last executing test programs: 2m34.110842678s ago: executing program 1 (id=192): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x480, &(0x7f0000000140)={[{}, {@gid}, {@barrier}, {@umask={'umask', 0x3d, 0x7}}, {@force}, {@nls={'nls', 0x3d, 'cp437'}}]}, 0xfe, 0x6eb, &(0x7f0000000b40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m33.54457609s ago: executing program 1 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @from_mac=@device_b, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1}}, 0x7, @default, 0x80a, @val, @val, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0xb8, 0x96}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x1, 0x0, {0x3, 0x1, 0x0, 0x3f7, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x4, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xda, 0x1}}, @void}}]]}, 0x80}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) 2m33.222658871s ago: executing program 1 (id=201): unshare(0x20400) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x11c) fadvise64(r0, 0x0, 0x0, 0x3) 2m32.926043482s ago: executing program 1 (id=205): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5, &(0x7f0000000100)={[{@bsdgroups}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsold}]}, 0x1, 0x402, &(0x7f0000000980)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x80b0, 0x0, 0x0, 0x0, 0x0) 2m32.397648924s ago: executing program 1 (id=208): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000040)="c4b78a09865aada92d4d580800a949c3", 0x10) 2m31.496179797s ago: executing program 1 (id=213): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m31.094306238s ago: executing program 32 (id=213): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.87830964s ago: executing program 0 (id=1572): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x5, 0x4) 2.616436611s ago: executing program 0 (id=1575): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 2.505157281s ago: executing program 2 (id=1577): prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) 2.394367622s ago: executing program 0 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0xffff8000) 2.326726132s ago: executing program 2 (id=1581): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) 2.303884082s ago: executing program 4 (id=1582): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@usrquota}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@quota}, {@nointegrity}, {@usrquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota, 0x0}, {}, {@resize_size}, {@umask={'umask', 0x3d, 0xbfd}}, {@grpquota}, {@discard}, {@umask={'umask', 0x3d, 0x5}}, {@uid}], [{@flag='ro'}, {@fowner_gt}, {@fsmagic}]}, 0x1, 0x612b, &(0x7f0000009880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2.127406203s ago: executing program 0 (id=1584): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) 1.960054683s ago: executing program 2 (id=1586): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r0, 0x40043311, 0x0) 1.836848353s ago: executing program 5 (id=1587): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x8205}, {r1, 0x4042}], 0x2, 0x6d23) 1.672848574s ago: executing program 0 (id=1588): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x61d8, &(0x7f0000007500)="$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") r0 = open(&(0x7f0000000700)='./bus\x00', 0x8001121ac2, 0x0) write$FUSE_ATTR(r0, &(0x7f0000009140)={0x78, 0x0, 0x0, {0x1, 0x401, 0x0, {0x0, 0x7, 0x6, 0x80d, 0x4, 0x1, 0x0, 0x2, 0x3, 0x0, 0xe1, 0x0, 0x0, 0x2, 0x8}}}, 0x78) 1.607578884s ago: executing program 3 (id=1589): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000b00)={0x2b, 0x2}) 1.382047025s ago: executing program 3 (id=1590): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) setgroups(0x3, &(0x7f0000003300)=[0x0, 0xee01, 0x0]) fchmod(r0, 0x0) 1.253731656s ago: executing program 3 (id=1591): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x11, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x20, 0x0, @remote, 0xfffffffd}}}, 0x108) close(r0) 1.166324926s ago: executing program 5 (id=1592): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="174fc0f350e6"}, 0x10) 1.069847706s ago: executing program 4 (id=1593): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 1.051491756s ago: executing program 3 (id=1594): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "6256be", 0x1}}}, 0xd) 960.004637ms ago: executing program 5 (id=1595): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000b40)={[{@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@noinit_itable}, {@nodelalloc}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, &(0x7f0000000000)={0x100ffffff, 0x101, 0x1, 0xe}) 911.000577ms ago: executing program 3 (id=1596): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x100, 0x100000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, @in6={0xa, 0x4e23, 0x5811, @dev={0xfe, 0x80, '\x00', 0x22}, 0x9}], 0x54) 737.840818ms ago: executing program 4 (id=1597): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 667.828658ms ago: executing program 3 (id=1598): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x0, 0x55a3, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000003c0)={{}, {@void, @actul_num={@val=0x2b, 0xffffffffffffffff, 0x4b}}}) 616.836898ms ago: executing program 5 (id=1599): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0107000000000000000067"], 0x38}}, 0x0) 577.269758ms ago: executing program 2 (id=1600): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x6e23, @loopback}]}, &(0x7f0000000100)=0x10) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000340)) 576.995128ms ago: executing program 4 (id=1601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), 0x4) 290.35264ms ago: executing program 2 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000480)=""/4109, 0x100d}, {&(0x7f0000005fc0)=""/42, 0x2a}], 0x2}}], 0x2, 0x0, 0x0) 259.172219ms ago: executing program 5 (id=1603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x18, r1, 0x1, 0xfffffffe, 0x1, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) 201.279939ms ago: executing program 4 (id=1604): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="bb01ffffa0b6", 0x0, 0x0, 0x0, 0x0, 0x0}) 116.045099ms ago: executing program 0 (id=1605): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 112.11797ms ago: executing program 2 (id=1606): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./bus\x00', 0x4490, &(0x7f0000000000)=ANY=[], 0xff, 0x28b, &(0x7f00000000c0)="$eJzs3U9rE0EYx/HfbLY12lLXtiKIp2rBk7T1Il4K0nfgxZOoTYRiqKIV1FP1LL4A774FX4BHT+JZ8CYIvoDeIvMnZjfJZpPQuNv0+4HEZHee2WeyM+5MQlkBOLXu7Pz8dPOXfRipppqk21IkqS7Fki7qUv3l/sHeQavZGFZRzUXYh5GPNH1ldvebg0JtnIsIEvsu1mJ6G6aj/kOHZeeA8rnRrzN92yO/MfYjPIzVGXDaO7050pFeaansPAAA5fLXfzfxt/8uhvl7FEnr4bKfvf5X9AI66pLhaMp5lO1Lwf7U9d99ZG1jz+95t6u73nNLOLs/6qwSJ8llXr5n1TIJFK0qXS7R2cd7reaN3aetRqR32g7musVW3XPDd92OdLZv+6teG7A2HWLyti+4NszZNmyl808VWTneIxYzX803c98k+qjGv/lf3Db2NLkzlfScKZ//Rn6NrpXzcqVyWnnBHeRyOEIwtJU19aSRNh/qzIz2pChPF7XcE+Vbt1kQtTIwaqsgarU3qtub8yOnzXww98ya/uizdlLz/8h+2usaZWTaMq5k6BlD2xO7kom7noRRd3hlYMlo0hZhDJ0O+V6PdEtLL16/efKw1Wo+n9kXdiRWII1Kveh0hikd4lmovgItLfmF/RRKOXo85in4rd4t//1/JpSge9LHDOS3mVlh513Gr/9S65UNN1mzT0l2np75jaBdVHmqxs2ctcGyez6Xv4LLMO6rh4X8Fdyoa66r16VroxzRS0Ke1bM9SZDZ0Xc94Pt/AAAAAAAAAAAAAAAAAACAk+b4/uSgrrxdZbcRAAAAAAAAAAAAAAAAAAAAAICTrnL3/70r/27g/X9n5e6jQDX8DQAA///8xHPy") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 77.21743ms ago: executing program 5 (id=1607): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) 0s ago: executing program 4 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ilesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.323005][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 145.323021][ T27] audit: type=1800 audit(1731375526.871:28): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.551" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 145.363080][ T6145] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.372111][ T6145] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.381438][ T6145] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.390414][ T6145] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.511804][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 146.004558][ T6134] loop2: detected capacity change from 0 to 32768 [ 146.008706][ T6168] loop0: detected capacity change from 0 to 64 [ 146.189438][ T6134] XFS (loop2): Mounting V5 Filesystem [ 146.414445][ T6192] loop5: detected capacity change from 0 to 64 [ 146.437188][ T6134] XFS (loop2): Ending clean mount [ 146.466819][ T6134] XFS (loop2): Quotacheck needed: Please wait. [ 146.641641][ T6134] XFS (loop2): Quotacheck: Done. [ 146.883461][ T4263] Bluetooth: hci2: command tx timeout [ 146.958444][ T4248] XFS (loop2): Unmounting Filesystem [ 146.959697][ T6195] loop4: detected capacity change from 0 to 32768 [ 146.976229][ T6195] gfs2: fsid=([{{|Zp"t'I Jv$Z]e5ǡ: Trying to join cluster "lock_nolock", "([{{|Zp"t'I Jv$Z]e5ǡ" [ 146.992975][ T6195] gfs2: fsid=([{{|Zp"t'I Jv$Z]e5ǡ: Now mounting FS (format 0)... [ 147.037239][ T6195] gfs2: fsid=([{{|Zp"t'I Jv$Z]e5ǡ: can't read superblock: -22 [ 147.129611][ T6198] loop5: detected capacity change from 0 to 2048 [ 147.220516][ T6198] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.252470][ T4344] udevd[4344]: incorrect nilfs2 checksum on /dev/loop5 [ 147.293361][ T6198] NILFS (loop5): mounting unchecked fs [ 147.333927][ T6198] NILFS (loop5): recovery complete [ 147.391820][ T6202] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.725344][ T6196] loop3: detected capacity change from 0 to 40427 [ 147.745959][ T6196] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 147.762070][ T6196] F2FS-fs (loop3): invalid crc value [ 147.808894][ T6196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.935920][ T6196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.959893][ T6219] loop4: detected capacity change from 0 to 128 [ 148.003437][ T4294] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.036483][ T6221] loop2: detected capacity change from 0 to 128 [ 148.054034][ T6221] hpfs: bad mount options. [ 148.063930][ T4344] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.085262][ T4249] syz-executor: attempt to access beyond end of device [ 148.085262][ T4249] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.108192][ T4328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.193487][ T4294] usb 6-1: Using ep0 maxpacket: 16 [ 148.203692][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.217329][ T4294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.254716][ T4294] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.285001][ T4294] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.304574][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.341029][ T4294] usb 6-1: config 0 descriptor?? [ 148.704637][ T6233] loop3: detected capacity change from 0 to 1024 [ 148.712137][ T6233] EXT4-fs: Ignoring removed bh option [ 148.748901][ T6233] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.766069][ T4294] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 148.790454][ T4294] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 148.812485][ T4294] microsoft 0003:045E:07DA.0013: no inputs found [ 148.829237][ T4294] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 148.864357][ T6233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 148.953331][ T6227] loop4: detected capacity change from 0 to 32768 [ 148.960611][ T6227] XFS: ikeep mount option is deprecated. [ 148.971148][ T6227] XFS: noikeep mount option is deprecated. [ 149.015198][ T4294] usb 6-1: USB disconnect, device number 4 [ 149.050367][ T6227] XFS (loop4): Mounting V5 Filesystem [ 149.070918][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 149.236818][ T6227] XFS (loop4): Ending clean mount [ 149.252861][ T6227] XFS (loop4): Quotacheck needed: Please wait. [ 149.270803][ T6248] loop3: detected capacity change from 0 to 64 [ 149.280945][ T6235] loop2: detected capacity change from 0 to 32768 [ 149.321961][ T6235] JBD2: Ignoring recovery information on journal [ 149.342109][ T6227] XFS (loop4): Quotacheck: Done. [ 149.484149][ T6235] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.549646][ T4255] XFS (loop4): Unmounting Filesystem [ 149.647908][ T4248] ocfs2: Unmounting device (7,2) on (node local) [ 150.160181][ T6251] loop3: detected capacity change from 0 to 32768 [ 150.191200][ T6260] loop4: detected capacity change from 0 to 64 [ 150.202474][ T6251] JBD2: Ignoring recovery information on journal [ 150.311284][ T6251] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.446525][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 150.667832][ T6267] loop0: detected capacity change from 0 to 1024 [ 150.791948][ T6267] hfsplus: bad catalog entry type [ 150.937254][ T4810] hfsplus: b-tree write err: -5, ino 4 [ 151.035857][ T6273] loop4: detected capacity change from 0 to 128 [ 151.083128][ T6258] loop2: detected capacity change from 0 to 40427 [ 151.172946][ T6273] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 151.186134][ T6258] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.294180][ T6273] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 151.379463][ T6258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.430448][ T6256] loop5: detected capacity change from 0 to 40427 [ 151.480277][ T6256] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 151.521506][ T6256] F2FS-fs (loop5): invalid crc value [ 151.576311][ T6256] F2FS-fs (loop5): Found nat_bits in checkpoint [ 151.593003][ T4248] syz-executor: attempt to access beyond end of device [ 151.593003][ T4248] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.618119][ T6285] loop4: detected capacity change from 0 to 64 [ 151.761031][ T6256] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 151.932428][ T4970] syz-executor: attempt to access beyond end of device [ 151.932428][ T4970] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.464725][ T6288] loop2: detected capacity change from 0 to 16 [ 152.520779][ T6288] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.591676][ T6280] loop0: detected capacity change from 0 to 40427 [ 152.632771][ T6280] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 152.667175][ T6280] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.715078][ T6280] F2FS-fs (loop0): invalid crc value [ 152.760456][ T6280] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.979659][ T6280] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 152.999159][ T6280] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.170001][ T6298] loop2: detected capacity change from 0 to 4096 [ 153.216555][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.249480][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.302643][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.352035][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 153.369866][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 153.409127][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 153.433265][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 153.489131][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 153.523685][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 153.531602][ T6298] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 154.007383][ T6294] loop5: detected capacity change from 0 to 32768 [ 154.042780][ T6294] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.604 (6294) [ 154.090401][ T6294] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.102552][ T6315] loop3: detected capacity change from 0 to 1024 [ 154.139449][ T6294] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 154.205613][ T6294] BTRFS info (device loop5): using free space tree [ 154.224381][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.276676][ T6315] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.514217][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 154.665738][ T6307] loop4: detected capacity change from 0 to 32768 [ 154.800786][ T6307] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 154.880821][ T6294] BTRFS info (device loop5): enabling ssd optimizations [ 154.997343][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 155.043430][ T4581] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.095885][ T4970] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 155.243311][ T4581] usb 4-1: Using ep0 maxpacket: 16 [ 155.251068][ T4581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.314681][ T4581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.355096][ T4581] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.412363][ T4581] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.418683][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 155.452148][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.497647][ T4581] usb 4-1: config 0 descriptor?? [ 155.824509][ T6364] loop4: detected capacity change from 0 to 8 [ 155.942044][ T4581] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 155.971405][ T4581] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input17 [ 156.066146][ T6367] loop2: detected capacity change from 0 to 512 [ 156.071223][ T4581] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 156.124458][ T6367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.216236][ T6367] EXT4-fs (loop2): 1 truncate cleaned up [ 156.243503][ T4581] usb 4-1: USB disconnect, device number 5 [ 156.283438][ T6367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.362574][ T6377] loop5: detected capacity change from 0 to 1024 [ 156.434915][ T6337] loop0: detected capacity change from 0 to 40427 [ 156.453997][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 156.459484][ T6337] F2FS-fs (loop0): invalid crc value [ 156.492481][ T6337] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.500278][ T33] hfsplus: b-tree write err: -5, ino 4 [ 156.625724][ T6386] loop2: detected capacity change from 0 to 256 [ 156.756436][ T6337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.986856][ T6394] loop3: detected capacity change from 0 to 1024 [ 157.006501][ T4256] syz-executor: attempt to access beyond end of device [ 157.006501][ T4256] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.112717][ T6394] hfsplus: bad catalog entry type [ 157.148848][ T6398] device batadv0 entered promiscuous mode [ 157.213435][ T6400] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.246017][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.253743][ T4809] hfsplus: b-tree write err: -5, ino 4 [ 157.270275][ T6402] loop2: detected capacity change from 0 to 2048 [ 157.376016][ T6402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.475271][ T6402] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.644: reserved inode found cleared - inode=1 [ 157.700969][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 158.539369][ T6438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.659'. [ 158.709203][ T6415] loop3: detected capacity change from 0 to 32768 [ 158.763075][ T6440] loop0: detected capacity change from 0 to 64 [ 158.828328][ T6415] JBD2: Ignoring recovery information on journal [ 158.829727][ T6417] loop4: detected capacity change from 0 to 32768 [ 158.910703][ T6440] hfs: bad catalog entry type 0 [ 158.956480][ T6415] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.042588][ T6443] loop5: detected capacity change from 0 to 4096 [ 159.193909][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 159.228165][ T6442] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 159.251509][ T6426] loop2: detected capacity change from 0 to 32768 [ 159.351105][ T6426] XFS (loop2): Mounting V5 Filesystem [ 159.473382][ T6458] loop4: detected capacity change from 0 to 256 [ 159.559424][ T6426] XFS (loop2): Ending clean mount [ 159.574044][ T6426] XFS (loop2): Quotacheck needed: Please wait. [ 159.685944][ T6426] XFS (loop2): Quotacheck: Done. [ 159.737878][ T6466] loop3: detected capacity change from 0 to 16 [ 159.751559][ T6466] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 36 [ 159.759869][ T27] audit: type=1800 audit(1731375541.301:29): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.653" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 159.855285][ T4328] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 159.923252][ T4248] XFS (loop2): Unmounting Filesystem [ 160.010855][ T6472] loop4: detected capacity change from 0 to 1024 [ 160.089321][ T4344] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.873829][ T4338] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 160.938974][ T6504] loop4: detected capacity change from 0 to 64 [ 160.982763][ T6504] hfs: get root inode failed [ 161.063443][ T4338] usb 6-1: Using ep0 maxpacket: 32 [ 161.078542][ T4338] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 161.106201][ T4338] usb 6-1: config 0 has no interface number 0 [ 161.126774][ T4338] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.147028][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.176586][ T4338] usb 6-1: Product: syz [ 161.191022][ T4338] usb 6-1: Manufacturer: syz [ 161.196113][ T4338] usb 6-1: SerialNumber: syz [ 161.212983][ T4338] usb 6-1: config 0 descriptor?? [ 161.222142][ T4338] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.272125][ T6512] loop4: detected capacity change from 0 to 2048 [ 161.289407][ T6493] loop2: detected capacity change from 0 to 32768 [ 161.293397][ T4581] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.297722][ T6493] XFS: ikeep mount option is deprecated. [ 161.310021][ T6493] XFS: noikeep mount option is deprecated. [ 161.350114][ T6493] XFS (loop2): Mounting V5 Filesystem [ 161.361174][ T6512] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.395355][ T27] audit: type=1800 audit(1731375542.951:30): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.690" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 161.441892][ T4338] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 161.442283][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 161.461577][ T4338] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.503758][ T6493] XFS (loop2): Ending clean mount [ 161.513418][ T4581] usb 4-1: Using ep0 maxpacket: 8 [ 161.521648][ T6493] XFS (loop2): Quotacheck needed: Please wait. [ 161.526892][ T4581] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice= 0.55 [ 161.553888][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.565491][ T4581] usb 4-1: config 0 descriptor?? [ 161.581878][ T4581] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 161.596549][ T4581] dvb_usb_af9015: probe of 4-1:0.0 failed with error -22 [ 161.665966][ T6493] XFS (loop2): Quotacheck: Done. [ 161.813361][ T4338] usb 4-1: USB disconnect, device number 6 [ 161.844029][ T4248] XFS (loop2): Unmounting Filesystem [ 161.931305][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.932168][ T14] usb 6-1: USB disconnect, device number 5 [ 161.954668][ T6529] loop4: detected capacity change from 0 to 4096 [ 161.974638][ T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.980481][ T6529] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 162.005219][ T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 162.024571][ T14] quatech2 6-1:0.51: device disconnected [ 162.129173][ T6529] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.149143][ T6529] ntfs3: loop4: ino=1d, "file1" attr_set_size [ 162.198146][ T4255] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 162.208081][ T4255] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 162.295271][ T6533] loop2: detected capacity change from 0 to 16 [ 162.306585][ T6533] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.327258][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 162.768436][ T6549] loop3: detected capacity change from 0 to 4096 [ 162.794377][ T6549] NILFS (loop3): invalid segment: Checksum error in segment payload [ 162.831895][ T6549] NILFS (loop3): trying rollback from an earlier position [ 162.877636][ T6549] NILFS (loop3): recovery complete [ 162.908385][ T6554] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.919227][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 163.113430][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 163.141106][ T14] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 163.161145][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 163.186863][ T14] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 163.203460][ T14] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 163.217803][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.233055][ T6566] device sit0 entered promiscuous mode [ 163.235587][ T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 163.255237][ T14] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 163.263871][ T14] usb 3-1: Product: syz [ 163.268074][ T14] usb 3-1: Manufacturer: syz [ 163.272698][ T14] usb 3-1: SerialNumber: syz [ 163.273121][ T6566] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 163.294247][ T6566] netlink: 1 bytes leftover after parsing attributes in process `syz.4.711'. [ 163.301169][ T14] usb 3-1: config 0 descriptor?? [ 163.321270][ T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 163.380226][ T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 163.399152][ T4338] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 163.437515][ T6570] loop4: detected capacity change from 0 to 64 [ 163.588810][ T14] usb 3-1: USB disconnect, device number 8 [ 163.610875][ T14] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 163.611244][ T4338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.641292][ T4338] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.665562][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.685740][ T4338] usb 6-1: Product: syz [ 163.689966][ T4338] usb 6-1: Manufacturer: syz [ 163.699822][ T4338] usb 6-1: SerialNumber: syz [ 163.708660][ T4338] usb 6-1: config 0 descriptor?? [ 163.885035][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 164.138662][ T6594] loop3: detected capacity change from 0 to 256 [ 164.199434][ T6594] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 164.232488][ T4338] usb 6-1: USB disconnect, device number 6 [ 165.023275][ T4338] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.095525][ T6616] loop5: detected capacity change from 0 to 4096 [ 165.115340][ T6616] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 165.205982][ T6616] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 165.223267][ T4338] usb 3-1: Using ep0 maxpacket: 32 [ 165.225143][ T4338] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 165.225171][ T4338] usb 3-1: config 0 has no interface number 0 [ 165.227386][ T4338] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 165.227417][ T4338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.227440][ T4338] usb 3-1: Product: syz [ 165.227457][ T4338] usb 3-1: Manufacturer: syz [ 165.227473][ T4338] usb 3-1: SerialNumber: syz [ 165.228690][ T6616] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 165.229392][ T4338] usb 3-1: config 0 descriptor?? [ 165.242545][ T4338] smsc95xx v2.0.0 [ 165.296747][ T6627] capability: warning: `syz.4.741' uses 32-bit capabilities (legacy support in use) [ 165.297151][ T6627] program syz.4.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.491686][ T6630] loop4: detected capacity change from 0 to 128 [ 165.566991][ T6630] FAT-fs (loop4): FAT read failed (blocknr 234) [ 165.576252][ T6630] FAT-fs (loop4): FAT read failed (blocknr 234) [ 165.855863][ T6608] loop3: detected capacity change from 0 to 32768 [ 165.858155][ T4338] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 165.879678][ T6608] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.732 (6608) [ 165.900745][ T4338] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.956310][ T6608] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.959667][ T4338] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 166.007169][ T6608] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 166.025976][ T4338] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 166.050823][ T6608] BTRFS info (device loop3): using free space tree [ 166.052166][ T4338] usb 3-1: USB disconnect, device number 9 [ 166.068647][ T6645] loop5: detected capacity change from 0 to 1024 [ 166.222350][ T4809] hfsplus: b-tree write err: -5, ino 4 [ 166.232496][ T6608] BTRFS info (device loop3): enabling ssd optimizations [ 166.382592][ T4249] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 166.408827][ T4296] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.545612][ T6668] loop2: detected capacity change from 0 to 64 [ 166.679685][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.690019][ T4296] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.716108][ T4296] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 166.725570][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.766254][ T4296] usb 5-1: config 0 descriptor?? [ 167.074934][ T6673] loop3: detected capacity change from 0 to 4096 [ 167.169554][ T6673] ntfs3: loop3: failed to convert "0080" to maciceland [ 167.181135][ T6673] ntfs3: loop3: failed to convert name for inode 1e. [ 167.195772][ T4296] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x0 [ 167.202945][ T4296] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x0 [ 167.233361][ T4296] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x0 [ 167.240389][ T4296] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x0 [ 167.263317][ T4296] lenovo 0003:17EF:60EE.0015: unknown main item tag 0x0 [ 167.283641][ T4296] lenovo 0003:17EF:60EE.0015: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 167.424181][ T4296] usb 5-1: USB disconnect, device number 7 [ 167.454976][ T6670] loop5: detected capacity change from 0 to 32768 [ 167.508947][ T6670] JBD2: Ignoring recovery information on journal [ 167.620312][ T6670] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 167.789188][ T4970] ocfs2: Unmounting device (7,5) on (node local) [ 168.164753][ T6692] loop4: detected capacity change from 0 to 4096 [ 168.248919][ T6695] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.458399][ T6686] loop2: detected capacity change from 0 to 32768 [ 168.580173][ T6686] XFS (loop2): Mounting V5 Filesystem [ 168.704769][ T6686] XFS (loop2): Ending clean mount [ 168.739436][ T6690] loop3: detected capacity change from 0 to 32768 [ 168.750303][ T6694] loop5: detected capacity change from 0 to 32768 [ 168.768936][ T6694] XFS: noikeep mount option is deprecated. [ 168.775025][ T6690] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.762 (6690) [ 168.841281][ T6690] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 168.884386][ T6690] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 168.894866][ T6690] BTRFS info (device loop3): enabling auto defrag [ 168.901399][ T6690] BTRFS info (device loop3): ignoring bad roots [ 168.909653][ T6690] BTRFS info (device loop3): force zlib compression, level 3 [ 168.917168][ T6690] BTRFS info (device loop3): turning on async discard [ 168.924223][ T6690] BTRFS info (device loop3): enabling ssd optimizations [ 168.931284][ T6690] BTRFS info (device loop3): using spread ssd allocation scheme [ 168.933424][ T6711] loop4: detected capacity change from 0 to 256 [ 168.939863][ T6690] BTRFS info (device loop3): using free space tree [ 168.979822][ T6711] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 168.994584][ T6694] XFS (loop5): Mounting V5 Filesystem [ 169.007427][ T4248] XFS (loop2): Unmounting Filesystem [ 169.137251][ T6723] loop0: detected capacity change from 0 to 1024 [ 169.269550][ T6694] XFS (loop5): Ending clean mount [ 169.360463][ T4808] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 169.386111][ T6694] XFS (loop5): Quotacheck needed: Please wait. [ 169.423122][ T6694] XFS (loop5): Quotacheck: Done. [ 169.461704][ T75] BTRFS warning (device loop3): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 169.512278][ T4810] BTRFS warning (device loop3): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0 [ 169.535196][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.610155][ T4810] BTRFS warning (device loop3): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 169.648583][ T6740] loop4: detected capacity change from 0 to 512 [ 169.659553][ T6740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.690203][ T4970] XFS (loop5): Unmounting Filesystem [ 169.771394][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.812614][ T6752] device vlan2 entered promiscuous mode [ 169.833798][ T6740] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.940511][ T6690] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 170.020039][ T6755] loop0: detected capacity change from 0 to 512 [ 170.070149][ T6755] EXT4-fs: Ignoring removed nobh option [ 170.079439][ T4249] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 170.095365][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 170.233814][ T6755] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 170.329109][ T6755] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 170.383579][ T6755] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.775: casefold flag without casefold feature [ 170.421572][ T6755] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.775: couldn't read orphan inode 13 (err -117) [ 170.489346][ T6755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 170.691310][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 170.691309][ T6766] netlink: 48 bytes leftover after parsing attributes in process `syz.4.780'. [ 170.809448][ T6772] autofs4:pid:6772:autofs_fill_super: called with bogus options [ 170.816394][ T6774] loop0: detected capacity change from 0 to 512 [ 170.845023][ T6774] ext4: Unknown parameter 'uid>00000000000000000000' [ 171.189634][ T6786] loop2: detected capacity change from 0 to 256 [ 171.228849][ T6786] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 171.307697][ T6790] loop4: detected capacity change from 0 to 256 [ 171.307759][ T6789] loop5: detected capacity change from 0 to 512 [ 171.366968][ T6789] EXT4-fs: Ignoring removed orlov option [ 171.400215][ T6789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.420582][ T6790] FAT-fs (loop4): Directory bread(block 64) failed [ 171.451763][ T6790] FAT-fs (loop4): Directory bread(block 65) failed [ 171.456465][ T6789] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.790: Attempting to read directory block (0) that is past i_size (256) [ 171.489723][ T6789] EXT4-fs (loop5): Remounting filesystem read-only [ 171.499694][ T6789] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 171.526753][ T6790] FAT-fs (loop4): Directory bread(block 66) failed [ 171.553423][ T6789] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.562471][ T6790] FAT-fs (loop4): Directory bread(block 67) failed [ 171.616663][ T6790] FAT-fs (loop4): Directory bread(block 68) failed [ 171.649319][ T6790] FAT-fs (loop4): Directory bread(block 69) failed [ 171.670957][ T6790] FAT-fs (loop4): Directory bread(block 70) failed [ 171.693929][ T6790] FAT-fs (loop4): Directory bread(block 71) failed [ 171.743504][ T6790] FAT-fs (loop4): Directory bread(block 72) failed [ 171.750109][ T6790] FAT-fs (loop4): Directory bread(block 73) failed [ 171.772373][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 171.835106][ T6783] loop0: detected capacity change from 0 to 32768 [ 171.853017][ T6783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.788 (6783) [ 171.915477][ T6795] loop2: detected capacity change from 0 to 512 [ 171.937461][ T6783] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.977987][ T6795] EXT4-fs: Ignoring removed nobh option [ 171.983902][ T6783] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 171.992575][ T6783] BTRFS info (device loop0): using free space tree [ 172.140336][ T6803] netlink: 48 bytes leftover after parsing attributes in process `syz.5.796'. [ 172.151094][ T6795] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 172.169662][ T6795] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 172.200182][ T6806] loop4: detected capacity change from 0 to 1024 [ 172.213795][ T6795] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.793: casefold flag without casefold feature [ 172.320661][ T6795] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.793: couldn't read orphan inode 13 (err -117) [ 172.364929][ T6783] BTRFS info (device loop0): enabling ssd optimizations [ 172.414133][ T6784] loop3: detected capacity change from 0 to 32768 [ 172.452626][ T6784] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.787 (6784) [ 172.468702][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.533684][ T4256] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.554033][ T6784] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.599882][ T6784] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 172.663528][ T6784] BTRFS info (device loop3): using free space tree [ 172.724153][ T6828] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 172.759030][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 172.937194][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 173.116756][ T6784] BTRFS info (device loop3): enabling ssd optimizations [ 173.435342][ T4249] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.447029][ T6862] loop4: detected capacity change from 0 to 128 [ 173.489600][ T6862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.570113][ T6862] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.602127][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.955416][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 174.327976][ T6851] loop2: detected capacity change from 0 to 32768 [ 174.330266][ T6860] loop5: detected capacity change from 0 to 32768 [ 174.364898][ T6860] XFS: ikeep mount option is deprecated. [ 174.374506][ T6860] XFS: noikeep mount option is deprecated. [ 174.421342][ T6851] JBD2: Ignoring recovery information on journal [ 174.446734][ T6860] XFS (loop5): Mounting V5 Filesystem [ 174.512084][ T6851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 174.523411][ T4733] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.549571][ T6886] loop0: detected capacity change from 0 to 256 [ 174.597566][ T6851] process 'syz.2.802' launched './file1' with NULL argv: empty string added [ 174.633025][ T6860] XFS (loop5): Ending clean mount [ 174.656463][ T6860] XFS (loop5): Quotacheck needed: Please wait. [ 174.689562][ T6886] FAT-fs (loop0): Directory bread(block 64) failed [ 174.700872][ T4248] ocfs2: Unmounting device (7,2) on (node local) [ 174.713313][ T4733] usb 4-1: Using ep0 maxpacket: 16 [ 174.718754][ T6886] FAT-fs (loop0): Directory bread(block 65) failed [ 174.734258][ T6886] FAT-fs (loop0): Directory bread(block 66) failed [ 174.745131][ T4733] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.771115][ T6886] FAT-fs (loop0): Directory bread(block 67) failed [ 174.780597][ T6860] XFS (loop5): Quotacheck: Done. [ 174.787826][ T4733] usb 4-1: config 0 has no interface number 0 [ 174.810809][ T6886] FAT-fs (loop0): Directory bread(block 68) failed [ 174.830149][ T6886] FAT-fs (loop0): Directory bread(block 69) failed [ 174.838712][ T4733] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 174.858397][ T6886] FAT-fs (loop0): Directory bread(block 70) failed [ 174.873220][ T4733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.889279][ T4970] XFS (loop5): Unmounting Filesystem [ 174.893255][ T6886] FAT-fs (loop0): Directory bread(block 71) failed [ 174.901655][ T4733] usb 4-1: Product: syz [ 174.906107][ T4733] usb 4-1: Manufacturer: syz [ 174.912013][ T6886] FAT-fs (loop0): Directory bread(block 72) failed [ 174.918775][ T4733] usb 4-1: SerialNumber: syz [ 174.962312][ T6886] FAT-fs (loop0): Directory bread(block 73) failed [ 174.969957][ T4733] usb 4-1: config 0 descriptor?? [ 174.997183][ T4733] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 175.118566][ T6870] loop4: detected capacity change from 0 to 32768 [ 175.145866][ T6870] XFS: attr2 mount option is deprecated. [ 175.338173][ T6870] XFS (loop4): Mounting V5 Filesystem [ 175.527343][ T6870] XFS (loop4): Ending clean mount [ 175.567615][ T6870] XFS (loop4): Quotacheck needed: Please wait. [ 175.647448][ T6870] XFS (loop4): Quotacheck: Done. [ 175.671146][ T4733] gspca_spca1528: reg_w err -71 [ 175.684359][ T6909] loop0: detected capacity change from 0 to 256 [ 175.691403][ T6909] exfat: Deprecated parameter 'utf8' [ 175.727389][ T4733] spca1528: probe of 4-1:0.1 failed with error -71 [ 175.742681][ T6909] exfat: Deprecated parameter 'namecase' [ 175.747625][ T4733] usb 4-1: USB disconnect, device number 7 [ 175.821468][ T6909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 175.909340][ T4255] XFS (loop4): Unmounting Filesystem [ 175.995853][ T6913] loop5: detected capacity change from 0 to 764 [ 176.102928][ T6913] rock: directory entry would overflow storage [ 176.139025][ T6913] rock: sig=0x4f50, size=4, remaining=3 [ 176.154268][ T6913] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 176.643409][ T5173] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.719273][ T6907] loop2: detected capacity change from 0 to 40427 [ 176.754560][ T6907] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 176.770637][ T6907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 176.795125][ T6933] loop0: detected capacity change from 0 to 1024 [ 176.826312][ T6907] F2FS-fs (loop2): invalid crc value [ 176.853248][ T5173] usb 4-1: Using ep0 maxpacket: 32 [ 176.860479][ T5173] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.910959][ T6907] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.912735][ T5173] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 176.940675][ T5173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.959605][ T5173] usb 4-1: Product: syz [ 176.969811][ T5173] usb 4-1: Manufacturer: syz [ 176.974821][ T5173] usb 4-1: SerialNumber: syz [ 177.017250][ T5173] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input18 [ 177.089169][ T6907] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 177.105301][ T6907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 177.219346][ T3606] bcm5974 4-1:1.0: could not read from device [ 177.243759][ T5173] usb 4-1: USB disconnect, device number 8 [ 177.254496][ T3606] bcm5974 4-1:1.0: could not read from device [ 177.589059][ T6927] loop5: detected capacity change from 0 to 32768 [ 177.803113][ T6946] loop0: detected capacity change from 0 to 4096 [ 177.858763][ T6946] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 177.911385][ T6934] loop4: detected capacity change from 0 to 32768 [ 177.960663][ T6934] XFS: ikeep mount option is deprecated. [ 178.060450][ T6955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.840'. [ 178.082522][ T6934] XFS (loop4): Mounting V5 Filesystem [ 178.180621][ T6964] loop5: detected capacity change from 0 to 1024 [ 178.184433][ T4733] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.206178][ T6934] XFS (loop4): Ending clean mount [ 178.221900][ T6934] XFS (loop4): Quotacheck needed: Please wait. [ 178.282397][ T33] hfsplus: b-tree write err: -5, ino 4 [ 178.321881][ T6934] XFS (loop4): Quotacheck: Done. [ 178.416755][ T4733] usb 3-1: Using ep0 maxpacket: 32 [ 178.448643][ T4733] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 178.481232][ T4733] usb 3-1: config 0 has no interface number 0 [ 178.511024][ T4733] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 178.530890][ T4733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.543582][ T4733] usb 3-1: Product: syz [ 178.551000][ T4255] XFS (loop4): Unmounting Filesystem [ 178.551771][ T4733] usb 3-1: Manufacturer: syz [ 178.568566][ T4733] usb 3-1: SerialNumber: syz [ 178.576813][ T4733] usb 3-1: config 0 descriptor?? [ 178.639889][ T4733] hub 3-1:0.89: bad descriptor, ignoring hub [ 178.655624][ T4733] hub: probe of 3-1:0.89 failed with error -5 [ 178.679067][ T4733] option 3-1:0.89: GSM modem (1-port) converter detected [ 178.713569][ T4733] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 178.827789][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 178.943457][ T5173] usb 3-1: USB disconnect, device number 10 [ 178.968099][ T5173] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 178.998057][ T5173] option 3-1:0.89: device disconnected [ 179.447866][ T6985] loop3: detected capacity change from 0 to 4096 [ 179.481486][ T6973] loop5: detected capacity change from 0 to 32768 [ 179.534312][ T6973] XFS: noikeep mount option is deprecated. [ 179.664326][ T6973] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 179.712121][ T6973] XFS (loop5): Mounting V5 Filesystem [ 179.729320][ T6998] loop2: detected capacity change from 0 to 128 [ 179.844783][ T4248] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.977787][ T6973] XFS (loop5): Ending clean mount [ 180.162510][ T4970] XFS (loop5): Unmounting Filesystem [ 180.582209][ T7003] loop0: detected capacity change from 0 to 32768 [ 180.606978][ T7003] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.864 (7003) [ 180.675917][ T7003] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 180.712468][ T7003] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 180.746737][ T7003] BTRFS info (device loop0): use zlib compression, level 3 [ 180.770814][ T7003] BTRFS info (device loop0): using free space tree [ 180.908613][ T7008] loop4: detected capacity change from 0 to 32768 [ 181.030734][ T7003] BTRFS info (device loop0): enabling ssd optimizations [ 181.041099][ T7008] JBD2: Ignoring recovery information on journal [ 181.061443][ T7024] loop5: detected capacity change from 0 to 1024 [ 181.097062][ T7010] loop2: detected capacity change from 0 to 32768 [ 181.104691][ T7010] XFS: ikeep mount option is deprecated. [ 181.157362][ T7037] loop3: detected capacity change from 0 to 164 [ 181.187028][ T7037] Unsupported NM flag settings (8) [ 181.196985][ T7024] hfsplus: bad catalog entry type [ 181.264797][ T7010] XFS (loop2): Mounting V5 Filesystem [ 181.281587][ T7008] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.380030][ T4255] ocfs2: Unmounting device (7,4) on (node local) [ 181.394350][ T7010] XFS (loop2): Ending clean mount [ 181.409564][ T4808] hfsplus: b-tree write err: -5, ino 4 [ 181.480403][ T7010] XFS (loop2): Quotacheck needed: Please wait. [ 181.611368][ T7010] XFS (loop2): Quotacheck: Done. [ 181.640909][ T4256] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 181.959622][ T7059] random: crng reseeded on system resumption [ 182.397428][ T4248] XFS (loop2): Unmounting Filesystem [ 183.011975][ T7074] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 183.178785][ T7064] loop5: detected capacity change from 0 to 32768 [ 183.378006][ T7064] XFS (loop5): Mounting V5 Filesystem [ 183.494790][ T7068] loop3: detected capacity change from 0 to 40427 [ 183.523652][ T7068] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 183.534131][ T7068] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 183.591043][ T7064] XFS (loop5): Ending clean mount [ 183.616000][ T7068] F2FS-fs (loop3): Found nat_bits in checkpoint [ 183.719999][ T7068] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 183.821208][ T4970] XFS (loop5): Unmounting Filesystem [ 183.917193][ T7068] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 183.928184][ T7068] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 184.129922][ T7116] loop4: detected capacity change from 0 to 64 [ 184.873566][ T4733] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 184.917832][ T7144] netlink: 64 bytes leftover after parsing attributes in process `syz.0.897'. [ 184.933584][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.897'. [ 185.070504][ T4733] usb 6-1: Using ep0 maxpacket: 16 [ 185.084131][ T4733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.103248][ T4733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.144474][ T7150] loop0: detected capacity change from 0 to 2048 [ 185.152023][ T4733] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.173334][ T4733] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.207614][ T4733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.234973][ T4733] usb 6-1: config 0 descriptor?? [ 185.313601][ T7150] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.424447][ T27] audit: type=1800 audit(1731375566.981:31): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.900" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 185.480861][ T7155] loop3: detected capacity change from 0 to 1024 [ 185.506457][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 185.571281][ T7146] loop2: detected capacity change from 0 to 32768 [ 185.627037][ T7146] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.898 (7146) [ 185.661853][ T4733] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 185.720971][ T4733] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input19 [ 185.770414][ T7146] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 185.782634][ T4809] hfsplus: b-tree write err: -5, ino 4 [ 185.799132][ T7146] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 185.827199][ T4733] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 185.860120][ T7146] BTRFS info (device loop2): using free space tree [ 185.900612][ T4733] usb 6-1: USB disconnect, device number 7 [ 186.079535][ T7136] loop4: detected capacity change from 0 to 32768 [ 186.199461][ T7136] XFS (loop4): Mounting V5 Filesystem [ 186.344377][ T7146] BTRFS info (device loop2): enabling ssd optimizations [ 186.344613][ T7136] XFS (loop4): Ending clean mount [ 186.553553][ T4255] XFS (loop4): Unmounting Filesystem [ 186.607781][ T4248] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 186.870911][ T7204] loop3: detected capacity change from 0 to 512 [ 187.128321][ T7204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.914: inode #1: comm syz.3.914: iget: illegal inode # [ 187.202699][ T7204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.914: error while reading EA inode 1 err=-117 [ 187.241699][ T7204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.914: inode #1: comm syz.3.914: iget: illegal inode # [ 187.284504][ T7204] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.914: error while reading EA inode 1 err=-117 [ 187.374856][ T7204] EXT4-fs (loop3): 1 orphan inode deleted [ 187.403911][ T7204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 187.475300][ T7219] loop4: detected capacity change from 0 to 16 [ 187.514322][ T7219] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.568993][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 187.604049][ T7223] loop0: detected capacity change from 0 to 256 [ 187.651038][ T7223] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 188.092677][ T7237] loop0: detected capacity change from 0 to 2048 [ 188.237496][ T7237] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.369945][ T7237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.485312][ T7259] loop3: detected capacity change from 0 to 512 [ 188.551413][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 188.563013][ T7259] EXT4-fs (loop3): orphan cleanup on readonly fs [ 188.604372][ T7259] EXT4-fs error (device loop3): ext4_quota_enable:6988: comm syz.3.936: Bad quota inum: 11, type: 1 [ 188.681538][ T7263] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.690569][ T7263] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.699370][ T7263] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.708149][ T7263] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.740991][ T7259] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 188.774126][ T7259] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 188.796675][ T7259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 188.844299][ T7263] device vxlan0 entered promiscuous mode [ 188.861773][ T7263] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.871048][ T7263] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.880018][ T7263] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.888973][ T7263] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.068319][ T4249] EXT4-fs (loop3): unmounting filesystem. [ 189.318196][ T7280] mmap: syz.0.946 (7280) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.356638][ T7283] loop2: detected capacity change from 0 to 128 [ 189.372125][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 189.403813][ T7284] netlink: 'syz.3.948': attribute type 22 has an invalid length. [ 189.424768][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 189.556808][ T7288] netlink: 332 bytes leftover after parsing attributes in process `syz.4.951'. [ 189.603866][ T7288] netlink: 'syz.4.951': attribute type 9 has an invalid length. [ 189.626300][ T7288] netlink: 108 bytes leftover after parsing attributes in process `syz.4.951'. [ 189.682404][ T7288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.951'. [ 189.703930][ T7292] netlink: 22 bytes leftover after parsing attributes in process `syz.5.952'. [ 189.801450][ T27] audit: type=1326 audit(1731375571.351:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 189.870399][ T27] audit: type=1326 audit(1731375571.381:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 189.936894][ T7301] binder: BINDER_SET_CONTEXT_MGR already set [ 189.973569][ T27] audit: type=1326 audit(1731375571.381:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.012649][ T7301] binder: 7300:7301 ioctl 40046207 0 returned -16 [ 190.046005][ T7306] loop2: detected capacity change from 0 to 256 [ 190.053039][ T7306] exfat: Deprecated parameter 'utf8' [ 190.076531][ T27] audit: type=1326 audit(1731375571.381:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.110476][ T7306] exfat: Deprecated parameter 'utf8' [ 190.153699][ T7306] exfat: Deprecated parameter 'utf8' [ 190.188722][ T7306] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 190.219510][ T27] audit: type=1326 audit(1731375571.381:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.271094][ T7315] loop4: detected capacity change from 0 to 8 [ 190.313666][ T27] audit: type=1326 audit(1731375571.421:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.424957][ T27] audit: type=1326 audit(1731375571.421:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.532396][ T27] audit: type=1326 audit(1731375571.421:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.0.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d137e719 code=0x7ffc0000 [ 190.779225][ T7326] loop4: detected capacity change from 0 to 4096 [ 190.837306][ T7326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.026962][ T7326] fs-verity: sha256 using implementation "sha256-avx2" [ 191.241503][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 191.557999][ T7344] loop3: detected capacity change from 0 to 64 [ 191.611674][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.976'. [ 191.839961][ T7351] program syz.0.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.059290][ T7331] loop2: detected capacity change from 0 to 32768 [ 192.120520][ T7331] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 192.159051][ T7331] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 192.288560][ T7331] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 192.302933][ T7] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 192.312567][ T7] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 192.450865][ T7] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 138ms [ 192.477236][ T7] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 192.484734][ T7331] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 192.953034][ T7377] loop2: detected capacity change from 0 to 512 [ 193.042747][ T7377] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.990: bg 0: block 5: invalid block bitmap [ 193.133320][ T7377] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 193.188960][ T7377] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.990: invalid indirect mapped block 3 (level 2) [ 193.232807][ T7365] loop5: detected capacity change from 0 to 32768 [ 193.252718][ T7365] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.985 (7365) [ 193.260629][ T7377] EXT4-fs (loop2): 1 orphan inode deleted [ 193.301268][ T7365] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.302044][ T7377] EXT4-fs (loop2): 1 truncate cleaned up [ 193.352418][ T7365] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 193.366246][ T7365] BTRFS info (device loop5): using free space tree [ 193.375442][ T7377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.582177][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 193.747534][ T7365] BTRFS info (device loop5): enabling ssd optimizations [ 194.083682][ T7422] loop3: detected capacity change from 0 to 64 [ 194.190809][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.197271][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.278107][ T7404] loop0: detected capacity change from 0 to 32768 [ 194.311756][ T4970] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.359707][ T7404] JBD2: Ignoring recovery information on journal [ 194.470186][ T7404] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 194.742420][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 195.123759][ T7434] loop3: detected capacity change from 0 to 64 [ 195.321488][ T7435] loop2: detected capacity change from 0 to 4096 [ 195.374165][ T4733] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.397271][ T7435] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 195.479418][ T7447] netlink: 'syz.3.1013': attribute type 298 has an invalid length. [ 195.521631][ T7435] ntfs: volume version 3.1. [ 195.593398][ T4733] usb 5-1: Using ep0 maxpacket: 32 [ 195.604612][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.643492][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.674823][ T4733] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 195.724481][ T4733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.753983][ T4733] usb 5-1: config 0 descriptor?? [ 195.767470][ T4733] hub 5-1:0.0: USB hub found [ 195.973480][ T4733] hub 5-1:0.0: 2 ports detected [ 196.263485][ T4251] Bluetooth: hci3: command 0x0406 tx timeout [ 196.269679][ T4251] Bluetooth: hci1: command 0x0406 tx timeout [ 196.275805][ T4258] Bluetooth: hci0: command 0x0406 tx timeout [ 196.275830][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 196.382892][ T4733] usb 5-1: USB disconnect, device number 8 [ 196.830506][ T7467] loop3: detected capacity change from 0 to 32768 [ 196.921775][ T7467] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 196.921775][ T7467] [ 196.967296][ T7496] loop5: detected capacity change from 0 to 128 [ 196.995719][ T7467] ERROR: (device loop3): remounting filesystem as read-only [ 197.351669][ T7510] loop2: detected capacity change from 0 to 256 [ 197.379919][ T7510] exfat: Deprecated parameter 'utf8' [ 197.429681][ T7510] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 198.121051][ T7528] loop2: detected capacity change from 0 to 256 [ 198.205127][ T7528] exfat: Deprecated parameter 'namecase' [ 198.211066][ T7528] exfat: Unknown parameter 'VvG3NnVU7R+.' [ 198.336730][ T7509] loop5: detected capacity change from 0 to 32768 [ 198.501894][ T7535] loop4: detected capacity change from 0 to 128 [ 198.548302][ T7535] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 199.386954][ T7564] device macvtap1 entered promiscuous mode [ 199.407988][ T7564] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 199.769576][ T7579] loop0: detected capacity change from 0 to 1024 [ 199.849090][ T7579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.914713][ T7579] EXT4-fs: can't change dax mount option while remounting [ 200.064527][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 200.684402][ T7620] loop3: detected capacity change from 0 to 256 [ 200.711512][ T7620] FAT-fs (loop3): Directory bread(block 64) failed [ 200.724461][ T7620] FAT-fs (loop3): Directory bread(block 65) failed [ 200.731322][ T7620] FAT-fs (loop3): Directory bread(block 66) failed [ 200.745320][ T7620] FAT-fs (loop3): Directory bread(block 67) failed [ 200.760410][ T7620] FAT-fs (loop3): Directory bread(block 68) failed [ 200.771848][ T7620] FAT-fs (loop3): Directory bread(block 69) failed [ 200.782688][ T7620] FAT-fs (loop3): Directory bread(block 70) failed [ 200.792290][ T7620] FAT-fs (loop3): Directory bread(block 71) failed [ 200.802616][ T7620] FAT-fs (loop3): Directory bread(block 72) failed [ 200.812010][ T7620] FAT-fs (loop3): Directory bread(block 73) failed [ 201.065669][ T7624] program syz.3.1084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.185583][ T7612] loop4: detected capacity change from 0 to 40427 [ 201.235583][ T7612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 201.337505][ T7633] loop5: detected capacity change from 0 to 2048 [ 201.403043][ T7612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 201.412794][ T7633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 201.461628][ T7633] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.501855][ T4255] syz-executor: attempt to access beyond end of device [ 201.501855][ T4255] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.696453][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 201.701693][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 201.712287][ T7646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 201.858216][ T7650] loop3: detected capacity change from 0 to 256 [ 202.220076][ T7654] loop3: detected capacity change from 0 to 4096 [ 202.250602][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 202.266826][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 202.303364][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 202.311415][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 202.365085][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 202.373024][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 202.388233][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 202.407920][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 202.417401][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 202.439893][ T7654] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 202.497860][ T7662] sp0: Synchronizing with TNC [ 202.505073][ T48] Bluetooth: hci2: command tx timeout [ 202.650684][ T7644] loop2: detected capacity change from 0 to 32768 [ 202.710318][ T7644] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 202.710318][ T7644] [ 202.745615][ T7644] ERROR: (device loop2): remounting filesystem as read-only [ 203.561886][ T7684] loop4: detected capacity change from 0 to 4096 [ 203.634012][ T7684] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 203.716815][ T7684] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 203.813615][ T7684] ntfs3: loop4: Failed to load $Extend. [ 203.835281][ T7705] loop0: detected capacity change from 0 to 256 [ 203.975133][ T4255] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 204.069728][ T7713] netlink: 4564 bytes leftover after parsing attributes in process `syz.3.1125'. [ 204.117253][ T7713] netlink: set zone limit has 8 unknown bytes [ 204.219359][ T7719] loop0: detected capacity change from 0 to 512 [ 204.305708][ T7719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.372325][ T7719] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 204.503526][ T7719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 204.511657][ T7719] System zones: 0-1, 15-15, 18-18, 34-34 [ 204.546440][ T7719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.583349][ T7719] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 204.592801][ T7719] EXT4-fs warning (device loop0): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 204.680461][ T7719] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 204.692527][ T7719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1127: bg 0: block 40: padding at end of block bitmap is not set [ 204.769765][ T7719] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 204.817645][ T7719] EXT4-fs (loop0): 1 truncate cleaned up [ 204.842590][ T7719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 205.019045][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 205.265374][ T7741] loop3: detected capacity change from 0 to 4096 [ 205.323902][ T7741] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 205.434315][ T7741] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 205.477732][ T7741] ntfs3: loop3: Failed to load $Extend. [ 205.527702][ T7749] loop4: detected capacity change from 0 to 1764 [ 205.701239][ T4249] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 205.867078][ T7754] netlink: 'syz.4.1145': attribute type 3 has an invalid length. [ 205.902182][ T7754] netlink: 'syz.4.1145': attribute type 1 has an invalid length. [ 205.911796][ T7754] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1145'. [ 205.946824][ T7721] loop5: detected capacity change from 0 to 32768 [ 206.052478][ T7763] mkiss: ax0: crc mode is auto. [ 206.101886][ T7721] XFS (loop5): Mounting V5 Filesystem [ 206.256665][ T7737] loop2: detected capacity change from 0 to 40427 [ 206.265571][ T7737] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 206.279309][ T7737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.301314][ T7721] XFS (loop5): Ending clean mount [ 206.359496][ T7721] XFS (loop5): Quotacheck needed: Please wait. [ 206.378912][ T7737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.462320][ T7721] XFS (loop5): Quotacheck: Done. [ 206.531957][ T7737] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 206.541695][ T7737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 206.654880][ T4970] XFS (loop5): Unmounting Filesystem [ 206.808977][ T7787] loop3: detected capacity change from 0 to 164 [ 207.190067][ T7780] loop4: detected capacity change from 0 to 32768 [ 207.269046][ T7780] ERROR: (device loop4): diAllocAG: numfree > numinos [ 207.269046][ T7780] [ 207.330225][ T7780] ialloc: diAlloc returned -5! [ 207.330849][ T7795] loop3: detected capacity change from 0 to 64 [ 207.898890][ T7801] loop5: detected capacity change from 0 to 4096 [ 207.936656][ T7801] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 208.052310][ T7791] loop2: detected capacity change from 0 to 32768 [ 208.341030][ T7815] loop5: detected capacity change from 0 to 1024 [ 208.371133][ T7815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.452795][ T7815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 208.716810][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 208.766851][ T7810] loop4: detected capacity change from 0 to 32768 [ 208.794992][ T7810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1166 (7810) [ 208.842841][ T7810] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.893406][ T7810] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 208.902128][ T7810] BTRFS info (device loop4): setting nodatacow, compression disabled [ 208.971244][ T7810] BTRFS info (device loop4): setting datacow [ 208.989083][ T7810] BTRFS info (device loop4): doing ref verification [ 209.030747][ T7810] BTRFS info (device loop4): force clearing of disk cache [ 209.042059][ T7832] MPI: mpi too large (181568 bits) [ 209.047703][ T7810] BTRFS info (device loop4): turning off barriers [ 209.047777][ T7810] BTRFS info (device loop4): enabling ssd optimizations [ 209.107875][ T7810] BTRFS info (device loop4): using spread ssd allocation scheme [ 209.148082][ T7810] BTRFS info (device loop4): not using ssd optimizations [ 209.194423][ T7810] BTRFS info (device loop4): not using spread ssd allocation scheme [ 209.218736][ T7810] BTRFS info (device loop4): using free space tree [ 209.295694][ T7844] loop3: detected capacity change from 0 to 16 [ 209.325238][ T7844] erofs: (device loop3): mounted with root inode @ nid 36. [ 209.598952][ T7855] loop0: detected capacity change from 0 to 1024 [ 209.695113][ T7810] BTRFS info (device loop4): rebuilding free space tree [ 209.777762][ T7863] hfsplus: request for non-existent node 134217728 in B*Tree [ 209.786704][ T7825] loop2: detected capacity change from 0 to 32768 [ 209.833276][ T7863] hfsplus: request for non-existent node 134217728 in B*Tree [ 209.975055][ T4255] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.348305][ T7870] loop0: detected capacity change from 0 to 2048 [ 210.427517][ T7843] loop5: detected capacity change from 0 to 32768 [ 210.501572][ T7870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.701643][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 210.780982][ T48] Bluetooth: hci0: unexpected event for opcode 0x2029 [ 210.972472][ T7889] loop4: detected capacity change from 0 to 256 [ 211.014587][ T7889] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 211.185612][ T7891] loop0: detected capacity change from 0 to 4096 [ 211.249496][ T7891] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 211.304687][ T7891] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.353837][ T7891] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 211.403034][ T7891] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 211.443370][ T7891] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.469666][ T7891] ntfs: volume version 3.1. [ 211.495268][ T7891] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 211.520684][ T7891] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 211.557462][ T7891] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 211.584714][ T4581] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 211.602163][ T7891] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 211.619384][ T7891] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 211.795353][ T4581] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.834699][ T4581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.855171][ T4581] usb 5-1: config 0 descriptor?? [ 211.906906][ T7921] loop0: detected capacity change from 0 to 256 [ 211.965393][ T7921] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 212.295705][ T4581] [drm:udl_init] *ERROR* Selecting channel failed [ 212.378173][ T4581] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 212.400866][ T4581] [drm] Initialized udl on minor 2 [ 212.418363][ T4581] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.436428][ T4581] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 212.458803][ T4581] usb 5-1: USB disconnect, device number 9 [ 212.604498][ T4293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.793440][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 212.801933][ T4293] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 212.831258][ T4293] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 212.854475][ T4293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.877829][ T7951] loop5: detected capacity change from 0 to 4096 [ 212.893938][ T4293] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.909957][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.932525][ T4293] usb 4-1: Product: syz [ 212.942946][ T4293] usb 4-1: Manufacturer: syz [ 212.968737][ T7951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.982214][ T4293] usb 4-1: SerialNumber: syz [ 213.185257][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 213.422886][ T4293] usb 4-1: 0:2 : does not exist [ 213.459499][ T4293] usb 4-1: USB disconnect, device number 9 [ 213.661339][ T7981] loop5: detected capacity change from 0 to 128 [ 213.709183][ T7981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 213.745940][ T7981] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.747584][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.921468][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 214.244718][ T4293] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 214.470801][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 214.506206][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.533229][ T4293] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 214.562762][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.583374][ T4293] usb 3-1: config 0 descriptor?? [ 214.614867][ T7977] loop0: detected capacity change from 0 to 32768 [ 214.718430][ T7977] XFS (loop0): Mounting V5 Filesystem [ 214.761116][ T8017] loop3: detected capacity change from 0 to 64 [ 214.827176][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 214.836170][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 214.846802][ T4251] Bluetooth: hci0: hardware error 0x00 [ 214.918961][ T8017] hfs: keylen 94 too large [ 214.925437][ T8017] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 215.005978][ T4293] logitech 0003:046D:C20A.0017: unknown main item tag 0x0 [ 215.030732][ T4293] logitech 0003:046D:C20A.0017: unknown main item tag 0x0 [ 215.038606][ T4293] logitech 0003:046D:C20A.0017: unknown main item tag 0x0 [ 215.067686][ T4293] logitech 0003:046D:C20A.0017: unknown main item tag 0x0 [ 215.098389][ T4293] logitech 0003:046D:C20A.0017: unknown main item tag 0x0 [ 215.131013][ T7977] XFS (loop0): Ending clean mount [ 215.138756][ T4293] logitech 0003:046D:C20A.0017: hidraw0: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.2-1/input0 [ 215.161038][ T4293] logitech 0003:046D:C20A.0017: no inputs found [ 215.236740][ T4332] usb 3-1: USB disconnect, device number 11 [ 215.276545][ T7977] syz.0.1233 (7977) used greatest stack depth: 17400 bytes left [ 215.316638][ T8004] loop5: detected capacity change from 0 to 32768 [ 215.329827][ T8004] XFS: ikeep mount option is deprecated. [ 215.371106][ T4256] XFS (loop0): Unmounting Filesystem [ 215.382412][ T8006] loop4: detected capacity change from 0 to 32768 [ 215.437930][ T8030] loop3: detected capacity change from 0 to 8 [ 215.445571][ T8030] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 215.459269][ T8004] XFS (loop5): Mounting V5 Filesystem [ 215.504843][ T8030] cramfs: Error -5 while decompressing! [ 215.512050][ T8030] cramfs: ffffffff974c54f8(27)->ffff888072d26000(4096) [ 215.519247][ T8030] cramfs: Error -5 while decompressing! [ 215.525003][ T8030] cramfs: ffffffff974c54f8(27)->ffff888072d26000(4096) [ 215.549085][ T8006] XFS (loop4): Mounting V5 Filesystem [ 215.618212][ T8004] XFS (loop5): Ending clean mount [ 215.666092][ T8006] XFS (loop4): Ending clean mount [ 215.729879][ T8004] XFS (loop5): Quotacheck needed: Please wait. [ 215.795262][ T4255] XFS (loop4): Unmounting Filesystem [ 215.816758][ T8004] XFS (loop5): Quotacheck: Done. [ 216.004780][ T8047] openvswitch: netlink: ct_state flags 80020000 unsupported [ 216.034739][ T4970] XFS (loop5): Unmounting Filesystem [ 216.172116][ T8049] loop0: detected capacity change from 0 to 2048 [ 216.254773][ T8049] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 216.296039][ T8049] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 216.334526][ T8049] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 216.352527][ T8049] UDF-fs: Scanning with blocksize 512 failed [ 216.358990][ T8055] delete_channel: no stack [ 216.409456][ T8049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.514101][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 216.514117][ T27] audit: type=1800 audit(1731375598.071:40): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1251" name="file2" dev="loop0" ino=839 res=0 errno=0 [ 216.874803][ T8069] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1264'. [ 216.903394][ T4251] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.916784][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'. [ 217.066318][ T8078] loop5: detected capacity change from 0 to 164 [ 217.091990][ T8077] sp0: Synchronizing with TNC [ 217.391633][ T8093] loop0: detected capacity change from 0 to 64 [ 217.766178][ T8105] loop0: detected capacity change from 0 to 512 [ 217.825924][ T8105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 217.826025][ T8105] System zones: 1-12 [ 217.835319][ T8105] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1280: invalid indirect mapped block 8 (level 2) [ 217.836214][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 217.836499][ T8105] EXT4-fs (loop0): 1 truncate cleaned up [ 217.836544][ T8105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 217.841643][ T8105] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 5: comm syz.0.1280: lblock 0 mapped to illegal pblock 5 (length 1) [ 217.948562][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 217.948592][ T8105] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1280: error -117 reading directory block [ 218.070389][ T8105] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 5: comm syz.0.1280: lblock 0 mapped to illegal pblock 5 (length 1) [ 218.080887][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 218.080918][ T8105] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.1280: error -117 reading directory block [ 218.083447][ T4294] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 218.134959][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 218.292148][ T4294] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.318944][ T4294] usb 4-1: config 0 has no interface number 0 [ 218.333233][ T4294] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 218.375797][ T4294] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 218.418376][ T4294] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.437972][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.461077][ T4294] usb 4-1: config 0 descriptor?? [ 218.474474][ T8107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.516361][ T4294] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 218.580759][ T8103] loop4: detected capacity change from 0 to 32768 [ 218.639095][ T8097] loop2: detected capacity change from 0 to 32768 [ 218.658220][ T8103] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 218.688106][ T8103] XFS (loop4): Mounting V5 Filesystem [ 218.740832][ T4294] usb 4-1: USB disconnect, device number 10 [ 218.772988][ T4294] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 218.860588][ T8097] XFS (loop2): Mounting V5 Filesystem [ 218.904757][ T8103] XFS (loop4): Ending clean mount [ 218.960229][ T8103] XFS (loop4): Quotacheck needed: Please wait. [ 219.060265][ T8097] XFS (loop2): Ending clean mount [ 219.117688][ T8097] XFS (loop2): Quotacheck needed: Please wait. [ 219.154934][ T8103] XFS (loop4): Quotacheck: Done. [ 219.197418][ T8097] XFS (loop2): Quotacheck: Done. [ 219.368771][ T4248] XFS (loop2): Unmounting Filesystem [ 219.405605][ T4255] XFS (loop4): Unmounting Filesystem [ 219.913036][ T8157] autofs4:pid:8157:autofs_fill_super: pipe file descriptor does not contain proper ops [ 219.939583][ T8144] loop5: detected capacity change from 0 to 32768 [ 220.070578][ T8144] XFS (loop5): Mounting V5 Filesystem [ 220.183384][ T8144] XFS (loop5): Ending clean mount [ 220.201946][ T8144] XFS (loop5): Quotacheck needed: Please wait. [ 220.309727][ T8125] loop0: detected capacity change from 0 to 40427 [ 220.352319][ T8144] XFS (loop5): Quotacheck: Done. [ 220.430197][ T8125] F2FS-fs (loop0): invalid crc value [ 220.510584][ T8181] loop4: detected capacity change from 0 to 512 [ 220.521450][ T8125] F2FS-fs (loop0): Found nat_bits in checkpoint [ 220.653270][ T8181] EXT4-fs (loop4): 1 truncate cleaned up [ 220.660516][ T8125] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 220.669740][ T8181] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.715108][ T27] audit: type=1800 audit(1731375602.271:41): pid=8125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1286" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 220.749951][ T4970] XFS (loop5): Unmounting Filesystem [ 220.750291][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 220.926845][ T4256] syz-executor: attempt to access beyond end of device [ 220.926845][ T4256] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 220.942678][ T8189] loop2: detected capacity change from 0 to 4096 [ 221.174171][ T8197] loop3: detected capacity change from 0 to 4096 [ 221.201565][ T8197] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 221.584865][ T4249] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 221.612772][ T4249] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 221.642119][ T4249] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 221.734568][ T4733] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.750891][ T8213] loop5: detected capacity change from 0 to 512 [ 221.765189][ T8211] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1308'. [ 221.791687][ T8213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.813328][ T8211] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.1308'. [ 221.897774][ T8213] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 221.944292][ T4733] usb 5-1: Using ep0 maxpacket: 32 [ 221.947435][ T8213] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 221.959527][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.012198][ T4733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.042951][ T8213] EXT4-fs (loop5): 1 truncate cleaned up [ 222.065157][ T8213] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 222.069208][ T4733] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 222.119723][ T4733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.128178][ T8213] EXT4-fs error (device loop5): ext4_map_blocks:634: inode #2: block 4: comm syz.5.1300: lblock 0 mapped to illegal pblock 4 (length 1) [ 222.156471][ T4733] usb 5-1: config 0 descriptor?? [ 222.192003][ T8213] EXT4-fs (loop5): Remounting filesystem read-only [ 222.246859][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 222.482955][ T8240] loop3: detected capacity change from 0 to 8 [ 222.610500][ T4733] kovaplus 0003:1E7D:2D50.0018: unknown main item tag 0xe [ 222.630835][ T4733] kovaplus 0003:1E7D:2D50.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 222.842142][ T4733] usb 5-1: USB disconnect, device number 10 [ 222.961610][ T8252] loop3: detected capacity change from 0 to 256 [ 223.012872][ T8252] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc9e00492, utbl_chksum : 0xe619d30d) [ 223.333788][ T8262] loop0: detected capacity change from 0 to 512 [ 223.439644][ T8246] loop2: detected capacity change from 0 to 32768 [ 223.452119][ T8262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.489832][ T8246] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 223.509783][ T8246] JBD2: Ignoring recovery information on journal [ 223.514945][ T8262] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.578508][ T8246] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 223.591241][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 223.640192][ T8270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1327'. [ 223.670990][ T8246] (syz.2.1317,8246,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 223.708931][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 223.827125][ T8273] loop0: detected capacity change from 0 to 128 [ 223.844170][ T4248] ocfs2: Unmounting device (7,2) on (node local) [ 223.899232][ T8273] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 223.976827][ T8273] sysv_free_block: getblk() failed [ 224.013329][ T8273] sysv_free_block: getblk() failed [ 224.033676][ T8273] sysv_free_block: getblk() failed [ 224.051029][ T8273] sysv_free_block: getblk() failed [ 224.079021][ T8273] sysv_free_block: getblk() failed [ 224.093510][ T8273] sysv_free_block: getblk() failed [ 224.113547][ T8273] sysv_free_block: getblk() failed [ 224.143528][ T8273] sysv_free_block: getblk() failed [ 224.148825][ T8273] sysv_free_block: getblk() failed [ 224.188787][ T8273] sysv_free_block: getblk() failed [ 224.238008][ T8273] sysv_free_block: getblk() failed [ 224.265876][ T8279] loop4: detected capacity change from 0 to 4096 [ 224.269148][ T8273] sysv_free_block: getblk() failed [ 224.286561][ T8279] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 224.343369][ T8273] sysv_free_block: getblk() failed [ 224.348684][ T8273] sysv_free_block: getblk() failed [ 224.370691][ T8273] sysv_free_block: getblk() failed [ 224.386941][ T8273] sysv_free_block: getblk() failed [ 224.402370][ T8267] loop3: detected capacity change from 0 to 32768 [ 224.402387][ T8273] sysv_free_block: getblk() failed [ 224.402415][ T8273] sysv_free_block: getblk() failed [ 224.443321][ T8273] sysv_free_block: getblk() failed [ 224.451536][ T8267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1326 (8267) [ 224.467790][ T8279] ntfs: (device loop4): parse_options(): NLS character set cp9251 not found. Using previous one macturkish. [ 224.485019][ T8273] sysv_free_block: getblk() failed [ 224.507606][ T8273] sysv_free_block: getblk() failed [ 224.523352][ T8273] sysv_free_block: getblk() failed [ 224.540124][ T8273] sysv_free_block: getblk() failed [ 224.543463][ T8267] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.557802][ T8279] ntfs: volume version 3.1. [ 224.578957][ T8273] sysv_free_block: getblk() failed [ 224.603344][ T8267] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 224.606559][ T8273] sysv_free_block: getblk() failed [ 224.642737][ T8267] BTRFS info (device loop3): using free space tree [ 224.702626][ T8273] sysv_free_block: getblk() failed [ 224.754597][ T8273] sysv_free_block: getblk() failed [ 224.759799][ T8273] sysv_free_block: getblk() failed [ 224.766442][ T8273] sysv_free_block: getblk() failed [ 224.771621][ T8273] sysv_free_block: getblk() failed [ 224.778487][ T8273] sysv_free_block: getblk() failed [ 224.784364][ T8273] sysv_free_block: getblk() failed [ 224.789697][ T8273] sysv_free_block: getblk() failed [ 224.795649][ T8273] sysv_free_block: getblk() failed [ 224.807220][ T8273] sysv_free_block: getblk() failed [ 224.820126][ T8273] sysv_free_block: getblk() failed [ 224.829307][ T8299] netlink: 'syz.5.1338': attribute type 2 has an invalid length. [ 224.844821][ T8273] sysv_free_block: trying to free block not in datazone [ 224.998432][ T4294] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 225.011278][ T4294] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 225.030685][ T4256] sysv_free_block: getblk() failed [ 225.050591][ T4294] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 225.061866][ T4256] sysv_free_block: getblk() failed [ 225.071512][ T4256] sysv_free_block: trying to free block not in datazone [ 225.096456][ T8267] BTRFS info (device loop3): enabling ssd optimizations [ 225.096672][ T4256] sysv_free_block: getblk() failed [ 225.164669][ T4256] sysv_free_block: getblk() failed [ 225.170107][ T4256] sysv_free_block: getblk() failed [ 225.211163][ T4256] sysv_free_block: getblk() failed [ 225.229307][ T4256] sysv_free_block: getblk() failed [ 225.273381][ T4256] sysv_free_block: getblk() failed [ 225.278806][ T4256] sysv_free_block: getblk() failed [ 225.325189][ T4256] sysv_free_block: getblk() failed [ 225.331186][ T4256] sysv_free_block: getblk() failed [ 225.352503][ T4256] sysv_free_block: getblk() failed [ 225.359884][ T46] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 225.391431][ T4256] sysv_free_block: getblk() failed [ 225.408890][ T4256] sysv_free_block: getblk() failed [ 225.419649][ T4256] sysv_free_block: getblk() failed [ 225.441707][ T4256] sysv_free_block: getblk() failed [ 225.449749][ T4256] sysv_free_block: getblk() failed [ 225.455369][ T4256] sysv_free_block: getblk() failed [ 225.460536][ T4256] sysv_free_block: getblk() failed [ 225.468174][ T4256] sysv_free_block: getblk() failed [ 225.473752][ T4256] sysv_free_block: trying to free block not in datazone [ 225.480721][ T4256] sysv_free_block: trying to free block not in datazone [ 225.491583][ T4256] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 225.539071][ T4249] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.596646][ T8327] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 225.596646][ T8327] SȘȞZ6' [ 225.677328][ T8331] loop2: detected capacity change from 0 to 164 [ 226.222302][ T4294] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 226.273021][ T4294] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 226.381765][ T8344] loop5: detected capacity change from 0 to 4096 [ 226.817238][ T8363] loop5: detected capacity change from 0 to 2048 [ 226.894555][ T8363] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 227.012780][ T8369] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.013365][ T8363] syz.5.1362: attempt to access beyond end of device [ 227.013365][ T8363] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 227.073938][ T8370] netlink: 'syz.0.1365': attribute type 4 has an invalid length. [ 227.081741][ T8370] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1365'. [ 227.116958][ T8370] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 227.201265][ T8363] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 227.269322][ T8376] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=72057594037927938, rec_len=0, name_len=0 [ 227.589065][ T8383] loop5: detected capacity change from 0 to 64 [ 227.610253][ T8354] loop4: detected capacity change from 0 to 32768 [ 227.684548][ T4578] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.772553][ T8359] loop2: detected capacity change from 0 to 40427 [ 227.788631][ T4970] hfs: node 4:3 still has 2 user(s)! [ 227.793301][ T8359] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 227.809301][ T8359] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 227.904848][ T4578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.924376][ T8359] F2FS-fs (loop2): invalid crc value [ 227.930050][ T4578] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.989118][ T8359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.018310][ T4578] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 228.062249][ T4578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.085132][ T4578] usb 4-1: config 0 descriptor?? [ 228.251878][ T8403] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.274871][ T8359] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 228.282423][ T8359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.505883][ T4578] uclogic 0003:5543:0005.001B: unknown main item tag 0x0 [ 228.513008][ T4578] uclogic 0003:5543:0005.001B: unknown main item tag 0x0 [ 228.514002][ T8411] loop5: detected capacity change from 0 to 128 [ 228.535752][ T4578] uclogic 0003:5543:0005.001B: No inputs registered, leaving [ 228.546025][ T4578] uclogic 0003:5543:0005.001B: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.3-1/input0 [ 228.558024][ T4248] syz-executor: attempt to access beyond end of device [ 228.558024][ T4248] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 228.586947][ T8411] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 228.606310][ T8411] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.712617][ T4578] usb 4-1: USB disconnect, device number 11 [ 228.737378][ T8415] hugetlbfs: Bad value for 'size' [ 228.783751][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 229.878057][ T8434] loop5: detected capacity change from 0 to 1024 [ 229.905354][ T8434] EXT4-fs: Ignoring removed orlov option [ 229.942134][ T8434] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.057247][ T8434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 230.160743][ T8424] loop2: detected capacity change from 0 to 32768 [ 230.173616][ T8424] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1384 (8424) [ 230.253491][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 230.269599][ T8424] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 230.300304][ T8424] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 230.357003][ T8424] BTRFS info (device loop2): using free space tree [ 230.375708][ T8417] loop4: detected capacity change from 0 to 40427 [ 230.423904][ T8417] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1af [ 230.434931][ T8417] F2FS-fs (loop4): invalid crc value [ 230.470263][ T8417] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.558320][ T8430] loop0: detected capacity change from 0 to 32768 [ 230.627488][ T8467] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1397'. [ 230.636979][ T8424] BTRFS info (device loop2): enabling ssd optimizations [ 230.681170][ T8430] XFS (loop0): Mounting V5 Filesystem [ 230.815304][ T8417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.854292][ T8430] XFS (loop0): Ending clean mount [ 230.863739][ T4248] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 230.882980][ T8430] XFS (loop0): Quotacheck needed: Please wait. [ 231.090395][ T8430] XFS (loop0): Quotacheck: Done. [ 231.281195][ T27] audit: type=1800 audit(1731375612.821:42): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1398" name="/" dev="sockfs" ino=45199 res=0 errno=0 [ 231.353364][ T4256] XFS (loop0): Unmounting Filesystem [ 231.749603][ T8492] loop3: detected capacity change from 0 to 2048 [ 231.806361][ T8492] loop3: p1 < > p4 [ 231.823517][ T4301] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.840104][ T8492] loop3: p4 size 8388608 extends beyond EOD, truncated [ 232.035227][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.075268][ T4301] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 232.085377][ T8500] use of bytesused == 0 is deprecated and will be removed in the future, [ 232.113335][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.131075][ T8500] use the actual size instead. [ 232.165484][ T4301] usb 6-1: config 0 descriptor?? [ 232.237735][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 232.376461][ T8501] loop0: detected capacity change from 0 to 32768 [ 232.386485][ T8501] (syz.0.1413,8501,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xc46ac386. Applying ECC. [ 232.400787][ T8501] (syz.0.1413,8501,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0xd41818ae [ 232.413453][ T8501] (syz.0.1413,8501,0):ocfs2_verify_volume:2380 ERROR: status = -5 [ 232.421314][ T8501] (syz.0.1413,8501,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 232.430115][ T8501] (syz.0.1413,8501,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 232.483334][ T4478] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.595263][ T4301] lenovo 0003:17EF:60A3.001C: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.5-1/input0 [ 232.815247][ T4301] usb 6-1: USB disconnect, device number 8 [ 232.858012][ T8516] loop2: detected capacity change from 0 to 64 [ 233.193314][ T4578] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 233.387245][ T4578] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.428095][ T4578] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.453509][ T4578] usb 5-1: Product: syz [ 233.467326][ T4578] usb 5-1: Manufacturer: syz [ 233.492425][ T4578] usb 5-1: SerialNumber: syz [ 233.531629][ T4578] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.634012][ T4578] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 234.071947][ T8526] loop3: detected capacity change from 0 to 32768 [ 234.092925][ T8526] XFS: ikeep mount option is deprecated. [ 234.111709][ T8526] XFS: noikeep mount option is deprecated. [ 234.183010][ T8526] XFS (loop3): Mounting V5 Filesystem [ 234.272039][ T8526] XFS (loop3): Ending clean mount [ 234.291233][ T8526] XFS (loop3): Quotacheck needed: Please wait. [ 234.309256][ T4301] usb 5-1: USB disconnect, device number 11 [ 234.399294][ T8526] XFS (loop3): Quotacheck: Done. [ 234.424486][ T8538] loop2: detected capacity change from 0 to 40427 [ 234.432564][ T8538] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 234.439742][ T8538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 234.467816][ T8538] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.559118][ T4249] XFS (loop3): Unmounting Filesystem [ 234.579930][ T8538] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.631430][ T8538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.785741][ T4248] syz-executor: attempt to access beyond end of device [ 234.785741][ T4248] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.904414][ T4578] usb 5-1: Service connection timeout for: 256 [ 234.910689][ T4578] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 234.965684][ T4578] ath9k_htc: Failed to initialize the device [ 234.974375][ T4301] usb 5-1: ath9k_htc: USB layer deinitialized [ 235.019167][ T8568] loop4: detected capacity change from 0 to 256 [ 235.229100][ T8574] loop3: detected capacity change from 0 to 256 [ 235.271440][ T8574] exfat: Deprecated parameter 'utf8' [ 235.310854][ T8574] exfat: Deprecated parameter 'namecase' [ 235.331469][ T8574] exfat: Deprecated parameter 'namecase' [ 235.345109][ T8574] exfat: Deprecated parameter 'utf8' [ 235.388998][ T8574] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 235.444059][ T8580] loop4: detected capacity change from 0 to 128 [ 235.600375][ T8582] loop0: detected capacity change from 0 to 512 [ 235.725531][ T8582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 235.743766][ T8582] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.809651][ T8593] loop4: detected capacity change from 0 to 256 [ 235.821425][ T27] audit: type=1804 audit(1731375617.371:43): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1441" name="/newroot/267/bus/syzkallers" dev="loop0" ino=18 res=1 errno=0 [ 235.911121][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 235.948078][ T8593] FAT-fs (loop4): Directory bread(block 64) failed [ 235.980577][ T8593] FAT-fs (loop4): Directory bread(block 65) failed [ 236.013460][ T8593] FAT-fs (loop4): Directory bread(block 66) failed [ 236.020487][ T8593] FAT-fs (loop4): Directory bread(block 67) failed [ 236.063637][ T8593] FAT-fs (loop4): Directory bread(block 68) failed [ 236.070282][ T8593] FAT-fs (loop4): Directory bread(block 69) failed [ 236.103906][ T8593] FAT-fs (loop4): Directory bread(block 70) failed [ 236.110501][ T8593] FAT-fs (loop4): Directory bread(block 71) failed [ 236.141486][ T8593] FAT-fs (loop4): Directory bread(block 72) failed [ 236.163375][ T8593] FAT-fs (loop4): Directory bread(block 73) failed [ 236.168454][ T8595] loop0: detected capacity change from 0 to 4096 [ 236.215244][ T8595] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 236.257859][ T8595] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 236.272415][ T8595] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 236.290414][ T8595] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 236.304799][ T8595] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 236.382352][ T8595] ntfs: volume version 3.1. [ 236.396627][ T8595] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 236.410987][ T27] audit: type=1326 audit(1731375617.961:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 236.454079][ T8595] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 236.505620][ T27] audit: type=1326 audit(1731375617.991:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 236.533899][ T8595] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 236.574458][ T27] audit: type=1326 audit(1731375617.991:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 236.593192][ T8595] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 236.631153][ T8586] loop5: detected capacity change from 0 to 32768 [ 236.639862][ T8586] XFS: ikeep mount option is deprecated. [ 236.653391][ T27] audit: type=1326 audit(1731375617.991:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.3.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 236.683424][ T8586] XFS: noikeep mount option is deprecated. [ 236.858399][ T8586] XFS (loop5): Mounting V5 Filesystem [ 237.083652][ T8586] XFS (loop5): Ending clean mount [ 237.095128][ T8586] XFS (loop5): Quotacheck needed: Please wait. [ 237.188394][ T8586] XFS (loop5): Quotacheck: Done. [ 237.299924][ T4970] XFS (loop5): Unmounting Filesystem [ 237.398066][ T8605] loop3: detected capacity change from 0 to 32768 [ 237.398223][ T8599] loop2: detected capacity change from 0 to 32768 [ 237.463708][ T8599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1447 (8599) [ 237.520045][ T8605] JBD2: Ignoring recovery information on journal [ 237.547054][ T8599] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.586070][ T8599] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 237.597908][ T8599] BTRFS info (device loop2): using free space tree [ 237.691948][ T8605] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 238.034741][ T4249] ocfs2: Unmounting device (7,3) on (node local) [ 238.041342][ T8599] BTRFS info (device loop2): enabling ssd optimizations [ 238.061136][ T8616] loop4: detected capacity change from 0 to 32768 [ 238.087945][ T8616] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1452 (8616) [ 238.110708][ T8649] loop5: detected capacity change from 0 to 256 [ 238.117826][ T8649] exfat: Deprecated parameter 'utf8' [ 238.143696][ T4344] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4344) [ 238.181917][ T8649] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 238.551445][ T75] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 238.562896][ T4248] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.997654][ T8663] loop5: detected capacity change from 0 to 4096 [ 239.105320][ T8667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.165587][ T8666] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 239.401439][ T8675] loop0: detected capacity change from 0 to 736 [ 239.508991][ T8681] loop3: detected capacity change from 0 to 256 [ 239.533341][ T8675] rock: directory entry would overflow storage [ 239.534396][ T8681] FAT-fs (loop3): Unrecognized mount option "iocharset]Kf1\=macgaelic" or missing value [ 239.560090][ T8675] rock: sig=0x3b10, size=4, remaining=3 [ 239.658035][ T4296] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 239.666385][ T4328] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.805443][ T8688] sp0: Synchronizing with TNC [ 239.837621][ T8687] [U] [ 239.873489][ T4296] usb 5-1: Using ep0 maxpacket: 8 [ 239.888482][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.931835][ T4296] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.962566][ T4296] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 239.983960][ T4296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.010047][ T4296] usb 5-1: config 0 descriptor?? [ 240.439301][ T4296] logitech 0003:046D:C20E.001D: rdesc size test failed for formula gp [ 240.456808][ T4296] logitech 0003:046D:C20E.001D: unbalanced delimiter at end of report description [ 240.477097][ T4296] logitech 0003:046D:C20E.001D: parse failed [ 240.497007][ T4296] logitech: probe of 0003:046D:C20E.001D failed with error -22 [ 240.640385][ T8712] loop3: detected capacity change from 0 to 2048 [ 240.679220][ T4296] usb 5-1: USB disconnect, device number 12 [ 240.701986][ T8712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.978647][ T8724] loop2: detected capacity change from 0 to 256 [ 241.038668][ T8724] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 241.122701][ T4251] Bluetooth: hci2: link tx timeout [ 241.128977][ T4251] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.594104][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 241.594121][ T27] audit: type=1326 audit(1731375623.151:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 241.702513][ T27] audit: type=1326 audit(1731375623.181:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 241.740067][ T27] audit: type=1326 audit(1731375623.181:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 241.768421][ T27] audit: type=1326 audit(1731375623.181:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 241.821297][ T27] audit: type=1326 audit(1731375623.181:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8741 comm="syz.3.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bfc77e719 code=0x7ffc0000 [ 242.220314][ T8732] loop5: detected capacity change from 0 to 32768 [ 242.282525][ T8732] JBD2: Ignoring recovery information on journal [ 242.456628][ T8732] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 242.551921][ T8754] loop4: detected capacity change from 0 to 32768 [ 242.568624][ T8754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1504 (8754) [ 242.631907][ T8754] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.652364][ T4970] ocfs2: Unmounting device (7,5) on (node local) [ 242.696536][ T8746] loop2: detected capacity change from 0 to 40427 [ 242.705547][ T8754] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 242.749272][ T8746] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 242.756635][ T8754] BTRFS info (device loop4): using free space tree [ 242.764028][ T8746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 242.808645][ T8746] F2FS-fs (loop2): invalid crc value [ 242.881657][ T8746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 243.030234][ T8746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 243.051080][ T8746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.113341][ T8754] BTRFS info (device loop4): enabling ssd optimizations [ 243.124215][ T8756] loop3: detected capacity change from 0 to 32768 [ 243.131573][ T8756] XFS: attr2 mount option is deprecated. [ 243.137463][ T8756] XFS: noikeep mount option is deprecated. [ 243.170472][ T27] audit: type=1800 audit(1731375624.721:56): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1502" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 243.200639][ T8756] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 243.224017][ T4251] Bluetooth: hci2: command 0x0406 tx timeout [ 243.282754][ T8756] XFS (loop3): Quotacheck needed: Please wait. [ 243.361180][ T5164] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 243.415718][ T5164] XFS (loop3): Unmount and run xfs_repair [ 243.458169][ T5164] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 243.495048][ T5164] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 243.517737][ T4808] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 243.533366][ T5164] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 243.546455][ T5164] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 243.556650][ T5164] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 243.565931][ T5164] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 243.583372][ T5164] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 243.595110][ T5164] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 243.613261][ T5164] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 243.634109][ T33] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 243.666525][ T8800] loop5: detected capacity change from 0 to 64 [ 243.680271][ T4255] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 243.701959][ T33] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 243.740639][ T33] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 243.761334][ T27] audit: type=1800 audit(1731375625.311:57): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1513" name="bus" dev="loop5" ino=21 res=0 errno=0 [ 243.814672][ T8756] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 244.055011][ T8804] loop0: detected capacity change from 0 to 4096 [ 244.167491][ T8804] ntfs: volume version 3.1. [ 244.184468][ T4249] XFS (loop3): Unmounting Filesystem [ 244.341165][ T8804] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 244.381951][ T8804] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 244.437747][ T8804] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 244.893398][ T5173] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.908468][ T8822] loop2: detected capacity change from 0 to 512 [ 244.939095][ T8822] EXT4-fs (loop2): filesystem is read-only [ 244.946224][ T8822] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 244.967971][ T8822] EXT4-fs (loop2): filesystem is read-only [ 244.979191][ T8822] EXT4-fs (loop2): orphan cleanup on readonly fs [ 244.994705][ T8822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1524: bg 0: block 64: padding at end of block bitmap is not set [ 245.001782][ T8822] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 245.002866][ T8822] EXT4-fs (loop2): 1 orphan inode deleted [ 245.002902][ T8822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 245.055689][ T4248] EXT4-fs (loop2): unmounting filesystem. [ 245.115924][ T5173] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 245.115960][ T5173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.117893][ T5173] usb 5-1: config 0 descriptor?? [ 245.121297][ T5173] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 245.203379][ T4294] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 245.428692][ T4294] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 245.453334][ T4294] usb 4-1: config 0 has no interface number 0 [ 245.485493][ T4294] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 245.506782][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.515732][ T4294] usb 4-1: Product: syz [ 245.520117][ T4294] usb 4-1: Manufacturer: syz [ 245.526280][ T4294] usb 4-1: SerialNumber: syz [ 245.534649][ T4294] usb 4-1: config 0 descriptor?? [ 245.733364][ T5173] gspca_sunplus: reg_w_riv err -71 [ 245.741159][ T5173] sunplus: probe of 5-1:0.0 failed with error -71 [ 245.773627][ T5173] usb 5-1: USB disconnect, device number 13 [ 245.908392][ T8838] loop2: detected capacity change from 0 to 32768 [ 245.965638][ T8838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 246.110516][ T4294] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 246.132680][ T4294] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 246.141061][ T4294] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 246.159202][ T4294] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 246.168295][ T4294] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 246.204153][ T4248] ocfs2: Unmounting device (7,2) on (node local) [ 246.385023][ T4575] usb 4-1: USB disconnect, device number 12 [ 246.401079][ T4575] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 246.422921][ T4575] keyspan 4-1:0.133: device disconnected [ 246.646866][ T8862] loop4: detected capacity change from 0 to 1024 [ 246.765596][ T8849] loop5: detected capacity change from 0 to 32768 [ 246.788451][ T8862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.798061][ T8849] XFS: ikeep mount option is deprecated. [ 246.911788][ T8849] XFS (loop5): Mounting V5 Filesystem [ 247.013298][ T8849] XFS (loop5): Ending clean mount [ 247.021795][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 247.038572][ T8849] XFS (loop5): Quotacheck needed: Please wait. [ 247.060954][ T8875] loop2: detected capacity change from 0 to 4096 [ 247.120889][ T8875] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 247.196819][ T8849] XFS (loop5): Quotacheck: Done. [ 247.301827][ T8875] ntfs3: loop2: ino=21, "bus" fallocate(0x11) is not supported [ 247.377162][ T4970] XFS (loop5): Unmounting Filesystem [ 247.480591][ T8885] loop4: detected capacity change from 0 to 4096 [ 247.607559][ T8885] __ntfs_error: 1 callbacks suppressed [ 247.607577][ T8885] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 247.626074][ T8885] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 247.686186][ T8885] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 247.734618][ T8885] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 247.795808][ T8885] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 247.813905][ T8885] ntfs: volume version 3.1. [ 247.833871][ T8885] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 247.883664][ T8885] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 247.924067][ T8885] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 247.984104][ T8885] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 248.064053][ T8885] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 248.311682][ T8897] loop2: detected capacity change from 0 to 8192 [ 248.369131][ T8897] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 248.390180][ T8897] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 248.402705][ T8897] REISERFS (device loop2): using ordered data mode [ 248.415445][ T8897] reiserfs: using flush barriers [ 248.436267][ T8897] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 248.453212][ T8897] REISERFS (device loop2): checking transaction log (loop2) [ 248.468703][ T8897] REISERFS (device loop2): Using r5 hash to sort names [ 248.476934][ T8897] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 248.493308][ T8897] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 248.586102][ T8897] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 248.605758][ T8916] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.658433][ T8918] loop5: detected capacity change from 0 to 1024 [ 248.666843][ T8897] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 248.703061][ T8918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.728841][ T8918] EXT4-fs: Ignoring removed oldalloc option [ 248.743055][ T8897] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 248.809842][ T8918] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 249.037142][ T8935] loop3: detected capacity change from 0 to 128 [ 249.077212][ T8935] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 249.088987][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 249.098224][ T8935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.123935][ T8928] loop4: detected capacity change from 0 to 4096 [ 249.167253][ T8928] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 249.342241][ T8939] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 249.450638][ T8939] CIFS: Unable to determine destination address [ 250.027697][ T8960] loop5: detected capacity change from 0 to 4096 [ 250.093498][ T8960] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 250.123564][ T8960] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 4096) [ 250.177866][ T8971] random: crng reseeded on system resumption [ 250.200763][ T8973] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.251796][ T8974] loop3: detected capacity change from 0 to 16 [ 250.274758][ T8974] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 250.328087][ T8974] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 250.386874][ T8974] erofs: (device loop3): mounted with root inode @ nid 36. [ 250.850757][ T8963] loop4: detected capacity change from 0 to 32768 [ 251.185655][ T8992] loop5: detected capacity change from 0 to 1024 [ 251.218397][ T8992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.262234][ T8992] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 251.496363][ T4970] EXT4-fs (loop5): unmounting filesystem. [ 251.674386][ T8980] loop0: detected capacity change from 0 to 32768 [ 251.732554][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1599'. [ 251.795304][ T8980] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 251.795304][ T8980] [ 252.071177][ T9018] loop2: detected capacity change from 0 to 64 [ 252.162418][ T9018] [ 252.164807][ T9018] ====================================================== [ 252.171846][ T9018] WARNING: possible circular locking dependency detected [ 252.178894][ T9018] 6.1.116-syzkaller #0 Not tainted [ 252.184025][ T9018] ------------------------------------------------------ [ 252.191072][ T9018] syz.2.1606/9018 is trying to acquire lock: [ 252.197078][ T9018] ffff88802985c878 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440 [ 252.207928][ T9018] [ 252.207928][ T9018] but task is already holding lock: [ 252.215316][ T9018] ffff888075a100b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0 [ 252.224874][ T9018] [ 252.224874][ T9018] which lock already depends on the new lock. [ 252.224874][ T9018] [ 252.235299][ T9018] [ 252.235299][ T9018] the existing dependency chain (in reverse order) is: [ 252.244331][ T9018] [ 252.244331][ T9018] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 252.252436][ T9018] lock_acquire+0x1f8/0x5a0 [ 252.257480][ T9018] __mutex_lock+0x132/0xd80 [ 252.262516][ T9018] hfs_find_init+0x16a/0x1e0 [ 252.267640][ T9018] hfs_get_block+0x4f0/0xb60 [ 252.272782][ T9018] block_read_full_folio+0x403/0xf60 [ 252.278616][ T9018] filemap_read_folio+0x199/0x780 [ 252.284162][ T9018] do_read_cache_folio+0x2ee/0x810 [ 252.289795][ T9018] do_read_cache_page+0x32/0x220 [ 252.295256][ T9018] __hfs_bnode_create+0x4b5/0x7b0 [ 252.300801][ T9018] hfs_bnode_find+0x240/0xf50 [ 252.306030][ T9018] hfs_brec_find+0x179/0x570 [ 252.311144][ T9018] hfs_brec_read+0x20/0x100 [ 252.316175][ T9018] hfs_cat_find_brec+0x151/0x470 [ 252.321654][ T9018] hfs_fill_super+0x10c1/0x1730 [ 252.327046][ T9018] mount_bdev+0x2c9/0x3f0 [ 252.331912][ T9018] legacy_get_tree+0xeb/0x180 [ 252.337126][ T9018] vfs_get_tree+0x88/0x270 [ 252.342077][ T9018] do_new_mount+0x2ba/0xb40 [ 252.347112][ T9018] __se_sys_mount+0x2d5/0x3c0 [ 252.352321][ T9018] do_syscall_64+0x3b/0xb0 [ 252.357259][ T9018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.363683][ T9018] [ 252.363683][ T9018] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 252.372897][ T9018] validate_chain+0x1661/0x5950 [ 252.378271][ T9018] __lock_acquire+0x125b/0x1f80 [ 252.383662][ T9018] lock_acquire+0x1f8/0x5a0 [ 252.388703][ T9018] __mutex_lock+0x132/0xd80 [ 252.393730][ T9018] hfs_extend_file+0xfb/0x1440 [ 252.399051][ T9018] hfs_bmap_reserve+0xd5/0x3f0 [ 252.404336][ T9018] __hfs_ext_write_extent+0x22e/0x4f0 [ 252.410231][ T9018] __hfs_ext_cache_extent+0x6a/0x990 [ 252.416042][ T9018] hfs_extend_file+0x340/0x1440 [ 252.421422][ T9018] hfs_get_block+0x3e0/0xb60 [ 252.426535][ T9018] __block_write_begin_int+0x544/0x1a30 [ 252.432620][ T9018] block_write_begin+0x98/0x1f0 [ 252.437998][ T9018] cont_write_begin+0x63f/0x880 [ 252.443372][ T9018] hfs_write_begin+0x86/0xd0 [ 252.448528][ T9018] cont_write_begin+0x312/0x880 [ 252.453959][ T9018] hfs_write_begin+0x86/0xd0 [ 252.459100][ T9018] hfs_file_truncate+0x1e9/0xa10 [ 252.464591][ T9018] hfs_inode_setattr+0x45d/0x6a0 [ 252.470066][ T9018] notify_change+0xce3/0xfc0 [ 252.475187][ T9018] do_truncate+0x21c/0x300 [ 252.480155][ T9018] do_sys_ftruncate+0x2e2/0x380 [ 252.485559][ T9018] do_syscall_64+0x3b/0xb0 [ 252.490526][ T9018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.496962][ T9018] [ 252.496962][ T9018] other info that might help us debug this: [ 252.496962][ T9018] [ 252.507205][ T9018] Possible unsafe locking scenario: [ 252.507205][ T9018] [ 252.514664][ T9018] CPU0 CPU1 [ 252.520039][ T9018] ---- ---- [ 252.525456][ T9018] lock(&tree->tree_lock#2/1); [ 252.530334][ T9018] lock(&HFS_I(tree->inode)->extents_lock); [ 252.538852][ T9018] lock(&tree->tree_lock#2/1); [ 252.546244][ T9018] lock(&HFS_I(tree->inode)->extents_lock); [ 252.552229][ T9018] [ 252.552229][ T9018] *** DEADLOCK *** [ 252.552229][ T9018] [ 252.560385][ T9018] 4 locks held by syz.2.1606/9018: [ 252.565502][ T9018] #0: ffff888051db2460 (sb_writers#28){.+.+}-{0:0}, at: do_sys_ftruncate+0x251/0x380 [ 252.575201][ T9018] #1: ffff88802985b6a8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 252.585632][ T9018] #2: ffff88802985b4f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440 [ 252.596346][ T9018] #3: ffff888075a100b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0 [ 252.606309][ T9018] [ 252.606309][ T9018] stack backtrace: [ 252.612207][ T9018] CPU: 1 PID: 9018 Comm: syz.2.1606 Not tainted 6.1.116-syzkaller #0 [ 252.620272][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.630337][ T9018] Call Trace: [ 252.633633][ T9018] [ 252.636574][ T9018] dump_stack_lvl+0x1e3/0x2cb [ 252.641258][ T9018] ? nf_tcp_handle_invalid+0x642/0x642 [ 252.646727][ T9018] ? print_circular_bug+0x12b/0x1a0 [ 252.651961][ T9018] check_noncircular+0x2fa/0x3b0 [ 252.656913][ T9018] ? add_chain_block+0x850/0x850 [ 252.661854][ T9018] ? lockdep_lock+0x11f/0x2a0 [ 252.666566][ T9018] ? _find_first_zero_bit+0xd0/0x100 [ 252.671877][ T9018] validate_chain+0x1661/0x5950 [ 252.676737][ T9018] ? is_bpf_text_address+0x289/0x2a0 [ 252.682030][ T9018] ? is_bpf_text_address+0x22/0x2a0 [ 252.687245][ T9018] ? reacquire_held_locks+0x660/0x660 [ 252.692625][ T9018] ? stack_trace_save+0x113/0x1c0 [ 252.697664][ T9018] ? stack_trace_snprint+0xe0/0xe0 [ 252.702789][ T9018] ? check_noncircular+0x1e3/0x3b0 [ 252.707926][ T9018] ? look_up_lock_class+0x77/0x140 [ 252.713065][ T9018] ? register_lock_class+0x100/0x990 [ 252.718365][ T9018] ? lockdep_unlock+0x165/0x300 [ 252.723231][ T9018] ? is_dynamic_key+0x260/0x260 [ 252.728095][ T9018] ? mark_lock+0x9a/0x340 [ 252.732458][ T9018] __lock_acquire+0x125b/0x1f80 [ 252.737345][ T9018] lock_acquire+0x1f8/0x5a0 [ 252.741871][ T9018] ? hfs_extend_file+0xfb/0x1440 [ 252.746860][ T9018] ? read_lock_is_recursive+0x10/0x10 [ 252.752250][ T9018] ? __might_sleep+0xb0/0xb0 [ 252.756850][ T9018] ? register_lock_class+0x100/0x990 [ 252.762151][ T9018] __mutex_lock+0x132/0xd80 [ 252.766661][ T9018] ? hfs_extend_file+0xfb/0x1440 [ 252.771608][ T9018] ? mark_lock+0x9a/0x340 [ 252.775952][ T9018] ? hfs_extend_file+0xfb/0x1440 [ 252.780898][ T9018] ? mutex_lock_nested+0x10/0x10 [ 252.785848][ T9018] hfs_extend_file+0xfb/0x1440 [ 252.790622][ T9018] ? hfs_get_block+0xb60/0xb60 [ 252.795389][ T9018] ? __mutex_trylock_common+0x17e/0x2e0 [ 252.800940][ T9018] ? __might_sleep+0xb0/0xb0 [ 252.805536][ T9018] ? trace_raw_output_contention_end+0xd0/0xd0 [ 252.811700][ T9018] ? rcu_is_watching+0x11/0xb0 [ 252.816467][ T9018] ? trace_contention_end+0x61/0x170 [ 252.821760][ T9018] ? hfs_brec_find+0x193/0x570 [ 252.826540][ T9018] hfs_bmap_reserve+0xd5/0x3f0 [ 252.831341][ T9018] __hfs_ext_write_extent+0x22e/0x4f0 [ 252.836742][ T9018] __hfs_ext_cache_extent+0x6a/0x990 [ 252.842031][ T9018] ? hfs_find_init+0x16a/0x1e0 [ 252.846801][ T9018] hfs_extend_file+0x340/0x1440 [ 252.851661][ T9018] ? filemap_get_folios+0x1bc/0x970 [ 252.856866][ T9018] ? hfs_get_block+0xb60/0xb60 [ 252.861636][ T9018] ? find_lock_entries+0xda0/0xda0 [ 252.866752][ T9018] ? clean_bdev_aliases+0x7f1/0x910 [ 252.871952][ T9018] hfs_get_block+0x3e0/0xb60 [ 252.876552][ T9018] ? hfs_free_extents+0x420/0x420 [ 252.881591][ T9018] ? create_page_buffers+0x24e/0x4b0 [ 252.886884][ T9018] __block_write_begin_int+0x544/0x1a30 [ 252.892443][ T9018] ? hfs_free_extents+0x420/0x420 [ 252.897473][ T9018] ? page_zero_new_buffers+0x650/0x650 [ 252.902969][ T9018] ? PageHeadHuge+0x8e/0x1c0 [ 252.907571][ T9018] ? hfs_free_extents+0x420/0x420 [ 252.912600][ T9018] block_write_begin+0x98/0x1f0 [ 252.917456][ T9018] ? cont_write_begin+0x622/0x880 [ 252.922489][ T9018] cont_write_begin+0x63f/0x880 [ 252.927350][ T9018] ? generic_cont_expand_simple+0x2a0/0x2a0 [ 252.933251][ T9018] ? __block_commit_write+0x2d6/0x400 [ 252.938625][ T9018] ? put_page+0xe0/0x250 [ 252.942871][ T9018] hfs_write_begin+0x86/0xd0 [ 252.947468][ T9018] ? hfs_free_extents+0x420/0x420 [ 252.952498][ T9018] cont_write_begin+0x312/0x880 [ 252.957355][ T9018] ? generic_cont_expand_simple+0x2a0/0x2a0 [ 252.963255][ T9018] ? memset+0x1f/0x40 [ 252.967241][ T9018] hfs_write_begin+0x86/0xd0 [ 252.971832][ T9018] ? hfs_free_extents+0x420/0x420 [ 252.976863][ T9018] hfs_file_truncate+0x1e9/0xa10 [ 252.981809][ T9018] ? __lock_acquire+0x1f80/0x1f80 [ 252.986851][ T9018] ? up_read+0x20/0x20 [ 252.990941][ T9018] ? hfs_extend_file+0x1440/0x1440 [ 252.996061][ T9018] ? unmap_mapping_range+0xf4/0x280 [ 253.001268][ T9018] ? unmap_mapping_pages+0x180/0x180 [ 253.006560][ T9018] ? pagecache_isize_extended+0x1c1/0x540 [ 253.012285][ T9018] ? truncate_setsize+0xcb/0xf0 [ 253.017142][ T9018] hfs_inode_setattr+0x45d/0x6a0 [ 253.022086][ T9018] ? bpf_lsm_inode_setattr+0x5/0x10 [ 253.027287][ T9018] ? hfs_evict_inode+0x100/0x100 [ 253.032236][ T9018] notify_change+0xce3/0xfc0 [ 253.036831][ T9018] do_truncate+0x21c/0x300 [ 253.041258][ T9018] ? put_page_bootmem+0x2e0/0x2e0 [ 253.046303][ T9018] ? bpf_lsm_path_truncate+0x5/0x10 [ 253.051504][ T9018] do_sys_ftruncate+0x2e2/0x380 [ 253.056365][ T9018] do_syscall_64+0x3b/0xb0 [ 253.060783][ T9018] ? clear_bhb_loop+0x45/0xa0 [ 253.065475][ T9018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.071396][ T9018] RIP: 0033:0x7f5f3737e719 [ 253.075828][ T9018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.095447][ T9018] RSP: 002b:00007f5f381a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 253.103960][ T9018] RAX: ffffffffffffffda RBX: 00007f5f37535f80 RCX: 00007f5f3737e719 [ 253.111935][ T9018] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000004 [ 253.119910][ T9018] RBP: 00007f5f373f1616 R08: 0000000000000000 R09: 0000000000000000 [ 253.127887][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.135878][ T9018] R13: 0000000000000000 R14: 00007f5f37535f80 R15: 00007fff27145828 [ 253.143857][ T9018] [ 253.223376][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 253.266178][ T9002] loop3: detected capacity change from 0 to 32768 [ 253.285098][ T9002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1598 (9002) [ 253.321814][ T9002] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.347409][ T9002] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 253.372522][ T9002] BTRFS info (device loop3): using free space tree [ 253.418058][ T9002] BTRFS info (device loop3): enabling ssd optimizations [ 253.454286][ T4249] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 255.624946][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631359][ T1275] ieee802154 phy1 wpan1: encryption failed: -22