xe6) ftruncate(r0, 0x2007ffc) 265.020254ms ago: executing program 1 (id=5436): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x4, 0xe5}]}, 0x1c}], 0x1}, 0x0) 199.511411ms ago: executing program 0 (id=5437): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x24008004) 184.797912ms ago: executing program 2 (id=5438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) 0s ago: executing program 0 (id=5439): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): ity change from 0 to 64 [ 825.034145][T16790] hfs: unable to locate alternate MDB [ 825.044942][T16790] hfs: continuing without an alternate MDB [ 825.516043][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 825.577761][T16777] loop1: detected capacity change from 0 to 32768 [ 826.160665][ T5783] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 826.334060][T16807] loop6: detected capacity change from 0 to 1024 [ 826.450388][T16807] hfsplus: walked past end of dir [ 826.596516][ T5783] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 826.618893][ T5783] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 826.636175][ T5783] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.703849][ T5783] usb 5-1: config 0 interface 0 has no altsetting 0 [ 826.708241][T16792] loop0: detected capacity change from 0 to 32768 [ 826.757241][ T5783] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 826.802136][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.874494][ T5783] usb 5-1: config 0 descriptor?? [ 826.934710][T16801] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 826.945851][T16821] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 827.004403][T16792] XFS (loop0): Mounting V5 Filesystem [ 827.321109][T16830] loop2: detected capacity change from 0 to 1024 [ 827.356182][T16830] EXT4-fs: Ignoring removed bh option [ 827.361687][T16830] EXT4-fs: Ignoring removed orlov option [ 827.413933][ T5783] elecom 0003:056E:010D.0053: item fetching failed at offset 0/3 [ 827.425832][ T5783] elecom: probe of 0003:056E:010D.0053 failed with error -22 [ 827.497710][T16830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 827.649749][T16830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 827.698935][ T5783] usb 5-1: USB disconnect, device number 45 [ 827.934503][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 827.958440][T16792] XFS (loop0): Ending clean mount [ 828.443255][ T4270] XFS (loop0): Unmounting Filesystem [ 829.622866][T16871] loop0: detected capacity change from 0 to 512 [ 829.718314][T16871] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 829.798608][T16873] tipc: Enabling of bearer rejected, failed to enable media [ 829.899393][T13910] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 830.389178][T16886] loop6: detected capacity change from 0 to 4096 [ 830.585802][T16890] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 831.303575][T16880] loop0: detected capacity change from 0 to 32768 [ 832.065631][T16920] loop1: detected capacity change from 0 to 64 [ 832.086606][T16916] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 832.501329][T16926] loop2: detected capacity change from 0 to 512 [ 832.517484][ T4602] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 832.612639][T16926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 832.690070][T16926] EXT4-fs: Ignoring removed bh option [ 832.864881][T16926] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 832.883940][T16926] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.4476: corrupted inode contents [ 832.921825][ T4602] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 832.935937][ T4602] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 832.957465][ T4602] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 832.982640][ T4602] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 833.004627][ T4602] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 833.037680][T16926] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #11: comm syz.2.4476: mark_inode_dirty error [ 833.065414][T16926] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4476: invalid indirect mapped block 1 (level 1) [ 833.142749][T16926] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.4476: corrupted inode contents [ 833.167750][ T4602] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 833.189235][ T4602] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 833.205902][T16926] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 833.223937][ T4602] usb 7-1: Product: syz [ 833.228169][ T4602] usb 7-1: Manufacturer: syz [ 833.238849][T16926] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #11: comm syz.2.4476: corrupted inode contents [ 833.277152][T16926] EXT4-fs error (device loop2): ext4_truncate:4312: inode #11: comm syz.2.4476: mark_inode_dirty error [ 833.300065][ T4602] cdc_wdm 7-1:1.0: skipping garbage [ 833.305761][ T4602] cdc_wdm 7-1:1.0: skipping garbage [ 833.329141][T16926] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 833.346080][ T4602] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 833.365781][ T4602] cdc_wdm 7-1:1.0: Unknown control protocol [ 833.377323][T16926] EXT4-fs (loop2): 1 truncate cleaned up [ 833.383028][T16926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 833.599653][ T4602] usb 7-1: USB disconnect, device number 5 [ 833.620721][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 834.069122][T16934] loop1: detected capacity change from 0 to 4096 [ 834.152816][T16934] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 835.142924][T16957] lo speed is unknown, defaulting to 1000 [ 835.294657][T16939] loop2: detected capacity change from 0 to 32768 [ 835.380531][T16934] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 835.586431][T13946] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 836.022578][T16939] JBD2: Ignoring recovery information on journal [ 836.122405][T16968] loop1: detected capacity change from 0 to 512 [ 836.173106][T16968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 836.224859][T16939] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 836.233839][T16968] EXT4-fs: Ignoring removed bh option [ 836.353684][T16968] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 836.483859][T16968] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.4491: corrupted inode contents [ 836.564710][T16968] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #11: comm syz.1.4491: mark_inode_dirty error [ 836.629560][T16973] lo speed is unknown, defaulting to 1000 [ 836.652097][T16968] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4491: invalid indirect mapped block 1 (level 1) [ 836.665762][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 836.789467][T16968] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.4491: corrupted inode contents [ 836.838235][T16968] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 836.862444][T16968] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #11: comm syz.1.4491: corrupted inode contents [ 836.897502][T16968] EXT4-fs error (device loop1): ext4_truncate:4312: inode #11: comm syz.1.4491: mark_inode_dirty error [ 836.971012][T16968] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 837.027186][T16968] EXT4-fs (loop1): 1 truncate cleaned up [ 837.032919][T16968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 837.354199][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 837.944197][T16997] loop1: detected capacity change from 0 to 256 [ 837.993847][T16997] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 838.026751][T16997] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 838.332945][T16997] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 838.687323][T17002] loop4: detected capacity change from 0 to 4096 [ 838.993128][T17009] loop6: detected capacity change from 0 to 4096 [ 839.037258][T17007] loop1: detected capacity change from 0 to 8192 [ 839.078352][T17009] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 839.156167][T17007] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 839.229033][T16995] loop0: detected capacity change from 0 to 40427 [ 839.254858][T17007] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 839.326248][T17007] REISERFS (device loop1): using ordered data mode [ 839.344868][T17007] reiserfs: using flush barriers [ 839.412818][T17007] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 839.451327][T16995] F2FS-fs (loop0): invalid crc value [ 839.501307][T17007] REISERFS (device loop1): checking transaction log (loop1) [ 839.519847][T16995] F2FS-fs (loop0): Found nat_bits in checkpoint [ 839.602826][T17007] REISERFS (device loop1): Using r5 hash to sort names [ 839.629554][T17007] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 839.663039][T17007] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 839.706588][T16995] F2FS-fs (loop0): recover fsync data on readonly fs [ 839.735923][T16995] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 840.268664][T17002] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 840.281358][T17016] ntfs3: loop6: ino=1f, "file2" failed to open parent directory r=5 to update [ 840.314521][T17002] ntfs3: loop4: Failed to load $Extend. [ 840.391656][T17002] ntfs3: loop4: ino=5, "/" directory corrupted [ 840.575124][T14012] ntfs3: loop6: ino=1f, failed to open parent directory r=5 to update [ 840.746491][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4512'. [ 840.779306][T17019] loop1: detected capacity change from 0 to 2048 [ 841.037397][T17027] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 841.154187][ T26] audit: type=1800 audit(1760058721.546:219): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4510" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 841.176097][T17026] lo speed is unknown, defaulting to 1000 [ 841.248161][T17019] NILFS (loop1): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 841.272261][T17019] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16) [ 841.308089][T17029] lo speed is unknown, defaulting to 1000 [ 841.353346][T17019] Remounting filesystem read-only [ 841.493487][ T4269] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 841.893082][T17038] loop1: detected capacity change from 0 to 4096 [ 842.081243][T17039] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 842.960031][T17043] lo speed is unknown, defaulting to 1000 [ 843.388250][T17053] loop0: detected capacity change from 0 to 4096 [ 843.771163][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4528'. [ 844.150545][ T4602] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 844.521246][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.544661][ T4602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.613805][ T4602] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 844.653839][ T4602] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 844.678449][ T4602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.694785][T17070] loop4: detected capacity change from 0 to 4096 [ 844.746735][ T4602] usb 3-1: config 0 descriptor?? [ 844.770166][ T4602] hub 3-1:0.0: USB hub found [ 844.821567][T17053] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 844.862726][T17053] ntfs3: loop0: Failed to load $Extend. [ 844.996961][ T4602] hub 3-1:0.0: 14 ports detected [ 845.013335][ T4602] hub 3-1:0.0: insufficient power available to use all downstream ports [ 845.031584][T17070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 845.069326][T17053] ntfs3: loop0: ino=5, "/" directory corrupted [ 845.241421][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 845.813842][ T4602] usb 3-1: USB disconnect, device number 33 [ 846.414217][T17093] lo speed is unknown, defaulting to 1000 [ 847.010274][T17082] loop6: detected capacity change from 0 to 32768 [ 847.049379][T17106] loop4: detected capacity change from 0 to 4096 [ 847.109665][T17106] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 847.567258][T17082] JBD2: Ignoring recovery information on journal [ 847.593118][T17097] loop2: detected capacity change from 0 to 32768 [ 847.672296][T17097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4543 (17097) [ 847.794884][T17097] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 847.819138][T17082] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 847.853736][T17097] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 847.910989][T17097] BTRFS info (device loop2): enabling ssd optimizations [ 847.933811][T17097] BTRFS info (device loop2): using spread ssd allocation scheme [ 847.989642][T17097] BTRFS info (device loop2): setting nodatacow, compression disabled [ 848.028911][T17097] BTRFS info (device loop2): not using ssd optimizations [ 848.080373][T17097] BTRFS info (device loop2): not using spread ssd allocation scheme [ 848.094995][T17097] BTRFS info (device loop2): use zlib compression, level 3 [ 848.114674][T17097] BTRFS info (device loop2): setting nodatasum [ 848.129042][T17097] BTRFS info (device loop2): max_inline at 0 [ 848.161405][T17097] BTRFS info (device loop2): using free space tree [ 848.168337][T17106] ntfs3: loop4: ino=1f, "file2" failed to open parent directory r=5 to update [ 848.206888][T15215] ocfs2: Unmounting device (7,6) on (node local) [ 848.314112][T13929] ntfs3: loop4: ino=1f, failed to open parent directory r=5 to update [ 848.844186][T17126] loop6: detected capacity change from 0 to 8192 [ 848.962843][T17126] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 848.986283][T17126] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 849.017872][T17126] REISERFS (device loop6): using journaled data mode [ 849.065930][T17126] reiserfs: using flush barriers [ 849.160643][T17126] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 849.228510][ T4274] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 849.268438][T17126] REISERFS (device loop6): checking transaction log (loop6) [ 849.389501][T17126] REISERFS (device loop6): Using r5 hash to sort names [ 849.414187][T17126] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 849.505243][T17126] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 849.570648][T17126] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 849.674528][T17126] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 849.731708][T17126] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 850.546900][T17153] loop2: detected capacity change from 0 to 4096 [ 851.420883][T17153] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 851.437401][T17153] ntfs3: loop2: Failed to load $Extend. [ 851.560351][T17153] ntfs3: loop2: ino=5, "/" directory corrupted [ 851.691236][T17155] loop6: detected capacity change from 0 to 32768 [ 851.791409][T17155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4558 (17155) [ 851.980588][T17155] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 852.017203][T17155] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 852.033027][T17160] loop2: detected capacity change from 0 to 4096 [ 852.065636][T17155] BTRFS info (device loop6): using free space tree [ 852.256041][T17175] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.354401][T17183] loop4: detected capacity change from 0 to 256 [ 852.397314][T17183] exfat: Deprecated parameter 'namecase' [ 852.528049][T17155] BTRFS info (device loop6): enabling ssd optimizations [ 852.916900][T15215] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 852.929394][T17183] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 853.487747][T17168] loop1: detected capacity change from 0 to 32768 [ 854.450856][T17203] loop0: detected capacity change from 0 to 2048 [ 854.535155][T17190] loop2: detected capacity change from 0 to 32768 [ 854.626311][ T3654] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 854.689300][T17203] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 854.778677][T17203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.989399][ T3654] usb 2-1: Using ep0 maxpacket: 32 [ 855.159287][T17190] JBD2: Ignoring recovery information on journal [ 855.179348][ T3654] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 855.204460][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.239142][ T3654] usb 2-1: config 0 descriptor?? [ 855.297182][ T3654] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 855.472923][T17190] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 855.490971][T17199] loop4: detected capacity change from 0 to 32768 [ 855.563853][T17199] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4567 (17199) [ 855.646205][T17199] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 855.699261][T17199] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 855.736923][T17199] BTRFS info (device loop4): enabling ssd optimizations [ 855.777945][T17199] BTRFS info (device loop4): using spread ssd allocation scheme [ 855.799686][T17199] BTRFS info (device loop4): setting nodatacow, compression disabled [ 855.844108][T17199] BTRFS info (device loop4): not using ssd optimizations [ 855.881538][T17199] BTRFS info (device loop4): not using spread ssd allocation scheme [ 855.906743][T17199] BTRFS info (device loop4): use zlib compression, level 3 [ 855.929833][T17199] BTRFS info (device loop4): setting nodatasum [ 855.958917][T17199] BTRFS info (device loop4): max_inline at 0 [ 855.959291][ T3654] usb 2-1: USB disconnect, device number 28 [ 855.972217][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 855.983685][T17199] BTRFS info (device loop4): using free space tree [ 856.684693][T17232] loop2: detected capacity change from 0 to 1024 [ 856.994885][ T4280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 857.473098][T17246] loop6: detected capacity change from 0 to 256 [ 857.489842][T17242] loop0: detected capacity change from 0 to 4096 [ 857.586279][T17242] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 858.132402][T13859] hfsplus: b-tree write err: -5, ino 4 [ 858.758358][T17246] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 859.233018][T17242] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 859.469332][T13954] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 859.509078][T17326] ubi: mtd0 is already attached to ubi7 [ 860.088826][T17336] loop4: detected capacity change from 0 to 64 [ 860.856959][T17347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4601'. [ 860.929454][T17347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4601'. [ 861.024569][T17350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4601'. [ 861.254089][T17356] netlink: 'syz.2.4605': attribute type 29 has an invalid length. [ 861.262272][T17356] netlink: 'syz.2.4605': attribute type 29 has an invalid length. [ 861.324392][T17358] netlink: 'syz.2.4605': attribute type 29 has an invalid length. [ 861.728121][T17366] loop4: detected capacity change from 0 to 512 [ 861.746576][T17343] loop0: detected capacity change from 0 to 32768 [ 861.773893][T17366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 861.903109][T17343] XFS (loop0): Mounting V5 Filesystem [ 861.909780][T17366] EXT4-fs (loop4): 1 truncate cleaned up [ 861.924125][T17366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 862.111753][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 862.420829][T17381] lo speed is unknown, defaulting to 1000 [ 862.843855][T17394] netlink: 'syz.1.4613': attribute type 46 has an invalid length. [ 864.631663][T17432] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4627'. [ 864.686312][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4627'. [ 864.759538][T17436] option changes via remount are deprecated (pid=17434 comm=syz.1.4628) [ 865.163927][T17343] XFS (loop0): Ending clean mount [ 865.274029][T17449] loop2: detected capacity change from 0 to 1024 [ 865.290322][T17343] XFS (loop0): Quotacheck needed: Please wait. [ 865.360057][T17446] lo speed is unknown, defaulting to 1000 [ 865.508909][T17343] XFS (loop0): Quotacheck: Done. [ 865.603421][T17449] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 865.626228][T17449] hfsplus: xattr searching failed [ 865.690349][T17449] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 865.713861][T17449] hfsplus: xattr searching failed [ 865.750580][ T4270] XFS (loop0): Unmounting Filesystem [ 866.144686][T17465] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4639'. [ 866.183840][T17465] nbd: couldn't find device at index 64 [ 866.357027][T17467] loop1: detected capacity change from 0 to 1024 [ 866.709201][T17479] hfsplus: invalid xattr key length: 0 [ 866.849529][ T4601] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 866.985677][T17482] device macsec1 entered promiscuous mode [ 866.991472][T17482] device macvlan0 entered promiscuous mode [ 867.000899][T14015] hfsplus: b-tree write err: -5, ino 8 [ 867.065897][T17482] device macvlan0 left promiscuous mode [ 867.254831][ T4601] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 867.264152][ T4601] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.287257][ T4601] usb 7-1: config 0 descriptor?? [ 867.353025][T17487] loop1: detected capacity change from 0 to 4096 [ 867.366205][ T4601] cp210x 7-1:0.0: cp210x converter detected [ 867.802639][ T4601] usb 7-1: cp210x converter now attached to ttyUSB0 [ 868.024842][ T22] usb 7-1: USB disconnect, device number 6 [ 868.055006][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 868.212963][ T22] cp210x 7-1:0.0: device disconnected [ 868.402380][T17492] loop4: detected capacity change from 0 to 1024 [ 868.403050][T17494] loop2: detected capacity change from 0 to 256 [ 868.767178][T17487] ntfs3: loop1: failed to convert "0080" to cp864 [ 868.996462][T17494] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 869.156554][T17499] loop4: detected capacity change from 0 to 1024 [ 869.472813][T17499] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 869.479523][T17499] hfsplus: xattr searching failed [ 869.498335][T17507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4656'. [ 869.541498][T17499] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 869.563872][T17499] hfsplus: xattr searching failed [ 869.924827][ T22] kernel write not supported for file /media6 (pid: 22 comm: kworker/1:0) [ 870.045840][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.052292][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.137853][T17526] loop0: detected capacity change from 0 to 256 [ 870.149011][T17523] loop4: detected capacity change from 0 to 2048 [ 870.215718][T17526] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 870.247320][T17526] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 870.537664][T17533] loop6: detected capacity change from 0 to 1024 [ 870.576151][T17526] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 870.627625][T17533] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 870.694024][ T26] audit: type=1800 audit(1760058751.086:220): pid=17526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4663" name="file1" dev="loop0" ino=1048994 res=0 errno=0 [ 870.847196][T17523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 871.397689][T17520] loop2: detected capacity change from 0 to 32768 [ 871.488169][T17520] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.4659 (17520) [ 871.572247][T17520] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 871.593966][T17520] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 871.602671][T17520] BTRFS info (device loop2): enabling auto defrag [ 871.657269][T17520] BTRFS info (device loop2): force clearing of disk cache [ 871.677706][T17520] BTRFS info (device loop2): max_inline at 0 [ 871.695692][T17520] BTRFS info (device loop2): turning on sync discard [ 871.712328][T17520] BTRFS info (device loop2): using free space tree [ 872.103544][T17520] BTRFS info (device loop2): enabling ssd optimizations [ 872.170707][T17520] BTRFS info (device loop2): rebuilding free space tree [ 872.604811][ T26] audit: type=1800 audit(1760058752.996:221): pid=17520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4659" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 872.910605][T17575] loop4: detected capacity change from 0 to 4096 [ 873.284301][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 873.299981][T17579] loop0: detected capacity change from 0 to 4096 [ 873.515887][T17579] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 873.553829][T17579] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 873.606734][T17579] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 873.636314][T17579] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 873.706456][T17579] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 873.824593][T17579] ntfs: volume version 3.1. [ 873.863892][T17571] loop6: detected capacity change from 0 to 32768 [ 873.937657][T17579] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 873.963628][T17579] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 874.057742][T17579] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 874.550206][T17571] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 875.077391][T15215] ocfs2: Unmounting device (7,6) on (node local) [ 875.099214][ T5241] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 875.269393][T17575] ntfs3: loop4: failed to convert "0080" to cp864 [ 875.365558][ T4440] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 875.494303][ T5241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.504791][ T5241] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.574266][ T5241] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 875.583368][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.653367][ T5241] usb 3-1: config 0 descriptor?? [ 875.712224][ T4440] usb 2-1: Using ep0 maxpacket: 8 [ 875.814492][ T4440] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 875.831720][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.861065][ T4440] usb 2-1: config 0 descriptor?? [ 875.910939][T17606] loop0: detected capacity change from 0 to 512 [ 876.028376][ T5243] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 876.036065][ T3654] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 876.113522][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.120437][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.138355][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.157274][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.195401][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.202170][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.266904][ T5241] kye 0003:0458:4018.0054: unknown main item tag 0x0 [ 876.301713][ T5241] kye 0003:0458:4018.0054: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.2-1/input0 [ 876.340929][ T3654] usb 5-1: Using ep0 maxpacket: 16 [ 876.346454][T17606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 876.361957][T17606] ext4 filesystem being mounted at /894/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 876.365566][ T4440] magicmouse 0003:05AC:0269.0055: hidraw1: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 876.412672][ T5241] usb 3-1: USB disconnect, device number 34 [ 876.454963][ T5243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.464916][ T3654] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 876.477915][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.486573][ T5243] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 876.520338][ T5243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.538661][ T3654] usb 5-1: config 0 descriptor?? [ 876.577076][ T3654] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 876.587563][ T5243] usb 7-1: config 0 descriptor?? [ 876.623187][ T4440] usb 2-1: USB disconnect, device number 29 [ 876.795229][ T3654] usb 5-1: Detected FT232B [ 876.852719][T17611] fido_id[17611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 876.880687][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 876.971219][T17612] fido_id[17612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 877.132969][ T5243] lg-g15 0003:046D:C222.0056: unbalanced delimiter at end of report description [ 877.157522][ T5243] lg-g15: probe of 0003:046D:C222.0056 failed with error -22 [ 877.166001][T17615] loop0: detected capacity change from 0 to 64 [ 877.213952][ T3654] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 877.230278][ T3654] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 877.315761][ T3654] usb 5-1: USB disconnect, device number 46 [ 877.362721][ T3654] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 877.412237][ T3654] ftdi_sio 5-1:0.0: device disconnected [ 877.463130][ T5243] usb 7-1: USB disconnect, device number 7 [ 877.881926][T17622] loop2: detected capacity change from 0 to 4096 [ 879.457248][T17631] loop0: detected capacity change from 0 to 1024 [ 879.666965][T17637] loop1: detected capacity change from 0 to 64 [ 879.764041][T13889] hfsplus: b-tree write err: -5, ino 4 [ 880.252739][T17641] loop1: detected capacity change from 0 to 512 [ 880.309863][T17641] EXT4-fs: Ignoring removed mblk_io_submit option [ 880.745656][T17641] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 880.821440][T17641] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.4706: attempt to clear invalid blocks 2 len 1 [ 880.899523][T17641] EXT4-fs (loop1): Remounting filesystem read-only [ 880.907013][T17641] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 881.013051][T17641] EXT4-fs (loop1): Remounting filesystem read-only [ 881.030063][T17641] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4706: invalid indirect mapped block 1819239214 (level 0) [ 881.137699][T17641] EXT4-fs (loop1): Remounting filesystem read-only [ 881.173646][T17641] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4706: invalid indirect mapped block 1819239214 (level 1) [ 881.229003][T17641] EXT4-fs (loop1): Remounting filesystem read-only [ 881.250820][T17641] EXT4-fs (loop1): 1 truncate cleaned up [ 881.256592][T17641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 881.552238][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 881.552255][ T26] audit: type=1326 audit(1760058761.936:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.2.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 881.689268][ T26] audit: type=1326 audit(1760058761.966:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.2.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 881.794032][ T26] audit: type=1326 audit(1760058761.966:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.2.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 881.885963][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 881.893798][ T26] audit: type=1326 audit(1760058761.986:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.2.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 882.074582][ T26] audit: type=1326 audit(1760058761.986:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17664 comm="syz.2.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 882.861067][T17667] loop4: detected capacity change from 0 to 32768 [ 882.959955][T17667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4717 (17667) [ 883.055547][T17667] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 883.090973][T17667] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 883.130293][T17667] BTRFS info (device loop4): enabling auto defrag [ 883.168304][T17667] BTRFS info (device loop4): force clearing of disk cache [ 883.241473][T17667] BTRFS info (device loop4): max_inline at 0 [ 883.241505][T17667] BTRFS info (device loop4): turning on sync discard [ 883.241562][T17667] BTRFS info (device loop4): using free space tree [ 883.321431][T17696] program syz.2.4728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 883.842031][T17667] BTRFS info (device loop4): enabling ssd optimizations [ 883.877475][ T5241] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 883.915162][T17667] BTRFS info (device loop4): rebuilding free space tree [ 884.103007][ T26] audit: type=1800 audit(1760058764.486:227): pid=17667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4717" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 884.200123][ T5241] usb 7-1: Using ep0 maxpacket: 16 [ 884.321988][ T5241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.399270][ T5241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.453806][ T5241] usb 7-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 884.462903][ T5241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.568126][ T5241] usb 7-1: config 0 descriptor?? [ 884.769986][ T4280] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 884.988316][T17708] loop2: detected capacity change from 0 to 32768 [ 885.021007][ T5241] holtek_mouse 0003:04D9:A081.0057: unbalanced collection at end of report description [ 885.050387][ T5241] holtek_mouse 0003:04D9:A081.0057: hid parse failed: -22 [ 885.069724][ T5241] holtek_mouse: probe of 0003:04D9:A081.0057 failed with error -22 [ 885.260622][ T4440] usb 7-1: USB disconnect, device number 8 [ 885.540669][ T5886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (5886) [ 885.554681][T17716] loop0: detected capacity change from 0 to 32768 [ 886.221335][ T4440] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 886.387211][T17716] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 886.439899][T17737] loop6: detected capacity change from 0 to 1024 [ 886.501855][T17716] (syz.0.4732,17716,1):ocfs2_get_block:148 get_block on system inode 0xffff88804e934178 (65) [ 886.631468][T17716] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 886.803994][ T4440] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 83, changing to 10 [ 886.839287][T17716] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 886.851526][T17302] hfsplus: b-tree write err: -5, ino 4 [ 886.857222][ T4440] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid maxpacket 42451, setting to 1024 [ 886.881682][T17716] OCFS2: File system is now read-only. [ 886.906141][T17716] (syz.0.4732,17716,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 886.916551][ T4440] usb 5-1: config 0 interface 0 has no altsetting 0 [ 886.944104][T17716] (syz.0.4732,17716,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 886.963051][T17716] (syz.0.4732,17716,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 886.999920][ T4347] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 887.060336][T17716] (syz.0.4732,17716,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 887.094865][ T4440] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 887.108219][T17716] (syz.0.4732,17716,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88804e934178, block: 0 [ 887.127454][ T4440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.158634][ T4440] usb 5-1: Product: syz [ 887.162860][ T4440] usb 5-1: Manufacturer: syz [ 887.174682][T17716] (syz.0.4732,17716,0):ocfs2_get_block:148 get_block on system inode 0xffff88804e934178 (65) [ 887.205227][ T4440] usb 5-1: SerialNumber: syz [ 887.222704][ T4440] usb 5-1: config 0 descriptor?? [ 887.264182][T17729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 887.274015][T17716] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 887.320023][ T4440] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 887.330248][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 887.368449][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 887.371886][ T4347] usb 2-1: Using ep0 maxpacket: 8 [ 887.403657][T17716] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 887.405918][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 887.439296][T17716] (syz.0.4732,17716,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 887.470283][T17716] (syz.0.4732,17716,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 887.472167][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 887.498170][ T4347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 887.519549][T17716] (syz.0.4732,17716,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 887.524820][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 887.566335][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 887.583796][T17716] (syz.0.4732,17716,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 887.606232][ T4440] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 887.621230][T17716] (syz.0.4732,17716,0):ocfs2_get_block:160 ERROR: get_blocks() failed, inode: 0xffff88804e934178, block: 0 [ 887.643171][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 887.649107][ T4347] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 887.660406][ T4347] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 887.680624][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 887.712767][ T4347] usb 2-1: Product: syz [ 887.717279][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 887.718593][ T4347] usb 2-1: Manufacturer: syz [ 887.742593][ T4347] usb 2-1: SerialNumber: syz [ 887.756263][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 887.783828][ T4440] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 887.842341][ T4440] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 887.899441][ T4440] usb 5-1: USB disconnect, device number 47 [ 887.939510][ T4440] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 887.997453][ T4440] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 888.020815][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 888.035034][ T4440] keyspan 5-1:0.0: device disconnected [ 888.067213][ T4347] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 888.092354][ T4347] usb 2-1: Handspring Visor / Palm OS: port 102, is for unknown use [ 888.153796][ T4347] usb 2-1: Handspring Visor / Palm OS: port 8, is for unknown use [ 888.187496][ T5243] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 888.195211][ T4347] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 888.291494][ T4347] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 888.310644][ T4347] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 888.366500][ T4347] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 888.567721][ T5243] usb 7-1: Using ep0 maxpacket: 16 [ 888.589804][ T4347] usb 2-1: USB disconnect, device number 30 [ 888.605079][ T4347] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 888.657016][ T5243] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 888.669878][ T5243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.680381][ T4347] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 888.725503][ T4347] visor 2-1:1.0: device disconnected [ 888.736574][ T5243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 888.828780][ T5243] usb 7-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 888.871446][ T5243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.953973][ T5243] usb 7-1: config 0 descriptor?? [ 888.976804][T17748] loop2: detected capacity change from 0 to 32768 [ 889.212630][T17748] XFS (loop2): Mounting V5 Filesystem [ 889.493149][ T5243] samsung 0003:0419:0001.0058: item fetching failed at offset 8/11 [ 889.527010][ T5243] samsung 0003:0419:0001.0058: parse failed [ 889.532991][ T5243] samsung: probe of 0003:0419:0001.0058 failed with error -22 [ 889.734365][ T4315] usb 7-1: USB disconnect, device number 9 [ 890.212896][T17759] loop4: detected capacity change from 0 to 32768 [ 890.316558][T17786] loop1: detected capacity change from 0 to 4096 [ 890.410218][T17759] XFS (loop4): Mounting V5 Filesystem [ 890.579790][T17796] loop6: detected capacity change from 0 to 1024 [ 890.650679][T17797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 890.786919][T17796] hfsplus: bad catalog entry type [ 890.792479][ T26] audit: type=1800 audit(1760058771.176:228): pid=17786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4758" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 890.953014][T14015] hfsplus: b-tree write err: -5, ino 4 [ 891.373849][T17759] XFS (loop4): Ending clean mount [ 891.481704][T17759] XFS (loop4): Quotacheck needed: Please wait. [ 891.618722][T17785] loop0: detected capacity change from 0 to 32768 [ 891.730280][T17759] XFS (loop4): Quotacheck: Done. [ 891.918508][T17785] XFS (loop0): Mounting V5 Filesystem [ 892.153427][ T4280] XFS (loop4): Unmounting Filesystem [ 892.559974][T17748] XFS (loop2): Ending clean mount [ 892.602300][T17802] loop1: detected capacity change from 0 to 32768 [ 892.634271][T17804] loop6: detected capacity change from 0 to 32768 [ 892.693784][T17748] XFS (loop2): Quotacheck needed: Please wait. [ 892.711733][T17804] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.4763 (17804) [ 892.792818][T17804] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 892.836606][T17804] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 892.869585][T17804] BTRFS info (device loop6): using free space tree [ 892.956628][T17748] XFS (loop2): Quotacheck: Done. [ 892.974951][T17785] XFS (loop0): Ending clean mount [ 892.977830][T17802] XFS (loop1): Mounting V5 Filesystem [ 893.133634][T17785] XFS (loop0): Quotacheck needed: Please wait. [ 893.164842][ T4274] XFS (loop2): Unmounting Filesystem [ 893.390566][T17804] BTRFS info (device loop6): enabling ssd optimizations [ 893.393302][T17785] XFS (loop0): Quotacheck: Done. [ 893.600089][ T4270] XFS (loop0): Unmounting Filesystem [ 893.777512][T15215] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 894.053317][T17802] XFS (loop1): Ending clean mount [ 894.157443][T17802] XFS (loop1): Quotacheck needed: Please wait. [ 894.391383][T17802] XFS (loop1): Quotacheck: Done. [ 894.473591][T17846] netlink: 'syz.2.4765': attribute type 1 has an invalid length. [ 895.039211][ T4269] XFS (loop1): Unmounting Filesystem [ 896.012467][T17844] loop4: detected capacity change from 0 to 40427 [ 896.179625][T17844] F2FS-fs (loop4): invalid crc value [ 896.288708][T17844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 896.476968][T17844] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 896.512337][T17844] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 896.535438][T17851] loop6: detected capacity change from 0 to 40427 [ 896.631982][T17844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 896.803199][T17852] loop2: detected capacity change from 0 to 32768 [ 896.871145][T17855] overlayfs: statfs failed on './file0' [ 896.944286][T17852] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 896.958373][T17852] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 897.287960][T17851] F2FS-fs (loop6): invalid crc value [ 897.315846][T17852] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 897.413243][T17851] F2FS-fs (loop6): Found nat_bits in checkpoint [ 897.537327][T17852] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 897.623872][T17851] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 897.792880][T17859] loop1: detected capacity change from 0 to 32768 [ 897.849539][T17868] lo speed is unknown, defaulting to 1000 [ 897.972504][T15215] syz-executor: attempt to access beyond end of device [ 897.972504][T15215] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 898.090516][T17859] XFS (loop1): Mounting V5 Filesystem [ 899.230102][T17859] XFS (loop1): Ending clean mount [ 899.431720][T17879] loop2: detected capacity change from 0 to 32768 [ 899.443583][ T3654] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 899.454402][ T4269] XFS (loop1): Unmounting Filesystem [ 899.857974][ T3654] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 899.873791][ T3654] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 899.923616][ T3654] usb 5-1: config 1 has no interface number 1 [ 899.950027][ T3654] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 900.041102][ T3654] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 255, changing to 7 [ 900.076568][ T3654] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 59378, setting to 1024 [ 900.205921][ T3654] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 900.221840][ T3654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.255921][ T3654] usb 5-1: Product: syz [ 900.283171][ T3654] usb 5-1: Manufacturer: syz [ 900.339844][ T3654] usb 5-1: SerialNumber: syz [ 900.381659][T17885] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 900.726354][T17906] device bridge0 entered promiscuous mode [ 900.781455][ T3654] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 900.783930][T17906] device macsec1 entered promiscuous mode [ 900.799568][ T3654] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 900.872215][T17908] program syz.1.4788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 901.088665][ T3654] usb 5-1: USB disconnect, device number 48 [ 901.626586][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.909221][T17902] loop0: detected capacity change from 0 to 32768 [ 902.125371][T17899] loop2: detected capacity change from 0 to 32768 [ 902.212655][T17899] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 902.540204][T17902] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 903.040199][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 903.213520][ T4400] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 903.432431][T17918] loop1: detected capacity change from 0 to 32768 [ 903.864794][T17958] loop2: detected capacity change from 0 to 1024 [ 903.954069][T17918] XFS (loop1): Mounting V5 Filesystem [ 903.990643][T17948] loop4: detected capacity change from 0 to 4096 [ 904.180748][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 904.212176][T17958] syz.2.4808: attempt to access beyond end of device [ 904.212176][T17958] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 904.236129][T17963] device macvlan2 entered promiscuous mode [ 904.260640][T17958] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 904.328416][T17958] hfsplus: unable to mark blocks free: error -5 [ 904.351247][T17958] hfsplus: can't free extent [ 904.385514][T17966] syz.2.4808: attempt to access beyond end of device [ 904.385514][T17966] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 904.482100][T17966] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 904.538079][T17966] syz.2.4808: attempt to access beyond end of device [ 904.538079][T17966] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 904.636824][T17966] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 904.834223][T17918] XFS (loop1): Ending clean mount [ 904.909616][ T4440] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 904.959762][ T4269] XFS (loop1): Unmounting Filesystem [ 905.097074][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4816'. [ 905.150850][T17975] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 905.269409][ T4440] usb 7-1: Using ep0 maxpacket: 8 [ 905.459305][ T4440] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 905.467638][ T4440] usb 7-1: config 0 has no interface number 0 [ 905.489879][ T4440] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 905.533644][ T4440] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.579037][ T4280] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 905.585636][ T4280] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 905.593702][ T4440] usb 7-1: config 0 descriptor?? [ 905.704304][T17983] loop0: detected capacity change from 0 to 16 [ 905.753366][T17985] loop2: detected capacity change from 0 to 64 [ 905.754156][T17983] erofs: (device loop0): mounted with root inode @ nid 36. [ 905.851943][ T4440] viperboard 7-1:0.143: version 0.00 found at bus 007 address 010 [ 905.865038][T17983] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 905.899741][ T4440] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 905.944009][T17983] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 905.967794][ T4440] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 906.083928][ T4440] usb 7-1: USB disconnect, device number 10 [ 906.549356][T17992] loop0: detected capacity change from 0 to 4096 [ 906.569951][T17996] tmpfs: Bad value for 'uid' [ 906.640155][T17992] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 906.760963][T17992] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 906.954478][T18004] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.028231][T18007] loop4: detected capacity change from 0 to 256 [ 907.230480][T18010] "syz.6.4832" (18010) uses obsolete ecb(arc4) skcipher [ 907.278316][T18011] sp0: Synchronizing with TNC [ 907.650376][T18007] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 907.804437][T18017] loop6: detected capacity change from 0 to 512 [ 907.809049][ T26] audit: type=1800 audit(1760058788.196:229): pid=18007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4831" name="file1" dev="loop4" ino=1048995 res=0 errno=0 [ 908.149820][T18017] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 908.175551][T18017] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.196984][T18025] loop0: detected capacity change from 0 to 1024 [ 908.511717][T18030] loop4: detected capacity change from 0 to 512 [ 908.531161][T18030] EXT4-fs: Ignoring removed i_version option [ 908.569654][T15215] EXT4-fs (loop6): unmounting filesystem. [ 908.652185][T18030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 908.878203][T18030] EXT4-fs (loop4): 1 truncate cleaned up [ 908.885654][T18030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 908.951999][T18015] loop1: detected capacity change from 0 to 40427 [ 909.009956][T18015] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 909.035215][T18015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 909.102028][T18015] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 909.141332][T18015] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 909.239564][T18015] F2FS-fs (loop1): invalid crc value [ 909.290595][T18045] loop6: detected capacity change from 0 to 512 [ 909.312856][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 909.368870][T18015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 909.467388][T18015] F2FS-fs (loop1): Start checkpoint disabled! [ 909.537330][T18045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 909.615937][T18015] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 909.642755][T18015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 909.718513][T18045] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4843: invalid indirect mapped block 4294967295 (level 1) [ 909.869561][T18045] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4843: invalid indirect mapped block 4294967295 (level 1) [ 909.986878][T18045] EXT4-fs (loop6): 2 truncates cleaned up [ 909.992778][T18045] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 910.093501][T18057] loop2: detected capacity change from 0 to 64 [ 910.215100][T18045] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.4843: bg 0: block 5: invalid block bitmap [ 910.301612][T18045] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 910.419273][T18057] syz.2.4849: attempt to access beyond end of device [ 910.419273][T18057] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 910.451807][T18057] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 910.535575][T15215] EXT4-fs (loop6): unmounting filesystem. [ 910.948317][T18070] loop2: detected capacity change from 0 to 256 [ 911.000960][T18068] loop4: detected capacity change from 0 to 2048 [ 911.018881][T18070] exfat: Deprecated parameter 'namecase' [ 911.132623][T18064] loop6: detected capacity change from 0 to 4096 [ 911.184391][T18064] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 911.269345][T18055] loop0: detected capacity change from 0 to 32768 [ 911.326215][T18068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 911.417684][T18064] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 911.477143][T18055] XFS (loop0): Mounting V5 Filesystem [ 911.513092][T18064] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 911.599859][T18064] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 911.662761][T18070] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 911.683484][T18064] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 911.825488][ T26] audit: type=1800 audit(1760058792.216:230): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4854" name="file1" dev="loop2" ino=1048996 res=0 errno=0 [ 911.920045][ T26] audit: type=1804 audit(1760058792.236:231): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4854" name="/newroot/933/file0/file1" dev="loop2" ino=1048996 res=1 errno=0 [ 912.339337][T18064] ntfs: volume version 3.1. [ 912.505806][T18055] XFS (loop0): Ending clean mount [ 912.543121][T18064] ntfs: (device loop6): load_and_init_quota(): Failed to find inode number for $Quota. [ 912.608589][T18064] ntfs: (device loop6): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 912.616680][ T4442] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 912.662623][T18072] loop1: detected capacity change from 0 to 32768 [ 912.933570][ T4270] XFS (loop0): Unmounting Filesystem [ 913.081922][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.081922][T18072] [ 913.114353][T18072] xtLookup: xtSearch returned -5 [ 913.119427][T18072] add_index: get/read_metapage failed! [ 913.144791][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.144791][T18072] [ 913.174106][T18072] xtLookup: xtSearch returned -5 [ 913.184881][T18072] free_index: error reading directory table [ 913.215541][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.215541][T18072] [ 913.233957][ T4442] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 913.248984][ T4442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.266876][T18072] xtLookup: xtSearch returned -5 [ 913.277421][ T4442] usb 3-1: Product: syz [ 913.281636][ T4442] usb 3-1: Manufacturer: syz [ 913.286691][T18072] free_index: error reading directory table [ 913.292616][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.292616][T18072] [ 913.324600][ T4442] usb 3-1: SerialNumber: syz [ 913.337126][T18072] xtLookup: xtSearch returned -5 [ 913.342133][T18072] free_index: error reading directory table [ 913.364568][ T4442] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 913.379392][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.379392][T18072] [ 913.468998][T18072] xtLookup: xtSearch returned -5 [ 913.477886][T18072] free_index: error reading directory table [ 913.509229][T18072] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 913.509229][T18072] [ 913.567697][T18072] xtLookup: xtSearch returned -5 [ 913.572706][T18072] free_index: error reading directory table [ 913.613676][T18072] ialloc: diAlloc returned -5! [ 914.086874][ T4440] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 914.176610][T18091] loop4: detected capacity change from 0 to 40427 [ 914.239623][T18091] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 914.263207][T18091] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 914.327966][T18091] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 914.363899][T18091] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 914.365721][T18084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.433225][T18091] F2FS-fs (loop4): invalid crc value [ 914.458683][T18084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.514117][T18093] loop6: detected capacity change from 0 to 40427 [ 914.575081][T18091] F2FS-fs (loop4): Found nat_bits in checkpoint [ 914.580112][T18093] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 914.689479][T18093] F2FS-fs (loop6): invalid crc value [ 914.757458][ T4442] usb 3-1: USB disconnect, device number 35 [ 914.777811][T18093] F2FS-fs (loop6): Found nat_bits in checkpoint [ 914.813967][T18091] F2FS-fs (loop4): Start checkpoint disabled! [ 915.019367][T18102] loop1: detected capacity change from 0 to 512 [ 915.040057][T18091] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 915.066084][T18091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 915.073681][T18093] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 915.119053][T18102] EXT4-fs: Ignoring removed i_version option [ 915.194504][T18102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 915.358303][T18102] EXT4-fs (loop1): 1 truncate cleaned up [ 915.364164][T18102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 915.494011][T15215] syz-executor: attempt to access beyond end of device [ 915.494011][T15215] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 915.577644][ T4440] usb 3-1: Service connection timeout for: 256 [ 915.593779][ T4440] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 915.663953][ T4440] ath9k_htc: Failed to initialize the device [ 915.673949][ T4442] usb 3-1: ath9k_htc: USB layer deinitialized [ 915.734695][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 916.198968][T18122] loop4: detected capacity change from 0 to 512 [ 916.200302][T18118] loop1: detected capacity change from 0 to 2048 [ 916.410783][T18122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 916.419906][T18122] ext4 filesystem being mounted at /1040/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.540931][T18118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 916.765224][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 916.799578][T18127] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #12: comm syz.4.4872: Directory hole found for htree leaf block 0 [ 916.961736][T18127] EXT4-fs (loop4): Remounting filesystem read-only [ 917.011674][T18129] loop6: detected capacity change from 0 to 2048 [ 917.128058][T18129] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 917.267721][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 917.278379][T18132] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 917.530786][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4874'. [ 917.565437][T18139] loop0: detected capacity change from 0 to 8 [ 917.669356][T18139] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 917.679540][ T4686] udevd[4686]: incorrect cramfs checksum on /dev/loop0 [ 917.841170][T18132] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 917.905635][T18132] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 918.052412][ T4442] kernel write not supported for file /input/event0 (pid: 4442 comm: kworker/1:11) [ 918.096313][T18132] Remounting filesystem read-only [ 918.108160][T15215] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 918.576909][T18152] autofs4:pid:18152:autofs_fill_super: called with bogus options [ 920.019483][T18177] loop0: detected capacity change from 0 to 4096 [ 920.232033][T18187] loop2: detected capacity change from 0 to 64 [ 920.250147][T18188] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 920.296483][T18187] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 920.386883][T18177] NILFS (loop0): error -2 reading inode: ino=35184372090368 [ 920.395209][T18187] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 920.493640][T18191] loop6: detected capacity change from 0 to 64 [ 920.505157][T18192] afs: Unexpected value for 'dyn' [ 920.863961][T18198] program syz.0.4903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.069164][ T4439] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 922.464230][ T4439] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 922.533786][ T4439] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 922.599808][ T4439] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 922.639750][ T4439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.677616][ T4439] usb 7-1: config 0 descriptor?? [ 922.956926][ T4439] ath6kl: Failed to submit usb control message: -71 [ 922.963632][ T4439] ath6kl: unable to send the bmi data to the device: -71 [ 922.986522][ T4439] ath6kl: Unable to send get target info: -71 [ 923.004984][ T4439] ath6kl: Failed to init ath6kl core: -71 [ 923.045105][T18213] loop2: detected capacity change from 0 to 32768 [ 923.047067][T18247] loop4: detected capacity change from 0 to 2048 [ 923.155672][T18251] loop0: detected capacity change from 0 to 128 [ 923.183276][ T4439] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 923.256299][ T4439] usb 7-1: USB disconnect, device number 11 [ 923.391755][T18247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 923.601550][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 923.939933][T18261] loop6: detected capacity change from 0 to 2048 [ 924.215558][T18261] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 924.265806][T18261] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #12: block 9: comm syz.6.4932: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 924.594928][T15215] EXT4-fs (loop6): unmounting filesystem. [ 925.003197][T18276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4938'. [ 925.072544][T18276] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 925.588972][T18292] loop6: detected capacity change from 0 to 1024 [ 925.736514][T18292] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 925.847873][T18292] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 925.880411][T18290] netlink: 'syz.4.4943': attribute type 4 has an invalid length. [ 925.943787][T18292] EXT4-fs: journaled quota format not specified [ 926.048949][T18269] loop0: detected capacity change from 0 to 40427 [ 926.149114][T18269] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 926.194186][T18269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 926.255034][T18301] program syz.1.4946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 926.291050][T15215] EXT4-fs (loop6): unmounting filesystem. [ 926.529650][T18269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 926.671168][T18269] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 926.683352][T18291] loop2: detected capacity change from 0 to 32768 [ 926.898669][T18269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 926.907234][T18269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 926.936406][ T26] audit: type=1326 audit(1760058807.326:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.026513][ T26] audit: type=1326 audit(1760058807.356:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.139534][ T26] audit: type=1326 audit(1760058807.356:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.267254][ T26] audit: type=1326 audit(1760058807.356:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.350636][T18320] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 927.392381][ T26] audit: type=1326 audit(1760058807.356:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.533801][ T26] audit: type=1326 audit(1760058807.356:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.643792][ T26] audit: type=1326 audit(1760058807.366:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.683958][T18320] CIFS: Unable to determine destination address [ 927.819568][ T26] audit: type=1326 audit(1760058807.366:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 927.962109][ T26] audit: type=1326 audit(1760058807.366:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 928.061073][ T26] audit: type=1326 audit(1760058807.366:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18313 comm="syz.1.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff171d8eec9 code=0x7ffc0000 [ 928.570314][T18335] loop6: detected capacity change from 0 to 4096 [ 928.630177][T18335] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 929.073972][T18350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 929.081540][T18350] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 929.132865][T18352] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 929.139461][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 929.205114][T18324] loop1: detected capacity change from 0 to 32768 [ 929.271450][T18352] vhci_hcd vhci_hcd.0: Device attached [ 929.313447][T18350] vhci_hcd vhci_hcd.0: Device attached [ 929.380099][T18354] vhci_hcd: connection closed [ 929.389951][T13948] vhci_hcd: stop threads [ 929.404551][T18351] vhci_hcd: connection closed [ 929.460978][T13948] vhci_hcd: release socket [ 929.516073][T13948] vhci_hcd: disconnect device [ 929.527276][T13948] vhci_hcd: stop threads [ 929.531579][T13948] vhci_hcd: release socket [ 929.569514][ T4439] vhci_hcd: vhci_device speed not set [ 929.610007][T13948] vhci_hcd: disconnect device [ 929.672382][ T4439] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 929.680301][ T4439] usb 37-1: enqueue for inactive port 0 [ 929.789941][T18324] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 929.797076][ T4439] vhci_hcd: vhci_device speed not set [ 930.048896][T18367] tipc: Enabling of bearer rejected, failed to enable media [ 930.101857][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 930.388920][T15215] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 930.489731][T15215] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 930.510172][T15215] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 931.250943][T18393] mkiss: ax0: crc mode is auto. [ 931.503816][ T5783] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 931.507940][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.518104][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.904343][T18406] loop4: detected capacity change from 0 to 512 [ 931.928906][T18406] EXT4-fs: Ignoring removed bh option [ 931.954003][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.970973][T18406] EXT4-fs: Ignoring removed mblk_io_submit option [ 931.983816][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.023288][ T5783] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 932.061008][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.067292][T18406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 932.110536][ T5783] usb 3-1: config 0 descriptor?? [ 932.125333][T18406] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 932.145077][T18406] EXT4-fs (loop4): orphan cleanup on readonly fs [ 932.251844][T18406] __quota_error: 10 callbacks suppressed [ 932.251875][T18406] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 932.340631][T18406] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 932.361083][T18406] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.4988: Failed to acquire dquot type 1 [ 932.378930][ T4440] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 932.441915][T18406] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.4988: Invalid block bitmap block 0 in block_group 0 [ 932.545456][T18406] Quota error (device loop4): write_blk: dquota write failed [ 932.552977][T18406] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 932.579617][T18406] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.4988: Failed to acquire dquot type 1 [ 932.672322][ T5783] uclogic 0003:5543:0042.0059: No inputs registered, leaving [ 932.681444][T18406] Quota error (device loop4): write_blk: dquota write failed [ 932.708386][ T5783] uclogic 0003:5543:0042.0059: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 932.720303][T18406] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 932.766829][ T4440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 932.771117][T18406] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.4988: Failed to acquire dquot type 1 [ 932.797567][ T4440] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.831833][ T4440] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 932.856777][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.877064][ T4440] usb 2-1: config 0 descriptor?? [ 932.905260][T18408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 932.919147][ T5783] usb 3-1: USB disconnect, device number 36 [ 932.947146][T18406] EXT4-fs (loop4): 1 orphan inode deleted [ 932.987301][T18406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 933.151986][T18416] fido_id[18416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 933.219936][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 933.399768][ T4440] wacom 0003:056A:00FA.005A: hidraw0: USB HID v1.01 Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0 [ 933.647415][ T5783] usb 2-1: USB disconnect, device number 31 [ 933.980250][T18428] fido_id[18428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 934.312623][T18438] loop0: detected capacity change from 0 to 1024 [ 934.654480][T18438] hfsplus: small file entry [ 934.656882][T18446] 9p: Unknown access argument 18446744073709551615: -34 [ 935.785634][ T5783] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 936.020491][T18478] loop4: detected capacity change from 0 to 164 [ 936.164510][T18478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 936.241198][T18478] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 936.251118][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.277585][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.313794][ T5783] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 936.342010][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.397746][ T5783] usb 3-1: config 0 descriptor?? [ 936.890797][ T5783] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 936.970588][ T5783] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.005B/input/input68 [ 937.171786][ T5783] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 937.234364][T18501] loop6: detected capacity change from 0 to 256 [ 937.280778][ T5783] usb 3-1: USB disconnect, device number 37 [ 937.318608][T18501] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 937.374874][T18501] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 937.689084][T18501] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 937.799180][T18505] fido_id[18505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 938.153570][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5041'. [ 939.064083][T18541] Bluetooth: MGMT ver 1.22 [ 939.162625][T18546] loop4: detected capacity change from 0 to 256 [ 939.188542][T18546] exfat: Deprecated parameter 'namecase' [ 939.210453][T18546] exfat: Deprecated parameter 'namecase' [ 939.340989][T18548] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5055'. [ 939.385914][T18548] netlink: 'syz.0.5055': attribute type 9 has an invalid length. [ 939.419761][T18548] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5055'. [ 939.483833][T18548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5055'. [ 939.715389][T18546] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 939.814419][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'. [ 940.814478][ T5783] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 941.072195][T18589] program syz.0.5075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.172572][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 941.321653][ T5783] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.338734][ T5783] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.383787][ T5783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.433788][ T5783] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 941.485948][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.527000][ T5783] usb 3-1: config 0 descriptor?? [ 942.062224][ T5783] input: HID 28bd:0905 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0905.005C/input/input69 [ 942.116137][T18612] tipc: Enabling of bearer rejected, media not registered [ 942.213075][ T5783] uclogic 0003:28BD:0905.005C: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.2-1/input0 [ 942.341075][ T5783] usb 3-1: USB disconnect, device number 38 [ 942.558973][T18619] loop6: detected capacity change from 0 to 512 [ 942.702657][T18617] fido_id[18617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.722141][T18625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5092'. [ 942.781296][T18619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 943.027822][T18619] EXT4-fs (loop6): 1 orphan inode deleted [ 943.033642][T18619] EXT4-fs (loop6): 1 truncate cleaned up [ 943.114364][T18619] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 943.441864][T15215] EXT4-fs (loop6): unmounting filesystem. [ 943.581208][ T5244] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 943.960106][ T5244] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 943.973769][ T5244] usb 3-1: config 0 has no interface number 0 [ 943.990266][ T5244] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 944.021723][ T5244] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 944.189868][ T5244] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 944.199736][ T5244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.253774][ T5244] usb 3-1: Product: syz [ 944.258180][ T5244] usb 3-1: Manufacturer: syz [ 944.262804][ T5244] usb 3-1: SerialNumber: syz [ 944.304778][ T5244] usb 3-1: config 0 descriptor?? [ 944.324832][T18634] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 944.342084][ T5244] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 944.371914][ T5244] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 944.389724][T18636] loop1: detected capacity change from 0 to 32768 [ 944.661308][T18636] XFS (loop1): Mounting V5 Filesystem [ 944.675067][T18638] loop4: detected capacity change from 0 to 32768 [ 944.807356][ T4439] usb 3-1: USB disconnect, device number 39 [ 944.830245][ T4439] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 944.864148][ T4439] cyberjack 3-1:0.69: device disconnected [ 945.396964][T18636] XFS (loop1): Ending clean mount [ 945.913807][ T4269] XFS (loop1): Unmounting Filesystem [ 947.479298][T18692] loop4: detected capacity change from 0 to 16 [ 947.595511][T18694] loop6: detected capacity change from 0 to 164 [ 947.637292][T18692] erofs: (device loop4): mounted with root inode @ nid 36. [ 947.825565][T18694] rock: directory entry would overflow storage [ 947.831803][T18694] rock: sig=0x66, size=4, remaining=3 [ 948.008349][T18700] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 948.076217][T18700] [U] J"—E:ÀÆ" [ 948.159633][T18702] sp0: Synchronizing with TNC [ 948.186646][T18704] loop4: detected capacity change from 0 to 47 [ 948.303513][T18707] loop6: detected capacity change from 0 to 512 [ 948.363814][T18707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 948.573884][T18707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 948.582886][T18707] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.764191][T15215] EXT4-fs (loop6): unmounting filesystem. [ 949.375622][T18730] netlink: 'syz.2.5134': attribute type 1 has an invalid length. [ 949.629461][T18739] loop2: detected capacity change from 0 to 256 [ 949.819033][T18709] loop1: detected capacity change from 0 to 32768 [ 950.254532][T18739] FAT-fs (loop2): Directory bread(block 64) failed [ 950.276157][T18709] XFS (loop1): Mounting V5 Filesystem [ 950.283525][T18739] FAT-fs (loop2): Directory bread(block 65) failed [ 950.343860][T18739] FAT-fs (loop2): Directory bread(block 66) failed [ 950.413793][T18739] FAT-fs (loop2): Directory bread(block 67) failed [ 950.485927][T18739] FAT-fs (loop2): Directory bread(block 68) failed [ 950.492523][T18739] FAT-fs (loop2): Directory bread(block 69) failed [ 950.540504][T18739] FAT-fs (loop2): Directory bread(block 70) failed [ 950.556331][T18739] FAT-fs (loop2): Directory bread(block 71) failed [ 950.591088][T18739] FAT-fs (loop2): Directory bread(block 72) failed [ 950.614737][T18739] FAT-fs (loop2): Directory bread(block 73) failed [ 950.790179][T18739] syz.2.5138: attempt to access beyond end of device [ 950.790179][T18739] loop2: rw=2051, sector=1224, nr_sectors = 544 limit=256 [ 951.009264][T18764] loop6: detected capacity change from 0 to 2048 [ 951.168747][T18764] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 951.218300][T18764] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 951.243837][T18764] UDF-fs: Scanning with blocksize 512 failed [ 951.728232][T18764] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 951.736240][T18764] UDF-fs: Scanning with blocksize 1024 failed [ 951.773327][T18777] loop4: detected capacity change from 0 to 1024 [ 951.876595][T18764] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 952.060459][T18764] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 952.068346][T18764] UDF-fs: Scanning with blocksize 2048 failed [ 952.106926][T17302] hfsplus: b-tree write err: -5, ino 8 [ 952.114267][T18764] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 952.192897][T18764] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 952.247817][T18764] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 952.256808][T18764] UDF-fs: Scanning with blocksize 4096 failed [ 952.284126][T18764] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 952.585557][T18764] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5145'. [ 952.714854][T18709] XFS (loop1): Ending clean mount [ 952.830752][T18709] XFS (loop1): Quotacheck needed: Please wait. [ 953.053198][T18709] XFS (loop1): Quotacheck: Done. [ 953.240420][ T4269] XFS (loop1): Unmounting Filesystem [ 953.530401][T18804] loop2: detected capacity change from 0 to 64 [ 954.381521][T18796] loop4: detected capacity change from 0 to 32768 [ 954.409076][T18811] mkiss: ax0: crc mode is auto. [ 954.688381][T18796] XFS (loop4): Mounting V5 Filesystem [ 955.077464][T18825] loop0: detected capacity change from 0 to 512 [ 955.136795][T18825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 955.246555][T18825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 955.283811][T18825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 955.513553][T18833] loop1: detected capacity change from 0 to 128 [ 955.629089][T18825] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.5170: Allocating blocks 41-42 which overlap fs metadata [ 955.725042][ T26] audit: type=1326 audit(1760058836.116:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 955.751890][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 955.764798][T18825] Quota error (device loop0): write_blk: dquota write failed [ 955.772244][T18825] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 955.818835][ T26] audit: type=1326 audit(1760058836.156:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 955.847401][T18796] XFS (loop4): Ending clean mount [ 955.856604][T18825] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3836: comm syz.0.5170: Allocating blocks 41-42 which overlap fs metadata [ 955.919785][ T26] audit: type=1326 audit(1760058836.156:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 955.994120][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.022254][T18825] Quota error (device loop0): write_blk: dquota write failed [ 956.063863][T18825] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 956.092714][ T26] audit: type=1326 audit(1760058836.156:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 956.143802][T18825] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.5170: Failed to acquire dquot type 1 [ 956.206354][ T26] audit: type=1326 audit(1760058836.156:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 956.239124][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.254605][T18825] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 956.323483][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.325903][T18839] loop2: detected capacity change from 0 to 4096 [ 956.330192][ T4280] XFS (loop4): Unmounting Filesystem [ 956.342610][T18825] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #12: comm syz.0.5170: corrupted inode contents [ 956.392316][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.423796][T18825] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #12: comm syz.0.5170: mark_inode_dirty error [ 956.445492][ T26] audit: type=1326 audit(1760058836.156:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18836 comm="syz.2.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 956.482873][T18839] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 956.521476][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.540520][T18825] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #12: comm syz.0.5170: corrupted inode contents [ 956.618852][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.669327][T18825] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.5170: mark_inode_dirty error [ 956.749330][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.757232][T18825] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #12: comm syz.0.5170: corrupted inode contents [ 956.891162][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.898225][T18825] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 956.969175][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 956.976852][T18825] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #12: comm syz.0.5170: corrupted inode contents [ 957.072468][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 957.078435][T18827] loop6: detected capacity change from 0 to 32768 [ 957.082465][T18825] EXT4-fs error (device loop0): ext4_truncate:4312: inode #12: comm syz.0.5170: mark_inode_dirty error [ 957.210789][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 957.239315][T18825] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 957.293822][T18827] XFS (loop6): Mounting V5 Filesystem [ 957.312112][T18825] EXT4-fs (loop0): Remounting filesystem read-only [ 957.339566][T18825] EXT4-fs (loop0): 1 truncate cleaned up [ 957.369529][T18825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 957.599663][ T4439] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 957.655883][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 957.958259][T18839] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 958.048977][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 958.063771][ T4439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 958.111854][ T4439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 958.156453][ T4439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 958.177256][ T4439] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 958.181087][T18857] loop4: detected capacity change from 0 to 4096 [ 958.207903][ T4439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.244791][ T4439] usb 2-1: config 0 descriptor?? [ 958.369168][T18827] XFS (loop6): Ending clean mount [ 958.420998][T18857] ntfs: volume version 3.1. [ 958.490003][T15215] XFS (loop6): Unmounting Filesystem [ 958.526904][ T4439] hdpvr 2-1:0.0: firmware version 0x29 dated Ûšˆ€wFµÀÑûý{f÷éCÀNÎæI|Í!°0›`iÌÂùÍçžÈ¯ì [ 958.535957][ T4274] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 958.544496][ T4274] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 958.554040][ T4439] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 959.380355][T18876] loop4: detected capacity change from 0 to 512 [ 959.396045][ T4439] hdpvr 2-1:0.0: Could not setup controls [ 959.426661][ T4439] hdpvr 2-1:0.0: registering videodev failed [ 959.460946][ T4439] hdpvr: probe of 2-1:0.0 failed with error -71 [ 959.528414][ T4439] usb 2-1: USB disconnect, device number 32 [ 959.589457][T18876] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 959.797414][T18876] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 959.924225][T18876] EXT4-fs (loop4): 1 truncate cleaned up [ 959.929950][T18876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 960.005415][T18876] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 1969368878 > max in inode 18 [ 960.323822][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 961.119441][ T4439] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 961.312421][T18903] loop6: detected capacity change from 0 to 1024 [ 961.388851][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5201'. [ 961.480242][ T4439] usb 5-1: Using ep0 maxpacket: 16 [ 961.592971][T18909] loop2: detected capacity change from 0 to 1024 [ 961.648904][ T4439] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 961.660819][ T4439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.684581][ T4439] usb 5-1: Product: syz [ 961.688940][ T4439] usb 5-1: Manufacturer: syz [ 961.693585][ T4439] usb 5-1: SerialNumber: syz [ 961.756128][ T4439] usb 5-1: config 0 descriptor?? [ 961.775379][T13954] hfsplus: b-tree write err: -5, ino 4 [ 961.806483][ T4439] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 961.821683][T18909] hfsplus: bad catalog entry type [ 961.994990][T14015] hfsplus: b-tree write err: -5, ino 4 [ 962.256935][ T4439] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 962.506097][ T4439] usb 5-1: USB disconnect, device number 49 [ 962.519082][ T4439] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 962.542472][T18920] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5208'. [ 962.586630][ T4439] visor 5-1:0.0: device disconnected [ 962.839060][T18924] loop2: detected capacity change from 0 to 4096 [ 962.855549][T18926] loop0: detected capacity change from 0 to 1024 [ 962.944667][T18926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 963.053314][T18907] loop1: detected capacity change from 0 to 40427 [ 963.075164][T18926] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 963.128923][T18907] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 963.146398][T18907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 963.263600][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 963.286318][T18907] F2FS-fs (loop1): invalid crc value [ 963.421118][T18907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 963.773907][T18907] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 963.781017][T18907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 963.840131][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 963.840148][ T26] audit: type=1326 audit(1760058844.226:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18942 comm="syz.0.5216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0079d8eec9 code=0x0 [ 964.115811][T18924] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 964.436526][T18949] loop6: detected capacity change from 0 to 256 [ 964.449274][ T4274] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 964.503820][T18949] exfat: Deprecated parameter 'namecase' [ 964.509593][T18949] exfat: Deprecated parameter 'utf8' [ 964.975368][T18955] loop1: detected capacity change from 0 to 256 [ 965.004620][ T5244] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 965.038542][T18955] exFAT-fs (loop1): bogus sector size bits : 127 [ 965.045397][T18955] exFAT-fs (loop1): failed to read boot sector [ 965.076531][T18955] exFAT-fs (loop1): failed to recognize exfat type [ 965.080131][T18949] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 965.179210][T18946] loop0: detected capacity change from 0 to 32768 [ 965.388250][T18946] (syz.0.5216,18946,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 965.444214][T18946] (syz.0.5216,18946,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 965.526304][ T5244] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 965.540123][T18961] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 965.666826][ T5244] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 965.676008][ T5244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.694752][ T5244] usb 5-1: Product: syz [ 965.698984][ T5244] usb 5-1: Manufacturer: syz [ 965.703621][ T5244] usb 5-1: SerialNumber: syz [ 965.759492][ T5244] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 965.965354][T18946] JBD2: Ignoring recovery information on journal [ 965.968683][T18967] loop2: detected capacity change from 0 to 2048 [ 966.200205][T18946] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 966.270991][T18967] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 966.436589][ T5244] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 966.522475][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 966.549812][ T5244] usb 5-1: USB disconnect, device number 50 [ 966.838544][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5231'. [ 967.099932][T18987] IPVS: stopping backup sync thread 11591 ... [ 967.163152][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 967.771774][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5232'. [ 967.931267][T18998] loop4: detected capacity change from 0 to 8192 [ 968.021873][T19005] loop2: detected capacity change from 0 to 1024 [ 968.036641][T18998] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 968.086571][T18998] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 968.143987][T18998] REISERFS (device loop4): using ordered data mode [ 968.170919][T18998] reiserfs: using flush barriers [ 968.226021][T18998] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 968.304306][T18998] REISERFS (device loop4): checking transaction log (loop4) [ 968.339320][T19005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 968.390425][T18998] REISERFS (device loop4): Using r5 hash to sort names [ 968.397733][T18998] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 968.461353][T18998] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 968.610011][T19010] loop0: detected capacity change from 0 to 4096 [ 968.668860][T18998] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=2, len=0 - odd [ 968.846449][T19010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 969.115917][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 970.206329][T19015] loop6: detected capacity change from 0 to 32768 [ 970.883792][T19046] loop1: detected capacity change from 0 to 4096 [ 970.915949][T19048] sp0: Synchronizing with TNC [ 970.952139][T19048] sp0: Found TNC [ 970.972364][T19047] [U] è` [ 971.029398][T19046] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 971.058187][T19046] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 971.096423][T19046] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 971.126268][T19046] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 971.168280][T19046] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 971.268246][T19046] ntfs: volume version 3.1. [ 971.360789][T19046] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 971.375891][T19046] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 971.439739][T19046] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 971.477154][T19046] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 971.537416][T19046] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 971.748707][T19044] loop2: detected capacity change from 0 to 32768 [ 971.896828][T19044] XFS (loop2): Mounting V5 Filesystem [ 972.023411][ T4440] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 972.368139][T19064] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 972.446510][ T4440] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 972.457554][ T4440] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 972.509225][ T4440] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 972.593760][ T4440] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 972.644234][ T4440] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 972.717230][ T4440] usb 7-1: config 0 interface 0 has no altsetting 0 [ 972.746995][T19044] XFS (loop2): Ending clean mount [ 972.830108][T19044] XFS (loop2): Quotacheck needed: Please wait. [ 972.873309][ T4440] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 972.902803][ T4440] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 972.955692][ T4440] usb 7-1: Product: syz [ 972.975406][ T4440] usb 7-1: Manufacturer: syz [ 972.980070][ T4440] usb 7-1: SerialNumber: syz [ 973.042131][ T4440] usb 7-1: config 0 descriptor?? [ 973.069850][T19050] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 973.077067][ T4440] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 973.085932][ T4440] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 973.209127][T19070] loop0: detected capacity change from 0 to 4096 [ 973.237987][T19070] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 973.248851][T19044] XFS (loop2): Quotacheck: Done. [ 973.446688][ T5783] usb 7-1: USB disconnect, device number 12 [ 973.464235][ T5783] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 974.235605][T19085] loop4: detected capacity change from 0 to 128 [ 974.277037][ T4274] XFS (loop2): Unmounting Filesystem [ 974.336948][T19085] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 974.686609][T19085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 974.937210][ T4440] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 975.370103][ T4440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.386640][ T4440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.407268][ T4440] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 975.427851][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.487333][ T4440] usb 2-1: config 0 descriptor?? [ 975.562753][T19108] loop4: detected capacity change from 0 to 1024 [ 975.768851][T19108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 975.845079][T19108] EXT4-fs: Ignoring sb option on remount [ 975.937379][T19108] EXT4-fs: Ignoring removed orlov option [ 975.969995][T19108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 975.993848][T19108] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 976.010983][T19108] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 976.084060][T19108] EXT4-fs: can't change dax mount option while remounting [ 976.166728][ T4440] hid-led: probe of 0003:27B8:01ED.005D failed with error -71 [ 976.222164][ T4440] usb 2-1: USB disconnect, device number 33 [ 976.284648][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 977.246407][T19134] loop4: detected capacity change from 0 to 16 [ 977.318899][T19134] erofs: (device loop4): mounted with root inode @ nid 36. [ 977.419787][T19134] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 977.461906][T19134] syz.4.5298: attempt to access beyond end of device [ 977.461906][T19134] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 977.500265][T19134] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 977.542537][T19134] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 977.658318][T19142] loop2: detected capacity change from 0 to 256 [ 978.270329][T19125] loop6: detected capacity change from 0 to 32768 [ 978.640937][T19138] loop0: detected capacity change from 0 to 32768 [ 978.694079][T19142] FAT-fs (loop2): Directory bread(block 64) failed [ 978.700723][T19142] FAT-fs (loop2): Directory bread(block 65) failed [ 978.730610][T19142] FAT-fs (loop2): Directory bread(block 66) failed [ 978.737297][T19142] FAT-fs (loop2): Directory bread(block 67) failed [ 978.744372][T19138] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.5299 (19138) [ 978.760089][T19142] FAT-fs (loop2): Directory bread(block 68) failed [ 978.807387][T19142] FAT-fs (loop2): Directory bread(block 69) failed [ 978.838201][T19138] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 978.856296][T19142] FAT-fs (loop2): Directory bread(block 70) failed [ 978.871282][T19125] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 978.875943][T19138] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 978.900634][T19142] FAT-fs (loop2): Directory bread(block 71) failed [ 978.915493][T19142] FAT-fs (loop2): Directory bread(block 72) failed [ 978.930924][T19138] BTRFS info (device loop0): enabling ssd optimizations [ 978.959416][T19142] FAT-fs (loop2): Directory bread(block 73) failed [ 978.985433][T19138] BTRFS info (device loop0): using free space tree [ 978.993395][T19144] loop1: detected capacity change from 0 to 32768 [ 979.044260][T19156] loop4: detected capacity change from 0 to 64 [ 979.336822][T19156] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 979.542372][T19144] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 979.724210][T15215] ocfs2: Unmounting device (7,6) on (node local) [ 979.855334][ T4270] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 979.954408][T19144] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 981.309325][ T4269] ocfs2: Unmounting device (7,1) on (node local) [ 982.191741][T19188] loop2: detected capacity change from 0 to 32768 [ 982.326576][T19220] loop4: detected capacity change from 0 to 64 [ 982.515562][T19188] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 982.807953][T19188] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 983.099710][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5333'. [ 983.125381][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 983.183758][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'. [ 983.237195][T19233] netlink: 'syz.0.5333': attribute type 13 has an invalid length. [ 983.522482][T19235] loop4: detected capacity change from 0 to 8192 [ 983.626005][T19235] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 983.674176][T19235] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 983.690852][T19235] REISERFS (device loop4): using ordered data mode [ 983.733802][T19235] reiserfs: using flush barriers [ 983.820342][T19235] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 983.998367][T19235] REISERFS (device loop4): checking transaction log (loop4) [ 984.149777][T19235] REISERFS (device loop4): Using r5 hash to sort names [ 984.204106][T19235] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 984.283825][T19235] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 984.349131][T19235] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 984.444942][T19235] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 984.534313][T19235] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 985.164691][T19274] loop2: detected capacity change from 0 to 1024 [ 985.193518][T19274] EXT4-fs: Ignoring removed nobh option [ 985.212804][T19274] EXT4-fs: Ignoring removed bh option [ 985.274667][T19274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 985.548720][T19274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 985.714960][T19282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5356'. [ 985.847345][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 986.036619][T19290] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.044045][T19290] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.198929][ T4439] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 986.441581][T19299] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5361'. [ 986.492139][T19301] loop2: detected capacity change from 0 to 64 [ 986.509412][ T4439] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 986.523604][ T4440] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 986.616706][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.643560][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 986.709073][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 986.837592][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 986.874147][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 986.917122][T19308] loop6: detected capacity change from 0 to 512 [ 986.940665][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 986.947647][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 986.947665][ T26] audit: type=1326 audit(1760058867.336:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 987.020515][ T4440] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 987.043773][ T26] audit: type=1326 audit(1760058867.336:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 987.082217][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.103140][ T4440] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 987.113437][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.151477][ T4440] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 987.161177][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.202563][ T26] audit: type=1326 audit(1760058867.336:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 987.225384][ T4440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.262086][T19295] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 987.279367][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.288595][ T26] audit: type=1326 audit(1760058867.336:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 987.317482][T19308] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 987.320753][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.333896][T19308] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 987.425823][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.461574][ T26] audit: type=1326 audit(1760058867.336:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19309 comm="syz.2.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5280f8eec9 code=0x7ffc0000 [ 987.498012][T19319] loop2: detected capacity change from 0 to 256 [ 987.585400][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.598197][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.648192][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.706551][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.723768][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.758494][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.795975][T15215] EXT4-fs (loop6): unmounting filesystem. [ 987.802015][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.814013][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.859331][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.947727][ T4439] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 987.963344][ T4439] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 987.985824][ T4439] usb 5-1: config 0 interface 0 has no altsetting 0 [ 988.104119][ T4439] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 988.113248][ T4439] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 988.134299][ T4439] usb 5-1: Product: syz [ 988.138532][ T4439] usb 5-1: Manufacturer: syz [ 988.143152][ T4439] usb 5-1: SerialNumber: syz [ 988.198593][ T4439] usb 5-1: config 0 descriptor?? [ 988.223775][ T4440] usb 2-1: USB disconnect, device number 34 [ 988.239631][ T4439] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 988.495077][T19319] FAT-fs (loop2): Directory bread(block 64) failed [ 988.511926][T19319] FAT-fs (loop2): Directory bread(block 65) failed [ 988.537661][T19319] FAT-fs (loop2): Directory bread(block 66) failed [ 988.567053][T19319] FAT-fs (loop2): Directory bread(block 67) failed [ 988.596563][ T4439] usb 5-1: USB disconnect, device number 51 [ 988.616083][T19319] FAT-fs (loop2): Directory bread(block 68) failed [ 988.631157][ T4439] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 988.645711][T19319] FAT-fs (loop2): Directory bread(block 69) failed [ 988.666345][T19319] FAT-fs (loop2): Directory bread(block 70) failed [ 988.723818][T19319] FAT-fs (loop2): Directory bread(block 71) failed [ 988.736522][T19319] FAT-fs (loop2): Directory bread(block 72) failed [ 988.737695][ T5241] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 988.777616][T19319] FAT-fs (loop2): Directory bread(block 73) failed [ 989.067698][ T5241] usb 7-1: Using ep0 maxpacket: 16 [ 989.177246][ T5241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.198480][ T5241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.242834][ T5241] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 989.306190][ T5241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.342957][ T5241] usb 7-1: config 0 descriptor?? [ 989.849449][ T5241] mcp2221 0003:04D8:00DD.005E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 989.888101][T19355] loop2: detected capacity change from 0 to 256 [ 989.985100][T19355] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 990.023828][ T4440] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 990.095880][T19355] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 990.140202][ T4439] usb 7-1: USB disconnect, device number 13 [ 990.389148][ T4440] usb 2-1: Using ep0 maxpacket: 16 [ 990.560587][T19355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 990.588204][ T4440] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 990.603756][ T4440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.653761][ T4440] usb 2-1: Product: syz [ 990.693752][ T4440] usb 2-1: Manufacturer: syz [ 990.725245][ T4440] usb 2-1: SerialNumber: syz [ 990.740274][T19355] exFAT-fs (loop2): hint_cluster is invalid (17) [ 990.775250][ T4440] usb 2-1: config 0 descriptor?? [ 990.822069][ T4440] appledisplay 2-1:0.0: Could not find int-in endpoint [ 990.831783][ T4440] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 991.081919][ T5241] usb 2-1: USB disconnect, device number 35 [ 991.434325][T19376] loop6: detected capacity change from 0 to 4096 [ 991.600413][T19380] loop2: detected capacity change from 0 to 1024 [ 991.763342][T19381] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.839998][T19366] loop4: detected capacity change from 0 to 32768 [ 991.980958][T19380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 992.002305][T19380] ext4 filesystem being mounted at /1023/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.257811][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 992.952781][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.959248][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.340538][ T5241] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 993.693749][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 993.715358][ T5241] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 993.730103][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.770737][ T5241] usb 5-1: config 0 descriptor?? [ 993.898227][T19408] syz.6.5398 (19408): drop_caches: 4 [ 994.317545][ T5241] asus 0003:0B05:17E0.005F: item fetching failed at offset 2/5 [ 994.349058][ T5241] asus 0003:0B05:17E0.005F: Asus hid parse failed: -22 [ 994.353895][T19410] loop6: detected capacity change from 0 to 4096 [ 994.390442][ T5241] asus: probe of 0003:0B05:17E0.005F failed with error -22 [ 994.470466][T19402] loop2: detected capacity change from 0 to 32768 [ 994.562419][ T5237] usb 5-1: USB disconnect, device number 52 [ 995.065249][T19410] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 995.101093][T19421] loop1: detected capacity change from 0 to 64 [ 995.594572][T19429] loop1: detected capacity change from 0 to 512 [ 995.720225][T19410] ntfs3: loop6: Failed to load $Extend. [ 995.980298][T19429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 995.994813][T19429] ext4 filesystem being mounted at /1077/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 996.487149][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 997.615514][T19476] loop6: detected capacity change from 0 to 8 [ 997.972123][T19484] loop4: detected capacity change from 0 to 256 [ 998.239820][T19482] loop1: detected capacity change from 0 to 8192 [ 998.633928][T19490] loop6: detected capacity change from 0 to 64 [ 998.894460][ T26] audit: type=1800 audit(1760058879.286:266): pid=19490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5435" name="bus" dev="loop6" ino=21 res=0 errno=0 [ 998.922954][T19490] [ 998.925349][T19490] ====================================================== [ 998.932395][T19490] WARNING: possible circular locking dependency detected [ 998.939449][T19490] syzkaller #0 Not tainted [ 998.943903][T19490] ------------------------------------------------------ [ 998.950950][T19490] syz.6.5435/19490 is trying to acquire lock: [ 998.957041][T19490] ffff88804d5a1af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 998.967893][T19490] [ 998.967893][T19490] but task is already holding lock: [ 998.975283][T19490] ffff88823bdba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 998.984811][T19490] [ 998.984811][T19490] which lock already depends on the new lock. [ 998.984811][T19490] [ 998.995227][T19490] [ 998.995227][T19490] the existing dependency chain (in reverse order) is: [ 999.004348][T19490] [ 999.004348][T19490] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 999.012453][T19490] __mutex_lock+0x120/0xaf0 [ 999.017508][T19490] hfs_find_init+0x15b/0x1d0 [ 999.022675][T19490] hfs_get_block+0x518/0xbd0 [ 999.027806][T19490] block_read_full_folio+0x3c9/0xed0 [ 999.033651][T19490] filemap_read_folio+0x160/0x760 [ 999.039263][T19490] do_read_cache_folio+0x2a0/0x760 [ 999.044914][T19490] do_read_cache_page+0x32/0x220 [ 999.050404][T19490] __hfs_bnode_create+0x4a5/0x790 [ 999.055968][T19490] hfs_bnode_find+0x21e/0xcc0 [ 999.061207][T19490] hfs_brec_find+0x156/0x500 [ 999.066350][T19490] hfs_brec_read+0x20/0x100 [ 999.071399][T19490] hfs_cat_find_brec+0x159/0x3f0 [ 999.076889][T19490] hfs_fill_super+0xecc/0x1410 [ 999.082209][T19490] mount_bdev+0x287/0x3c0 [ 999.087075][T19490] legacy_get_tree+0xe6/0x180 [ 999.092291][T19490] vfs_get_tree+0x88/0x270 [ 999.097243][T19490] do_new_mount+0x24a/0xa40 [ 999.102279][T19490] __se_sys_mount+0x2d6/0x3c0 [ 999.107495][T19490] do_syscall_64+0x4c/0xa0 [ 999.112451][T19490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.118890][T19490] [ 999.118890][T19490] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 999.128123][T19490] __lock_acquire+0x2cf8/0x7c50 [ 999.133525][T19490] lock_acquire+0x1b4/0x490 [ 999.138566][T19490] __mutex_lock+0x120/0xaf0 [ 999.143603][T19490] hfs_extend_file+0xd7/0x1280 [ 999.148902][T19490] hfs_bmap_reserve+0x103/0x420 [ 999.154290][T19490] __hfs_ext_write_extent+0x1fa/0x470 [ 999.160211][T19490] __hfs_ext_cache_extent+0x6b/0x9b0 [ 999.166031][T19490] hfs_extend_file+0x313/0x1280 [ 999.171421][T19490] hfs_get_block+0x3d4/0xbd0 [ 999.176546][T19490] __block_write_begin_int+0x54b/0x1a70 [ 999.182645][T19490] block_write_begin+0x96/0x1e0 [ 999.188052][T19490] cont_write_begin+0x5c4/0x7d0 [ 999.193439][T19490] hfs_write_begin+0x87/0xd0 [ 999.198561][T19490] cont_write_begin+0x2a9/0x7d0 [ 999.203947][T19490] hfs_write_begin+0x87/0xd0 [ 999.209069][T19490] hfs_file_truncate+0x18d/0x9b0 [ 999.214560][T19490] hfs_inode_setattr+0x4ab/0x6f0 [ 999.220036][T19490] notify_change+0xc74/0xf40 [ 999.225154][T19490] do_truncate+0x197/0x220 [ 999.230109][T19490] do_sys_ftruncate+0x312/0x3c0 [ 999.235491][T19490] do_syscall_64+0x4c/0xa0 [ 999.240444][T19490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.246871][T19490] [ 999.246871][T19490] other info that might help us debug this: [ 999.246871][T19490] [ 999.257101][T19490] Possible unsafe locking scenario: [ 999.257101][T19490] [ 999.264571][T19490] CPU0 CPU1 [ 999.269958][T19490] ---- ---- [ 999.275329][T19490] lock(&tree->tree_lock#2/1); [ 999.280227][T19490] lock(&HFS_I(tree->inode)->extents_lock); [ 999.288733][T19490] lock(&tree->tree_lock#2/1); [ 999.296122][T19490] lock(&HFS_I(tree->inode)->extents_lock); [ 999.302108][T19490] [ 999.302108][T19490] *** DEADLOCK *** [ 999.302108][T19490] [ 999.310254][T19490] 4 locks held by syz.6.5435/19490: [ 999.315456][T19490] #0: ffff8880602e6460 (sb_writers#27){.+.+}-{0:0}, at: do_sys_ftruncate+0x27b/0x3c0 [ 999.325054][T19490] #1: ffff88801eb13d28 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: do_truncate+0x183/0x220 [ 999.335427][T19490] #2: ffff88801eb13b78 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 999.346147][T19490] #3: ffff88823bdba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 999.356100][T19490] [ 999.356100][T19490] stack backtrace: [ 999.361998][T19490] CPU: 1 PID: 19490 Comm: syz.6.5435 Not tainted syzkaller #0 [ 999.369481][T19490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 999.379548][T19490] Call Trace: [ 999.382840][T19490] [ 999.385791][T19490] dump_stack_lvl+0x168/0x22e [ 999.390484][T19490] ? load_image+0x3b0/0x3b0 [ 999.395003][T19490] ? show_regs_print_info+0x12/0x12 [ 999.400221][T19490] ? print_circular_bug+0x12b/0x1a0 [ 999.405443][T19490] check_noncircular+0x274/0x310 [ 999.410397][T19490] ? add_chain_block+0x940/0x940 [ 999.415352][T19490] ? lockdep_lock+0xdc/0x1e0 [ 999.419960][T19490] ? _find_first_zero_bit+0xcf/0x100 [ 999.425270][T19490] __lock_acquire+0x2cf8/0x7c50 [ 999.430150][T19490] ? kernel_text_address+0x9c/0xd0 [ 999.435283][T19490] ? unwind_get_return_address+0x49/0x80 [ 999.440959][T19490] ? arch_stack_walk+0xf2/0x140 [ 999.445827][T19490] ? verify_lock_unused+0x140/0x140 [ 999.451054][T19490] ? stack_trace_save+0x98/0xe0 [ 999.455919][T19490] ? stack_trace_snprint+0xf0/0xf0 [ 999.461047][T19490] ? check_noncircular+0x16f/0x310 [ 999.466186][T19490] lock_acquire+0x1b4/0x490 [ 999.470713][T19490] ? hfs_extend_file+0xd7/0x1280 [ 999.475677][T19490] ? __might_sleep+0xd0/0xd0 [ 999.480287][T19490] ? __lock_acquire+0x28b5/0x7c50 [ 999.485321][T19490] ? read_lock_is_recursive+0x10/0x10 [ 999.490714][T19490] __mutex_lock+0x120/0xaf0 [ 999.495236][T19490] ? hfs_extend_file+0xd7/0x1280 [ 999.500192][T19490] ? hfs_extend_file+0xd7/0x1280 [ 999.505140][T19490] ? verify_lock_unused+0x140/0x140 [ 999.510394][T19490] ? mutex_lock_nested+0x10/0x10 [ 999.515350][T19490] hfs_extend_file+0xd7/0x1280 [ 999.520150][T19490] ? hfs_get_block+0xbd0/0xbd0 [ 999.524953][T19490] ? hfs_write_begin+0x87/0xd0 [ 999.529757][T19490] ? __mutex_trylock_common+0x14f/0x250 [ 999.535318][T19490] ? trace_raw_output_contention_end+0xd0/0xd0 [ 999.541494][T19490] ? rcu_is_watching+0x11/0xa0 [ 999.546274][T19490] ? trace_contention_end+0x5f/0x170 [ 999.551572][T19490] ? hfs_brec_find+0x18b/0x500 [ 999.556347][T19490] ? __mutex_lock+0x19e/0xaf0 [ 999.561042][T19490] hfs_bmap_reserve+0x103/0x420 [ 999.565920][T19490] __hfs_ext_write_extent+0x1fa/0x470 [ 999.571320][T19490] __hfs_ext_cache_extent+0x6b/0x9b0 [ 999.576639][T19490] ? hfs_find_init+0x15b/0x1d0 [ 999.581416][T19490] hfs_extend_file+0x313/0x1280 [ 999.586285][T19490] ? hfs_get_block+0xbd0/0xbd0 [ 999.591069][T19490] ? memset+0x1e/0x40 [ 999.595072][T19490] ? lockdep_init_map_type+0x9d/0x880 [ 999.600466][T19490] hfs_get_block+0x3d4/0xbd0 [ 999.605076][T19490] ? hfs_free_extents+0x430/0x430 [ 999.610118][T19490] ? create_empty_buffers+0x59e/0x7a0 [ 999.615509][T19490] ? do_raw_spin_unlock+0x11d/0x230 [ 999.620728][T19490] ? create_page_buffers+0x24f/0x4a0 [ 999.626032][T19490] __block_write_begin_int+0x54b/0x1a70 [ 999.631589][T19490] ? filemap_add_folio+0x188/0x3c0 [ 999.636709][T19490] ? xas_load+0x119/0x140 [ 999.641061][T19490] ? hfs_free_extents+0x430/0x430 [ 999.646107][T19490] ? page_zero_new_buffers+0x650/0x650 [ 999.651588][T19490] ? PageHeadHuge+0x8f/0x1c0 [ 999.656198][T19490] ? hfs_free_extents+0x430/0x430 [ 999.661280][T19490] block_write_begin+0x96/0x1e0 [ 999.666169][T19490] ? hfs_free_extents+0x430/0x430 [ 999.671224][T19490] cont_write_begin+0x5c4/0x7d0 [ 999.676105][T19490] ? generic_cont_expand_simple+0x1f0/0x1f0 [ 999.682034][T19490] ? __block_commit_write+0x2d4/0x400 [ 999.687439][T19490] ? put_page+0xea/0x270 [ 999.691714][T19490] hfs_write_begin+0x87/0xd0 [ 999.696329][T19490] ? hfs_free_extents+0x430/0x430 [ 999.701382][T19490] cont_write_begin+0x2a9/0x7d0 [ 999.706272][T19490] ? generic_cont_expand_simple+0x1f0/0x1f0 [ 999.712206][T19490] ? mark_lock+0x94/0x320 [ 999.716556][T19490] ? truncate_inode_pages_range+0x34d/0xff0 [ 999.722473][T19490] hfs_write_begin+0x87/0xd0 [ 999.727081][T19490] ? hfs_free_extents+0x430/0x430 [ 999.732128][T19490] hfs_file_truncate+0x18d/0x9b0 [ 999.737088][T19490] ? unmap_mapping_range+0x91/0x100 [ 999.742310][T19490] ? __up_read+0x27c/0x660 [ 999.746737][T19490] ? hfs_extend_file+0x1280/0x1280 [ 999.751873][T19490] ? preempt_count_add+0x8d/0x190 [ 999.756919][T19490] ? unmap_mapping_range+0x91/0x100 [ 999.762137][T19490] hfs_inode_setattr+0x4ab/0x6f0 [ 999.767222][T19490] ? security_inode_setattr+0xd8/0x140 [ 999.772693][T19490] ? try_break_deleg+0x79/0x120 [ 999.777558][T19490] ? hfs_evict_inode+0x100/0x100 [ 999.782518][T19490] notify_change+0xc74/0xf40 [ 999.787144][T19490] do_truncate+0x197/0x220 [ 999.791589][T19490] ? put_page_bootmem+0x2c0/0x2c0 [ 999.796643][T19490] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 999.802054][T19490] ? bpf_lsm_path_truncate+0x5/0x10 [ 999.807369][T19490] do_sys_ftruncate+0x312/0x3c0 [ 999.812243][T19490] do_syscall_64+0x4c/0xa0 [ 999.816673][T19490] ? clear_bhb_loop+0x60/0xb0 [ 999.821371][T19490] ? clear_bhb_loop+0x60/0xb0 [ 999.826160][T19490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 999.832158][T19490] RIP: 0033:0x7f2e6978eec9 [ 999.836584][T19490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.856227][T19490] RSP: 002b:00007f2e6a710038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 999.864661][T19490] RAX: ffffffffffffffda RBX: 00007f2e699e5fa0 RCX: 00007f2e6978eec9 [ 999.872651][T19490] RDX: 0000000000000000 RSI: 0000000002007ffc RDI: 0000000000000004 [ 999.880631][T19490] RBP: 00007f2e69811f91 R08: 0000000000000000 R09: 0000000000000000 [ 999.888614][T19490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.896695][T19490] R13: 00007f2e699e6038 R14: 00007f2e699e5fa0 R15: 00007ffd1142ea58 [ 999.904783][T19490] [ 1000.071957][T19484] FAT-fs (loop4): Directory bread(block 64) failed [ 1000.078657][T19484] FAT-fs (loop4): Directory bread(block 65) failed [ 1000.094185][T19484] FAT-fs (loop4): Directory bread(block 66) failed [ 1000.111194][T19484] FAT-fs (loop4): Directory bread(block 67) failed [ 1000.135672][T19484] FAT-fs (loop4): Directory bread(block 68) failed [ 1000.155043][T19484] FAT-fs (loop4): Directory bread(block 69) failed [ 1000.174712][T19484] FAT-fs (loop4): Directory bread(block 70) failed [ 1000.189715][T19484] FAT-fs (loop4): Directory bread(block 71) failed [ 1000.218445][T19484] FAT-fs (loop4): Directory bread(block 72) failed [ 1000.243435][T19484] FAT-fs (loop4): Directory bread(block 73) failed [ 1001.481610][T15215] hfs: node 4:3 still has 1 user(s)!