last executing test programs: 1m15.672600089s ago: executing program 4 (id=274): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) 1m15.35716898s ago: executing program 4 (id=278): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m15.114522294s ago: executing program 4 (id=280): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) 1m14.909924726s ago: executing program 4 (id=283): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a26f2c6a42c1df48b34291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m14.168514806s ago: executing program 4 (id=288): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl726\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0x4000000e, 0x4, 0x2, 0x2, 0x2000007, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffffb]}) 1m12.995367385s ago: executing program 4 (id=302): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 1m12.690956947s ago: executing program 32 (id=302): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 2.934243483s ago: executing program 2 (id=973): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 2.827414943s ago: executing program 3 (id=975): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 2.751987709s ago: executing program 3 (id=976): mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="66643dd266e68caba01ca2113a99972a6fd574daf64a08ff28982c490303270edd4a303b87a84110abe07815169fa25b58f85a8fbd65a50fc8eda95b2997eab40ec7bf9f086a1b8111d318cdd2dd293c2db50001f26b", @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000010000']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='c '], 0x45) 2.679583085s ago: executing program 3 (id=977): setuid(0xee01) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11}}) 2.424050697s ago: executing program 3 (id=979): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x2, {0x2, 0x22}}, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x3, "cab34c88"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x1, 0x2, 0x1, '-'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffff, 0x6, 0x1, {0x22, 0xbfe}}}}, &(0x7f00000003c0)={0x2c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000340), 0x0}) 2.326509169s ago: executing program 2 (id=982): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@nodecompose}, {@nodecompose}, {@barrier}, {@uid={'uid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'cp932'}}, {@gid={'gid', 0x3d, 0xee01}}, {}, {@nobarrier}]}, 0xff, 0x6bb, &(0x7f0000001f80)="$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") lstat(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x49082, 0x0, 0x0, 0x0, 0x0) 1.966987481s ago: executing program 5 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.90760565s ago: executing program 2 (id=988): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) 1.805250211s ago: executing program 0 (id=990): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.672004526s ago: executing program 5 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001a00010003000000000000000a000000000000000000000008000500"], 0x2c}}, 0x8800) 1.598720192s ago: executing program 1 (id=992): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1c, "36226b655d24d151282187c47adb6568fb2b366b1a0ef0f996b62dc9"}, &(0x7f0000000040)=0x24) 1.513926996s ago: executing program 0 (id=993): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x26, 0x35d, &(0x7f0000000540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) 1.435850451s ago: executing program 5 (id=994): r0 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0xa01a}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000940)="bb9bd933e35dfca1", 0x8}], 0x1) 1.435556761s ago: executing program 1 (id=995): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = getpgid(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x80000000, 0xff, r1}) 1.435374861s ago: executing program 2 (id=996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0) 1.308476127s ago: executing program 1 (id=997): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r1}) 1.178116752s ago: executing program 2 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 1.103675219s ago: executing program 1 (id=999): r0 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4c092, r0, 0x0) fallocate(r0, 0x3, 0x8dc, 0xfffffffb) 974.793584ms ago: executing program 2 (id=1000): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 958.081421ms ago: executing program 1 (id=1001): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000001040)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x1, 0x152b, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r0, 0x0, 0x80000000) 775.829227ms ago: executing program 0 (id=1002): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r0, &(0x7f00000001c0)=""/40, 0x28) getdents(r0, 0xffffffffffffffff, 0x18) 677.847788ms ago: executing program 1 (id=1003): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000280)={[{@quota}, {@noquota}, {@noquota}, {@uid}, {@uid}, {@errors_continue}, {@uid={'uid', 0x3d, r1}}, {@discard}, {@grpquota}]}, 0x1, 0x60e1, &(0x7f0000006400)="$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") 594.817433ms ago: executing program 0 (id=1004): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001e40), 0x101000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 455.954606ms ago: executing program 5 (id=1005): creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 398.727686ms ago: executing program 3 (id=1006): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000340)=ANY=[], 0x1, 0x6bb, &(0x7f0000000f40)="$eJzs3c1vXFfdB/DvHY8dT9ombpq0eR5VqtVIgIhI7FgpmA0BIWSkCqGyYG0lTmNlkhbHRW6FqMPrtov+Ad1kg1ghsWITqbBgA7vukJeVkNh0g1kNujN3XjJ+m+bF45TPJ7pzzj3nnnN/93fvnbfImgD/s5bOp34/RZbOv75Rrm/dW2hu3Vu41a0nOZZkM6knqSUp/t1qtT5OriRFb5piqNzhw9XFNz75bOvTzlq9Wtrb1/YbN6TabnOoebPbNptkoiofwQPzXX3k+Ype5FeSnKtKGLvJJK3WZFo9P/nrs72esvNkp2zsNnr68AIFnpii87pZvhjXBttnkuPVjV6+D+i+8tbGEuQIjo243fA7CAAAAHjajPIZ+OR2trNRnDiEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOALYbP/+/9FtdS69dkU3d//n6raUtWPllc+3+b3n1QcAAAAAAAAAHCIXtnOdjZyorveKtr/5/9qe+V0+/GZvJM7WclaLmQjy1nPetYyn2RmYKKpjeX19bX5EUZe2nXkpQMCPVaVjcdz3AAAAAAAAADwBfOLLPX//x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6CIpnoFCnuDjTPpFZPMp1kqmzYTP7erT/N7o87AAAAADgEJ7eznY2c6K63ipxO8mL7O4DpvJPbWc9q1tPMSq61vxfofOqvbd1baG7dW7hVLjvn/fa/HlidPiCM9ozpfPew+57Ptrdo5HpW2y0XcjVvpZlrqbVHls5W8XRnHYrrbhlT8a3KiAm6VpXlkX9QlTu8P+Jk+xv+MqWx/xcsM+2MTPYyMlfFVmbj+e6Z2f0MDZ2dgwzvaT61XmCnh/Y0FPBD5fx4VZbH85u9cj4Ww5m4NHD1vbh/zpMv//H3P56r6kfnkEYzUZWt9mNjZyYWBjLx0iiZuNG8ffPG9Tvnn7ZM7DDXzsSZ3vpSvpcf5Xxm88OsZTU/zXLWs5LZfLddW65OfjFwe++RqSudYnK33S71E9fN+1R1hU5UrZ8nplfbY09kNT/IW7mWlbzW/ncp8/l6LudyFgfO8Jn9z3D7rq89cNf3XwFaz+2axnNfqSrl095vq3JXe3Y8KWVenx/I6+Bz7ky7b7Cln6VTB2epTMsDz41/2j+U+v9XlXIfvxw49+M3nIn5gUy8sF8muhfynebtm2s3lt8ebXenPhgY/usj9ZRaXi+nypOV7gnqXx1l3wvdvqF8lX2ne321HX1nen2dO3Vzzzt1qnoPt3OmS+2+l3btW2j3nR3o2+391sHv5gAYs+NfPT7V+Gfjb42PGr9q3Gi8Pv2dY9849vJUJv88+c363MSXai8Xf8hH+Xn/8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDw7rz73s3lZnNlbajSarXe36Or2TqZ7NH1cJXanmGUlfoBoe6oZPYfz5QDui2t9Lq6P2f2GIM/qPJ/zyajj6p+gSedlvrjzfMYK/9ptVpVS7HHNr/7y85EPTdS6qZGvzYOqExXV3jlSKSuqtQPeadjekICDs3F9VtvX7zz7ntfW721/ObKmyu3Fy9fXpxbvPzawsXrq82Vuc7juKMEnoT+i/64IwEAAAAAAAAAAABGNdrfA+SR/pxg3McIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPN2Wzqd+P0Xm5y7Mletb9xaa5dKt97esJ6klKX6WFB8nV9JZMjMwXbHXfj5cXXzjk8+2Pu3PVS75/tUDxo1ms1oym2SiU959XPNdrcp9FfsdQtE7wjJh57qJg3H7bwAAAP//EOj9JQ==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x32520a3, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x10820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 367.76516ms ago: executing program 0 (id=1007): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0xc0) 271.965692ms ago: executing program 5 (id=1008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000001540)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001580)="db", 0x1}], 0x1}}, {{&(0x7f0000001640)={0xa, 0x4e22, 0x171600, @loopback, 0x269}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000001680)="b5", 0x1}], 0x1}}], 0x2, 0x4000001) 172.190783ms ago: executing program 0 (id=1009): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000280)={r1, 0x0, 0x0, 0x9, 0xa7b, 0x2, 0x7fff, 0x200, 0x6, 0xffffff81, 0x0, 0x3c996b17}) 58.136521ms ago: executing program 3 (id=1010): socket(0x2, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') read$FUSE(r0, &(0x7f0000001900)={0x2020}, 0x2020) 0s ago: executing program 5 (id=1011): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b1bf392818f68c2ef4b7feda5"}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0x3, 0x6}]}}, 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) kernel console output (not intermixed with test programs): dit: type=1326 audit(1773317011.593:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4365 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9da259c799 code=0x7ffc0000 [ 69.541191][ T4375] hpfs: filesystem error: improperly stopped [ 69.557506][ T27] audit: type=1326 audit(1773317011.593:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4365 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da259c799 code=0x7ffc0000 [ 69.593548][ T4375] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 69.646240][ T4375] hpfs: You really don't want any checks? You are crazy... [ 69.683299][ T4375] hpfs: hpfs_map_sector(): read error [ 69.695934][ T27] audit: type=1326 audit(1773317011.593:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4365 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da259c799 code=0x7ffc0000 [ 69.733281][ T4375] hpfs: code page support is disabled [ 69.762632][ T4375] hpfs: hpfs_map_4sectors(): unaligned read [ 69.789107][ T4375] hpfs: hpfs_map_4sectors(): unaligned read [ 69.804363][ T4394] loop4: detected capacity change from 0 to 512 [ 69.811098][ T4375] hpfs: filesystem error: unable to find root dir [ 69.849810][ T4394] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.862203][ T4394] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.16: inode has both inline data and extents flags [ 69.887643][ T4394] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.16: couldn't read orphan inode 15 (err -117) [ 69.911321][ T4394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.049737][ T4394] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 70.144672][ T4401] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 70.195454][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 70.329541][ T4403] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 70.365272][ T4406] loop4: detected capacity change from 0 to 8 [ 70.576445][ T4412] capability: warning: `syz.3.24' uses 32-bit capabilities (legacy support in use) [ 70.640891][ T4397] loop0: detected capacity change from 0 to 32768 [ 70.683528][ T4397] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4397) [ 70.796013][ T4397] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 70.881196][ T4397] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 70.918431][ T4397] BTRFS info (device loop0): using free space tree [ 71.190870][ T4397] BTRFS info (device loop0): enabling ssd optimizations [ 71.433526][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440172][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.474223][ T4267] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 71.782880][ T4425] loop4: detected capacity change from 0 to 40427 [ 71.823658][ T4425] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 71.838621][ T4425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.871262][ T4469] tipc: Started in network mode [ 71.876613][ T4469] tipc: Node identity 000000005f003a000000000000000001, cluster identity 4711 [ 71.888306][ T4469] tipc: Enabling of bearer rejected, failed to enable media [ 71.896801][ T4425] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.047572][ T4385] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (4385) [ 72.070340][ T4425] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.099948][ T4425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.247876][ T4425] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 72.314422][ T4483] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 72.734551][ T4493] loop2: detected capacity change from 0 to 256 [ 72.807475][ T4493] exfat: Deprecated parameter 'utf8' [ 72.844301][ T4493] exfat: Deprecated parameter 'utf8' [ 72.911749][ T4493] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 72.968239][ T4353] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.062371][ T4474] loop3: detected capacity change from 0 to 32768 [ 73.178902][ T4353] usb 1-1: Using ep0 maxpacket: 32 [ 73.195848][ T4353] usb 1-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 73.239072][ T4353] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 73.248733][ T4353] usb 1-1: config 0 has no interface number 0 [ 73.254909][ T4353] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.268380][ T4353] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.279317][ T4353] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 73.288500][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.301423][ T4353] usb 1-1: config 0 descriptor?? [ 73.318606][ T4474] XFS (loop3): Mounting V5 Filesystem [ 73.331268][ T4487] loop1: detected capacity change from 0 to 32768 [ 73.447055][ T4487] (syz.1.46,4487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.499690][ T4474] XFS (loop3): Ending clean mount [ 73.531339][ T4487] (syz.1.46,4487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.649614][ T4508] loop2: detected capacity change from 0 to 4096 [ 73.719208][ T4281] XFS (loop3): Unmounting Filesystem [ 73.730460][ T4353] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0 [ 73.737773][ T4353] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0 [ 73.782777][ T4487] JBD2: Ignoring recovery information on journal [ 73.842855][ T4353] corsair 0003:1B1C:1B34.0001: failed to start in urb: -90 [ 73.903262][ T4353] corsair 0003:1B1C:1B34.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input1 [ 73.941898][ T4487] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 74.012415][ T4353] usb 1-1: USB disconnect, device number 2 [ 74.379538][ T4520] fido_id[4520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 74.493002][ T4269] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 74.514816][ T4269] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.614081][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 74.734320][ T4532] loop2: detected capacity change from 0 to 512 [ 74.763519][ T4530] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 74.812705][ T4532] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 74.845313][ T4532] System zones: 1-12 [ 74.880470][ T4532] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.59: Directory hole found for htree index block 0 [ 74.979605][ T4532] EXT4-fs (loop2): Remounting filesystem read-only [ 75.005115][ T4532] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 75.019639][ T4540] loop3: detected capacity change from 0 to 1024 [ 75.048194][ T4532] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.59: Directory hole found for htree index block 0 [ 75.087630][ T4532] EXT4-fs (loop2): Remounting filesystem read-only [ 75.094614][ T4532] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 75.108612][ T4532] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.260681][ T4532] EXT4-fs: group quota file already specified [ 75.305388][ T4547] loop4: detected capacity change from 0 to 1024 [ 75.326237][ T4547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.334834][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 75.366850][ T4547] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.442502][ T75] hfsplus: b-tree write err: -5, ino 25 [ 75.449670][ T4547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 75.468301][ T4547] System zones: 0-1, 3-36 [ 75.493098][ T75] hfsplus: b-tree write err: -5, ino 4 [ 75.508175][ T4547] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.523948][ T75] hfsplus: b-tree write err: -5, ino 2 [ 75.544834][ T75] hfsplus: b-tree write err: -5, ino 26 [ 75.624933][ T4538] loop0: detected capacity change from 0 to 32768 [ 75.684268][ T4538] XFS (loop0): Mounting V5 Filesystem [ 75.729173][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 75.806296][ T4538] XFS (loop0): Ending clean mount [ 76.148280][ T4267] XFS (loop0): Unmounting Filesystem [ 76.534487][ T4581] loop3: detected capacity change from 0 to 256 [ 76.538182][ T4464] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.553919][ T1190] cfg80211: failed to load regulatory.db [ 76.587305][ T4581] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 76.778115][ T4464] usb 2-1: Using ep0 maxpacket: 16 [ 76.785954][ T4464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.818134][ T4464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 76.848112][ T4464] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.888138][ T4464] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 76.897348][ T4464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.997522][ T4464] usb 2-1: config 0 descriptor?? [ 77.028345][ T4567] loop2: detected capacity change from 0 to 32768 [ 77.075622][ T4567] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.71 (4567) [ 77.130181][ T4567] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 77.165450][ T4567] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 77.228239][ T4567] BTRFS info (device loop2): force zlib compression, level 3 [ 77.248156][ T4567] BTRFS info (device loop2): force clearing of disk cache [ 77.255832][ T4567] BTRFS info (device loop2): setting nodatasum [ 77.283336][ T4591] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 77.308252][ T4567] BTRFS info (device loop2): allowing degraded mounts [ 77.315133][ T4567] BTRFS info (device loop2): enabling disk space caching [ 77.368184][ T4567] BTRFS info (device loop2): disk space caching is enabled [ 77.431422][ T4464] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0002/input/input5 [ 77.554771][ T4464] sony 0003:054C:03D5.0002: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 77.690051][ T4320] usb 2-1: USB disconnect, device number 2 [ 77.700347][ T4567] BTRFS info (device loop2): rebuilding free space tree [ 77.826953][ T4567] BTRFS info (device loop2): disabling free space tree [ 77.888306][ T4567] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.899385][ T4579] loop4: detected capacity change from 0 to 40427 [ 77.928179][ T4567] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.950686][ T4579] F2FS-fs (loop4): invalid crc value [ 77.991709][ T4579] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.001997][ T4613] fido_id[4613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 78.163766][ T4579] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 78.196676][ T4579] F2FS-fs (loop4): Start checkpoint disabled! [ 78.248993][ T4579] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 78.340814][ T4567] BTRFS info (device loop2): balance: start [ 78.377439][ T4567] BTRFS info (device loop2): balance: ended with status: 0 [ 78.610105][ T75] kworker/u4:4: attempt to access beyond end of device [ 78.610105][ T75] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.643732][ T4269] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 78.782590][ T4638] loop1: detected capacity change from 0 to 1024 [ 78.831430][ T4638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.944314][ T4638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.217603][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 79.307815][ T4659] loop0: detected capacity change from 0 to 16 [ 79.359104][ T4659] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 79.628171][ T4643] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 79.655319][ T4670] loop1: detected capacity change from 0 to 1024 [ 79.800309][ T4670] hfsplus: bad catalog entry type [ 79.829865][ T4643] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 79.858368][ T4643] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.910306][ T4643] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.951077][ T4643] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 80.008104][ T4643] usb 4-1: config 0 interface 0 has no altsetting 0 [ 80.014793][ T4643] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 80.054751][ T4643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.076922][ T4643] usb 4-1: config 0 descriptor?? [ 80.090552][ T33] hfsplus: b-tree write err: -5, ino 25 [ 80.096617][ T33] hfsplus: b-tree write err: -5, ino 4 [ 80.117171][ T33] hfsplus: b-tree write err: -5, ino 2 [ 80.228717][ T4688] team0: Device vlan2 is already an upper device of the team interface [ 80.369092][ T4642] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.451482][ T4694] loop0: detected capacity change from 0 to 512 [ 80.500194][ T4643] hid-alps 0003:044E:120C.0003: unbalanced delimiter at end of report description [ 80.524973][ T4643] hid-alps 0003:044E:120C.0003: parse failed [ 80.534291][ T4643] hid-alps: probe of 0003:044E:120C.0003 failed with error -22 [ 80.552079][ T4694] FAT-fs (loop0): FAT read failed (blocknr 1568) [ 80.567795][ T4694] FAT-fs (loop0): FAT read failed (blocknr 1568) [ 80.596020][ T4642] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 80.615422][ T4642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.648898][ T4642] usb 5-1: config 0 descriptor?? [ 80.681530][ T4642] cp210x 5-1:0.0: cp210x converter detected [ 80.756988][ T4320] usb 4-1: USB disconnect, device number 2 [ 80.772080][ T4691] loop2: detected capacity change from 0 to 32768 [ 81.300791][ T4642] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 81.330322][ T4642] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 81.358839][ T4642] usb 5-1: cp210x converter now attached to ttyUSB0 [ 81.392777][ T4642] usb 5-1: USB disconnect, device number 2 [ 81.480451][ T4642] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 81.499985][ T4642] cp210x 5-1:0.0: device disconnected [ 81.666032][ T4723] loop3: detected capacity change from 0 to 128 [ 81.694702][ T4724] loop0: detected capacity change from 0 to 1024 [ 81.755425][ T4724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.774628][ T4723] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 81.883209][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 81.913460][ T4281] sysv_free_block: trying to free block not in datazone [ 82.016526][ T4281] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 82.071187][ T4728] loop2: detected capacity change from 0 to 4096 [ 82.118902][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 82.130015][ T4286] CPU: 0 PID: 4286 Comm: kworker/u5:9 Not tainted syzkaller #0 [ 82.137605][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.140029][ T4734] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.147751][ T4286] Workqueue: hci0 hci_rx_work [ 82.147828][ T4286] Call Trace: [ 82.147839][ T4286] [ 82.147862][ T4286] dump_stack_lvl+0x188/0x24e [ 82.147892][ T4286] ? show_regs_print_info+0x12/0x12 [ 82.147918][ T4286] ? load_image+0x400/0x400 [ 82.147951][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 82.147980][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 82.148006][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 82.148029][ T4286] kobject_add_internal+0x61c/0xcc0 [ 82.148055][ T4286] kobject_add+0x160/0x230 [ 82.148080][ T4286] ? kobject_init+0x1d0/0x1d0 [ 82.148105][ T4286] ? klist_children_get+0x50/0x50 [ 82.148127][ T4286] ? get_device_parent+0x121/0x3f0 [ 82.148158][ T4286] device_add+0x483/0xfb0 [ 82.148185][ T4286] ? kmem_cache_free+0xf7/0x290 [ 82.148215][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 82.148242][ T4286] le_conn_complete_evt+0x105f/0x1670 [ 82.148279][ T4286] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 82.148306][ T4286] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 82.254702][ T4286] ? skb_pull_data+0xf7/0x200 [ 82.259396][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 82.264989][ T4286] ? hci_remote_host_features_evt+0x270/0x270 [ 82.271061][ T4286] hci_event_packet+0x7b6/0x1280 [ 82.276008][ T4286] ? bis_list+0x280/0x280 [ 82.280335][ T4286] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 82.286238][ T4286] ? kcov_remote_start+0x4c7/0x7e0 [ 82.291350][ T4286] ? spurious_interrupt+0x80/0xd0 [ 82.296410][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 82.301651][ T4286] hci_rx_work+0x3eb/0xd40 [ 82.306079][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 82.310935][ T4286] ? process_one_work+0x7b0/0x1160 [ 82.316047][ T4286] process_one_work+0x8a2/0x1160 [ 82.320994][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 82.326631][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 82.331657][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 82.337200][ T4286] ? kthread_data+0x4b/0xc0 [ 82.341713][ T4286] worker_thread+0xaa2/0x1270 [ 82.346438][ T4286] ? __kthread_parkme+0x162/0x1c0 [ 82.351485][ T4286] kthread+0x29d/0x330 [ 82.355558][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 82.360593][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 82.365180][ T4286] ret_from_fork+0x1f/0x30 [ 82.369606][ T4286] [ 82.375503][ T4286] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.388852][ T4286] Bluetooth: hci0: failed to register connection device [ 82.446559][ T4712] loop1: detected capacity change from 0 to 32768 [ 82.464743][ T4737] loop4: detected capacity change from 0 to 64 [ 82.604444][ T4712] XFS (loop1): Mounting V5 Filesystem [ 82.616114][ T4737] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 82.796998][ T4712] XFS (loop1): Ending clean mount [ 82.854886][ T4712] XFS (loop1): Quotacheck needed: Please wait. [ 82.995097][ T4712] XFS (loop1): Quotacheck: Done. [ 83.293262][ T4268] XFS (loop1): Unmounting Filesystem [ 83.315771][ T4757] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 83.448388][ T4757] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 84.256838][ T4768] set_capacity_and_notify: 2 callbacks suppressed [ 84.256852][ T4768] loop2: detected capacity change from 0 to 32768 [ 84.316058][ T4768] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.144 (4768) [ 84.341574][ T4786] loop1: detected capacity change from 0 to 1024 [ 84.397300][ T4768] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 84.443076][ T4768] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 84.467101][ T4784] loop0: detected capacity change from 0 to 4096 [ 84.504985][ T4768] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 84.559980][ T4768] BTRFS info (device loop2): use zstd compression, level 3 [ 84.584125][ T4786] Process accounting resumed [ 84.612502][ T4787] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.628988][ T4768] BTRFS info (device loop2): using free space tree [ 84.660892][ T4319] hfsplus: b-tree write err: -5, ino 25 [ 84.666742][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 84.718498][ T4319] hfsplus: b-tree write err: -5, ino 2 [ 84.767230][ T4319] hfsplus: b-tree write err: -5, ino 20 [ 84.912358][ T4773] loop3: detected capacity change from 0 to 32768 [ 85.008490][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 85.130584][ T4768] BTRFS info (device loop2): enabling ssd optimizations [ 85.245066][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'. [ 85.338843][ T4782] loop4: detected capacity change from 0 to 32768 [ 85.355579][ T4269] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.694876][ T4611] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop2 scanned by udevd (4611) [ 86.043044][ T4829] loop3: detected capacity change from 0 to 512 [ 86.115909][ T4829] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.156856][ T4829] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 86.174059][ T4463] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.274066][ T4829] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.161: inode #15: comm syz.3.161: iget: illegal inode # [ 86.357187][ T4829] EXT4-fs (loop3): Remounting filesystem read-only [ 86.374059][ T4829] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.161: couldn't read orphan inode 15 (err -117) [ 86.398266][ T4463] usb 1-1: Using ep0 maxpacket: 32 [ 86.409977][ T4463] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 86.423821][ T4829] EXT4-fs (loop3): Remounting filesystem read-only [ 86.431647][ T4829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.438115][ T4463] usb 1-1: config 0 has no interface number 0 [ 86.493329][ T4463] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 86.555007][ T4813] loop1: detected capacity change from 0 to 40427 [ 86.568121][ T4463] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.598961][ T4463] usb 1-1: Product: syz [ 86.603188][ T4463] usb 1-1: Manufacturer: syz [ 86.637239][ T4463] usb 1-1: SerialNumber: syz [ 86.653307][ T4813] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.673776][ T4463] usb 1-1: config 0 descriptor?? [ 86.685218][ T4813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.700079][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 86.712819][ T4463] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 86.767334][ T4813] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 86.831802][ T4813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.917921][ T4463] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 86.982082][ T4463] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 87.064450][ T4813] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.072330][ T4813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.225184][ T4813] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 87.372582][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 87.374075][ T4320] usb 1-1: USB disconnect, device number 3 [ 87.461187][ T4320] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 87.488669][ T4320] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 87.500438][ T4320] quatech2 1-1:0.51: device disconnected [ 87.789323][ T4871] loop1: detected capacity change from 0 to 512 [ 87.860001][ T4871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.884389][ T4871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 87.942863][ T4871] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.951688][ T4871] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 87.967195][ T4871] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 87.989749][ T4871] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.174: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 88.016646][ T4854] loop4: detected capacity change from 0 to 32768 [ 88.042251][ T4871] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.174: couldn't read orphan inode 13 (err -117) [ 88.055815][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 88.102566][ T4871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.135879][ T4871] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 88.157602][ T4871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2842c09c, mo2=0002] [ 88.208447][ T4871] System zones: 0-2, 18-18, 34-34 [ 88.214662][ T4871] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 88.298264][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.359476][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 88.500337][ T4316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.516053][ T4889] loop1: detected capacity change from 0 to 512 [ 88.535953][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.550446][ T4889] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.558851][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.616632][ T4316] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 88.639614][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.688556][ T4316] usb 1-1: config 0 descriptor?? [ 88.690770][ T4889] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 88.772183][ T4889] FAT-fs (loop1): Filesystem has been set read-only [ 88.818541][ T4889] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 88.846482][ T4889] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 88.870826][ T4897] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 89.114931][ T4316] wacom 0003:056A:0010.0004: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 89.203161][ T4316] wacom 0003:056A:0010.0004: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.0-1/input0 [ 89.250394][ T4316] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0010.0004/input/input6 [ 89.254001][ T4905] EXT4-fs: inline encryption not supported [ 89.388644][ T4316] usb 1-1: USB disconnect, device number 4 [ 89.461870][ T4905] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.195: bad orphan inode 15 [ 89.482509][ T4905] ext4_test_bit(bit=14, block=5) = 0 [ 89.487876][ T4905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.660757][ T4905] EXT4-fs error (device loop3): __ext4_new_inode:1075: comm syz.3.195: reserved inode found cleared - inode=1 [ 89.778314][ T4915] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 89.799481][ T4915] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 89.814040][ T4912] fido_id[4912]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.037318][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 90.152318][ T4899] set_capacity_and_notify: 2 callbacks suppressed [ 90.152334][ T4899] loop4: detected capacity change from 0 to 40427 [ 90.230472][ T4899] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 90.237823][ T4899] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.250801][ T4914] loop2: detected capacity change from 0 to 40427 [ 90.303934][ T4914] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 90.330135][ T4914] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 90.370441][ T4931] loop1: detected capacity change from 0 to 164 [ 90.399219][ T4914] F2FS-fs (loop2): invalid crc value [ 90.431211][ T4931] Unable to read rock-ridge attributes [ 90.441510][ T4899] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.490854][ T4914] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 90.676000][ T4899] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.715884][ T4899] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.794621][ T4914] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 90.848221][ T4914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.887409][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 90.887424][ T27] audit: type=1800 audit(1773317033.493:14): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.185" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 91.053681][ T4270] syz-executor: attempt to access beyond end of device [ 91.053681][ T4270] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.247563][ T4269] syz-executor: attempt to access beyond end of device [ 91.247563][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.716510][ T4642] kernel write not supported for file /snd/seq (pid: 4642 comm: kworker/1:9) [ 92.212722][ T4956] loop3: detected capacity change from 0 to 32768 [ 92.298744][ T4956] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 92.324234][ T4956] JBD2: Ignoring recovery information on journal [ 92.374460][ T4988] loop2: detected capacity change from 0 to 2048 [ 92.382550][ T4988] EXT4-fs: Ignoring removed oldalloc option [ 92.485588][ T4988] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c018, mo2=0002] [ 92.610818][ T4988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.622015][ T4956] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.639042][ T4988] EXT4-fs error (device loop2): ext4_ext_precache:645: inode #2: comm syz.2.220: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 92.947515][ T4281] ocfs2: Unmounting device (7,3) on (node local) [ 92.950366][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 93.400832][ T5020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.417944][ T5012] loop2: detected capacity change from 0 to 8192 [ 93.510370][ T5012] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 93.531196][ T5000] loop0: detected capacity change from 0 to 32768 [ 93.549853][ T5012] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 93.591604][ T5000] JBD2: Ignoring recovery information on journal [ 93.613561][ T5012] REISERFS (device loop2): using ordered data mode [ 93.666700][ T5012] reiserfs: using flush barriers [ 93.705804][ T5000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.736606][ T5012] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 93.808831][ T5012] REISERFS (device loop2): checking transaction log (loop2) [ 94.134389][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 94.163724][ T5035] overlayfs: unrecognized mount option "GPL=û\}" or missing value [ 94.168112][ T5012] REISERFS (device loop2): Using tea hash to sort names [ 94.215968][ T5012] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 94.307593][ T5012] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 94.495194][ T5012] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 94.704307][ T5054] loop1: detected capacity change from 0 to 512 [ 94.767774][ T5054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.826368][ T5054] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.848149][ T5054] EXT4-fs error (device loop1): ext4_quota_enable:7039: comm syz.1.240: Bad quota inum: 2, type: 2 [ 94.936645][ T5054] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 95.043874][ T5054] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 95.124056][ T5054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.343645][ T5050] loop4: detected capacity change from 0 to 32768 [ 95.367114][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 95.512192][ T5050] XFS (loop4): Mounting V5 Filesystem [ 95.642356][ T5050] XFS (loop4): Ending clean mount [ 95.784562][ T4270] XFS (loop4): Unmounting Filesystem [ 96.707154][ T27] audit: type=1326 audit(1773317039.313:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c39c799 code=0x7ffc0000 [ 96.792547][ T5074] loop0: detected capacity change from 0 to 40427 [ 96.799618][ T27] audit: type=1326 audit(1773317039.343:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c39c799 code=0x7ffc0000 [ 96.846908][ T27] audit: type=1326 audit(1773317039.343:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fb04c39c799 code=0x7ffc0000 [ 96.870106][ T5074] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 96.888444][ T5074] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 96.945228][ T5074] F2FS-fs (loop0): invalid crc value [ 96.962447][ T27] audit: type=1326 audit(1773317039.343:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c39c799 code=0x7ffc0000 [ 96.997917][ T5074] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.049594][ T5121] loop3: detected capacity change from 0 to 128 [ 97.063989][ T27] audit: type=1326 audit(1773317039.343:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5113 comm="syz.3.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04c39c799 code=0x7ffc0000 [ 97.131146][ T5121] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.187130][ T5074] F2FS-fs (loop0): Start checkpoint disabled! [ 97.199964][ T27] audit: type=1326 audit(1773317039.573:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ee59c799 code=0x7ffc0000 [ 97.258480][ T5121] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.261689][ T5074] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 97.310402][ T27] audit: type=1326 audit(1773317039.623:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58ee55cfce code=0x7ffc0000 [ 97.381058][ T27] audit: type=1326 audit(1773317039.623:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ee59c799 code=0x7ffc0000 [ 97.405754][ T5100] loop1: detected capacity change from 0 to 40427 [ 97.513658][ T5100] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.536966][ T5100] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.579398][ T27] audit: type=1326 audit(1773317039.623:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ee59c799 code=0x7ffc0000 [ 97.634270][ T5100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.644428][ T47] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 97.649763][ T27] audit: type=1326 audit(1773317039.623:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5118 comm="syz.2.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f58ee59c799 code=0x7ffc0000 [ 97.845261][ T33] kworker/u4:2: attempt to access beyond end of device [ 97.845261][ T33] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 97.932726][ T5100] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.948277][ T5100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.079814][ T5201] loop4: detected capacity change from 0 to 32768 [ 100.196166][ T5201] overlayfs: upper fs needs to support d_type. [ 100.208252][ T5201] overlayfs: upper fs does not support tmpfile. [ 100.215886][ T5198] loop0: detected capacity change from 0 to 32768 [ 100.247773][ T5201] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.330714][ T5207] loop3: detected capacity change from 0 to 2048 [ 100.382870][ T5207] loop3: p1 < > p4 [ 100.403441][ T5207] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.488860][ T3638] loop3: p1 < > p4 [ 100.506698][ T3638] loop3: p4 size 8388608 extends beyond EOD, truncated [ 100.680668][ T4281] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 100.680831][ T4518] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.753339][ T4518] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 100.790269][ T4518] Buffer I/O error on dev loop3p4, logical block 1, async page read [ 100.871578][ T4358] udevd[4358]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.068475][ T4348] udevd[4348]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 101.249008][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 101.314120][ T5228] device vlan2 entered promiscuous mode [ 101.334236][ T5228] device bridge0 entered promiscuous mode [ 101.413362][ T5232] loop0: detected capacity change from 0 to 512 [ 101.507133][ T4326] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.530249][ T5232] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 101.578218][ T5232] FAT-fs (loop0): Filesystem has been set read-only [ 101.590206][ T4286] Bluetooth: hci4: command 0x0405 tx timeout [ 101.689062][ T5232] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 101.709912][ T4326] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.880435][ T4326] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.992825][ T4326] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.417499][ T5252] loop1: detected capacity change from 0 to 256 [ 102.429072][ T5252] exfat: Deprecated parameter 'utf8' [ 102.434470][ T5252] exfat: Bad value for 'uid' [ 102.501898][ T5257] loop0: detected capacity change from 0 to 256 [ 102.630651][ T5257] exfat: Deprecated parameter 'utf8' [ 102.661097][ T5257] exfat: Deprecated parameter 'namecase' [ 102.725827][ T5257] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 102.929586][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.942675][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.951953][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.965667][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.975962][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.983542][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.180286][ T5234] mmap: syz.2.299 (5234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.552162][ T5280] loop0: detected capacity change from 0 to 256 [ 103.626958][ T5280] exfat: Deprecated parameter 'namecase' [ 103.668400][ T5280] exfat: Deprecated parameter 'utf8' [ 103.739567][ T5280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 103.810796][ T5284] loop3: detected capacity change from 0 to 512 [ 103.854351][ T5284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.875069][ T5284] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 103.920899][ T5284] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 103.976257][ T5284] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 104.033610][ T5284] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.069317][ T5284] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.083741][ T5284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.318: bg 0: block 34: padding at end of block bitmap is not set [ 104.112257][ T5284] __quota_error: 2 callbacks suppressed [ 104.112275][ T5284] Quota error (device loop3): write_blk: dquota write failed [ 104.129816][ T5284] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 104.140079][ T5284] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.318: Failed to acquire dquot type 1 [ 104.143534][ T5263] chnl_net:caif_netlink_parms(): no params data found [ 104.170473][ T5298] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 104.230358][ T5284] EXT4-fs (loop3): 1 truncate cleaned up [ 104.277903][ T5284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.503566][ T5284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.546529][ T5284] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 104.564937][ T5284] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 104.725598][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 105.028247][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 105.117197][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.125067][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.137075][ T5263] device bridge_slave_0 entered promiscuous mode [ 105.153923][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.161431][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.169974][ T5263] device bridge_slave_1 entered promiscuous mode [ 105.190991][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 105.218302][ T4464] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.227161][ T5324] device dummy0 entered promiscuous mode [ 105.237420][ T5324] device dummy0 left promiscuous mode [ 105.302779][ T4326] device hsr_slave_0 left promiscuous mode [ 105.354989][ T4326] device hsr_slave_1 left promiscuous mode [ 105.365022][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.376560][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.388211][ T4642] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.396049][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.413579][ T4464] usb 1-1: Using ep0 maxpacket: 8 [ 105.420106][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.436639][ T4464] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 105.455023][ T4326] device bridge_slave_1 left promiscuous mode [ 105.463103][ T4464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.475325][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.486673][ T4464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.499050][ T4464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 105.512371][ T4464] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 105.521954][ T4464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.531957][ T4464] usb 1-1: config 0 descriptor?? [ 105.543375][ T4326] device bridge_slave_0 left promiscuous mode [ 105.555369][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.591029][ T4642] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.618256][ T4642] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.649006][ T4642] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.660446][ T4326] device veth1_macvtap left promiscuous mode [ 105.668407][ T4642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.671938][ T4326] device veth0_macvtap left promiscuous mode [ 105.676465][ T4642] usb 3-1: SerialNumber: syz [ 105.689255][ T4326] device veth1_vlan left promiscuous mode [ 105.696904][ T4326] device veth0_vlan left promiscuous mode [ 105.920926][ T4642] usb 3-1: 0:2 : does not exist [ 105.959900][ T4464] redragon 0003:0C45:760B.0005: unknown main item tag 0x6 [ 105.987515][ T4464] redragon 0003:0C45:760B.0005: unexpected long global item [ 105.987889][ T4642] usb 3-1: USB disconnect, device number 2 [ 106.001974][ T4464] redragon: probe of 0003:0C45:760B.0005 failed with error -22 [ 106.190401][ T4464] usb 1-1: USB disconnect, device number 5 [ 106.794734][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 106.872556][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 106.935647][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.002735][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.113928][ T5355] loop0: detected capacity change from 0 to 4096 [ 107.117029][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 107.164899][ T5355] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 107.425234][ T5356] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 107.650238][ T4326] bond0 (unregistering): Released all slaves [ 107.885927][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.946176][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.094880][ T5263] team0: Port device team_slave_0 added [ 108.136546][ T5263] team0: Port device team_slave_1 added [ 108.260060][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.267274][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.344879][ T5263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.384524][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.406528][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.495599][ T5263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.643589][ T5263] device hsr_slave_0 entered promiscuous mode [ 108.684332][ T5263] device hsr_slave_1 entered promiscuous mode [ 108.748378][ T5263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.758269][ T5263] Cannot create hsr debugfs directory [ 109.188330][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 109.324105][ T5409] loop1: detected capacity change from 0 to 128 [ 109.385476][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.385516][ T5263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.395972][ T5409] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.456184][ T5263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.467209][ T5263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.486099][ T5263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.542738][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 109.644913][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 109.809180][ T5387] loop2: detected capacity change from 0 to 32768 [ 109.834968][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.861892][ T5263] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.879617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.897821][ T5387] XFS (loop2): Mounting V5 Filesystem [ 109.939360][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.964223][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.017182][ T5387] XFS (loop2): Ending clean mount [ 110.029720][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.083317][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.090489][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.173716][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.205545][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.248743][ T4269] XFS (loop2): Unmounting Filesystem [ 110.259308][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.266474][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.355750][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.421291][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.489242][ T5441] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 110.558540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.567729][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.607301][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.649469][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.700186][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.751420][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.776433][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.819948][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 110.828872][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.842180][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.879884][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.889229][ T5452] loop0: detected capacity change from 0 to 1024 [ 110.924972][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.268505][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 111.843690][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.861954][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.910672][ T5263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.930291][ T5483] loop3: detected capacity change from 0 to 256 [ 112.058611][ T5483] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 112.156998][ T5483] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 112.202189][ T5483] exFAT-fs (loop3): Filesystem has been set read-only [ 112.296252][ T5495] loop0: detected capacity change from 0 to 64 [ 112.623776][ T5502] loop2: detected capacity change from 0 to 256 [ 112.659185][ T5502] exfat: Deprecated parameter 'namecase' [ 112.682080][ T5478] loop1: detected capacity change from 0 to 32768 [ 112.711441][ T5502] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd2fbf2c1, utbl_chksum : 0xe619d30d) [ 113.076299][ T4650] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 113.290014][ T4650] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.321828][ T4650] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.382434][ T4650] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.402044][ T4650] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 113.432469][ T4650] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.464402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.469673][ T4650] usb 4-1: config 0 descriptor?? [ 113.494349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.578945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.599022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.616139][ T5263] device veth0_vlan entered promiscuous mode [ 113.646122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.666095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.703896][ T5263] device veth1_vlan entered promiscuous mode [ 113.770425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.779580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.839335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.869090][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.895116][ T5263] device veth0_macvtap entered promiscuous mode [ 113.920086][ T4650] wacom 0003:056A:0064.0006: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 113.952048][ T5263] device veth1_macvtap entered promiscuous mode [ 113.968658][ T4650] wacom 0003:056A:0064.0006: hidraw0: USB HID v0.00 Device [HID 056a:0064] on usb-dummy_hcd.3-1/input0 [ 114.013815][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.029691][ T4650] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0064.0006/input/input9 [ 114.060568][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.091215][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.126018][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.151590][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.174817][ T4650] usb 4-1: USB disconnect, device number 3 [ 114.242692][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.272978][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.304187][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.335540][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.363579][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 114.394431][ T5537] device dummy0 entered promiscuous mode [ 114.422045][ T5522] loop0: detected capacity change from 0 to 32768 [ 114.434785][ T5540] fido_id[5540]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 114.458659][ T5537] device dummy0 left promiscuous mode [ 114.537098][ T5522] XFS (loop0): Mounting V5 Filesystem [ 114.602530][ T5522] XFS (loop0): Ending clean mount [ 114.874834][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.886364][ T4267] XFS (loop0): Unmounting Filesystem [ 114.899408][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.931900][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.991307][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.020414][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.041090][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.096804][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.133477][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.147919][ T5560] loop2: detected capacity change from 0 to 2048 [ 115.159988][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.202134][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.215131][ T5561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.218425][ T5263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.290958][ T5263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.331941][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.359871][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.383594][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.419107][ T5263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.434169][ T5263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.443792][ T5263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.457523][ T5263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.578869][ T5568] loop3: detected capacity change from 0 to 16 [ 115.656354][ T5568] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.702291][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.745983][ T5568] syz.3.406: attempt to access beyond end of device [ 115.745983][ T5568] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 115.755568][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.805436][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.820828][ T5572] syz.3.406: attempt to access beyond end of device [ 115.820828][ T5572] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 115.848703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.875486][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.904276][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.983810][ T5577] netlink: 68 bytes leftover after parsing attributes in process `syz.2.408'. [ 116.087097][ T5579] loop5: detected capacity change from 0 to 256 [ 116.145728][ T5581] loop3: detected capacity change from 0 to 16 [ 116.149302][ T5579] exfat: Deprecated parameter 'namecase' [ 116.209885][ T5581] erofs: (device loop3): mounted with root inode @ nid 36. [ 116.236039][ T5579] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 116.290221][ T5581] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 116.367673][ T5581] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 116.523282][ T5592] tipc: Enabling of bearer rejected, failed to enable media [ 117.152978][ T5614] loop3: detected capacity change from 0 to 512 [ 117.234698][ T5614] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.421: inode has both inline data and extents flags [ 117.413799][ T5614] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.421: couldn't read orphan inode 15 (err -117) [ 117.456696][ T5614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.471333][ T5590] loop1: detected capacity change from 0 to 40427 [ 117.528222][ T5590] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(918016) [ 117.537060][ T5590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.558916][ T5614] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 117.606261][ T5590] F2FS-fs (loop1): invalid crc value [ 117.660819][ T5590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.801160][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 117.837156][ T5590] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.844963][ T5590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.248666][ T4268] syz-executor: attempt to access beyond end of device [ 118.248666][ T4268] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.655961][ T5655] Bluetooth: MGMT ver 1.22 [ 119.207220][ T5664] loop1: detected capacity change from 0 to 1024 [ 119.345203][ T5664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.358350][ T5664] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.389299][ T5652] loop2: detected capacity change from 0 to 32768 [ 119.419072][ T5652] XFS (loop2): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 119.474644][ T5664] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.433: lblock 3 mapped to illegal pblock 3 (length 1) [ 119.503629][ T5650] loop5: detected capacity change from 0 to 32768 [ 119.538383][ T5664] EXT4-fs (loop1): Remounting filesystem read-only [ 119.567277][ T5664] EXT4-fs error (device loop1): ext4_ext_remove_space:2930: inode #15: comm syz.1.433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 119.691278][ T5664] EXT4-fs (loop1): Remounting filesystem read-only [ 119.697282][ T5650] XFS (loop5): Mounting V5 Filesystem [ 119.834245][ T5660] loop0: detected capacity change from 0 to 40427 [ 119.869458][ T5660] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.871392][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 119.887501][ T5650] XFS (loop5): Ending clean mount [ 119.907762][ T5660] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.982526][ T5660] F2FS-fs (loop0): invalid crc value [ 120.081270][ T5660] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 120.102961][ T5263] XFS (loop5): Unmounting Filesystem [ 120.193718][ T5688] netlink: 'syz.1.439': attribute type 25 has an invalid length. [ 120.398739][ T5689] netlink: 'syz.1.439': attribute type 25 has an invalid length. [ 120.439582][ T5689] Zero length message leads to an empty skb [ 120.464938][ T5660] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 120.536888][ T5660] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.706506][ T5660] fscrypt (loop0, inode 3): Error -61 getting encryption context [ 120.723127][ T5694] loop3: detected capacity change from 0 to 2048 [ 120.783729][ T5694] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.798505][ T4286] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 120.895318][ T5699] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.005151][ T4273] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.208294][ T4273] usb 2-1: Using ep0 maxpacket: 8 [ 121.227626][ T4273] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 121.284863][ T5681] loop2: detected capacity change from 0 to 40427 [ 121.296677][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.330737][ T4273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.347618][ T5681] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 121.373737][ T5681] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 121.384080][ T4273] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 121.410817][ T5681] F2FS-fs (loop2): invalid crc value [ 121.429285][ T4273] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 121.446913][ T5705] loop3: detected capacity change from 0 to 4096 [ 121.450400][ T4273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.474602][ T5681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.492346][ T4273] usb 2-1: config 0 descriptor?? [ 121.529227][ T5705] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 121.644192][ T5681] F2FS-fs (loop2): Start checkpoint disabled! [ 121.695226][ T5681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.930409][ T4273] redragon 0003:0C45:760B.0007: unknown main item tag 0x6 [ 121.937630][ T4273] redragon 0003:0C45:760B.0007: unexpected long global item [ 121.981104][ T4273] redragon: probe of 0003:0C45:760B.0007 failed with error -22 [ 122.036774][ T5718] loop5: detected capacity change from 0 to 764 [ 122.188094][ T4316] usb 2-1: USB disconnect, device number 3 [ 122.235858][ T5718] Symlink component flag not implemented [ 122.274094][ T5718] Symlink component flag not implemented [ 122.299007][ T5718] Symlink component flag not implemented (128) [ 122.312627][ T75] kworker/u4:4: attempt to access beyond end of device [ 122.312627][ T75] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 122.353817][ T5718] Symlink component flag not implemented (122) [ 122.600273][ T5733] loop3: detected capacity change from 0 to 256 [ 122.719103][ T27] audit: type=1326 audit(1773317065.333:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.0.456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab0e19c799 code=0x0 [ 123.000642][ T5746] loop3: detected capacity change from 0 to 512 [ 123.144195][ T5746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 123.214680][ T5746] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.375285][ T27] audit: type=1326 audit(1773317065.973:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 123.416377][ T5763] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 123.454027][ T27] audit: type=1326 audit(1773317066.023:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 123.531479][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 123.611194][ T27] audit: type=1326 audit(1773317066.023:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 123.750226][ T27] audit: type=1326 audit(1773317066.023:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 123.833733][ T27] audit: type=1326 audit(1773317066.023:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 123.935839][ T5769] loop1: detected capacity change from 0 to 2048 [ 123.955953][ T27] audit: type=1326 audit(1773317066.023:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 124.076212][ T27] audit: type=1326 audit(1773317066.023:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz.5.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e959c799 code=0x7ffc0000 [ 124.107613][ T5769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.478120][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.611835][ T5793] loop0: detected capacity change from 0 to 256 [ 124.655525][ T5793] FAT-fs (loop0): bogus logical sector size 128 [ 124.678234][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 124.685818][ T4320] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 124.714527][ T5793] FAT-fs (loop0): Can't find a valid FAT filesystem [ 124.722492][ T4320] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 124.773533][ T4320] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 124.818133][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.859936][ T4320] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 124.893315][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.927003][ T5800] loop5: detected capacity change from 0 to 1024 [ 124.933855][ T4320] usb 3-1: Product: syz [ 124.948101][ T4320] usb 3-1: Manufacturer: syz [ 124.968123][ T4320] usb 3-1: SerialNumber: syz [ 124.998186][ T4320] usb 3-1: config 0 descriptor?? [ 125.015966][ T5800] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 125.025096][ T5786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.035124][ T5800] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.061274][ T5781] loop3: detected capacity change from 0 to 32768 [ 125.159724][ T5781] jfs_rename did not expect dtDelete to return rc = -2 [ 125.198609][ T5781] ERROR: (device loop3): jfs_rename: [ 125.198609][ T5781] [ 125.220232][ T1190] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.252641][ T5786] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.291488][ T4320] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 125.332471][ T5263] EXT4-fs (loop5): unmounting filesystem. [ 125.418604][ T1190] usb 2-1: Using ep0 maxpacket: 16 [ 125.473940][ T1190] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.513494][ T1190] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.544920][ T1190] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.597632][ T1190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.649280][ T4320] usb 3-1: USB disconnect, device number 3 [ 125.661600][ T1190] usb 2-1: config 0 descriptor?? [ 125.694252][ T1190] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.725222][ T1190] dvb-usb: bulk message failed: -22 (3/0) [ 125.777697][ T1190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.814578][ T1190] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.834406][ T1190] usb 2-1: media controller created [ 125.898972][ T5804] dvb-usb: bulk message failed: -22 (5/0) [ 125.979834][ T1190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.070706][ T1190] dvb-usb: bulk message failed: -22 (6/0) [ 126.084783][ T1190] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 126.094627][ T1190] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 126.117251][ T1190] dvb-usb: schedule remote query interval to 150 msecs. [ 126.125486][ T1190] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.213503][ T1190] usb 2-1: USB disconnect, device number 4 [ 126.366730][ T1190] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.524621][ T5815] loop5: detected capacity change from 0 to 32768 [ 126.617279][ T5815] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 126.673386][ T5815] JBD2: Ignoring recovery information on journal [ 126.780758][ T5815] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 127.069229][ T5263] ocfs2: Unmounting device (7,5) on (node local) [ 127.468296][ T4320] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.677274][ T4320] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 127.694390][ T4320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 127.751290][ T4320] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 127.768561][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.792799][ T5853] loop3: detected capacity change from 0 to 32768 [ 127.797483][ T4320] usb 1-1: Product: syz [ 127.807161][ T4320] usb 1-1: Manufacturer: syz [ 127.841167][ T4320] usb 1-1: SerialNumber: syz [ 127.843974][ T5853] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 127.843974][ T5853] [ 127.857625][ T4320] usb 1-1: config 0 descriptor?? [ 127.920696][ T5853] ERROR: (device loop3): remounting filesystem as read-only [ 127.948812][ T5853] ialloc: diAlloc returned -5! [ 128.015794][ T5864] loop5: detected capacity change from 0 to 32768 [ 128.167761][ T5863] loop2: detected capacity change from 0 to 40427 [ 128.174351][ T27] audit: type=1800 audit(1773317070.783:35): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.501" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 128.316305][ T4320] mos7840 1-1:0.0: required endpoints missing [ 128.337632][ T5863] F2FS-fs (loop2): invalid crc value [ 128.349862][ T4320] usb 1-1: USB disconnect, device number 6 [ 128.430345][ T5863] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.543531][ T5879] loop1: detected capacity change from 0 to 4096 [ 128.645306][ T5863] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.767464][ T27] audit: type=1800 audit(1773317071.373:36): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.503" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 128.871440][ T4269] syz-executor: attempt to access beyond end of device [ 128.871440][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.678268][ T4650] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 129.779542][ T5921] loop2: detected capacity change from 0 to 256 [ 129.836469][ T5921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 129.891353][ T4650] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.911910][ T4650] usb 6-1: config 0 has no interface number 0 [ 129.931055][ T5923] netlink: 248 bytes leftover after parsing attributes in process `syz.3.528'. [ 129.960817][ T4650] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 129.985771][ T5925] loop1: detected capacity change from 0 to 1024 [ 129.998120][ T4650] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.998183][ T5923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.528'. [ 130.020006][ T4650] usb 6-1: Product: syz [ 130.024354][ T4650] usb 6-1: Manufacturer: syz [ 130.048067][ T4650] usb 6-1: SerialNumber: syz [ 130.079992][ T4650] usb 6-1: config 0 descriptor?? [ 130.129190][ T4650] usb 6-1: selecting invalid altsetting 1 [ 130.136661][ T4650] dvb_ttusb_budget: ttusb_init_controller: error [ 130.174731][ T5928] loop2: detected capacity change from 0 to 128 [ 130.184201][ T4650] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 130.193645][ T5925] hfsplus: xattr searching failed [ 130.293292][ T5928] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.344753][ T5928] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.387546][ T4650] DVB: Unable to find symbol stv0299_attach() [ 130.484963][ T5928] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 130.603915][ T4650] DVB: Unable to find symbol tda8083_attach() [ 130.628133][ T4650] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 130.656110][ T5915] loop0: detected capacity change from 0 to 40427 [ 130.657806][ T4650] usb 6-1: USB disconnect, device number 2 [ 130.687952][ T5942] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.687952][ T5942] The task syz.3.533 (5942) triggered the difference, watch for misbehavior. [ 130.690485][ T5915] F2FS-fs (loop0): invalid crc value [ 130.734158][ T5915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.789183][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 130.873156][ T5915] F2FS-fs (loop0): Start checkpoint disabled! [ 130.937652][ T5915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 130.994432][ T5952] loop2: detected capacity change from 0 to 65 [ 131.055955][ T5952] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 131.335588][ T5959] tipc: Enabling of bearer rejected, failed to enable media [ 131.358880][ T4326] kworker/u4:7: attempt to access beyond end of device [ 131.358880][ T4326] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 131.507580][ T5961] loop2: detected capacity change from 0 to 16 [ 131.544782][ T5961] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 131.625103][ T5966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.543'. [ 131.635406][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 132.292867][ T5988] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.351240][ T5986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.391295][ T5983] syz.5.549: attempt to access beyond end of device [ 132.391295][ T5983] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 132.626378][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 132.871027][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877788][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.498893][ T6018] set_capacity_and_notify: 4 callbacks suppressed [ 133.498908][ T6018] loop0: detected capacity change from 0 to 4096 [ 133.617807][ T6023] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.226635][ T6008] loop3: detected capacity change from 0 to 32768 [ 134.297064][ T6008] XFS: attr2 mount option is deprecated. [ 134.414770][ T6008] XFS (loop3): Mounting V5 Filesystem [ 134.435973][ T6045] loop0: detected capacity change from 0 to 164 [ 134.539069][ T6008] XFS (loop3): Ending clean mount [ 134.584892][ T6045] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 134.604030][ T6008] XFS (loop3): Quotacheck needed: Please wait. [ 134.750187][ T6048] loop5: detected capacity change from 0 to 4096 [ 134.768523][ T6008] XFS (loop3): Quotacheck: Done. [ 134.850875][ T27] audit: type=1800 audit(1773317077.463:37): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.559" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 134.971975][ T4281] XFS (loop3): Unmounting Filesystem [ 135.246014][ T6022] loop2: detected capacity change from 0 to 32768 [ 135.538781][ T6022] JBD2: Ignoring recovery information on journal [ 135.596026][ T6053] loop0: detected capacity change from 0 to 32768 [ 135.643673][ T6053] (syz.0.576,6053,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.718716][ T6022] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 135.737855][ T6053] (syz.0.576,6053,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 135.821827][ T6053] JBD2: Ignoring recovery information on journal [ 135.980871][ T6053] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.404661][ T4267] ocfs2: Unmounting device (7,0) on (node local) [ 136.451555][ T6089] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 136.479345][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 136.564647][ T6092] netlink: 'syz.5.591': attribute type 1 has an invalid length. [ 136.910417][ T6096] loop0: detected capacity change from 0 to 4096 [ 136.956470][ T6104] loop5: detected capacity change from 0 to 1024 [ 137.088512][ T6104] hfsplus: bad catalog entry type [ 137.110463][ T6102] loop1: detected capacity change from 0 to 8192 [ 137.252801][ T4267] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 137.279318][ T4319] hfsplus: b-tree write err: -5, ino 25 [ 137.291428][ T4267] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 137.309742][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 137.359890][ T4319] hfsplus: b-tree write err: -5, ino 2 [ 137.565221][ T6118] loop5: detected capacity change from 0 to 64 [ 137.964174][ T6126] exfat: Deprecated parameter 'utf8' [ 138.055439][ T6126] exfat: Deprecated parameter 'namecase' [ 138.112303][ T6126] exfat: Deprecated parameter 'namecase' [ 138.184115][ T6126] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 138.328353][ T1190] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.554033][ T1190] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 138.598209][ T1190] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 138.720347][ T1190] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 138.741763][ T1190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.778084][ T1190] usb 3-1: Product: syz [ 138.782314][ T1190] usb 3-1: Manufacturer: syz [ 138.787021][ T1190] usb 3-1: SerialNumber: syz [ 138.839114][ T1190] usb 3-1: config 0 descriptor?? [ 139.014002][ T6156] sg_write: data in/out 209152/4 bytes for SCSI command 0xf2-- guessing data in; [ 139.014002][ T6156] program syz.0.612 not setting count and/or reply_len properly [ 139.104095][ T4320] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 139.297157][ T1190] mos7840 3-1:0.0: required endpoints missing [ 139.308339][ T4320] usb 6-1: Using ep0 maxpacket: 32 [ 139.312199][ T1190] usb 3-1: USB disconnect, device number 4 [ 139.327139][ T4320] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 139.374885][ T6130] set_capacity_and_notify: 1 callbacks suppressed [ 139.374902][ T6130] loop1: detected capacity change from 0 to 32768 [ 139.382950][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.416453][ T4320] usb 6-1: Product: syz [ 139.429159][ T4320] usb 6-1: Manufacturer: syz [ 139.441625][ T4320] usb 6-1: SerialNumber: syz [ 139.477350][ T4320] usb 6-1: config 0 descriptor?? [ 139.510576][ T6130] JBD2: Ignoring recovery information on journal [ 139.517797][ T4320] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 139.530976][ T4320] dvb-usb: bulk message failed: -22 (4/0) [ 139.538489][ T4320] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.549347][ T4320] dvb-usb: bulk message failed: -22 (5/0) [ 139.555220][ T4320] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.571030][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.584526][ T4320] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 139.593825][ T4320] usb 6-1: media controller created [ 139.619658][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.637011][ T4320] usb 6-1: selecting invalid altsetting 3 [ 139.643421][ T4320] ttusb2: set interface to alts=3 failed [ 139.715875][ T6151] dvb-usb: bulk message failed: -22 (8/0) [ 139.731462][ T6130] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.753703][ T6151] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 139.795849][ T6151] ttusb2: i2c transfer failed. [ 139.814454][ T4320] DVB: Unable to find symbol tda10086_attach() [ 139.824032][ T4320] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 139.879227][ T4320] dvb-usb: bulk message failed: -22 (4/0) [ 139.906887][ T6130] (syz.1.604,6130,1):ocfs2_reflink_ioctl:4433 ERROR: status = -14 [ 139.926984][ T4320] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 139.958099][ T1190] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.967210][ T4320] dvb-usb: bulk message failed: -22 (5/0) [ 139.991461][ T4320] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 140.024947][ T4320] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 140.052078][ T4268] ocfs2: Unmounting device (7,1) on (node local) [ 140.065685][ T4320] usb 6-1: USB disconnect, device number 3 [ 140.154964][ T4320] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 140.159906][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.199826][ T1190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 140.261952][ T1190] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.307009][ T1190] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 140.333092][ T1190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.398219][ T1190] usb 1-1: Product: syz [ 140.404879][ T1190] usb 1-1: Manufacturer: syz [ 140.420900][ T1190] usb 1-1: SerialNumber: syz [ 140.441940][ T1190] usb 1-1: config 0 descriptor?? [ 140.574370][ T6187] loop5: detected capacity change from 0 to 256 [ 140.919721][ T6199] netlink: 19 bytes leftover after parsing attributes in process `syz.5.624'. [ 140.995274][ T4273] usb 1-1: USB disconnect, device number 7 [ 141.143370][ T6204] loop2: detected capacity change from 0 to 128 [ 141.169007][ T6208] device syz_tun entered promiscuous mode [ 141.194337][ T6208] device macvtap1 entered promiscuous mode [ 141.233297][ T6208] device syz_tun left promiscuous mode [ 141.297932][ T6204] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.389764][ T6204] hpfs: filesystem error: improperly stopped [ 141.448451][ T6204] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.456434][ T6204] hpfs: You really don't want any checks? You are crazy... [ 141.549305][ T6204] hpfs: hpfs_map_sector(): read error [ 141.554750][ T6204] hpfs: code page support is disabled [ 141.562646][ T6218] loop3: detected capacity change from 0 to 64 [ 141.688539][ T6204] hpfs: hpfs_map_4sectors(): unaligned read [ 141.694615][ T6204] hpfs: hpfs_map_4sectors(): unaligned read [ 141.763046][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 141.808603][ T6204] hpfs: filesystem error: unable to find root dir [ 141.823003][ T6225] netlink: 'syz.0.632': attribute type 30 has an invalid length. [ 141.865045][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'. [ 141.986572][ T6232] loop3: detected capacity change from 0 to 256 [ 142.048946][ T6232] exfat: Deprecated parameter 'namecase' [ 142.055527][ T6232] exfat: Deprecated parameter 'namecase' [ 142.162227][ T6232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 142.725626][ T6255] loop1: detected capacity change from 0 to 1024 [ 142.849141][ T6255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.162794][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 144.182561][ T6310] loop1: detected capacity change from 0 to 1024 [ 144.245273][ T6315] netlink: 'syz.3.667': attribute type 3 has an invalid length. [ 144.835911][ T6326] loop3: detected capacity change from 0 to 4096 [ 144.900690][ T6338] loop5: detected capacity change from 0 to 1024 [ 144.927325][ T6326] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 144.964676][ T6326] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 145.050032][ T6326] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 145.065763][ T6342] device gretap0 entered promiscuous mode [ 145.096676][ T6326] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 145.143843][ T6342] device vlan2 entered promiscuous mode [ 145.146257][ T6326] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 145.194710][ T6326] ntfs: volume version 3.1. [ 145.242551][ T6326] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 145.290073][ T6326] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 145.351072][ T6326] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 145.410547][ T6326] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 145.463681][ T6326] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 145.543347][ T6353] loop0: detected capacity change from 0 to 64 [ 145.686246][ T6353] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 146.146966][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 146.524096][ T6385] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 146.638356][ T1190] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.818339][ T6395] loop2: detected capacity change from 0 to 1024 [ 146.830397][ T1190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.859883][ T1190] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 146.900401][ T1190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.933239][ T1190] usb 1-1: config 0 descriptor?? [ 147.020334][ T4319] hfsplus: b-tree write err: -5, ino 25 [ 147.035376][ T4319] hfsplus: b-tree write err: -5, ino 4 [ 147.047204][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 147.051254][ T4319] hfsplus: b-tree write err: -5, ino 2 [ 147.057788][ T6365] loop5: detected capacity change from 0 to 32768 [ 147.087012][ T6405] loop3: detected capacity change from 0 to 256 [ 147.146126][ T6401] device erspan0 entered promiscuous mode [ 147.201524][ T6401] device erspan0 left promiscuous mode [ 147.401064][ T1190] ath6kl: Unsupported hardware version: 0x0 [ 147.422647][ T1190] ath6kl: Failed to init ath6kl core: -22 [ 147.562355][ T1190] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 147.632906][ T1190] usb 1-1: USB disconnect, device number 8 [ 148.038139][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.238344][ T4642] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.249855][ T4320] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.286878][ T4320] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.307730][ T4320] usb 3-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 148.330394][ T4320] usb 3-1: config 220 has no interface number 2 [ 148.336917][ T4320] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 148.367862][ T4320] usb 3-1: config 220 interface 0 has no altsetting 0 [ 148.378218][ T4320] usb 3-1: config 220 interface 76 has no altsetting 0 [ 148.385133][ T4320] usb 3-1: config 220 interface 1 has no altsetting 0 [ 148.422713][ T4320] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.453102][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.465376][ T4642] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 148.485173][ T4642] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.493643][ T4320] usb 3-1: Product: syz [ 148.497961][ T4320] usb 3-1: Manufacturer: syz [ 148.520254][ T4642] usb 6-1: Product: syz [ 148.524499][ T4642] usb 6-1: Manufacturer: syz [ 148.532427][ T4320] usb 3-1: SerialNumber: syz [ 148.546460][ T4642] usb 6-1: SerialNumber: syz [ 148.574714][ T4642] usb 6-1: config 0 descriptor?? [ 148.586111][ T4642] hub 6-1:0.0: bad descriptor, ignoring hub [ 148.618138][ T4642] hub: probe of 6-1:0.0 failed with error -5 [ 148.767942][ T4320] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 148.791714][ T4642] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 148.801618][ T6455] loop0: detected capacity change from 0 to 512 [ 148.820822][ T4642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.830240][ T4320] usb 3-1: No valid video chain found. [ 148.835895][ T4320] usb 3-1: selecting invalid altsetting 0 [ 148.874336][ T4642] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 148.906089][ T4320] usb 3-1: selecting invalid altsetting 0 [ 148.913564][ T6455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 148.923233][ T4642] usb 6-1: media controller created [ 148.936493][ T4320] usbtest: probe of 3-1:220.1 failed with error -22 [ 148.948259][ T6455] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.984497][ T4320] usb 3-1: USB disconnect, device number 5 [ 149.000757][ T4642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.085108][ T6455] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.721: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 149.232038][ T4642] DVB: Unable to find symbol dib7000p_attach() [ 149.244894][ T4642] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 149.304914][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 149.560282][ T4642] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.566465][ T4642] Registered IR keymap rc-empty [ 149.602384][ T4642] dvb-usb: could not initialize remote control. [ 149.640604][ T4642] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 149.898547][ T4642] usb 6-1: USB disconnect, device number 4 [ 150.021620][ T4642] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 150.133482][ T6495] comedi comedi3: 8255: I/O port conflict (0x1004f27,4) [ 150.150485][ T6495] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 150.168198][ T6495] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 150.174750][ T6495] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 150.230160][ T6495] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 150.259462][ T6495] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 150.266598][ T6495] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 150.317163][ T6501] loop0: detected capacity change from 0 to 128 [ 150.338608][ T6495] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 150.367535][ T6503] loop3: detected capacity change from 0 to 1024 [ 150.374741][ T6501] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 150.458532][ T6505] loop1: detected capacity change from 0 to 512 [ 150.497211][ T6501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.589514][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.599734][ T6501] overlayfs: upper fs needs to support d_type. [ 150.608693][ T6505] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.619060][ T6501] overlayfs: upper fs does not support tmpfile. [ 150.760000][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 150.880523][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 151.041577][ T6516] loop3: detected capacity change from 0 to 4096 [ 151.090253][ T6516] __ntfs_warning: 6 callbacks suppressed [ 151.090269][ T6516] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 151.275468][ T6516] ntfs: volume version 3.1. [ 151.355072][ T6533] loop0: detected capacity change from 0 to 512 [ 151.448448][ T6533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 151.483206][ T6532] loop1: detected capacity change from 0 to 4096 [ 151.524708][ T6533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.594241][ T6533] EXT4-fs (loop0): 1 truncate cleaned up [ 151.618287][ T6533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.699988][ T27] audit: type=1800 audit(1773317094.313:38): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 151.857905][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 151.886854][ T6547] loop2: detected capacity change from 0 to 1024 [ 152.021536][ T6547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.058643][ T6547] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.147683][ T6559] loop0: detected capacity change from 0 to 2048 [ 152.268099][ T6559] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.311723][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 152.355193][ T6559] NILFS (loop0): mounting unchecked fs [ 152.367759][ T6567] loop3: detected capacity change from 0 to 512 [ 152.394143][ T4348] udevd[4348]: incorrect nilfs2 checksum on /dev/loop0 [ 152.408324][ T6559] NILFS (loop0): recovery complete [ 152.438851][ T6567] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.461710][ T6572] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.507342][ T6567] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 152.539610][ T6567] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 152.873319][ T6581] loop2: detected capacity change from 0 to 256 [ 152.896751][ T6581] exfat: Deprecated parameter 'namecase' [ 152.938175][ T6581] exfat: Deprecated parameter 'namecase' [ 152.988553][ T6581] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 153.071200][ T6581] syz.2.760: attempt to access beyond end of device [ 153.071200][ T6581] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 153.228447][ T4643] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.449455][ T4643] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 153.468070][ T4643] usb 2-1: config 0 has no interface number 0 [ 153.488257][ T4643] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 153.525027][ T4643] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 153.570947][ T4643] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 153.582132][ T4643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.591299][ T4643] usb 2-1: Product: syz [ 153.603121][ T4643] usb 2-1: Manufacturer: syz [ 153.607892][ T4643] usb 2-1: SerialNumber: syz [ 153.610502][ T4643] usb 2-1: config 0 descriptor?? [ 153.760798][ T6577] XFS: attr2 mount option is deprecated. [ 153.903826][ T6606] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.924351][ T6577] XFS (loop5): Mounting V5 Filesystem [ 153.948162][ T6606] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 153.966032][ T6606] REISERFS (device loop0): using ordered data mode [ 153.973077][ T6606] reiserfs: using flush barriers [ 153.986255][ T6606] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 154.004656][ T6606] REISERFS (device loop0): checking transaction log (loop0) [ 154.016978][ T6606] REISERFS (device loop0): Using r5 hash to sort names [ 154.028874][ T4643] asix 2-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 154.061600][ T4643] asix: probe of 2-1:0.239 failed with error -71 [ 154.075432][ T6577] XFS (loop5): Ending clean mount [ 154.081568][ T6606] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 154.115939][ T4643] usb 2-1: USB disconnect, device number 5 [ 154.130844][ T6577] XFS (loop5): Quotacheck needed: Please wait. [ 154.156260][ T6606] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 154.221202][ T6606] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 154.223255][ T6577] XFS (loop5): Quotacheck: Done. [ 154.442429][ T27] audit: type=1800 audit(1773317097.053:39): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.759" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 154.628761][ T6629] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 154.665529][ T5263] XFS (loop5): Unmounting Filesystem [ 155.129007][ T6641] vivid-000: disconnect [ 155.147578][ T6640] vivid-000: reconnect [ 155.357860][ T6651] set_capacity_and_notify: 3 callbacks suppressed [ 155.357877][ T6651] loop0: detected capacity change from 0 to 512 [ 155.382668][ T6651] EXT4-fs (loop0): orphan cleanup on readonly fs [ 155.384747][ T6623] XFS (loop2): Mounting V5 Filesystem [ 155.396214][ T6651] EXT4-fs error (device loop0): ext4_quota_enable:7039: comm syz.0.786: Bad quota inum: 11, type: 1 [ 155.458793][ T6651] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 155.542612][ T6623] XFS (loop2): Ending clean mount [ 155.568325][ T6651] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 155.575091][ T6651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.613239][ T6623] XFS (loop2): Quotacheck needed: Please wait. [ 155.632692][ T6662] netlink: 9 bytes leftover after parsing attributes in process `syz.1.788'. [ 155.692564][ T6662] device gretap0 entered promiscuous mode [ 155.728650][ T6666] loop5: detected capacity change from 0 to 1024 [ 155.763856][ T6623] XFS (loop2): Quotacheck: Done. [ 155.814579][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 155.829678][ T6667] netlink: 5 bytes leftover after parsing attributes in process `syz.1.788'. [ 155.927908][ T6667] 0ªî{X¹¦: renamed from gretap0 [ 155.943658][ T4269] XFS (loop2): Unmounting Filesystem [ 155.955446][ T11] hfsplus: b-tree write err: -5, ino 25 [ 155.967846][ T11] hfsplus: b-tree write err: -5, ino 4 [ 155.989761][ T6667] device 30ªî{X¹¦ left promiscuous mode [ 156.018282][ T6667] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 156.035004][ T11] hfsplus: b-tree write err: -5, ino 2 [ 156.250040][ T4642] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.367738][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.795'. [ 156.406298][ T6679] device bond_slave_0 entered promiscuous mode [ 156.413201][ T6679] device bond_slave_1 entered promiscuous mode [ 156.439521][ T6679] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 156.458916][ T6679] device bond_slave_0 left promiscuous mode [ 156.466818][ T6679] device bond_slave_1 left promiscuous mode [ 156.470923][ T4642] usb 4-1: unable to get BOS descriptor or descriptor too short [ 156.502079][ T4642] usb 4-1: config 4 has an invalid interface number: 176 but max is 0 [ 156.525281][ T4642] usb 4-1: config 4 has no interface number 0 [ 156.545656][ T4642] usb 4-1: config 4 interface 176 has no altsetting 0 [ 156.579629][ T4642] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=59.64 [ 156.605034][ T4642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.623550][ T4642] usb 4-1: Product: syz [ 156.627780][ T4642] usb 4-1: Manufacturer: syz [ 156.639219][ T4642] usb 4-1: SerialNumber: syz [ 156.797773][ T6687] bridge0: port 3(bond0) entered blocking state [ 156.823170][ T6687] bridge0: port 3(bond0) entered disabled state [ 156.837412][ T6687] device bond0 entered promiscuous mode [ 156.845082][ T6687] device bond_slave_0 entered promiscuous mode [ 156.860732][ T6687] device bond_slave_1 entered promiscuous mode [ 156.876773][ T6687] bridge0: port 3(bond0) entered blocking state [ 156.883639][ T6687] bridge0: port 3(bond0) entered forwarding state [ 156.891952][ T4642] mvusb_mdio: probe of 4-1:4.176 failed with error -5 [ 156.933036][ T4642] usb 4-1: USB disconnect, device number 4 [ 156.980518][ T6675] loop1: detected capacity change from 0 to 32768 [ 156.987885][ T6675] XFS: attr2 mount option is deprecated. [ 157.112886][ T6675] XFS (loop1): Mounting V5 Filesystem [ 157.203403][ T6707] loop5: detected capacity change from 0 to 64 [ 157.220922][ T6675] XFS (loop1): Ending clean mount [ 157.263013][ T6675] XFS (loop1): Quotacheck needed: Please wait. [ 157.445294][ T6675] XFS (loop1): Quotacheck: Done. [ 157.509859][ T27] audit: type=1800 audit(1773317100.123:40): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.793" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 157.621302][ T4268] XFS (loop1): Unmounting Filesystem [ 157.639755][ T6719] loop2: detected capacity change from 0 to 1024 [ 157.712773][ T6719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.815023][ T6719] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.810: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 157.959634][ T6719] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 158.049383][ T6729] loop5: detected capacity change from 0 to 4096 [ 158.095616][ T6729] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 158.124574][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 158.172087][ T6729] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 158.532605][ T6736] loop1: detected capacity change from 0 to 4096 [ 158.660757][ T6740] sp0: Synchronizing with TNC [ 158.680431][ T6742] netlink: 92 bytes leftover after parsing attributes in process `syz.2.820'. [ 158.703924][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 158.718737][ T6736] ntfs3: loop1: failed to convert "0080" to cp775 [ 158.734362][ T6739] [U] è [ 158.743814][ T6736] ntfs3: loop1: failed to convert name for inode 1e. [ 158.813278][ T6730] loop3: detected capacity change from 0 to 32768 [ 158.963162][ T6730] XFS (loop3): Mounting V5 Filesystem [ 159.153564][ T6730] XFS (loop3): Ending clean mount [ 159.356547][ T4281] XFS (loop3): Unmounting Filesystem [ 159.587822][ T6773] loop0: detected capacity change from 0 to 256 [ 159.638844][ T6773] exfat: Deprecated parameter 'utf8' [ 160.624540][ T6775] loop1: detected capacity change from 0 to 32768 [ 160.776459][ T6775] XFS (loop1): Mounting V5 Filesystem [ 160.923925][ T6775] XFS (loop1): Ending clean mount [ 160.987235][ T6775] XFS (loop1): Quotacheck needed: Please wait. [ 161.069435][ T6775] XFS (loop1): Quotacheck: Done. [ 161.136645][ T4268] XFS (loop1): Unmounting Filesystem [ 161.248168][ T4320] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.458118][ T4320] usb 6-1: Using ep0 maxpacket: 16 [ 161.470526][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.509974][ T4320] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 161.530333][ T4320] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.558042][ T4320] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 161.603979][ T4320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.615861][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.624599][ T4320] usb 6-1: SerialNumber: syz [ 161.636722][ T4320] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 161.664702][ T6841] loop0: detected capacity change from 0 to 4096 [ 161.708191][ T4463] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.718242][ T6843] loop2: detected capacity change from 0 to 1024 [ 161.742040][ T6845] loop1: detected capacity change from 0 to 1024 [ 161.754787][ T6846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.785066][ T27] audit: type=1800 audit(1773317104.393:41): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.863" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 161.841401][ T4320] usb 6-1: USB disconnect, device number 5 [ 161.912689][ T4463] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 161.956394][ T4463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.977960][ T4463] usb 4-1: config 0 descriptor?? [ 161.983443][ T75] hfsplus: b-tree write err: -5, ino 25 [ 161.992501][ T75] hfsplus: b-tree write err: -5, ino 4 [ 162.000386][ T75] hfsplus: b-tree write err: -5, ino 2 [ 162.006052][ T75] hfsplus: b-tree write err: -5, ino 26 [ 162.311567][ T6858] loop2: detected capacity change from 0 to 256 [ 162.353835][ T6858] exfat: Deprecated parameter 'utf8' [ 162.407558][ T6858] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 162.603710][ T4463] usb 4-1: Cannot set autoneg [ 162.608636][ T4463] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 162.637504][ T4463] usb 4-1: USB disconnect, device number 5 [ 162.689624][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 162.898199][ T4320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.101135][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.123347][ T6873] loop2: detected capacity change from 0 to 32768 [ 163.130116][ T4320] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.158114][ T4320] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.167245][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.227699][ T6865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.320078][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.878'. [ 163.429280][ T6875] loop5: detected capacity change from 0 to 32768 [ 163.487414][ T6875] JBD2: Ignoring recovery information on journal [ 163.707912][ T6875] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 163.720025][ T4320] usb 1-1: USB disconnect, device number 9 [ 163.907073][ T5263] ocfs2: Unmounting device (7,5) on (node local) [ 163.935440][ T6895] loop2: detected capacity change from 0 to 1024 [ 163.978109][ T4463] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.127120][ T47] hfsplus: b-tree write err: -5, ino 25 [ 164.145841][ T47] hfsplus: b-tree write err: -5, ino 4 [ 164.153676][ T6899] syz.1.887 uses obsolete (PF_INET,SOCK_PACKET) [ 164.168954][ T4463] usb 4-1: Using ep0 maxpacket: 32 [ 164.175842][ T47] hfsplus: b-tree write err: -5, ino 2 [ 164.182278][ T4463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.192006][ T47] hfsplus: b-tree write err: -5, ino 17 [ 164.238286][ T4463] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.281722][ T4463] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 164.319495][ T4463] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.384250][ T4463] usb 4-1: config 0 descriptor?? [ 164.674151][ T6904] loop5: detected capacity change from 0 to 32768 [ 164.739035][ T6904] JBD2: Ignoring recovery information on journal [ 164.817899][ T4463] zydacron 0003:13EC:0006.0008: item fetching failed at offset 0/2 [ 164.829334][ T4463] zydacron 0003:13EC:0006.0008: parse failed [ 164.835468][ T4463] zydacron: probe of 0003:13EC:0006.0008 failed with error -22 [ 164.882935][ T6904] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 164.914765][ T27] audit: type=1800 audit(1773317107.523:42): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.889" name="file1" dev="loop5" ino=17056 res=0 errno=0 [ 164.981475][ T5263] ocfs2: Unmounting device (7,5) on (node local) [ 165.020316][ T4463] usb 4-1: USB disconnect, device number 6 [ 165.282078][ T6924] loop0: detected capacity change from 0 to 256 [ 165.317346][ T6924] exfat: Deprecated parameter 'utf8' [ 165.359691][ T6924] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 165.568289][ T4463] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.758455][ T4463] usb 3-1: Using ep0 maxpacket: 16 [ 165.772309][ T4463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.801234][ T4463] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.823506][ T4463] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.847108][ T6942] loop5: detected capacity change from 0 to 4096 [ 165.861515][ T4463] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.876652][ T6942] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 165.898168][ T4463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.954195][ T4463] usb 3-1: config 0 descriptor?? [ 165.966631][ T6942] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 166.138934][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.907'. [ 166.234477][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.908'. [ 166.347276][ T6954] loop5: detected capacity change from 0 to 4096 [ 166.371923][ T6954] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 166.411443][ T4463] microsoft 0003:045E:07DA.0009: unknown main item tag 0xd [ 166.439222][ T4463] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 166.466965][ T4463] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 166.481686][ T4463] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 166.502714][ T4463] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 166.511949][ T6954] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 166.515493][ T4463] microsoft 0003:045E:07DA.0009: no inputs found [ 166.539790][ T4463] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 166.587162][ T6954] ntfs3: loop5: ino=0, attr_set_size [ 166.654526][ T4643] usb 3-1: USB disconnect, device number 6 [ 166.661047][ T6966] ntfs3: loop5: ino=0, attr_set_size [ 166.794022][ T6965] fido_id[6965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 166.822616][ T6970] loop3: detected capacity change from 0 to 512 [ 166.954034][ T6970] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.916: inode has both inline data and extents flags [ 167.040315][ T6970] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.916: couldn't read orphan inode 15 (err -117) [ 167.078778][ T6970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.309712][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 167.733297][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 167.758104][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 167.791525][ T6999] netlink: 'syz.3.928': attribute type 12 has an invalid length. [ 167.816045][ T6999] netlink: 'syz.3.928': attribute type 11 has an invalid length. [ 167.852087][ T6973] loop0: detected capacity change from 0 to 32768 [ 167.915495][ T6973] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.917 (6973) [ 167.986192][ T6973] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.027016][ T7004] loop5: detected capacity change from 0 to 4096 [ 168.028264][ T6973] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 168.119480][ T6973] BTRFS info (device loop0): enabling auto defrag [ 168.122495][ T7004] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 168.138130][ T6973] BTRFS info (device loop0): use no compression [ 168.144534][ T6973] BTRFS info (device loop0): force clearing of disk cache [ 168.160642][ T7004] ntfs3: loop5: Failed to load $Extend. [ 168.183886][ T6973] BTRFS info (device loop0): max_inline at 4096 [ 168.205723][ T6973] BTRFS info (device loop0): disabling free space tree [ 168.476891][ T7002] loop2: detected capacity change from 0 to 32768 [ 168.598260][ T6973] BTRFS info (device loop0): enabling ssd optimizations [ 168.621736][ T6973] BTRFS info (device loop0): rebuilding free space tree [ 168.695426][ T6973] BTRFS info (device loop0): disabling free space tree [ 168.727006][ T7002] XFS (loop2): Mounting V5 Filesystem [ 168.758240][ T6973] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.767971][ T6973] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.919019][ T7002] XFS (loop2): Ending clean mount [ 168.960346][ T7002] XFS (loop2): Quotacheck needed: Please wait. [ 168.962559][ T7055] devpts: called with bogus options [ 169.042468][ T4267] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.141290][ T7002] XFS (loop2): Quotacheck: Done. [ 169.552849][ T4269] XFS (loop2): Unmounting Filesystem [ 170.124538][ T7053] loop5: detected capacity change from 0 to 32768 [ 170.315931][ T7088] loop3: detected capacity change from 0 to 512 [ 170.320462][ T27] audit: type=1400 audit(1773317112.923:43): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7085 comm="syz.0.955" [ 170.534039][ T7088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.564063][ T7088] ext4 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.665267][ T7105] loop1: detected capacity change from 0 to 512 [ 170.736318][ T7105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.762057][ T7105] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.781313][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 170.834055][ T7112] loop0: detected capacity change from 0 to 512 [ 170.916861][ T27] audit: type=1800 audit(1773317113.523:44): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.962" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 170.950187][ T7112] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 171.038201][ T7112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 171.058457][ T7112] System zones: 1-12 [ 171.078097][ T7112] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.964: corrupted in-inode xattr [ 171.120605][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 171.219882][ T7112] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.964: couldn't read orphan inode 15 (err -117) [ 171.339221][ T7112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.515158][ T7121] loop1: detected capacity change from 0 to 32768 [ 171.627461][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 171.661065][ T7121] XFS (loop1): Mounting V5 Filesystem [ 171.782330][ T7121] XFS (loop1): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x51. [ 171.847314][ T7121] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 171.863796][ T7121] XFS (loop1): log mount/recovery failed: error -22 [ 171.949704][ T7121] XFS (loop1): log mount failed [ 171.975308][ T7148] device macsec1 entered promiscuous mode [ 172.273648][ T7152] xt_hashlimit: max too large, truncated to 1048576 [ 172.334458][ T7152] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.484912][ T7160] loop2: detected capacity change from 0 to 1024 [ 172.598306][ T4273] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.665627][ T4324] hfsplus: b-tree write err: -5, ino 25 [ 172.675646][ T4324] hfsplus: b-tree write err: -5, ino 4 [ 172.742995][ T4324] hfsplus: b-tree write err: -5, ino 2 [ 172.756371][ T4324] hfsplus: b-tree write err: -5, ino 26 [ 172.779883][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.807047][ T4273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.840012][ T4273] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.873960][ T4273] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 172.911370][ T4273] usb 4-1: Manufacturer: syz [ 172.918630][ T7173] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.928721][ T7173] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.937458][ T7173] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.946254][ T7173] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.971370][ T4273] usb 4-1: config 0 descriptor?? [ 173.254315][ T7187] loop0: detected capacity change from 0 to 256 [ 173.254889][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 173.352143][ T7187] FAT-fs (loop0): Directory bread(block 64) failed [ 173.370168][ T7187] FAT-fs (loop0): Directory bread(block 65) failed [ 173.378577][ T7187] FAT-fs (loop0): Directory bread(block 66) failed [ 173.396467][ T7187] FAT-fs (loop0): Directory bread(block 67) failed [ 173.427414][ T7187] FAT-fs (loop0): Directory bread(block 68) failed [ 173.467844][ T7187] FAT-fs (loop0): Directory bread(block 69) failed [ 173.475124][ T7187] FAT-fs (loop0): Directory bread(block 70) failed [ 173.504730][ T7187] FAT-fs (loop0): Directory bread(block 71) failed [ 173.528305][ T7187] FAT-fs (loop0): Directory bread(block 72) failed [ 173.534909][ T7187] FAT-fs (loop0): Directory bread(block 73) failed [ 173.603649][ T4273] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 173.620796][ T4273] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 173.637293][ T4273] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 173.676648][ T4273] usb 4-1: USB disconnect, device number 7 [ 173.770516][ T7199] loop1: detected capacity change from 0 to 256 [ 173.786649][ T7199] exfat: Deprecated parameter 'utf8' [ 173.792592][ T7199] exfat: Deprecated parameter 'utf8' [ 173.799111][ T7199] exfat: Deprecated parameter 'namecase' [ 173.862514][ T7199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 174.348544][ T7210] loop3: detected capacity change from 0 to 1024 [ 174.383477][ T7197] loop2: detected capacity change from 0 to 32768 [ 174.434950][ T7210] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 174.500752][ T7197] JBD2: Ignoring recovery information on journal [ 174.615532][ T7197] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 174.708046][ T7197] [ 174.710437][ T7197] ====================================================== [ 174.717472][ T7197] WARNING: possible circular locking dependency detected [ 174.724513][ T7197] syzkaller #0 Not tainted [ 174.728928][ T7197] ------------------------------------------------------ [ 174.735974][ T7197] syz.2.1000/7197 is trying to acquire lock: [ 174.741973][ T7197] ffff888055b2b120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 174.753578][ T7197] [ 174.753578][ T7197] but task is already holding lock: [ 174.760939][ T7197] ffff888055b2b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 174.771573][ T7197] [ 174.771573][ T7197] which lock already depends on the new lock. [ 174.771573][ T7197] [ 174.781987][ T7197] [ 174.781987][ T7197] the existing dependency chain (in reverse order) is: [ 174.791021][ T7197] [ 174.791021][ T7197] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 174.798861][ T7197] down_read+0x42/0x2d0 [ 174.803577][ T7197] ocfs2_init_acl+0x307/0x770 [ 174.808796][ T7197] ocfs2_mknod+0x15e8/0x25b0 [ 174.814066][ T7197] ocfs2_mkdir+0x1b6/0x4b0 [ 174.819035][ T7197] vfs_mkdir+0x387/0x570 [ 174.823805][ T7197] do_mkdirat+0x1d8/0x440 [ 174.828657][ T7197] __x64_sys_mkdirat+0x85/0x90 [ 174.833943][ T7197] do_syscall_64+0x4c/0xa0 [ 174.838883][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.845321][ T7197] [ 174.845321][ T7197] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 174.853848][ T7197] down_read+0x42/0x2d0 [ 174.858534][ T7197] ocfs2_start_trans+0x3a4/0x6f0 [ 174.864034][ T7197] ocfs2_modify_bh+0xe0/0x4c0 [ 174.869272][ T7197] ocfs2_local_read_info+0x13c8/0x1750 [ 174.875268][ T7197] dquot_load_quota_sb+0x756/0xac0 [ 174.880915][ T7197] dquot_load_quota_inode+0x2d8/0x5d0 [ 174.887030][ T7197] ocfs2_enable_quotas+0x1c5/0x490 [ 174.892697][ T7197] ocfs2_fill_super+0x43b5/0x5090 [ 174.898265][ T7197] mount_bdev+0x287/0x3c0 [ 174.903120][ T7197] legacy_get_tree+0xe6/0x180 [ 174.908321][ T7197] vfs_get_tree+0x88/0x270 [ 174.913259][ T7197] do_new_mount+0x24a/0xa40 [ 174.918282][ T7197] __se_sys_mount+0x2e3/0x3d0 [ 174.923481][ T7197] do_syscall_64+0x4c/0xa0 [ 174.928422][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.934845][ T7197] [ 174.934845][ T7197] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 174.942345][ T7197] ocfs2_start_trans+0x2a5/0x6f0 [ 174.947828][ T7197] ocfs2_truncate_file+0x668/0x1580 [ 174.953587][ T7197] ocfs2_setattr+0x16b8/0x1d30 [ 174.958897][ T7197] notify_change+0xc74/0xf40 [ 174.964014][ T7197] do_truncate+0x1ac/0x240 [ 174.968953][ T7197] path_openat+0x2861/0x2ee0 [ 174.974101][ T7197] do_filp_open+0x1f1/0x430 [ 174.979127][ T7197] do_sys_openat2+0x150/0x4b0 [ 174.984334][ T7197] __x64_sys_openat+0x135/0x160 [ 174.989708][ T7197] do_syscall_64+0x4c/0xa0 [ 174.994648][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.001154][ T7197] [ 175.001154][ T7197] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 175.009929][ T7197] __lock_acquire+0x2d07/0x7d10 [ 175.015307][ T7197] lock_acquire+0x1bb/0x4a0 [ 175.020338][ T7197] down_write+0x36/0x60 [ 175.025030][ T7197] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 175.031531][ T7197] ocfs2_truncate_file+0xe35/0x1580 [ 175.037295][ T7197] ocfs2_setattr+0x16b8/0x1d30 [ 175.042586][ T7197] notify_change+0xc74/0xf40 [ 175.047699][ T7197] do_truncate+0x1ac/0x240 [ 175.052636][ T7197] path_openat+0x2861/0x2ee0 [ 175.057751][ T7197] do_filp_open+0x1f1/0x430 [ 175.062776][ T7197] do_sys_openat2+0x150/0x4b0 [ 175.067971][ T7197] __x64_sys_openat+0x135/0x160 [ 175.073349][ T7197] do_syscall_64+0x4c/0xa0 [ 175.078374][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.084790][ T7197] [ 175.084790][ T7197] other info that might help us debug this: [ 175.084790][ T7197] [ 175.095153][ T7197] Chain exists of: [ 175.095153][ T7197] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 175.095153][ T7197] [ 175.110385][ T7197] Possible unsafe locking scenario: [ 175.110385][ T7197] [ 175.117840][ T7197] CPU0 CPU1 [ 175.123200][ T7197] ---- ---- [ 175.128555][ T7197] lock(&oi->ip_xattr_sem); [ 175.133152][ T7197] lock(&journal->j_trans_barrier); [ 175.140957][ T7197] lock(&oi->ip_xattr_sem); [ 175.148065][ T7197] lock(&ocfs2_file_ip_alloc_sem_key); [ 175.153609][ T7197] [ 175.153609][ T7197] *** DEADLOCK *** [ 175.153609][ T7197] [ 175.161751][ T7197] 3 locks held by syz.2.1000/7197: [ 175.166855][ T7197] #0: ffff888078b0c460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 175.176109][ T7197] #1: ffff888055b2b488 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 175.186487][ T7197] #2: ffff888055b2b1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 175.197544][ T7197] [ 175.197544][ T7197] stack backtrace: [ 175.203427][ T7197] CPU: 1 PID: 7197 Comm: syz.2.1000 Not tainted syzkaller #0 [ 175.210794][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.220862][ T7197] Call Trace: [ 175.224147][ T7197] [ 175.227098][ T7197] dump_stack_lvl+0x188/0x24e [ 175.231796][ T7197] ? load_image+0x400/0x400 [ 175.236311][ T7197] ? show_regs_print_info+0x12/0x12 [ 175.241515][ T7197] ? print_circular_bug+0x12b/0x1a0 [ 175.246723][ T7197] check_noncircular+0x296/0x330 [ 175.251686][ T7197] ? add_chain_block+0x940/0x940 [ 175.256636][ T7197] ? lockdep_lock+0xf1/0x1f0 [ 175.261230][ T7197] ? lockdep_unlock+0x142/0x2e0 [ 175.266085][ T7197] ? _find_first_zero_bit+0xcf/0x100 [ 175.271403][ T7197] __lock_acquire+0x2d07/0x7d10 [ 175.276268][ T7197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 175.282300][ T7197] ? verify_lock_unused+0x140/0x140 [ 175.287545][ T7197] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 175.293723][ T7197] ? lockdep_hardirqs_on+0x94/0x140 [ 175.298930][ T7197] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 175.305091][ T7197] lock_acquire+0x1bb/0x4a0 [ 175.309605][ T7197] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 175.316204][ T7197] ? __might_sleep+0xd0/0xd0 [ 175.320810][ T7197] ? read_lock_is_recursive+0x10/0x10 [ 175.326180][ T7197] ? rwsem_write_trylock+0x135/0x1c0 [ 175.331464][ T7197] ? clear_nonspinnable+0x60/0x60 [ 175.336488][ T7197] ? ocfs2_truncate_file+0xd5b/0x1580 [ 175.341868][ T7197] down_write+0x36/0x60 [ 175.346042][ T7197] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 175.352202][ T7197] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 175.358191][ T7197] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 175.364098][ T7197] ? up_write+0x1bb/0x420 [ 175.368431][ T7197] ? unmap_mapping_range+0x91/0x100 [ 175.373633][ T7197] ocfs2_truncate_file+0xe35/0x1580 [ 175.378842][ T7197] ? __lock_acquire+0x7d10/0x7d10 [ 175.383886][ T7197] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 175.389622][ T7197] ? do_raw_spin_unlock+0x11d/0x230 [ 175.394824][ T7197] ? _raw_spin_unlock+0x24/0x40 [ 175.399675][ T7197] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 175.405420][ T7197] ? ocfs2_inode_lock_atime+0x530/0x530 [ 175.410986][ T7197] ? ocfs2_rw_lock+0x134/0x250 [ 175.415750][ T7197] ? dquot_initialize+0x20/0x20 [ 175.420597][ T7197] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 175.426680][ T7197] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 175.433287][ T7197] ocfs2_setattr+0x16b8/0x1d30 [ 175.438071][ T7197] ? ocfs2_extend_allocation+0x1930/0x1930 [ 175.443886][ T7197] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 175.449740][ T7197] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 175.456046][ T7197] ? ocfs2_xattr_get+0x149/0x260 [ 175.460987][ T7197] ? ocfs2_get_reflink_xattr_value_root+0xd0/0xd0 [ 175.467424][ T7197] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 175.473340][ T7197] ? current_time+0x196/0x2b0 [ 175.478052][ T7197] ? atime_needs_update+0x780/0x780 [ 175.483252][ T7197] ? evm_inode_setattr+0x91/0x790 [ 175.488289][ T7197] ? bpf_lsm_inode_setattr+0x5/0x10 [ 175.493576][ T7197] ? security_inode_setattr+0xd8/0x140 [ 175.499032][ T7197] ? try_break_deleg+0x79/0x120 [ 175.503880][ T7197] ? ocfs2_extend_allocation+0x1930/0x1930 [ 175.509691][ T7197] notify_change+0xc74/0xf40 [ 175.514284][ T7197] do_truncate+0x1ac/0x240 [ 175.518888][ T7197] ? put_page_bootmem+0x2c0/0x2c0 [ 175.523940][ T7197] ? ima_bprm_check+0x200/0x200 [ 175.528799][ T7197] ? bpf_lsm_path_truncate+0x5/0x10 [ 175.534025][ T7197] path_openat+0x2861/0x2ee0 [ 175.538644][ T7197] ? do_syscall_64+0x4c/0xa0 [ 175.543266][ T7197] ? do_filp_open+0x430/0x430 [ 175.547967][ T7197] do_filp_open+0x1f1/0x430 [ 175.552474][ T7197] ? vfs_tmpfile+0x480/0x480 [ 175.557069][ T7197] ? _raw_spin_unlock+0x24/0x40 [ 175.562274][ T7197] ? alloc_fd+0x58f/0x630 [ 175.566866][ T7197] do_sys_openat2+0x150/0x4b0 [ 175.571558][ T7197] ? do_sys_open+0xe0/0xe0 [ 175.576409][ T7197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 175.582394][ T7197] ? lock_chain_count+0x20/0x20 [ 175.587248][ T7197] __x64_sys_openat+0x135/0x160 [ 175.592101][ T7197] do_syscall_64+0x4c/0xa0 [ 175.596541][ T7197] ? clear_bhb_loop+0x60/0xb0 [ 175.601215][ T7197] ? clear_bhb_loop+0x60/0xb0 [ 175.605977][ T7197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.611867][ T7197] RIP: 0033:0x7f58ee59c799 [ 175.616291][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.635916][ T7197] RSP: 002b:00007f58ef46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 175.644325][ T7197] RAX: ffffffffffffffda RBX: 00007f58ee815fa0 RCX: 00007f58ee59c799 [ 175.652292][ T7197] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 175.660259][ T7197] RBP: 00007f58ee632c99 R08: 0000000000000000 R09: 0000000000000000 [ 175.668224][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.676231][ T7197] R13: 00007f58ee816038 R14: 00007f58ee815fa0 R15: 00007fffee2aa978 [ 175.684208][ T7197] [ 175.687339][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.763036][ T7203] loop1: detected capacity change from 0 to 32768 [ 175.779403][ T4269] ocfs2: Unmounting device (7,2) on (node local) [ 175.858119][ T4641] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.069637][ T4641] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.078145][ T4641] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 176.087018][ T4641] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 176.097317][ T4641] usb 6-1: config 220 has no interface number 2 [ 176.103713][ T4641] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.116891][ T4641] usb 6-1: config 220 interface 0 has no altsetting 0 [ 176.123690][ T4641] usb 6-1: config 220 interface 76 has no altsetting 0 [ 176.130587][ T4641] usb 6-1: config 220 interface 1 has no altsetting 0 [ 176.139172][ T4641] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.148385][ T4641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.156684][ T4641] usb 6-1: Product: syz [ 176.160953][ T4641] usb 6-1: Manufacturer: syz [ 176.165549][ T4641] usb 6-1: SerialNumber: syz [ 176.377917][ T4641] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 176.384398][ T4641] usb 6-1: No valid video chain found. [ 176.390234][ T4641] usb 6-1: selecting invalid altsetting 0 [ 176.398658][ T4641] usb 6-1: selecting invalid altsetting 0 [ 176.404398][ T4641] usbtest: probe of 6-1:220.1 failed with error -22 [ 176.412629][ T4641] usb 6-1: USB disconnect, device number 6