last executing test programs: 1m3.310081318s ago: executing program 3 (id=761): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000"], 0x1, 0x1a4, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 1m3.073190581s ago: executing program 3 (id=763): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000040)='./file0\x00', 0x4000000, &(0x7f0000000340)={[{@grpid}, {@usrquota}, {@noquota}, {@nodiscard}, {@dax}, {@bsdgroups}, {@sysvgroups}, {@grpquota}, {@sysvgroups}]}, 0x1, 0x9834, &(0x7f000001c740)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1m1.418603882s ago: executing program 3 (id=782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x3fc, 0x1, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000000640)="182f927a", 0x4, 0x4050, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 1m0.813126584s ago: executing program 3 (id=786): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m0.188059382s ago: executing program 3 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) 59.452042018s ago: executing program 3 (id=793): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffd) 59.029359214s ago: executing program 32 (id=793): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xfffffffd) 4.492162655s ago: executing program 5 (id=1246): unshare(0x4000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x1) 4.325580941s ago: executing program 4 (id=1249): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0xfc, 0x8, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "6eb14940"}]}}, 0x0}, 0x0) 4.276574041s ago: executing program 5 (id=1251): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.107816681s ago: executing program 2 (id=1254): mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0xb000)=nil, 0xb000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 3.800454283s ago: executing program 5 (id=1258): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a00"], 0x24}}, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="efce", 0x3f7}], 0x10000000000001ba) 3.784622252s ago: executing program 2 (id=1259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x44, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffdf5}, {0x6}}]}, 0x44}}, 0x0) 3.527022543s ago: executing program 0 (id=1262): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x4, @mcast2, 0x20}, 0x1c) sendmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x28, 0x29, 0x2, "4e6db14d81574cd436de3eebb6f5eca3ca"}], 0x28}}], 0x1, 0x0) 3.474825055s ago: executing program 5 (id=1263): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x6c, 0x36, 0x61, 0x63, 0x2025cf5cdc719684, 0x4, 0x5b, 0x36, 0x32, 0x64, 0x30, 0x65, 0x37, 0x61, 0x37, 0x61]}, &(0x7f0000000100)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000840)={@id, 0x0, r1}) 3.360229347s ago: executing program 2 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x331, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 3.167803918s ago: executing program 0 (id=1268): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@hci={0x1f, 0xc, 0x1}, 0x80, 0x0}, 0x0) 3.138707515s ago: executing program 2 (id=1269): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 2.827678094s ago: executing program 0 (id=1270): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2.713308273s ago: executing program 5 (id=1271): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0xf, 0x55, {0x55, 0xf, "2b044efce67b44783bb6710ef99d8f51861a8145d960a7f1a579df2d12a28a94eed32513b52181e054c096edf871190e78a3393a8d99ad77852527d4fc6c8a2065b80a7929738f041978f4b5cf699eb4ed5ae5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.409188839s ago: executing program 0 (id=1273): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={@mcast1, 0xffffff7e, r1}) 2.312115143s ago: executing program 0 (id=1274): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r0, &(0x7f00000003c0)='./file0\x00', 0x200) 2.10522056s ago: executing program 4 (id=1277): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x48000, @empty}, 0x1c) shutdown(r0, 0x1) 1.956109447s ago: executing program 4 (id=1278): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x4}}) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 1.955623048s ago: executing program 1 (id=1279): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 1.947385026s ago: executing program 0 (id=1280): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), &(0x7f0000000100)=ANY=[], 0xa6, 0x1) setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@md5={0x1, "949ec4935030138562af68761b7ef4f7"}, 0x3a, 0x2) 1.772079818s ago: executing program 2 (id=1282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000800005000100070000000900020073797a31000000000500050002000000050004000000000011000300686173683a6970"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0xffffffffffffffe6, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.716129887s ago: executing program 4 (id=1283): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) 1.705182219s ago: executing program 2 (id=1284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.574060887s ago: executing program 1 (id=1285): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x1ac}, 0x8) 1.405058779s ago: executing program 1 (id=1287): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x100}, 0x1c) 1.214883127s ago: executing program 1 (id=1289): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbf8400000000000007040000f0ffffffb70200000800fff818230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 962.512856ms ago: executing program 6 (id=1291): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="044508a0", 0x4) 935.014212ms ago: executing program 1 (id=1292): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 768.099353ms ago: executing program 6 (id=1293): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) 719.696868ms ago: executing program 4 (id=1294): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x3c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x1a, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x0, 0x9a, 0x1}]}, 0x81}, 0x1, 0x0, 0x0, 0x4000801}, 0x24000000) 708.627473ms ago: executing program 1 (id=1295): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x21, 0x551f, &(0x7f000000af80)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x2000000, 0xfc9, 0x2, 0x0, 0x0, 0x0, 0x2401}) 587.315666ms ago: executing program 6 (id=1296): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000100)='./file0\x00', 0x4041, 0x0) fcntl$setsig(r0, 0xa, 0x21) 404.016032ms ago: executing program 4 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 403.707616ms ago: executing program 6 (id=1298): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @rand_addr=0x64010101}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 355.885011ms ago: executing program 5 (id=1299): syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000240)={[{@discard}, {@discard_size={'discard', 0x3d, 0x20001}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x23, 0x61c3, &(0x7f000000c9c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4) 320.042663ms ago: executing program 6 (id=1300): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 6 (id=1301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x10129, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): .4.503: dx entry: limit 0 != root limit 125 [ 146.812184][ T3069] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.816498][ T7301] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 146.848012][ T3069] usb 2-1: config 0 descriptor?? [ 146.851701][ T7305] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.503: Corrupt directory, running e2fsck is recommended [ 146.881470][ T7301] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.899959][ T7305] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.503: path /100/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 146.954436][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.127380][ T7293] loop5: detected capacity change from 0 to 32768 [ 147.136948][ T7293] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.498 (7293) [ 147.186774][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.241520][ T7293] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.328916][ T7293] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 147.340898][ T7301] XFS (loop3): Ending clean mount [ 147.347464][ T3069] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 147.360930][ T7301] XFS (loop3): Quotacheck needed: Please wait. [ 147.371707][ T7293] BTRFS info (device loop5): using free-space-tree [ 147.407261][ T3069] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 147.466867][ T7301] XFS (loop3): Quotacheck: Done. [ 147.532432][ T3069] microsoft 0003:045E:07DA.0007: no inputs found [ 147.538902][ T3069] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 147.644048][ T3069] usb 2-1: USB disconnect, device number 4 [ 147.882206][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.405711][ T5832] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.838194][ T7358] loop3: detected capacity change from 0 to 164 [ 148.942674][ T7358] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 148.981780][ T3069] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.173237][ T3069] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 149.181944][ T3069] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.220873][ T3069] usb 5-1: config 0 has no interface number 0 [ 149.228047][ T7348] loop2: detected capacity change from 0 to 32768 [ 149.235986][ T3069] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 149.300673][ T3069] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.321359][ T7348] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.512 (7348) [ 149.431094][ T7348] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.442065][ T7348] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 149.455504][ T7348] BTRFS info (device loop2): using free-space-tree [ 149.464528][ T3069] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 149.474155][ T3069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.482332][ T3069] usb 5-1: Product: syz [ 149.486623][ T3069] usb 5-1: Manufacturer: syz [ 149.491315][ T3069] usb 5-1: SerialNumber: syz [ 149.520929][ T3069] usb 5-1: config 0 descriptor?? [ 149.845985][ T7351] loop0: detected capacity change from 0 to 32768 [ 149.866831][ T7351] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got should be [ 150.066897][ T7351] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,version_upgrade=none [ 150.081890][ T7351] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 150.091966][ T7351] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 150.091966][ T7351] rw journal devs: [ 150.141319][ T7399] capability: warning: `syz.3.525' uses 32-bit capabilities (legacy support in use) [ 150.158244][ T7351] bcachefs (loop0): accounting_read... done [ 150.218003][ T7351] bcachefs (loop0): alloc_read... done [ 150.237064][ T5899] usb 5-1: USB disconnect, device number 3 [ 150.261248][ T7351] bcachefs (loop0): stripes_read... done [ 150.268075][ T7351] bcachefs (loop0): snapshots_read... done [ 150.327948][ T7351] bcachefs (loop0): journal_replay... done [ 150.355359][ T5833] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.379419][ T7351] bcachefs (loop0): resume_logged_ops... done [ 150.401274][ T7351] bcachefs (loop0): delete_dead_inodes... done [ 150.453169][ T7351] bcachefs (loop0): going read-write [ 150.494002][ T7351] bcachefs (loop0): done starting filesystem [ 150.511573][ T7408] bcachefs (loop0 inum 4099 offset 0): __bch2_write(): move error: insufficient_devices [ 150.536342][ T7408] bcachefs (loop0 inum 536870913 offset 0): __bch2_write(): move error: insufficient_devices [ 150.650371][ T7406] loop1: detected capacity change from 0 to 4096 [ 150.756951][ T7406] ntfs3(loop1): It is recommened to use chkdsk. [ 150.837764][ T5834] bcachefs (loop0): shutting down [ 150.843744][ T5834] bcachefs (loop0): going read-only [ 150.848997][ T5834] bcachefs (loop0): finished waiting for writes to stop [ 150.873540][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 150.898906][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 150.941351][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 150.949311][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 150.966291][ T7417] loop4: detected capacity change from 0 to 736 [ 151.020969][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 151.029071][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 151.037095][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 151.045414][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 151.053491][ T7406] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 151.096437][ T7421] netlink: 268 bytes leftover after parsing attributes in process `syz.2.533'. [ 151.233059][ T7409] loop5: detected capacity change from 0 to 32768 [ 151.254308][ T7409] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.527 (7409) [ 151.275573][ T7409] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 151.306682][ T7409] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 151.331484][ T7409] BTRFS info (device loop5): using free-space-tree [ 151.354374][ T5834] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 151.364420][ T5834] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 151.404038][ T5834] bcachefs (loop0): shutdown complete, journal seq 10 [ 151.421784][ T5834] bcachefs (loop0): marking filesystem clean [ 151.658544][ T7441] loop1: detected capacity change from 0 to 256 [ 151.672055][ T7441] FAT-fs (loop1): Directory bread(block 1285) failed [ 151.713812][ T5834] bcachefs (loop0): shutdown complete [ 151.765393][ T7441] FAT-fs (loop1): Directory bread(block 1286) failed [ 151.793695][ T7441] FAT-fs (loop1): Directory bread(block 1287) failed [ 151.800631][ T7441] FAT-fs (loop1): Directory bread(block 1288) failed [ 151.875191][ T7409] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 151.885134][ T7441] FAT-fs (loop1): Directory bread(block 1289) failed [ 151.901425][ T7441] FAT-fs (loop1): Directory bread(block 1290) failed [ 151.924421][ T7441] FAT-fs (loop1): Directory bread(block 1291) failed [ 151.968433][ T7441] FAT-fs (loop1): Directory bread(block 1292) failed [ 151.992874][ T7441] FAT-fs (loop1): Directory bread(block 1293) failed [ 152.036165][ T7441] FAT-fs (loop1): Directory bread(block 1294) failed [ 152.155950][ T5832] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 152.581779][ T7457] loop2: detected capacity change from 0 to 256 [ 152.664427][ T7455] loop4: detected capacity change from 0 to 2048 [ 152.718066][ T7459] loop3: detected capacity change from 0 to 512 [ 152.729698][ T7455] EXT4-fs: Ignoring removed orlov option [ 152.783204][ T7457] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x1380c30a, utbl_chksum : 0xe619d30d) [ 152.812151][ T7455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.960384][ T7455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.009936][ T7459] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.545: invalid indirect mapped block 256 (level 2) [ 153.065193][ T7459] EXT4-fs (loop3): 2 truncates cleaned up [ 153.097149][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.262503][ T7475] nbd: must specify a device to reconfigure [ 153.318567][ T7472] loop5: detected capacity change from 0 to 4096 [ 153.353109][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.390230][ T7477] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.606147][ T7482] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.552'. [ 153.615595][ T7482] openvswitch: netlink: Unknown key attributes 20 [ 153.862615][ T7487] loop3: detected capacity change from 0 to 2048 [ 153.931445][ T3069] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.948540][ T7490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.981367][ T7487] NILFS (loop3): unable to set label with more than 80 bytes [ 154.131271][ T3069] usb 5-1: Using ep0 maxpacket: 16 [ 154.191608][ T3069] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.202846][ T3069] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.209524][ T3069] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 154.261252][ T3069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.320955][ T3069] usb 5-1: config 0 descriptor?? [ 154.531902][ T7492] loop3: detected capacity change from 0 to 4096 [ 154.555548][ T7479] loop1: detected capacity change from 0 to 32768 [ 154.600894][ T7479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.553 (7479) [ 154.708153][ T7483] loop2: detected capacity change from 0 to 32768 [ 154.767677][ T7479] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.781483][ T7483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.551 (7483) [ 154.810693][ T7479] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 154.926478][ T3069] hid (null): usage index exceeded [ 154.936281][ T3069] lg-g15 0003:046D:C222.0008: unknown main item tag 0x6 [ 154.943354][ T3069] lg-g15 0003:046D:C222.0008: ignoring exceeding usage max [ 154.952656][ T3069] lg-g15 0003:046D:C222.0008: ignoring exceeding usage max [ 154.959902][ T3069] lg-g15 0003:046D:C222.0008: usage index exceeded [ 154.966843][ T3069] lg-g15 0003:046D:C222.0008: item 0 0 2 2 parsing failed [ 154.975254][ T3069] lg-g15 0003:046D:C222.0008: probe with driver lg-g15 failed with error -22 [ 155.008146][ T7483] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.011683][ T7479] BTRFS info (device loop1): using free-space-tree [ 155.061627][ T7483] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 155.134096][ T7489] loop5: detected capacity change from 0 to 32768 [ 155.141354][ T3069] usb 5-1: USB disconnect, device number 4 [ 155.147680][ T7489] btrfs: Deprecated parameter 'usebackuproot' [ 155.154148][ T7489] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.186111][ T7489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.555 (7489) [ 155.244038][ T7492] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 155.272791][ T7492] ntfs3(loop3): Failed to load $Extend (-22). [ 155.278979][ T7492] ntfs3(loop3): Failed to initialize $Extend. [ 155.303942][ T7489] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.333489][ T7489] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 155.453918][ T7468] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 155.568590][ T7479] BTRFS info (device loop1): rebuilding free space tree [ 155.581589][ T7483] BTRFS info (device loop2): rebuilding free space tree [ 155.732295][ T7489] BTRFS info (device loop5): rebuilding free space tree [ 155.751092][ T7483] BTRFS info (device loop2): disabling free space tree [ 155.758247][ T7483] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.778161][ T7483] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.907237][ T7489] BTRFS info (device loop5): disabling free space tree [ 155.971869][ T7489] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.041414][ T7483] BTRFS info (device loop2 state M): max_inline set to 4096 [ 156.061396][ T7489] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.107098][ T5830] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.292784][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.497394][ T5832] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.564714][ T7557] loop3: detected capacity change from 0 to 32768 [ 156.602701][ T7557] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.563 (7557) [ 156.706634][ T7557] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.803481][ T7557] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 156.861479][ T7557] BTRFS info (device loop3): using free-space-tree [ 157.090192][ T7549] loop0: detected capacity change from 0 to 40427 [ 157.158185][ T7549] F2FS-fs (loop0): invalid crc value [ 157.223045][ T7549] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.338190][ T7557] BTRFS info (device loop3): rebuilding free space tree [ 157.602291][ T7599] mmap: syz.2.574 (7599) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.786974][ T5842] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.031418][ T7549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.141758][ T7607] loop1: detected capacity change from 0 to 4096 [ 158.152339][ T7607] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 158.177884][ T29] audit: type=1800 audit(1734465805.022:21): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.561" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 158.338734][ T5834] syz-executor: attempt to access beyond end of device [ 158.338734][ T5834] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.351755][ T7607] ntfs3(loop1): ino=1e, "file1" no data attribute [ 158.388405][ T7614] loop5: detected capacity change from 0 to 512 [ 158.389348][ T7607] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 158.411278][ T5834] F2FS-fs (loop0): Remounting filesystem read-only [ 158.419289][ T7607] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 158.521110][ T7614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 158.579637][ T7614] System zones: 0-2, 18-18, 34-34 [ 158.657051][ T7614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.581: bg 0: block 248: padding at end of block bitmap is not set [ 158.698707][ T7614] Quota error (device loop5): write_blk: dquota write failed [ 158.711656][ T12] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 158.795566][ T7614] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 158.847155][ T7614] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.581: Failed to acquire dquot type 1 [ 158.944953][ T7614] EXT4-fs (loop5): 1 truncate cleaned up [ 158.967244][ T7629] loop2: detected capacity change from 0 to 512 [ 158.967610][ T7614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.998671][ T7614] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.171455][ T7629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.201364][ T7629] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.346936][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.399077][ T7638] loop1: detected capacity change from 0 to 4096 [ 159.420723][ T7629] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 159.496382][ T7638] NILFS (loop1): invalid segment: Checksum error in segment payload [ 159.521463][ T7638] NILFS (loop1): trying rollback from an earlier position [ 159.573628][ T7638] NILFS (loop1): recovery complete [ 159.595265][ T7648] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.613345][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.651445][ T873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.743363][ T29] audit: type=1800 audit(1734465806.592:22): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.590" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 159.833208][ T873] usb 5-1: Using ep0 maxpacket: 16 [ 159.893082][ T873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.922354][ T873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.936811][ T7656] loop2: detected capacity change from 0 to 1024 [ 159.960339][ T873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.988860][ T7656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.051637][ T873] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.056389][ T7664] loop1: detected capacity change from 0 to 64 [ 160.080642][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.599'. [ 160.099304][ T873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.148367][ T7656] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.164390][ T7656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.218696][ T873] usb 5-1: config 0 descriptor?? [ 160.263295][ T7656] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 160.273468][ T7656] EXT4-fs (loop2): can't enable nombcache during remount [ 160.357560][ T7670] loop3: detected capacity change from 0 to 256 [ 160.423347][ T7670] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 160.477388][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.663596][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.670889][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.682471][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.689760][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.718489][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.735997][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.781504][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.788798][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.879555][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.910805][ T873] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 160.980647][ T873] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input10 [ 161.054895][ T873] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 161.108739][ T873] usb 5-1: USB disconnect, device number 5 [ 161.244545][ T7668] loop5: detected capacity change from 0 to 32768 [ 161.313413][ T7668] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 161.467246][ T7668] XFS (loop5): Ending clean mount [ 161.541362][ T7698] loop3: detected capacity change from 0 to 256 [ 161.548780][ T7698] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.694752][ T5832] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 162.042997][ T29] audit: type=1326 audit(1734465808.882:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.5.616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabfeb85d29 code=0x0 [ 162.202051][ T873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.361347][ T873] usb 4-1: Using ep0 maxpacket: 8 [ 162.368871][ T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.384733][ T873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.417188][ T873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.474806][ T7696] loop1: detected capacity change from 0 to 40427 [ 162.477239][ T873] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 162.492869][ T873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.505025][ T873] usb 4-1: config 0 descriptor?? [ 162.539380][ T7696] F2FS-fs (loop1): invalid crc value [ 162.566809][ T7696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.735920][ T7696] F2FS-fs (loop1): Start checkpoint disabled! [ 162.753194][ T7696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.832796][ T29] audit: type=1800 audit(1734465809.682:24): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.612" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 162.946659][ T873] wacom 0003:056A:00B5.000A: item fetching failed at offset 8/11 [ 162.955607][ T873] wacom 0003:056A:00B5.000A: parse failed [ 162.974541][ T873] wacom 0003:056A:00B5.000A: probe with driver wacom failed with error -22 [ 163.141834][ T3577] kworker/u8:9: attempt to access beyond end of device [ 163.141834][ T3577] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 163.181026][ T7729] loop5: detected capacity change from 0 to 1024 [ 163.211719][ T3577] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.222481][ T3069] usb 4-1: USB disconnect, device number 5 [ 163.235364][ T3577] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 163.288018][ T7729] hfsplus: bad catalog entry type [ 163.397282][ T3577] hfsplus: b-tree write err: -5, ino 4 [ 163.424258][ T7731] loop0: detected capacity change from 0 to 4096 [ 163.451869][ T7731] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 163.576334][ T7721] loop2: detected capacity change from 0 to 32768 [ 163.642710][ T7721] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.623 (7721) [ 163.737564][ T7721] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.791544][ T7721] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 163.838652][ T7721] BTRFS info (device loop2): using free-space-tree [ 163.881534][ T7721] workqueue: max_active 3940 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 163.923747][ T7736] loop5: detected capacity change from 0 to 4096 [ 163.937101][ T7721] workqueue: max_active 3940 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 163.959729][ T7736] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 163.977768][ T7721] workqueue: max_active 3940 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 164.088246][ T7721] workqueue: max_active 3940 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 164.095919][ T7736] ntfs3(loop5): ino=5, "/" directory corrupted [ 164.193143][ T7721] workqueue: max_active 3940 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 164.250939][ T7721] workqueue: max_active 3940 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 164.291337][ T7721] workqueue: max_active 3940 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 164.433951][ T7721] BTRFS info (device loop2): rebuilding free space tree [ 164.505073][ T7721] BTRFS info (device loop2): checking UUID tree [ 164.815634][ T7776] loop5: detected capacity change from 0 to 2048 [ 164.935960][ T7776] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.936921][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.025265][ T7784] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.429217][ T7795] loop2: detected capacity change from 0 to 16 [ 165.534302][ T7795] erofs (device loop2): mounted with root inode @ nid 36. [ 165.586412][ T7795] erofs (device loop2): invalid tail-packing pclustersize 0 [ 165.631222][ T7795] erofs (device loop2): invalid tail-packing pclustersize 0 [ 165.691768][ T7795] erofs (device loop2): read error -117 @ 43 of nid 36 [ 165.954783][ T7801] loop0: detected capacity change from 0 to 32768 [ 165.981251][ T3069] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 166.049883][ T7770] loop1: detected capacity change from 0 to 32768 [ 166.074782][ T7806] loop3: detected capacity change from 0 to 128 [ 166.094465][ T7770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.627 (7770) [ 166.168271][ T7770] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.189887][ T7770] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 166.251469][ T3069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.267416][ T7770] BTRFS info (device loop1): using free-space-tree [ 166.280330][ T3069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.301326][ T3069] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 166.321066][ T3069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.360212][ T3069] usb 5-1: config 0 descriptor?? [ 166.803298][ T3069] chicony 0003:04F2:1421.000B: unbalanced delimiter at end of report description [ 166.813194][ T3069] chicony 0003:04F2:1421.000B: Chicony hid parse failed: -22 [ 166.820678][ T3069] chicony 0003:04F2:1421.000B: probe with driver chicony failed with error -22 [ 166.921399][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.057180][ T7843] loop0: detected capacity change from 0 to 1024 [ 167.077272][ T5882] usb 5-1: USB disconnect, device number 6 [ 167.099224][ T7843] EXT4-fs: Ignoring removed bh option [ 167.220107][ T7843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.233673][ T7843] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.255054][ T29] audit: type=1800 audit(1734465814.102:25): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.666" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 167.283304][ T7843] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.666: bg 0: block 273: padding at end of block bitmap is not set [ 167.298778][ T3069] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.389533][ T5830] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.461936][ T3069] usb 3-1: Using ep0 maxpacket: 16 [ 167.464642][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.488447][ T3069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.501754][ T3069] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.512159][ T3069] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 167.521508][ T3069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.576802][ T3069] usb 3-1: config 0 descriptor?? [ 167.580389][ T7857] loop5: detected capacity change from 0 to 4096 [ 167.715798][ T7857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.981395][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.142640][ T3069] nzxt-kraken2 0003:1E71:170E.000C: item fetching failed at offset 2/5 [ 168.161543][ T3069] nzxt-kraken2 0003:1E71:170E.000C: hid parse failed with -22 [ 168.183570][ T3069] nzxt-kraken2 0003:1E71:170E.000C: probe with driver nzxt-kraken2 failed with error -22 [ 168.412248][ T7873] loop5: detected capacity change from 0 to 2048 [ 168.433465][ T3069] usb 3-1: USB disconnect, device number 4 [ 168.519376][ T7873] loop5: p1 < > p3 p4 < > [ 168.562394][ T7886] loop0: detected capacity change from 0 to 128 [ 168.573792][ T7873] loop5: p3 start 4284289 is beyond EOD, truncated [ 168.610866][ T7886] EXT4-fs: Ignoring removed i_version option [ 168.629285][ T7886] EXT4-fs: Ignoring removed orlov option [ 168.748851][ T7886] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.778658][ T7886] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.781518][ T25] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 168.816522][ T7229] udevd[7229]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 168.829652][ T7889] openvswitch: netlink: Message has 1247 unknown bytes. [ 168.833413][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 168.847452][ T7889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.063301][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 255, using maximum allowed: 30 [ 169.093628][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.108958][ T25] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 169.175606][ T25] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 169.221307][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 169.255731][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 169.268035][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 169.305884][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.344944][ T25] usb 2-1: config 0 descriptor?? [ 169.364327][ T7884] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.856219][ T25] wacom 0003:056A:0317.000D: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 169.891838][ T25] wacom 0003:056A:0317.000D: hidraw0: USB HID v0.06 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 169.906939][ T25] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.000D/input/input11 [ 170.104982][ T7910] loop2: detected capacity change from 0 to 32768 [ 170.142129][ T7910] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.693 (7910) [ 170.203147][ T3069] usb 2-1: USB disconnect, device number 5 [ 170.213843][ T7910] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.236386][ T7910] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 170.257643][ T7910] BTRFS info (device loop2): using free-space-tree [ 170.371262][ T25] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 170.409606][ T7934] loop0: detected capacity change from 0 to 16 [ 170.432396][ T7934] erofs (device loop0): mounted with root inode @ nid 36. [ 170.455059][ T29] audit: type=1800 audit(1734465817.302:26): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.698" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 170.551534][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.565129][ T7910] BTRFS info (device loop2): rebuilding free space tree [ 170.581386][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.663007][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.681270][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.689348][ T25] usb 4-1: Product: syz [ 170.740911][ T25] usb 4-1: Manufacturer: syz [ 170.747244][ T25] usb 4-1: SerialNumber: syz [ 170.883060][ T7938] loop0: detected capacity change from 0 to 2048 [ 170.910858][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 170.975933][ T25] usb 4-1: 0:2 : does not exist [ 170.990040][ T7938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.004355][ T7940] dlm: non-version read from control device 2147479540 [ 171.121873][ T25] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 171.240727][ T25] usb 4-1: USB disconnect, device number 6 [ 171.338373][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.425176][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.705'. [ 171.429741][ T7911] loop5: detected capacity change from 0 to 40427 [ 171.487608][ T7911] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 171.497078][ T7911] F2FS-fs (loop5): Image doesn't support compression [ 171.503910][ T7911] F2FS-fs (loop5): Image doesn't support compression [ 171.532171][ T7911] F2FS-fs (loop5): invalid crc value [ 171.572601][ T7911] F2FS-fs (loop5): Found nat_bits in checkpoint [ 171.802457][ T7229] udevd[7229]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.889721][ T7911] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 171.911493][ T7911] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 171.922087][ T7964] netlink: 'syz.3.710': attribute type 33 has an invalid length. [ 171.930535][ T7963] netlink: 248 bytes leftover after parsing attributes in process `syz.1.708'. [ 171.955379][ T7952] loop0: detected capacity change from 0 to 256 [ 171.962569][ T7960] loop2: detected capacity change from 0 to 1024 [ 171.994168][ T7960] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 172.026728][ T7964] netlink: 'syz.3.710': attribute type 13 has an invalid length. [ 172.051284][ T7964] netlink: 152 bytes leftover after parsing attributes in process `syz.3.710'. [ 172.068543][ T7960] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.701: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 172.114149][ T7952] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 172.165130][ T5832] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x501/0x1de0 [ 172.221371][ T5832] F2FS-fs (loop5): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 172.268052][ T7952] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 172.291617][ T7952] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805b758e38 iblock : 8, err : -5) [ 172.311544][ T7960] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.701: couldn't read orphan inode 11 (err -117) [ 172.360421][ T7960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.363635][ T7952] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 172.382588][ T7952] exFAT-fs (loop0): write: fail to zero from 10 to 65228(-5) [ 172.492789][ T7960] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.701: Invalid block bitmap block 0 in block_group 0 [ 172.590285][ T7960] Quota error (device loop2): write_blk: dquota write failed [ 172.618773][ T7960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 172.641993][ T7960] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.701: Failed to acquire dquot type 0 [ 172.716261][ T7979] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 172.828030][ T7981] loop1: detected capacity change from 0 to 2048 [ 172.853638][ T7981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.919935][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.079288][ T7995] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 173.086906][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.584796][ T5899] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 173.962661][ T8024] loop2: detected capacity change from 0 to 1024 [ 173.962770][ T8020] loop3: detected capacity change from 0 to 32768 [ 174.010945][ T8024] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 174.104350][ T5899] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 174.112772][ T5899] usb 2-1: config 0 has no interface number 0 [ 174.118899][ T5899] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 174.131547][ T5899] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 174.142535][ T5899] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 174.154479][ T5899] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 174.166080][ T5899] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 174.177157][ T5899] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 174.190332][ T5899] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.199638][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.213153][ T5899] usb 2-1: config 0 descriptor?? [ 174.220996][ T8005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.231002][ T8024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.251696][ T8005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.282836][ T5899] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 174.562668][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.582514][ T8005] ldusb 2-1:0.55: Write buffer overflow, 33 bytes dropped [ 174.700597][ T8014] loop0: detected capacity change from 0 to 32768 [ 174.776332][ T5899] usb 2-1: USB disconnect, device number 6 [ 174.837324][ T8014] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 174.850809][ T5899] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 174.882366][ T8051] netlink: 'syz.3.740': attribute type 3 has an invalid length. [ 175.053882][ T8056] loop2: detected capacity change from 0 to 1024 [ 175.077505][ T8056] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.117621][ T5834] ocfs2: Unmounting device (7,0) on (node local) [ 175.157808][ T8056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.565745][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.572710][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.844450][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 175.852271][ T5896] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 175.884419][ T5896] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 175.909925][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.919507][ T8088] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.751'. [ 175.948490][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.958342][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.970426][ T8088] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.991226][ T5896] usb 2-1: Product: syz [ 176.000509][ T5896] usb 2-1: Manufacturer: syz [ 176.014297][ T5896] usb 2-1: SerialNumber: syz [ 176.418129][ T8055] loop5: detected capacity change from 0 to 32768 [ 176.481364][ T5896] usb 2-1: 0:2 : does not exist [ 176.505707][ T8055] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.603169][ T5897] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 176.672863][ T873] usb 2-1: USB disconnect, device number 7 [ 176.744389][ T29] audit: type=1326 audit(1734465823.572:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.791241][ T29] audit: type=1326 audit(1734465823.572:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.837656][ T29] audit: type=1326 audit(1734465823.572:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.884925][ T8055] XFS (loop5): Ending clean mount [ 176.891368][ T29] audit: type=1326 audit(1734465823.572:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.895650][ T8055] XFS (loop5): Quotacheck needed: Please wait. [ 176.931246][ T29] audit: type=1326 audit(1734465823.572:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.953533][ T29] audit: type=1326 audit(1734465823.572:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 176.975968][ T29] audit: type=1326 audit(1734465823.572:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8105 comm="syz.3.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804c785d29 code=0x7ffc0000 [ 177.081477][ T8055] XFS (loop5): Quotacheck: Done. [ 177.088373][ T5897] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 177.108528][ T5897] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 177.129817][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.155449][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.186466][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.190442][ T8112] loop3: detected capacity change from 0 to 8 [ 177.215257][ T5897] usb 3-1: Product: syz [ 177.219523][ T5897] usb 3-1: Manufacturer: syz [ 177.252998][ T5897] usb 3-1: SerialNumber: syz [ 177.283672][ T8114] netlink: 'syz.4.760': attribute type 29 has an invalid length. [ 177.344957][ T8114] netlink: 'syz.4.760': attribute type 29 has an invalid length. [ 177.520760][ T29] audit: type=1800 audit(1734465824.362:34): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.744" name="file3" dev="loop5" ino=9287 res=0 errno=0 [ 177.564634][ T8117] loop1: detected capacity change from 0 to 4096 [ 177.589156][ T8117] NILFS (loop1): invalid segment: Checksum error in segment payload [ 177.597712][ T8117] NILFS (loop1): trying rollback from an earlier position [ 177.682518][ T8117] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 177.706556][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.709775][ T5897] usb 3-1: 0:2 : does not exist [ 177.947967][ T8] usb 3-1: USB disconnect, device number 5 [ 178.257378][ T8127] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 178.448616][ T8118] loop3: detected capacity change from 0 to 32768 [ 178.536051][ T8118] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 178.565549][ T8118] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.679352][ T8149] x_tables: ip_tables: udp match: only valid for protocol 17 [ 178.719433][ T8118] XFS (loop3): Ending clean mount [ 178.762384][ T8118] XFS (loop3): Quotacheck needed: Please wait. [ 178.840419][ T8118] XFS (loop3): Quotacheck: Done. [ 179.033445][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.059889][ T8163] loop0: detected capacity change from 0 to 512 [ 179.087647][ T8163] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 179.153756][ T8163] EXT4-fs (loop0): invalid journal inode [ 179.181498][ T5896] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 179.201836][ T8163] EXT4-fs (loop0): can't get journal size [ 179.281450][ T873] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.355101][ T8163] EXT4-fs (loop0): 1 truncate cleaned up [ 179.373262][ T5896] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 179.383123][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.396810][ T5896] usb 6-1: Product: syz [ 179.401106][ T5896] usb 6-1: Manufacturer: syz [ 179.406573][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.412998][ T8163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.434202][ T5896] usb 6-1: SerialNumber: syz [ 179.457084][ T5896] usb 6-1: config 0 descriptor?? [ 179.473379][ T5896] ch341 6-1:0.0: ch341-uart converter detected [ 179.500721][ T8163] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 179.534212][ T873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.559412][ T873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.571051][ T873] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 179.583430][ T873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.591684][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 179.596058][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.632097][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.650740][ T873] usb 3-1: config 0 descriptor?? [ 179.657311][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.698220][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 179.739994][ T8] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 179.759654][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 179.764993][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.777713][ T8173] loop3: detected capacity change from 0 to 512 [ 179.787088][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.798634][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.825813][ T8] usb 5-1: config 0 descriptor?? [ 179.831117][ T8173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.842241][ T5897] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 179.864516][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.874729][ T8173] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.786: bad orphan inode 131083 [ 179.888757][ T5897] usb 2-1: config 0 descriptor?? [ 179.898228][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.023889][ T8173] overlayfs: upper fs needs to support d_type. [ 180.159488][ T5896] usb 6-1: failed to send control message: -71 [ 180.168377][ T5896] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 180.203185][ T873] steelseries 0003:1038:12B6.000E: unknown main item tag 0x0 [ 180.209284][ T5896] usb 6-1: USB disconnect, device number 6 [ 180.227860][ T873] steelseries 0003:1038:12B6.000E: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 180.263481][ T5896] ch341 6-1:0.0: device disconnected [ 180.298442][ T8] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 180.325163][ T8] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 180.349335][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.360783][ T8] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 180.368852][ T8] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 180.376723][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.384830][ T8] kye 0003:0458:0138.000F: unknown main item tag 0x0 [ 180.391720][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.398818][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.409603][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.416909][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.424112][ T5897] hid-led 0003:04D8:F372.0010: unknown main item tag 0x0 [ 180.433374][ T873] steelseries 0003:1038:12B6.000E: hid_hw_raw_request() failed with -71 [ 180.451037][ T8] kye 0003:0458:0138.000F: hidraw1: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 180.463574][ T873] usb 3-1: USB disconnect, device number 6 [ 180.475030][ T5897] hid-led 0003:04D8:F372.0010: hidraw2: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 180.506106][ T5897] hid-led 0003:04D8:F372.0010: Greynut Luxafor initialized [ 180.512182][ T8] usb 5-1: USB disconnect, device number 7 [ 180.662773][ T5896] usb 2-1: USB disconnect, device number 8 [ 180.668294][ T3544] leds luxafor2:blue:led5: Setting an LED's brightness failed (-38) [ 180.671762][ T3544] leds luxafor2:green:led5: Setting an LED's brightness failed (-38) [ 180.725542][ T3593] leds luxafor2:red:led5: Setting an LED's brightness failed (-38) [ 180.747890][ T3544] leds luxafor2:blue:led4: Setting an LED's brightness failed (-38) [ 180.761229][ T3544] leds luxafor2:green:led4: Setting an LED's brightness failed (-38) [ 180.783723][ T3583] leds luxafor2:red:led4: Setting an LED's brightness failed (-38) [ 180.841983][ T3583] leds luxafor2:blue:led3: Setting an LED's brightness failed (-38) [ 180.866481][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.893663][ T3583] leds luxafor2:green:led3: Setting an LED's brightness failed (-38) [ 180.943128][ T3583] leds luxafor2:red:led3: Setting an LED's brightness failed (-38) [ 180.960268][ T12] leds luxafor2:blue:led2: Setting an LED's brightness failed (-38) [ 180.972490][ T3583] leds luxafor2:green:led2: Setting an LED's brightness failed (-38) [ 180.998765][ T3583] leds luxafor2:red:led2: Setting an LED's brightness failed (-38) [ 181.042648][ T3593] leds luxafor2:blue:led1: Setting an LED's brightness failed (-38) [ 181.066547][ T3593] leds luxafor2:green:led1: Setting an LED's brightness failed (-38) [ 181.084120][ T3593] leds luxafor2:red:led1: Setting an LED's brightness failed (-38) [ 181.106061][ T3593] leds luxafor2:blue:led0: Setting an LED's brightness failed (-38) [ 181.134425][ T3593] leds luxafor2:green:led0: Setting an LED's brightness failed (-38) [ 181.182787][ T3593] leds luxafor2:red:led0: Setting an LED's brightness failed (-38) [ 181.250384][ T3544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.404795][ T3544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.550229][ T8203] loop5: detected capacity change from 0 to 256 [ 181.667891][ T8202] loop2: detected capacity change from 0 to 512 [ 181.814594][ T5140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.827068][ T5140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.837699][ T5140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.848087][ T5140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.860723][ T3544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.881402][ T8205] loop0: detected capacity change from 0 to 512 [ 181.977626][ T5140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.999586][ T8213] loop5: detected capacity change from 0 to 1024 [ 182.042610][ T5140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.052956][ T8202] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.060900][ T8213] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 182.080733][ T8205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.107154][ T8213] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 182.114668][ T8205] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.168471][ T3544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.228312][ T8213] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.803: iget: special inode unallocated [ 182.321375][ T8213] EXT4-fs (loop5): no journal found [ 182.326949][ T8213] EXT4-fs (loop5): can't get journal size [ 182.357764][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.372317][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.386875][ T8213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 182.400585][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.412934][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.806'. [ 182.437229][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.478759][ T8202] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.798: iget: bad extended attribute block 19 [ 182.518331][ T8227] loop1: detected capacity change from 0 to 128 [ 182.579097][ T8202] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.798: couldn't read orphan inode 15 (err -117) [ 182.606319][ T8227] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 182.638608][ T8227] syz.1.808: attempt to access beyond end of device [ 182.638608][ T8227] loop1: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 182.644199][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.785525][ T8202] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.798: bg 0: block 65: padding at end of block bitmap is not set [ 182.795668][ T8227] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 182.817939][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.849381][ T8227] syz.1.808: attempt to access beyond end of device [ 182.849381][ T8227] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 182.864049][ T8202] Quota error (device loop2): write_blk: dquota write failed [ 182.880915][ T8227] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 182.924884][ T8227] syz.1.808: attempt to access beyond end of device [ 182.924884][ T8227] loop1: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 182.938201][ T8202] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 182.950450][ T8227] Buffer I/O error on dev loop1, logical block 1157, async page read [ 182.959016][ T8227] syz.1.808: attempt to access beyond end of device [ 182.959016][ T8227] loop1: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 182.972804][ T8227] Buffer I/O error on dev loop1, logical block 3211264, async page read [ 182.983298][ T8227] syz.1.808: attempt to access beyond end of device [ 182.983298][ T8227] loop1: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 182.997131][ T8227] Buffer I/O error on dev loop1, logical block 8768635, async page read [ 183.007038][ T8227] syz.1.808: attempt to access beyond end of device [ 183.007038][ T8227] loop1: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 183.020684][ T8227] Buffer I/O error on dev loop1, logical block 13466417, async page read [ 183.029313][ T8227] syz.1.808: attempt to access beyond end of device [ 183.029313][ T8227] loop1: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 183.038089][ T8202] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.798: Failed to acquire dquot type 0 [ 183.073139][ T8227] Buffer I/O error on dev loop1, logical block 209285, async page read [ 183.082861][ T8227] syz.1.808: attempt to access beyond end of device [ 183.082861][ T8227] loop1: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 183.096838][ T8227] Buffer I/O error on dev loop1, logical block 8767744, async page read [ 183.123377][ T8227] syz.1.808: attempt to access beyond end of device [ 183.123377][ T8227] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 183.146016][ T8227] Buffer I/O error on dev loop1, logical block 13269809, async page read [ 183.162090][ T3544] bridge_slave_1: left allmulticast mode [ 183.168486][ T3544] bridge_slave_1: left promiscuous mode [ 183.168543][ T8227] syz.1.808: attempt to access beyond end of device [ 183.168543][ T8227] loop1: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 183.182742][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.195349][ T8227] Buffer I/O error on dev loop1, logical block 1157, async page read [ 183.261889][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.276769][ T3544] bridge_slave_0: left allmulticast mode [ 183.306036][ T3544] bridge_slave_0: left promiscuous mode [ 183.333232][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.363264][ T29] audit: type=1800 audit(1734465830.212:35): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.808" name="/" dev="loop1" ino=2 res=0 errno=0 [ 183.390151][ T8227] sysv_free_block: trying to free block not in datazone [ 183.663470][ T5830] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 184.009787][ T8271] loop1: detected capacity change from 0 to 64 [ 184.171536][ T5140] Bluetooth: hci5: command tx timeout [ 184.415555][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 184.826749][ T3544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.844949][ T3544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.857451][ T3544] bond0 (unregistering): Released all slaves [ 184.895237][ T8239] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 184.922075][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.124976][ T8207] chnl_net:caif_netlink_parms(): no params data found [ 185.366935][ T8305] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 185.407635][ T8305] netlink: 134728 bytes leftover after parsing attributes in process `syz.4.836'. [ 185.440406][ T8308] netlink: 'syz.1.838': attribute type 7 has an invalid length. [ 185.457771][ T8308] netlink: 'syz.1.838': attribute type 3 has an invalid length. [ 185.471519][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.487365][ T8308] netlink: 204 bytes leftover after parsing attributes in process `syz.1.838'. [ 185.671324][ T8314] loop5: detected capacity change from 0 to 1024 [ 185.817614][ T8314] hfsplus: bad catalog entry type [ 185.893320][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 185.977917][ T8331] loop1: detected capacity change from 0 to 128 [ 186.133359][ T12] hfsplus: b-tree write err: -5, ino 4 [ 186.262362][ T5140] Bluetooth: hci5: command tx timeout [ 186.792276][ T8344] loop5: detected capacity change from 0 to 40427 [ 186.820003][ T8354] overlayfs: conflicting lowerdir path [ 186.856685][ T8344] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 186.866995][ T8344] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 186.874116][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.882437][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.889667][ T8207] bridge_slave_0: entered allmulticast mode [ 186.899308][ T8207] bridge_slave_0: entered promiscuous mode [ 186.932234][ T8357] loop2: detected capacity change from 0 to 4096 [ 186.960368][ T8357] NILFS (loop2): invalid segment: Checksum error in segment payload [ 186.962806][ T8344] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1fffff [ 186.985417][ T8328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.986393][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.999176][ T8357] NILFS (loop2): trying rollback from an earlier position [ 187.001427][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.022719][ T8328] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.034865][ T8207] bridge_slave_1: entered allmulticast mode [ 187.047142][ T8207] bridge_slave_1: entered promiscuous mode [ 187.048108][ T8344] F2FS-fs (loop5): invalid crc value [ 187.083932][ T8357] NILFS (loop2): recovery complete [ 187.094010][ T8360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.120536][ T8344] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.246757][ T8344] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 187.254126][ T8344] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.423552][ T5832] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 187.448841][ T8328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.468504][ T8328] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 187.485700][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.544666][ T8328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.581340][ T8328] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 187.584957][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.622336][ T8328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.631950][ T8328] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 187.777158][ T8207] team0: Port device team_slave_0 added [ 187.995929][ T8207] team0: Port device team_slave_1 added [ 188.317975][ T8372] loop2: detected capacity change from 0 to 32768 [ 188.331585][ T5140] Bluetooth: hci5: command tx timeout [ 188.353392][ T8372] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.854 (8372) [ 188.379663][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.387101][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.422865][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.436239][ T8372] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.464368][ T8372] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 188.474783][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.493645][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.519780][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.545300][ T8372] BTRFS info (device loop2): using free-space-tree [ 189.078909][ T8372] BTRFS info (device loop2): rebuilding free space tree [ 189.166133][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 189.191265][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 189.265824][ T8392] loop5: detected capacity change from 0 to 32768 [ 189.295504][ T8392] BTRFS: device /dev/loop5 (7:5) using temp-fsid 9b66923e-ac1f-4ad5-8d8f-705b4babd668 [ 189.308479][ T8392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.856 (8392) [ 189.345633][ T8328] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 189.357865][ T8328] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 189.383433][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.401212][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.412282][ T25] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 189.421407][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.421809][ T8392] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.451743][ T25] usb 2-1: config 0 descriptor?? [ 189.497318][ T8392] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 189.705244][ T8207] hsr_slave_0: entered promiscuous mode [ 189.745270][ T8207] hsr_slave_1: entered promiscuous mode [ 189.752190][ T8207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.762009][ T8207] Cannot create hsr debugfs directory [ 189.777221][ T8445] loop0: detected capacity change from 0 to 512 [ 189.808338][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 189.834779][ T8445] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 190.037003][ T25] samsung 0003:0419:0001.0011: unbalanced delimiter at end of report description [ 190.061903][ T25] samsung 0003:0419:0001.0011: parse failed [ 190.068038][ T8445] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.873: iget: bad i_size value: -67835469387268086 [ 190.111685][ T8445] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.873: couldn't read orphan inode 15 (err -117) [ 190.112639][ T25] samsung 0003:0419:0001.0011: probe with driver samsung failed with error -22 [ 190.254205][ T8392] BTRFS info (device loop5): rebuilding free space tree [ 190.291113][ T8445] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.305153][ T8392] BTRFS info (device loop5): disabling free space tree [ 190.316538][ T8392] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.321454][ T8445] ext2 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.326469][ T8392] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.400906][ T3544] hsr_slave_0: left promiscuous mode [ 190.421708][ T25] usb 2-1: USB disconnect, device number 9 [ 190.503125][ T3544] hsr_slave_1: left promiscuous mode [ 190.513616][ T5834] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 190.546597][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.559983][ T29] audit: type=1800 audit(1734465837.402:36): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.856" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 190.601425][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.694782][ T3544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.746089][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.815128][ T5832] BTRFS info (device loop5): last unmount of filesystem 9b66923e-ac1f-4ad5-8d8f-705b4babd668 [ 190.854658][ T8469] loop0: detected capacity change from 0 to 2048 [ 190.903437][ T8469] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.011280][ T8472] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.089352][ T3544] veth1_macvtap: left promiscuous mode [ 191.119189][ T3544] veth0_macvtap: left promiscuous mode [ 191.150990][ T8476] loop1: detected capacity change from 0 to 256 [ 191.152672][ T3544] veth1_vlan: left promiscuous mode [ 191.199148][ T3544] veth0_vlan: left promiscuous mode [ 191.311582][ T8476] FAT-fs (loop1): Directory bread(block 64) failed [ 191.342356][ T8476] FAT-fs (loop1): Directory bread(block 65) failed [ 191.381492][ T8476] FAT-fs (loop1): Directory bread(block 66) failed [ 191.388097][ T8476] FAT-fs (loop1): Directory bread(block 67) failed [ 191.461369][ T8476] FAT-fs (loop1): Directory bread(block 68) failed [ 191.496308][ T8476] FAT-fs (loop1): Directory bread(block 69) failed [ 191.532215][ T29] audit: type=1326 audit(1734465838.372:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 191.562317][ T8476] FAT-fs (loop1): Directory bread(block 70) failed [ 191.602186][ T8476] FAT-fs (loop1): Directory bread(block 71) failed [ 191.608991][ T8476] FAT-fs (loop1): Directory bread(block 72) failed [ 191.634015][ T29] audit: type=1326 audit(1734465838.372:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 191.671243][ T8476] FAT-fs (loop1): Directory bread(block 73) failed [ 191.751418][ T29] audit: type=1326 audit(1734465838.402:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 191.854977][ T29] audit: type=1326 audit(1734465838.402:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 191.887068][ T8484] loop0: detected capacity change from 0 to 512 [ 191.931652][ T29] audit: type=1326 audit(1734465838.402:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 191.950418][ T8484] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.998693][ T8485] loop5: detected capacity change from 0 to 2048 [ 192.007539][ T29] audit: type=1326 audit(1734465838.402:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 192.057718][ T8484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 192.098321][ T8485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.109604][ T8484] System zones: 1-12 [ 192.121477][ T29] audit: type=1326 audit(1734465838.402:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 192.171237][ T29] audit: type=1326 audit(1734465838.402:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 192.228832][ T8471] loop2: detected capacity change from 0 to 32768 [ 192.246315][ T8484] EXT4-fs (loop0): 1 truncate cleaned up [ 192.262336][ T8484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.277101][ T8491] loop1: detected capacity change from 0 to 8 [ 192.356925][ T29] audit: type=1800 audit(1734465839.182:45): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.884" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 192.449456][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.473851][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.485686][ T8471] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.711411][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.733272][ T8471] XFS (loop2): Ending clean mount [ 192.750072][ T8471] XFS (loop2): Quotacheck needed: Please wait. [ 192.858823][ T8471] XFS (loop2): Quotacheck: Done. [ 192.883453][ T8] usb 5-1: config index 0 descriptor too short (expected 65123, got 72) [ 192.898947][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.924500][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.943030][ T8] usb 5-1: Product: syz [ 192.947359][ T8] usb 5-1: Manufacturer: syz [ 192.955741][ T8511] loop0: detected capacity change from 0 to 512 [ 192.957507][ T8] usb 5-1: SerialNumber: syz [ 192.999597][ T8511] EXT4-fs: Ignoring removed bh option [ 193.016989][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.044530][ T8511] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 193.093999][ T8511] EXT4-fs (loop0): invalid journal inode [ 193.114304][ T873] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.119094][ T8511] EXT4-fs (loop0): can't get journal size [ 193.156634][ T8511] EXT4-fs (loop0): 1 truncate cleaned up [ 193.208809][ T8511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.315337][ T8511] __find_get_block_slow() failed. block=72057594037927936, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop0 blocksize: 1024 [ 193.351068][ T8511] grow_buffers: requested out-of-range block 72057594037927936 for device loop0 [ 193.465420][ T8520] loop5: detected capacity change from 0 to 4096 [ 193.470310][ T5833] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.486426][ T8511] EXT4-fs warning (device loop0): ext4_resize_fs:2019: can't read last block, resize aborted [ 193.622563][ T3069] usb 5-1: USB disconnect, device number 8 [ 193.676720][ T8521] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.857381][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.880513][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.887092][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.184488][ T873] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 194.191986][ T873] ath9k_htc: Failed to initialize the device [ 194.201993][ T3069] usb 5-1: ath9k_htc: USB layer deinitialized [ 194.424463][ T8534] loop1: detected capacity change from 0 to 1764 [ 194.584455][ T3544] team0 (unregistering): Port device team_slave_1 removed [ 194.718403][ T3544] team0 (unregistering): Port device team_slave_0 removed [ 194.735313][ T8544] loop1: detected capacity change from 0 to 256 [ 194.804974][ T8544] FAT-fs (loop1): Directory bread(block 64) failed [ 194.811872][ T8544] FAT-fs (loop1): Directory bread(block 65) failed [ 194.818732][ T8544] FAT-fs (loop1): Directory bread(block 66) failed [ 194.828242][ T8544] FAT-fs (loop1): Directory bread(block 67) failed [ 194.845389][ T8544] FAT-fs (loop1): Directory bread(block 68) failed [ 194.857097][ T8544] FAT-fs (loop1): Directory bread(block 69) failed [ 194.865806][ T8544] FAT-fs (loop1): Directory bread(block 70) failed [ 194.883468][ T8544] FAT-fs (loop1): Directory bread(block 71) failed [ 194.890388][ T8544] FAT-fs (loop1): Directory bread(block 72) failed [ 194.907634][ T8544] FAT-fs (loop1): Directory bread(block 73) failed [ 195.190627][ T8546] use of bytesused == 0 is deprecated and will be removed in the future, [ 195.220774][ T8546] use the actual size instead. [ 196.068560][ T8542] netlink: 32 bytes leftover after parsing attributes in process `syz.5.905'. [ 196.314514][ T8554] loop1: detected capacity change from 0 to 40427 [ 196.327855][ T8556] loop0: detected capacity change from 0 to 40427 [ 196.343403][ T8554] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 196.343872][ T8556] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 196.350521][ T8554] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.406412][ T8556] F2FS-fs (loop0): Image doesn't support compression [ 196.477358][ T8556] F2FS-fs (loop0): heap/no_heap options were deprecated [ 196.501413][ T8554] F2FS-fs (loop1): invalid crc value [ 196.523783][ T8556] F2FS-fs (loop0): Image doesn't support compression [ 196.566878][ T8554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.574132][ T8556] F2FS-fs (loop0): invalid crc value [ 196.636550][ T8556] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.845932][ T8577] loop2: detected capacity change from 0 to 128 [ 196.891040][ T8556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.918786][ T8554] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.920871][ T8207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.942784][ T8577] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 196.946641][ T8554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.005201][ T8577] sysv_count_free_blocks: >flc_size entries in free-list block [ 197.031871][ T8207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.087719][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 197.087742][ T29] audit: type=1800 audit(1734465843.932:48): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.912" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 197.135953][ T8207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.245010][ T8577] sysv_count_free_inodes: unable to read inode table [ 197.347094][ T8207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.396257][ T5834] bio_check_eod: 6 callbacks suppressed [ 197.396284][ T5834] syz-executor: attempt to access beyond end of device [ 197.396284][ T5834] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.455655][ T5833] sysv_free_block: flc_count > flc_size [ 197.461288][ T5834] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.464584][ T5833] sysv_free_block: flc_count > flc_size [ 197.474716][ T5833] sysv_free_block: flc_count > flc_size [ 197.480307][ T5833] sysv_free_block: flc_count > flc_size [ 197.485964][ T5833] sysv_free_block: flc_count > flc_size [ 197.491665][ T5833] sysv_free_block: flc_count > flc_size [ 197.497275][ T5833] sysv_free_block: flc_count > flc_size [ 197.502945][ T5833] sysv_free_block: flc_count > flc_size [ 197.508528][ T5833] sysv_free_block: flc_count > flc_size [ 197.514438][ T5833] sysv_free_block: flc_count > flc_size [ 197.524981][ T5833] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 197.737791][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.755309][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.768565][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.778001][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.904967][ T8207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.915669][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.990216][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.997614][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.575073][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.948948][ T8618] loop2: detected capacity change from 0 to 1024 [ 198.983025][ T8613] loop0: detected capacity change from 0 to 4096 [ 199.062996][ T8613] NILFS (loop0): invalid segment: Checksum error in segment payload [ 199.086764][ T8595] loop5: detected capacity change from 0 to 32768 [ 199.111741][ T8613] NILFS (loop0): trying rollback from an earlier position [ 199.181798][ T8613] NILFS (loop0): recovery complete [ 199.259354][ T8626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.310183][ T3439] hfsplus: b-tree write err: -5, ino 4 [ 199.371799][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 199.649233][ T8635] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 199.744545][ T8207] veth0_vlan: entered promiscuous mode [ 199.820108][ T8207] veth1_vlan: entered promiscuous mode [ 199.955694][ T8207] veth0_macvtap: entered promiscuous mode [ 200.008156][ T8207] veth1_macvtap: entered promiscuous mode [ 200.093287][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.150007][ T8647] netlink: 'syz.5.929': attribute type 3 has an invalid length. [ 200.158965][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.180094][ T8647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.929'. [ 200.189507][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.208351][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.248066][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.275158][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.286616][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.297553][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.320266][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.345364][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.368177][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.434073][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.463138][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.473492][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.484045][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.494135][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.505380][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.516856][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.527526][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.537592][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.548160][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.559531][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.572440][ T8207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.581660][ T8207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.590389][ T8207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.599250][ T8207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.985210][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.987801][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.999028][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.061595][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.764413][ T8690] netlink: 'syz.1.946': attribute type 3 has an invalid length. [ 201.814649][ T8656] loop5: detected capacity change from 0 to 32768 [ 201.854813][ T8656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.937 (8656) [ 201.938994][ T8656] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.994941][ T8656] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 202.029130][ T8656] BTRFS info (device loop5): using free-space-tree [ 202.220447][ T8660] loop2: detected capacity change from 0 to 40427 [ 202.252932][ T8660] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 202.291346][ T8660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 202.371567][ T8660] F2FS-fs (loop2): invalid crc value [ 202.423349][ T8660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.551794][ T5832] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.722963][ T8660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.737090][ T8660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.326984][ T8742] loop5: detected capacity change from 0 to 4096 [ 203.390673][ T8742] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 203.536487][ T8742] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 203.822189][ T8767] loop0: detected capacity change from 0 to 128 [ 203.837457][ T29] audit: type=1800 audit(1734465850.682:49): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.952" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 203.885127][ T8767] EXT4-fs (loop0): Test dummy encryption mode enabled [ 204.023725][ T8767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.175116][ T8767] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.235582][ T8767] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 204.356805][ T8744] loop1: detected capacity change from 0 to 40427 [ 204.432170][ T5834] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.467725][ T8775] program syz.6.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.553423][ T8744] F2FS-fs (loop1): Found nat_bits in checkpoint [ 204.773796][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.838700][ T8744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.071400][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 205.106142][ T5897] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 205.127237][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.178023][ T5897] usb 5-1: Product: syz [ 205.211976][ T5897] usb 5-1: Manufacturer: syz [ 205.216694][ T5897] usb 5-1: SerialNumber: syz [ 205.228910][ T8808] sg_write: data in/out 8192/1 bytes for SCSI command 0xf2-- guessing data in; [ 205.228910][ T8808] program syz.5.972 not setting count and/or reply_len properly [ 205.319664][ T5897] usb 5-1: config 0 descriptor?? [ 205.428710][ T5830] syz-executor: attempt to access beyond end of device [ 205.428710][ T5830] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.521433][ T5830] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 205.767674][ T5897] airspy 5-1:0.0: Board ID: 00 [ 205.802739][ T5897] airspy 5-1:0.0: Firmware version: [ 205.977128][ T5897] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 206.036162][ T5897] airspy 5-1:0.0: Registered as swradio24 [ 206.036196][ T5897] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 206.036674][ T8829] loop6: detected capacity change from 0 to 2048 [ 206.043542][ T5897] usb 5-1: USB disconnect, device number 9 [ 206.087827][ T8829] loop6: p1 < > p3 p4 < > [ 206.092050][ T8829] loop6: p3 start 4284289 is beyond EOD, truncated [ 206.142450][ T5202] loop6: p1 < > p3 p4 < > [ 206.149613][ T5202] loop6: p3 start 4284289 is beyond EOD, truncated [ 206.478079][ T5990] udevd[5990]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 206.478267][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 207.231804][ T8858] loop5: detected capacity change from 0 to 32768 [ 207.486727][ T8878] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 207.497079][ T8878] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 207.593490][ T8881] loop1: detected capacity change from 0 to 512 [ 207.670008][ T8858] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 207.709496][ T8881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e846c028, mo2=0002] [ 207.728981][ T8881] System zones: 1-12 [ 207.754469][ T8881] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.996: Attempting to read directory block (0) that is past i_size (256) [ 207.819994][ T8881] EXT4-fs (loop1): Remounting filesystem read-only [ 207.838241][ T8881] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 207.849542][ T8881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.982264][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.994520][ T8892] loop2: detected capacity change from 0 to 512 [ 208.021099][ T8892] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 208.099480][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 208.124298][ T8858] XFS (loop5): Ending clean mount [ 208.191339][ T29] audit: type=1800 audit(1734465855.032:50): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.989" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 208.402741][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.595067][ T8912] loop6: detected capacity change from 0 to 512 [ 208.692902][ T8912] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1005: bad orphan inode 13 [ 208.694961][ T8912] ext4_test_bit(bit=12, block=4) = 1 [ 208.694990][ T8912] is_bad_inode(inode)=0 [ 208.695003][ T8912] NEXT_ORPHAN(inode)=0 [ 208.695017][ T8912] max_ino=32 [ 208.695029][ T8912] i_nlink=1 [ 208.696110][ T8912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.764989][ T8912] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.1005: Unrecognised inode hash code 20 [ 208.765089][ T8912] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1005: Corrupt directory, running e2fsck is recommended [ 208.768909][ T8912] EXT4-fs error (device loop6): ext4_readdir:261: inode #2: block 13: comm syz.6.1005: path /16/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 208.796830][ T8912] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1005: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 208.976679][ T8207] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.472706][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.552506][ T8932] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1010'. [ 209.621446][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 209.648584][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.701256][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.738343][ T5897] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 209.787287][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.852560][ T5897] usb 6-1: config 0 descriptor?? [ 210.303238][ T5897] elan 0003:04F3:0755.0012: failed to start in urb: -90 [ 210.317779][ T5897] elan 0003:04F3:0755.0012: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 210.497265][ T8918] loop2: detected capacity change from 0 to 32768 [ 210.561642][ T5896] usb 6-1: USB disconnect, device number 7 [ 210.623512][ T8918] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 210.756371][ T8918] XFS (loop2): Ending clean mount [ 210.780238][ T8918] XFS (loop2): Quotacheck needed: Please wait. [ 210.848532][ T29] audit: type=1326 audit(1734465857.692:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.6.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa843785d29 code=0x0 [ 210.901824][ T8918] XFS (loop2): Quotacheck: Done. [ 211.126906][ T5833] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.494216][ T29] audit: type=1326 audit(1734465858.342:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.517269][ T29] audit: type=1326 audit(1734465858.342:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.539922][ T29] audit: type=1326 audit(1734465858.342:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.563003][ T29] audit: type=1326 audit(1734465858.342:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.585754][ T29] audit: type=1326 audit(1734465858.342:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.608264][ T29] audit: type=1326 audit(1734465858.342:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.630960][ T29] audit: type=1326 audit(1734465858.342:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.653390][ T29] audit: type=1326 audit(1734465858.342:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.0.1030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a5585d29 code=0x7ffc0000 [ 211.817143][ T8997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1032'. [ 211.977920][ T9002] loop1: detected capacity change from 0 to 256 [ 212.206448][ T9002] exfat: Deprecated parameter 'namecase' [ 212.231555][ T9002] exfat: Deprecated parameter 'utf8' [ 212.237459][ T9002] exfat: Deprecated parameter 'namecase' [ 212.460203][ T9002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 212.523670][ T9021] loop0: detected capacity change from 0 to 24 [ 214.258382][ T9086] loop1: detected capacity change from 0 to 512 [ 214.351372][ T9086] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 215.265843][ T9063] loop6: detected capacity change from 0 to 40427 [ 215.281633][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 215.363569][ T9063] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 215.413296][ T9063] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 215.415487][ T9126] loop5: detected capacity change from 0 to 2048 [ 215.431104][ T9063] F2FS-fs (loop6): invalid crc value [ 215.463118][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 215.473178][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 215.483904][ T9126] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.486994][ T9063] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 215.511301][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 215.540058][ T9063] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 215.605556][ T5896] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 215.663616][ T5896] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 215.670439][ T9126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.673570][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.693677][ T5896] usb 3-1: Product: syz [ 215.698025][ T5896] usb 3-1: Manufacturer: syz [ 215.702975][ T5896] usb 3-1: SerialNumber: syz [ 215.710481][ T5896] usb 3-1: config 0 descriptor?? [ 215.718293][ T5896] usb 3-1: NFC: Unable to get FW version [ 215.728382][ T5896] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 215.891322][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.910515][ T9063] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 215.918912][ T9063] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 215.980322][ T5896] usb 3-1: USB disconnect, device number 7 [ 215.997730][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.042098][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 216.049858][ T5897] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 216.060417][ T5897] usb 2-1: config 0 has no interface number 0 [ 216.075259][ T5897] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.129677][ T5897] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.173868][ T5897] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 216.199612][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.214619][ T5897] usb 2-1: Product: syz [ 216.218900][ T5897] usb 2-1: Manufacturer: syz [ 216.234327][ T5897] usb 2-1: SerialNumber: syz [ 216.265813][ T5897] usb 2-1: config 0 descriptor?? [ 216.272099][ T9139] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.279411][ T9139] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.383700][ T9152] loop5: detected capacity change from 0 to 512 [ 216.427396][ T9152] EXT4-fs (loop5): orphan cleanup on readonly fs [ 216.440127][ T9152] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 216.517461][ T9139] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.522125][ T9152] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 216.529021][ T9139] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 216.633481][ T9152] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 216.664437][ T9152] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1085: couldn't read orphan inode 13 (err -117) [ 216.746421][ T9152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.866064][ T9152] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 216.919631][ T9152] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 2 [ 216.946386][ T5897] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 216.982568][ T5897] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 217.026638][ T5897] asix 2-1:0.251: probe with driver asix failed with error -71 [ 217.062542][ T5897] usb 2-1: USB disconnect, device number 10 [ 217.113709][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.252371][ T873] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.423890][ T873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.481270][ T873] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.533689][ T873] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.569937][ T873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.611570][ T873] usb 7-1: Product: syz [ 217.631600][ T873] usb 7-1: Manufacturer: syz [ 217.654431][ T873] usb 7-1: SerialNumber: syz [ 217.702884][ T873] hub 7-1:1.0: bad descriptor, ignoring hub [ 217.708908][ T873] hub 7-1:1.0: probe with driver hub failed with error -5 [ 217.744705][ T9185] loop1: detected capacity change from 0 to 64 [ 217.752541][ T873] usb 7-1: selecting invalid altsetting 1 [ 218.222691][ T873] usb 7-1: selecting invalid altsetting 1 [ 218.228653][ T873] cdc_ncm 7-1:1.0: bind() failure [ 218.292612][ T873] hub 7-1:1.1: bad descriptor, ignoring hub [ 218.332086][ T873] hub 7-1:1.1: probe with driver hub failed with error -5 [ 218.561760][ T25] usb 7-1: USB disconnect, device number 2 [ 218.731619][ T9208] loop5: detected capacity change from 0 to 4096 [ 218.761615][ T9208] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 219.105895][ T9203] loop0: detected capacity change from 0 to 40427 [ 219.121392][ T873] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 219.132971][ T9203] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 219.141591][ T9203] F2FS-fs (loop0): Image doesn't support compression [ 219.148427][ T9203] F2FS-fs (loop0): Image doesn't support compression [ 219.158100][ T9203] F2FS-fs (loop0): invalid crc value [ 219.177083][ T9208] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 219.177423][ T9203] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.223080][ T9208] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 219.233907][ T9222] binder: 9221:9222 ioctl c00c620f 200000c0 returned -22 [ 219.303560][ T873] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 219.312090][ T873] usb 3-1: config 0 has no interface number 0 [ 219.318224][ T873] usb 3-1: config 0 interface 79 has no altsetting 0 [ 219.362244][ T9203] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 219.375922][ T873] usb 3-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 219.407537][ T873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.471236][ T873] usb 3-1: Product: syz [ 219.475488][ T873] usb 3-1: Manufacturer: syz [ 219.494927][ T873] usb 3-1: SerialNumber: syz [ 219.511341][ T873] usb 3-1: config 0 descriptor?? [ 219.529396][ T873] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 219.556493][ T9227] loop1: detected capacity change from 0 to 256 [ 219.564557][ T873] dvb-usb: bulk message failed: -22 (2/0) [ 219.578169][ T873] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 219.588015][ T5834] syz-executor: attempt to access beyond end of device [ 219.588015][ T5834] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.598969][ T873] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 219.643655][ T873] usb 3-1: media controller created [ 219.657846][ T9227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac9b7dd6, utbl_chksum : 0xe619d30d) [ 219.664848][ T873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.685395][ T5834] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 219.754973][ T873] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 219.799295][ T873] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 219.961603][ T873] rc_core: IR keymap rc-dtt200u not found [ 219.967448][ T873] Registered IR keymap rc-empty [ 219.974675][ T873] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 220.005331][ T873] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14 [ 220.025099][ T873] dvb-usb: schedule remote query interval to 300 msecs. [ 220.032210][ T873] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 220.128340][ T873] usb 3-1: USB disconnect, device number 8 [ 220.266152][ T873] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 220.749388][ T9254] loop2: detected capacity change from 0 to 4096 [ 221.046589][ T9254] ntfs3(loop2): failed to convert name for inode 1e. [ 221.047023][ T9254] ntfs3(loop2): ino=1f, Correct links count -> 1. [ 221.047299][ T9254] ntfs3(loop2): ino=1f, Correct links count -> 1. [ 221.131533][ T873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 221.191689][ T9268] netlink: 'syz.0.1130': attribute type 29 has an invalid length. [ 221.218195][ T9245] loop5: detected capacity change from 0 to 32768 [ 221.256068][ T9268] netlink: 'syz.0.1130': attribute type 29 has an invalid length. [ 221.283375][ T9245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1119 (9245) [ 221.342012][ T873] usb 7-1: Using ep0 maxpacket: 32 [ 221.376414][ T9245] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.380556][ T873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.397756][ T873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.405234][ T9245] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 221.407747][ T873] usb 7-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 221.425228][ T873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.425539][ T9245] BTRFS info (device loop5): using free-space-tree [ 221.487908][ T9277] loop0: detected capacity change from 0 to 128 [ 221.502048][ T873] usb 7-1: config 0 descriptor?? [ 221.599855][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.789654][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.811336][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.862080][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.891995][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.926830][ T5832] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.957583][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.980852][ T873] greenasia 0003:0E8F:0012.0013: item fetching failed at offset 0/3 [ 222.001713][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.018888][ T873] greenasia 0003:0E8F:0012.0013: parse failed [ 222.036555][ T8] usb 3-1: config 0 descriptor?? [ 222.045628][ T873] greenasia 0003:0E8F:0012.0013: probe with driver greenasia failed with error -22 [ 222.191346][ T873] usb 7-1: USB disconnect, device number 3 [ 222.578603][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 222.608155][ T8] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 222.652048][ T8] plantronics 0003:047F:FFFF.0014: unbalanced collection at end of report description [ 222.682000][ T8] plantronics 0003:047F:FFFF.0014: parse failed [ 222.688423][ T8] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 222.791755][ T8] usb 3-1: USB disconnect, device number 9 [ 223.012638][ T9324] loop5: detected capacity change from 0 to 256 [ 223.080923][ T29] audit: type=1800 audit(1734465869.922:60): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1145" name="file2" dev="loop5" ino=1048733 res=0 errno=0 [ 223.145321][ T9324] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 223.770109][ T9311] loop0: detected capacity change from 0 to 32768 [ 223.898160][ T9311] JBD2: Ignoring recovery information on journal [ 224.067026][ T9311] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 224.084890][ T9314] loop1: detected capacity change from 0 to 32768 [ 224.130681][ T9314] XFS: attr2 mount option is deprecated. [ 224.169094][ T9314] XFS: ikeep mount option is deprecated. [ 224.184373][ T9314] XFS: noikeep mount option is deprecated. [ 224.381626][ T29] audit: type=1800 audit(1734465871.172:61): pid=9311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1140" name="file1" dev="loop0" ino=16946 res=0 errno=0 [ 224.590106][ T9314] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.969013][ T5834] ocfs2: Unmounting device (7,0) on (node local) [ 225.008362][ T9314] XFS (loop1): Ending clean mount [ 225.667119][ T9368] loop5: detected capacity change from 0 to 40427 [ 225.686755][ T9314] XFS (loop1): Quotacheck needed: Please wait. [ 225.711362][ T9368] F2FS-fs (loop5): Image doesn't support compression [ 225.771415][ T9368] F2FS-fs (loop5): invalid crc value [ 225.971416][ T9368] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 225.993343][ T9314] XFS (loop1): Quotacheck: Done. [ 226.151531][ T9368] F2FS-fs (loop5): Start checkpoint disabled! [ 226.217644][ T5830] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.231410][ T9368] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 226.802863][ T9395] loop0: detected capacity change from 0 to 32768 [ 226.856651][ T9395] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1159 (9395) [ 226.917329][ T9387] loop6: detected capacity change from 0 to 32768 [ 226.954578][ T9387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1168 (9387) [ 226.967913][ T9395] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 226.996439][ T9395] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 227.015600][ T9395] BTRFS info (device loop0): using free-space-tree [ 227.267051][ T9387] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 227.295237][ T9387] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 227.333340][ T9387] BTRFS info (device loop6): using free-space-tree [ 228.091872][ T5834] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 228.605295][ T9478] loop1: detected capacity change from 0 to 32768 [ 228.683987][ T9478] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1193 (9478) [ 228.684458][ T8207] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.719690][ T9478] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 228.776143][ T9478] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 230.120263][ T9494] loop5: detected capacity change from 0 to 32768 [ 230.141319][ T9494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1195 (9494) [ 230.181600][ T9494] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.192275][ T9494] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 230.200907][ T9494] BTRFS info (device loop5): using free-space-tree [ 230.602053][ T9478] BTRFS info (device loop1): rebuilding free space tree [ 230.643583][ T9478] BTRFS info (device loop1): disabling free space tree [ 230.811686][ T9478] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.844841][ T9554] loop6: detected capacity change from 0 to 32768 [ 230.881370][ T9478] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.104549][ T9402] syz.2.1176 (9402): drop_caches: 1 [ 231.144201][ T9586] loop0: detected capacity change from 0 to 1024 [ 231.302096][ T9554] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 231.401449][ T9554] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 231.409848][ T9554] bcachefs (loop6): Version upgrade required: [ 231.409848][ T9554] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 231.409848][ T9554] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 231.409848][ T9554] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 231.540093][ T5832] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.597516][ T5830] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.645555][ T9554] bcachefs (loop6): dropping and reconstructing all alloc info [ 232.113816][ T9554] bcachefs (loop6): check_topology... done [ 232.119751][ T9554] bcachefs (loop6): accounting_read... done [ 232.250623][ T9554] bcachefs (loop6): alloc_read... done [ 232.294812][ T9554] bcachefs (loop6): stripes_read... done [ 232.346747][ T9554] bcachefs (loop6): snapshots_read... done [ 232.401431][ T9554] bcachefs (loop6): check_allocations... [ 232.438592][ T9621] loop5: detected capacity change from 0 to 64 [ 232.490135][ T9621] hfs: keylen 94 too large [ 232.745904][ T9636] loop1: detected capacity change from 0 to 732 [ 232.867213][ T9554] done [ 232.948435][ T9554] bcachefs (loop6): going read-write [ 233.072074][ T9554] bcachefs (loop6): done starting filesystem [ 233.307477][ T29] audit: type=1800 audit(1734465880.152:62): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1191" name="file1" dev="loop6" ino=536870912 res=0 errno=0 [ 233.524725][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 233.565765][ T8207] bcachefs (loop6): shutting down [ 233.570864][ T8207] bcachefs (loop6): going read-only [ 233.628642][ T8207] bcachefs (loop6): finished waiting for writes to stop [ 233.745285][ T9626] loop0: detected capacity change from 0 to 32768 [ 233.771562][ T8207] bcachefs (loop6): flushing journal and stopping allocators, journal seq 11 [ 233.780915][ T8207] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 11 [ 233.889564][ T8207] bcachefs (loop6): unshutdown complete, journal seq 12 [ 233.902561][ T9626] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.933588][ T8207] bcachefs (loop6): done going read-only, filesystem not clean [ 234.055024][ T9648] loop1: detected capacity change from 0 to 32768 [ 234.104656][ T9648] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1224 (9648) [ 234.130602][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 234.148082][ T9648] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 234.154293][ T8207] bcachefs (loop6): shutdown complete [ 234.158680][ T9648] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 234.172265][ T9648] BTRFS info (device loop1): using free-space-tree [ 234.294400][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.304578][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 234.313728][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.329493][ T5897] usb 3-1: config 0 descriptor?? [ 234.482659][ T9626] XFS (loop0): Ending clean mount [ 234.492997][ T9626] XFS (loop0): Quotacheck needed: Please wait. [ 234.660514][ T9626] XFS (loop0): Quotacheck: Done. [ 234.767790][ T5897] apple 0003:05AC:027A.0015: unknown main item tag 0x0 [ 234.804325][ T5897] apple 0003:05AC:027A.0015: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 234.821488][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.974143][ T5897] usb 3-1: USB disconnect, device number 10 [ 235.054660][ T5830] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 235.067928][ T5834] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.176717][ T9720] lo speed is unknown, defaulting to 1000 [ 235.191735][ T9720] lo speed is unknown, defaulting to 1000 [ 235.219235][ T9720] lo speed is unknown, defaulting to 1000 [ 235.323261][ T9720] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.397944][ T9720] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 235.620118][ T9720] lo speed is unknown, defaulting to 1000 [ 235.675964][ T9720] lo speed is unknown, defaulting to 1000 [ 235.720476][ T9720] lo speed is unknown, defaulting to 1000 [ 235.763451][ T9720] lo speed is unknown, defaulting to 1000 [ 235.782275][ T9720] lo speed is unknown, defaulting to 1000 [ 235.790797][ T9720] lo speed is unknown, defaulting to 1000 [ 235.931788][ T9739] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1242'. [ 236.561701][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.751860][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 236.792242][ T5897] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.822874][ T5897] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.849374][ T5897] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 236.889386][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.914309][ T5897] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 236.923941][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1259'. [ 236.981326][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.008643][ T5897] usb 5-1: config 0 descriptor?? [ 237.089520][ T9787] loop1: detected capacity change from 0 to 8 [ 237.156873][ T9789] loop5: detected capacity change from 0 to 128 [ 237.348419][ T9789] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.416070][ T9789] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.547910][ T5897] semitek 0003:1EA7:0907.0016: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0 [ 237.685147][ T5832] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.754338][ T8] usb 5-1: USB disconnect, device number 10 [ 238.136528][ T9810] loop0: detected capacity change from 0 to 256 [ 238.361343][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 238.523848][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.551689][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.601268][ T5896] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 238.629652][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.753131][ T5896] usb 6-1: config 0 descriptor?? [ 238.787978][ T29] audit: type=1326 audit(1734465885.632:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9829 comm="syz.4.1283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8a2b85d29 code=0x0 [ 238.864635][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1281'. [ 239.061994][ T5938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.226755][ T5896] wacom 0003:056A:0331.0017: item fetching failed at offset 2/5 [ 239.235405][ T5896] wacom 0003:056A:0331.0017: parse failed [ 239.241278][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 239.253043][ T5896] wacom 0003:056A:0331.0017: probe with driver wacom failed with error -22 [ 239.272797][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.291477][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.310561][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.344095][ T5938] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 239.390308][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.423403][ T5938] usb 3-1: config 0 descriptor?? [ 239.438485][ T5896] usb 6-1: USB disconnect, device number 8 [ 239.769489][ T9824] loop0: detected capacity change from 0 to 32768 [ 239.827142][ T9824] (syz.0.1280,9824,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.864458][ T5938] koneplus 0003:1E7D:2E22.0018: unknown main item tag 0x0 [ 239.874728][ T9824] (syz.0.1280,9824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 239.902107][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 239.911418][ T5938] koneplus 0003:1E7D:2E22.0018: unknown main item tag 0x0 [ 239.960051][ T5938] koneplus 0003:1E7D:2E22.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 240.063933][ T5938] koneplus 0003:1E7D:2E22.0018: couldn't init struct koneplus_device [ 240.073283][ T5938] koneplus 0003:1E7D:2E22.0018: couldn't install mouse [ 240.143382][ T9824] JBD2: Ignoring recovery information on journal [ 240.205580][ T5938] koneplus 0003:1E7D:2E22.0018: probe with driver koneplus failed with error -71 [ 240.242106][ T5938] usb 3-1: USB disconnect, device number 11 [ 240.282403][ T9824] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 240.490234][ T9824] [ 240.492351][ T9853] loop1: detected capacity change from 0 to 40427 [ 240.492771][ T9824] ====================================================== [ 240.506205][ T9824] WARNING: possible circular locking dependency detected [ 240.513223][ T9824] 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 Not tainted [ 240.520331][ T9824] ------------------------------------------------------ [ 240.527348][ T9824] syz.0.1280/9824 is trying to acquire lock: [ 240.533325][ T9824] ffff888075335100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_xattr_set+0xe9e/0x1930 [ 240.545559][ T9824] [ 240.545559][ T9824] but task is already holding lock: [ 240.552925][ T9824] ffff88805b5c9538 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930 [ 240.562445][ T9824] [ 240.562445][ T9824] which lock already depends on the new lock. [ 240.562445][ T9824] [ 240.572849][ T9824] [ 240.572849][ T9824] the existing dependency chain (in reverse order) is: [ 240.581864][ T9824] [ 240.581864][ T9824] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}: [ 240.589724][ T9824] lock_acquire+0x1ed/0x550 [ 240.594788][ T9824] down_read+0xb1/0xa40 [ 240.599496][ T9824] ocfs2_init_acl+0x397/0x930 [ 240.604714][ T9824] ocfs2_mknod+0x1c05/0x2b30 [ 240.609854][ T9824] ocfs2_create+0x1ab/0x470 [ 240.614899][ T9824] vfs_create+0x23e/0x3d0 [ 240.619759][ T9824] do_mknodat+0x447/0x5b0 [ 240.624626][ T9824] __x64_sys_mknod+0x8c/0xa0 [ 240.629739][ T9824] do_syscall_64+0xf3/0x230 [ 240.634780][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.641211][ T9824] [ 240.641211][ T9824] -> #1 (jbd2_handle){++++}-{0:0}: [ 240.648525][ T9824] lock_acquire+0x1ed/0x550 [ 240.653558][ T9824] jbd2_journal_lock_updates+0xaa/0x380 [ 240.659637][ T9824] __ocfs2_flush_truncate_log+0x2ea/0x1240 [ 240.665968][ T9824] ocfs2_flush_truncate_log+0x4f/0x70 [ 240.671866][ T9824] ocfs2_sync_fs+0x125/0x390 [ 240.676987][ T9824] sync_filesystem+0x1ca/0x230 [ 240.682280][ T9824] generic_shutdown_super+0x72/0x2d0 [ 240.688104][ T9824] kill_block_super+0x44/0x90 [ 240.693307][ T9824] deactivate_locked_super+0xc6/0x130 [ 240.699217][ T9824] cleanup_mnt+0x41f/0x4b0 [ 240.704167][ T9824] task_work_run+0x251/0x310 [ 240.709291][ T9824] syscall_exit_to_user_mode+0x13f/0x340 [ 240.715463][ T9824] do_syscall_64+0x100/0x230 [ 240.720594][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.727023][ T9824] [ 240.727023][ T9824] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}: [ 240.737623][ T9824] validate_chain+0x18ef/0x5920 [ 240.743078][ T9824] __lock_acquire+0x1397/0x2100 [ 240.748486][ T9824] lock_acquire+0x1ed/0x550 [ 240.753741][ T9824] down_write+0x99/0x220 [ 240.758507][ T9824] ocfs2_xattr_set+0xe9e/0x1930 [ 240.763886][ T9824] __vfs_setxattr+0x46a/0x4a0 [ 240.769094][ T9824] __vfs_setxattr_noperm+0x12e/0x660 [ 240.774911][ T9824] vfs_setxattr+0x221/0x430 [ 240.779941][ T9824] filename_setxattr+0x2af/0x430 [ 240.785410][ T9824] path_setxattrat+0x440/0x510 [ 240.790712][ T9824] __x64_sys_setxattr+0xbc/0xe0 [ 240.796097][ T9824] do_syscall_64+0xf3/0x230 [ 240.801144][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.807584][ T9824] [ 240.807584][ T9824] other info that might help us debug this: [ 240.807584][ T9824] [ 240.817811][ T9824] Chain exists of: [ 240.817811][ T9824] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 240.817811][ T9824] [ 240.833607][ T9824] Possible unsafe locking scenario: [ 240.833607][ T9824] [ 240.841063][ T9824] CPU0 CPU1 [ 240.846434][ T9824] ---- ---- [ 240.851801][ T9824] lock(&oi->ip_xattr_sem); [ 240.856404][ T9824] lock(jbd2_handle); [ 240.863004][ T9824] lock(&oi->ip_xattr_sem); [ 240.870125][ T9824] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 240.877435][ T9824] [ 240.877435][ T9824] *** DEADLOCK *** [ 240.877435][ T9824] [ 240.885609][ T9824] 3 locks held by syz.0.1280/9824: [ 240.890749][ T9824] #0: ffff888034cda420 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 240.900100][ T9824] #1: ffff88805b5c9800 (&type->i_mutex_dir_key#23){++++}-{4:4}, at: vfs_setxattr+0x1e1/0x430 [ 240.910538][ T9824] #2: ffff88805b5c9538 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930 [ 240.920505][ T9824] [ 240.920505][ T9824] stack backtrace: [ 240.926393][ T9824] CPU: 1 UID: 0 PID: 9824 Comm: syz.0.1280 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 240.937072][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 240.947132][ T9824] Call Trace: [ 240.950414][ T9824] [ 240.953349][ T9824] dump_stack_lvl+0x241/0x360 [ 240.958050][ T9824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.963270][ T9824] ? __pfx__printk+0x10/0x10 [ 240.967883][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.973532][ T9824] print_circular_bug+0x13a/0x1b0 [ 240.978582][ T9824] check_noncircular+0x36a/0x4a0 [ 240.983554][ T9824] ? __pfx_check_noncircular+0x10/0x10 [ 240.989036][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 240.994675][ T9824] ? lockdep_lock+0x123/0x2b0 [ 240.999366][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.005018][ T9824] validate_chain+0x18ef/0x5920 [ 241.009903][ T9824] ? __pfx_validate_chain+0x10/0x10 [ 241.015118][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.020757][ T9824] ? stack_trace_save+0x118/0x1d0 [ 241.025787][ T9824] ? __pfx_lock_acquire+0x10/0x10 [ 241.030832][ T9824] ? __pfx_stack_trace_save+0x10/0x10 [ 241.036222][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.041865][ T9824] ? look_up_lock_class+0x77/0x170 [ 241.046995][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.052636][ T9824] ? register_lock_class+0x102/0x980 [ 241.057934][ T9824] ? __pfx_register_lock_class+0x10/0x10 [ 241.063582][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.069224][ T9824] ? mark_lock+0x9a/0x360 [ 241.073572][ T9824] __lock_acquire+0x1397/0x2100 [ 241.078453][ T9824] lock_acquire+0x1ed/0x550 [ 241.082967][ T9824] ? ocfs2_xattr_set+0xe9e/0x1930 [ 241.088008][ T9824] ? __pfx_lock_acquire+0x10/0x10 [ 241.093044][ T9824] ? do_raw_spin_unlock+0x13c/0x8b0 [ 241.098259][ T9824] ? __pfx___might_resched+0x10/0x10 [ 241.103557][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.109202][ T9824] ? _raw_spin_unlock+0x28/0x50 [ 241.114063][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.119702][ T9824] ? ocfs2_inode_lock_tracker+0x45a/0x760 [ 241.125445][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.131083][ T9824] ? ocfs2_xattr_block_find+0x17e/0x540 [ 241.136646][ T9824] down_write+0x99/0x220 [ 241.140895][ T9824] ? ocfs2_xattr_set+0xe9e/0x1930 [ 241.145927][ T9824] ? __pfx_down_write+0x10/0x10 [ 241.150779][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.156422][ T9824] ? __kmalloc_cache_noprof+0x243/0x390 [ 241.161985][ T9824] ? ocfs2_xattr_set+0x4d5/0x1930 [ 241.167027][ T9824] ocfs2_xattr_set+0xe9e/0x1930 [ 241.171899][ T9824] ? __pfx_ocfs2_xattr_set+0x10/0x10 [ 241.177202][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.182846][ T9824] ? register_lock_class+0x102/0x980 [ 241.188146][ T9824] ? __pfx_register_lock_class+0x10/0x10 [ 241.193798][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.199449][ T9824] ? mark_lock+0x9a/0x360 [ 241.203819][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.209465][ T9824] ? aa_get_newest_label+0xff/0x6f0 [ 241.214677][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.220318][ T9824] ? evm_protected_xattr_common+0x181/0x1a0 [ 241.226222][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.231867][ T9824] ? evm_protect_xattr+0x76f/0xb30 [ 241.236992][ T9824] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 241.242474][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.248116][ T9824] ? __pfx_ocfs2_xattr_security_set+0x10/0x10 [ 241.254200][ T9824] __vfs_setxattr+0x46a/0x4a0 [ 241.258901][ T9824] __vfs_setxattr_noperm+0x12e/0x660 [ 241.264207][ T9824] vfs_setxattr+0x221/0x430 [ 241.268760][ T9824] ? __pfx_vfs_setxattr+0x10/0x10 [ 241.273835][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.279493][ T9824] filename_setxattr+0x2af/0x430 [ 241.284468][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.290121][ T9824] ? __phys_addr_symbol+0x2f/0x70 [ 241.295181][ T9824] ? __pfx_filename_setxattr+0x10/0x10 [ 241.300764][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.306423][ T9824] ? getname_flags+0x1e3/0x540 [ 241.311222][ T9824] path_setxattrat+0x440/0x510 [ 241.316026][ T9824] ? __pfx_path_setxattrat+0x10/0x10 [ 241.321350][ T9824] ? do_sys_openat2+0x17a/0x1d0 [ 241.326245][ T9824] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.332004][ T9824] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 241.338028][ T9824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.344385][ T9824] __x64_sys_setxattr+0xbc/0xe0 [ 241.349263][ T9824] do_syscall_64+0xf3/0x230 [ 241.353801][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.359731][ T9824] RIP: 0033:0x7f52a5585d29 [ 241.364162][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.383800][ T9824] RSP: 002b:00007f52a639f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 241.392251][ T9824] RAX: ffffffffffffffda RBX: 00007f52a5775fa0 RCX: 00007f52a5585d29 [ 241.400236][ T9824] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 00000000200003c0 [ 241.408223][ T9824] RBP: 00007f52a5601a20 R08: 0000000000000001 R09: 0000000000000000 [ 241.416204][ T9824] R10: 00000000000000a6 R11: 0000000000000246 R12: 0000000000000000 [ 241.424185][ T9824] R13: 0000000000000000 R14: 00007f52a5775fa0 R15: 00007ffd60b20f08 [ 241.432175][ T9824] [ 241.566014][ T9853] F2FS-fs (loop1): Found nat_bits in checkpoint [ 241.613335][ T9864] loop5: detected capacity change from 0 to 32768 [ 241.687675][ T9853] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 241.707556][ T5834] ocfs2: Unmounting device (7,0) on (node local)