last executing test programs: 5.355749668s ago: executing program 3 (id=675): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r0, 0x0, 0x0, 0x200}, 0x0) 4.494024332s ago: executing program 3 (id=681): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 4.319816334s ago: executing program 3 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffff7ffbdbdf250500000008000600", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) 4.265084644s ago: executing program 3 (id=684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) readahead(0xffffffffffffffff, 0x8000, 0xffffffffffffffff) 4.132966075s ago: executing program 3 (id=686): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001f40)={0x2, 0x2, {0x6, @usage, 0x0, 0xc1, 0x3, 0x1, 0x4, 0x0, 0x8, @usage=0x4, 0x1, 0x7f, [0x0, 0x8, 0x2, 0x7ff, 0x5, 0x94af]}, {0x100, @struct={0x5, 0x4}, 0x0, 0x4, 0xd, 0x0, 0x2aab5f31, 0xef08, 0x12, @usage=0x9, 0x5, 0x53f, [0x200, 0x5, 0xf3, 0x0, 0x0, 0xfff]}, {0x9, @usage=0x3, 0x0, 0x80000001, 0x275, 0x1, 0x3, 0x38, 0x36, @usage=0xe9, 0xa3, 0x4, [0x6e4, 0x5, 0x3, 0x9, 0x1ff, 0x1]}, {0x0, 0x1, 0x2}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x180) 2.905669182s ago: executing program 2 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x7d7e, &(0x7f0000000b00)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) close_range(r0, 0xffffffffffffffff, 0x0) 2.570236264s ago: executing program 2 (id=690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640)) 2.445431775s ago: executing program 0 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x1c, r1, 0x101, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000) 2.395517345s ago: executing program 2 (id=693): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000054000000030a01010000000000000000010000000900030073797a3000000000280004800800024000000000080001400000000504000400766574683000000000000000000000000900010073797a300000000014000000000001"], 0x9c}}, 0x0) 2.194067087s ago: executing program 0 (id=694): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRES64=r1], 0x0) 2.193644927s ago: executing program 2 (id=695): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x10000800, 0x0, 0xff, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, 0x8) 2.080577457s ago: executing program 2 (id=696): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.024848308s ago: executing program 3 (id=698): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) 1.749048709s ago: executing program 1 (id=702): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000340)='./file2\x00', 0x280400b, &(0x7f00000004c0)=ANY=[], 0x41, 0x230, &(0x7f00000006c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) unshare(0x22020600) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x41f1fd03}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000, 0x5}, 0x0, 0x0, 0x0) 1.456225941s ago: executing program 1 (id=704): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1.383890301s ago: executing program 2 (id=705): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400a06000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="20131d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.346548272s ago: executing program 1 (id=706): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) 1.346122192s ago: executing program 4 (id=707): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 1.284876252s ago: executing program 1 (id=708): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xb0a147dffc1b6dc7}}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.191679472s ago: executing program 4 (id=709): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 1.191169552s ago: executing program 1 (id=710): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) syz_mount_image$cramfs(&(0x7f0000000080), &(0x7f0000000180)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x145, &(0x7f00000004c0)="$eJzszjFLAmEcx/Hv6XmXpulgYA0RNCRFcJ3Y1qCQJGQHRXuQJwlniEJIUzY39AJuKFrFIBobyqZKF9+HrY4X512Bjc3PZ7nj//s9/+fZ2R6kSUCQCQmoN8xm0ywvHxilwuHj0/OcG6jAzKRSqzfcctk78JKDU/crw6jtjd9iAcBSvQbqKAdpID8LlWoIzZGgDZEA5JP+zXjn0yvQm5f5CjuODsi/M6hgmRkYO22URRnycXefZWqAcwerMX9R1boI+L8tO+S/gikte73b+djvvxc31pbMa72wcB9NBTkyFYgAcb/X7QwH/dKeUTIGGV3fymibmpYdGp/9YvbyBnk3es6D/GefogAKXElgq9CR3Hz0Krnv692OjVpcTYaBswTITCWSf6+btOyT41TwZ4KEIAiCIAiCIAiCIPzTdwAAAP//9+NSmg==") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001640)={0x3, 0x2, {0x8001, @struct={0x7, 0x8}, 0x0, 0x3, 0x0, 0x3, 0xce, 0x33, 0x404, @struct={0x4}, 0x4, 0xd91, [0x8, 0x1, 0xfffff00000000000, 0x1, 0x100, 0x9]}, {0xc, @struct={0x81, 0x200}, 0x0, 0x4, 0x86, 0x80000001, 0x1767, 0xfffffffffffffff8, 0x46, @usage=0x3, 0x7, 0x2, [0xe, 0x4, 0x4, 0x7, 0x2, 0x9]}, {0x81, @usage=0x3, 0x0, 0x1, 0x2, 0x8, 0x40, 0x8000000000000000, 0x416, @usage, 0x3, 0xfff, [0x1, 0x1, 0xfff, 0x1ff, 0x2, 0x2]}, {0x2, 0x8, 0x5594}}) 1.155892043s ago: executing program 4 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44054) 1.072727133s ago: executing program 4 (id=712): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 998.004804ms ago: executing program 4 (id=713): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x62) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x201f) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000000)=ANY=[], 0x4000) 847.892845ms ago: executing program 4 (id=714): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 312.114548ms ago: executing program 0 (id=715): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0xffff, @mcast2, 0x7}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) sendmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="651ae75dc6f21fa6c59a5a4814920c2f86a81572018e50f5a83f71d52cab286c90f6f63316a94626147df31964be6558672561b26a4bd72e0a2e60e4acec3b7deda8d3ee9bdbcabf56d94af7bf20f471789cf4b337a9bc17962cda70c1", 0x5d}, {}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x11c8}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001400)="481141ce75025d90d875db3cefb4663285beb31a965b759219fa9a4d52dbe6fe9c44b354265fd193c88a6104c37a7d7a928b4a42f0f83b572adcb06feb3ba28f6736cf26e0fd373dc070c4db167ed68add55b007ac7599ff245d98dcf32a46f4f72897d365b967de617d5af67b525f9fa99a7f7595e19e03532ba22cf4d1023c6a950314277fa913e3aa20a004ab94b16c54705d130bdfc53320c328df1d1f251d2347843694dcfd2f696070729223e0dfb185797a0be8deb3690b9574bd", 0xbe}, {&(0x7f00000014c0)="b9b7bcb365dae6a61024607cea06c98b64bfe696582e8350319da0eddce87bf5c435a62f1f867bfc2a18c0fbfb402a142168f286f8b73e821f328e8632774c7621ed5aee30afac81427fa0ff7279a85baedf62adb45388a7c1102e4318ec7ffc8ceeb92cfbf794660e02b7f29d46db91eb3fa66e19beb8d0754038ed9c14183ea3f5b777ebaade13c4a3ca369a6f3222786124c4cf6fbd894727d73ad0952d0bcbac74386ecb063e4655f6d95cc27e00c9825d0862b1542ad0a96d61821b29d31b3c1c91960a3c4c86ac8449d3c244e3a898ccd6a9eb0c8ee542a357a49bbd6814de6f37acd927f55d", 0xe9}, {&(0x7f0000000000)="9d7280a7a4bd5f13f4578d9b0dc7853b7b749f5d20fae881a3f2f5e4690d3486765f33b0484c4b7068a1cb94170fa5d158a390f0bff97cc06581550d2addcb", 0x3f}, {&(0x7f0000001600)="68d9daabffc3252f98b20f63690430033d6bf0732493dab9913f8b25f53efc1ea9794e6e5456b1a761677262c7be384342cecd3ad887387d764a3ef39c6aa5413f4d087a4b55774acc68a0ca02e4ed6a5a70bddd9d5ef6071d1bba487573c7d9cf9739cd8b4284169e5d4be8ca665a58b7436446d627215f47336483168ca1021aecbfe543d0ae01e501d893a8d2c05b5ec3b41da8bc", 0x96}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="6de7dffdadb41e5e2c14cdee3519fdf597c0eb622a7ab3cf78c90ee6ab7c52c158212d2f7813181b8be5d0acfd858e395fb1869269a83e7823197ad2b80af50342d79b1b1d3adc9590ca20a746208796020589b2c9c9b35c74cb197b8576b4b71451660a0fe5611d0c879f2ab475d053bde8eb58b38b215ee193a0235f021280d5fb2711e3eff069ed2f7cb86cfa4b219ab3928d0862300b22b931974e728cd3dfb2c402cfa68eb3d130b5bbcda8e7dfe0785220370483afaa6bdcf346f78060c6fe24187e7cd9b0649615358a3d4e48cea7eb1350", 0xd5}, {&(0x7f0000001800)="bcbcf13198e1dcece83ce002b36623c6f48b7baa07084492c62e7821ffa7da78123ec84267f303908645199bed4a035a8cc17b92c6ee1ec4c20afcf73b50aad5d518bfab01fabcc72c322f1d85a2dcd7934738cc70f3a32afc29b65b3a43c08d53f9b1d7ea43da8513bb740593322b9c8085cacffd89b46265c5f3c4ef3976f82726d55cf3cccc0be0d5c8cd96716180331db625", 0x94}, {&(0x7f00000018c0)="570fb9ec247223c4d154b860c72011e157925b5a6cff57df5b192a2cb51b500aab498071d5eb2dbe6cc997bc516fc66e03e9d9eb9122719cd6087fa81012c63d50ae7c7b8a5bfd2c658231a4385555f38e9f0a7436b10ac8f885b2ab130fbaf911af8372d09b74a5565ae965f60262836feffd443e4fa67515634386cac6948d9e5ed9ea6d6353990a44a4aa207f22d180a0fb4d2c09f2f446fbe0fd6c70b76e072126ce898894ab07be057574b0730baa28a0b883c999ad", 0xb8}, {&(0x7f0000001980)="2e5e084de3862e868ae761e9e9b2ffb5a77fffd476bab69d2cd147fa28035e02fa96d8c3d68257d316d2c84750d3595a7b44ad895e224a44c2a0780d", 0x3c}], 0x9}}], 0x2, 0x4) 202.432088ms ago: executing program 0 (id=716): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r1, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e24, 0x7f, @local, 0x3}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r1, r0}}, 0x18) 153.233009ms ago: executing program 0 (id=717): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x2) 75.75464ms ago: executing program 1 (id=718): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=719): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) symlink(0x0, 0x0) mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1) kernel console output (not intermixed with test programs): ue to avoid problems! [ 58.488758][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.510685][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.525113][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.536821][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.546807][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.558208][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.573254][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.581238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.590071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.598926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.664278][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.681510][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.700261][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.709285][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.890789][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.924790][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.994422][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.013463][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.053480][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.061520][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.072691][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.081628][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.105223][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.163990][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.172824][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.187664][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.251991][ T4239] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.373655][ T4332] loop0: detected capacity change from 0 to 64 [ 59.622325][ T4239] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.641982][ T4239] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.680968][ T4239] usb 4-1: config 0 interface 0 has no altsetting 0 [ 59.692269][ T4239] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 59.701350][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.733148][ T4239] usb 4-1: config 0 descriptor?? [ 59.750541][ T4345] loop1: detected capacity change from 0 to 128 [ 59.822845][ T4322] loop2: detected capacity change from 0 to 32768 [ 59.878828][ T4345] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.899946][ T4322] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.13 (4322) [ 59.903962][ T4345] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.969182][ T4322] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 59.984706][ T4322] BTRFS info (device loop2): using free space tree [ 59.991255][ T4322] BTRFS info (device loop2): has skinny extents [ 59.998674][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 60.005321][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 60.012218][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 60.018282][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 60.024875][ T4232] Bluetooth: hci4: command 0x0419 tx timeout [ 60.287906][ T4239] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0001/input/input5 [ 60.351504][ T4322] BTRFS info (device loop2): enabling ssd optimizations [ 60.379100][ T4384] loop0: detected capacity change from 0 to 1024 [ 60.404844][ T4239] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 60.503363][ T4239] usb 4-1: USB disconnect, device number 2 [ 60.505374][ T26] audit: type=1800 audit(1761851784.416:2): pid=4384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 60.576375][ T4384] attempt to access beyond end of device [ 60.576375][ T4384] loop0: rw=34817, want=5780, limit=1024 [ 61.257393][ T4402] fido_id[4402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 61.433903][ T4414] tap0: tun_chr_ioctl cmd 35108 [ 61.589063][ T4405] loop0: detected capacity change from 0 to 131072 [ 61.615004][ T4418] loop4: detected capacity change from 0 to 256 [ 61.675120][ T4405] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 61.684776][ T4405] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 61.715321][ T4405] F2FS-fs (loop0): invalid crc value [ 61.791173][ T4405] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.858878][ T4405] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 61.869050][ T4405] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 61.962167][ T4405] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7 [ 62.145586][ T4435] loop1: detected capacity change from 0 to 128 [ 62.241972][ T4423] Bluetooth: hci4: command 0x0411 tx timeout [ 62.407568][ T4447] loop3: detected capacity change from 0 to 256 [ 62.507732][ T4447] ======================================================= [ 62.507732][ T4447] WARNING: The mand mount option has been deprecated and [ 62.507732][ T4447] and is ignored by this kernel. Remove the mand [ 62.507732][ T4447] option from the mount to silence this warning. [ 62.507732][ T4447] ======================================================= [ 62.543066][ C0] vkms_vblank_simulate: vblank timer overrun [ 62.652740][ T4447] FAT-fs (loop3): Directory bread(block 64) failed [ 62.659645][ T4447] FAT-fs (loop3): Directory bread(block 65) failed [ 62.697782][ T4447] FAT-fs (loop3): Directory bread(block 66) failed [ 62.717527][ T4447] FAT-fs (loop3): Directory bread(block 67) failed [ 62.731913][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.740061][ T4465] loop4: detected capacity change from 0 to 256 [ 62.760161][ T4447] FAT-fs (loop3): Directory bread(block 68) failed [ 62.766342][ T4463] loop1: detected capacity change from 0 to 512 [ 62.775814][ T4447] FAT-fs (loop3): Directory bread(block 69) failed [ 62.786979][ T4447] FAT-fs (loop3): Directory bread(block 70) failed [ 62.795508][ T4447] FAT-fs (loop3): Directory bread(block 71) failed [ 62.819262][ T4463] EXT4-fs (loop1): Ignoring removed orlov option [ 62.819510][ T4465] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.855702][ T4463] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.872874][ T4463] EXT4-fs error (device loop1): ext4_find_extent:893: inode #4: comm syz.1.55: inode has invalid extent depth: 7 [ 62.883887][ T4447] FAT-fs (loop3): Directory bread(block 72) failed [ 62.901961][ T4463] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 62.911650][ T4463] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.931971][ T4447] FAT-fs (loop3): Directory bread(block 73) failed [ 62.997621][ T4465] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 63.011462][ T4465] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.032707][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 63.063002][ T4463] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 63.079978][ T4463] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 63.272334][ T1323] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 63.382171][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 63.391293][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.422621][ T7] usb 3-1: Product: syz [ 63.441217][ T7] usb 3-1: Manufacturer: syz [ 63.449680][ T7] usb 3-1: SerialNumber: syz [ 63.484348][ T7] usb 3-1: config 0 descriptor?? [ 63.605907][ T4480] loop3: detected capacity change from 0 to 4096 [ 63.672857][ T1323] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 63.696095][ T1323] usb 1-1: config 0 has no interface number 0 [ 63.753862][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 63.913268][ T1323] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 63.933638][ T1323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.948078][ T1323] usb 1-1: Product: syz [ 63.955681][ T1323] usb 1-1: Manufacturer: syz [ 63.961288][ T1323] usb 1-1: SerialNumber: syz [ 63.963427][ T4181] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 63.974145][ T4181] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 63.985034][ T1323] usb 1-1: config 0 descriptor?? [ 64.021808][ T4501] loop4: detected capacity change from 0 to 512 [ 64.090669][ T4501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.158280][ T4501] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 64.182475][ T4501] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.201483][ T4501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.208273][ T4501] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.73: bad orphan inode 11 [ 64.225330][ T4501] ext4_test_bit(bit=10, block=2) = 0 [ 64.230665][ T4501] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000038b84894,noblock_validity,,errors=continue. Quota mode: none. [ 64.273890][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 64.296835][ T4501] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none. [ 64.329161][ T7] usb 3-1: USB disconnect, device number 2 [ 64.429020][ T4505] loop3: detected capacity change from 0 to 40427 [ 64.449124][ T4505] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.461115][ T4505] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.483685][ T4505] F2FS-fs (loop3): invalid crc value [ 64.522017][ T4505] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.567445][ T4505] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.575568][ T4505] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.696425][ T1323] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 64.711410][ T1323] asix: probe of 1-1:0.251 failed with error -524 [ 64.752083][ T4508] loop4: detected capacity change from 0 to 32768 [ 64.886342][ T4508] XFS (loop4): Mounting V5 Filesystem [ 64.919063][ T1323] usb 1-1: USB disconnect, device number 2 [ 65.051326][ T4508] XFS (loop4): Ending clean mount [ 65.080796][ T4508] XFS (loop4): Quotacheck needed: Please wait. [ 65.200887][ T4508] XFS (loop4): Quotacheck: Done. [ 65.342084][ T4537] loop2: detected capacity change from 0 to 4096 [ 65.367912][ T4188] XFS (loop4): Unmounting Filesystem [ 65.531974][ T4542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.876512][ T4554] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 65.984121][ T4558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 66.092273][ T4565] program syz.4.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.100848][ T4567] delete_channel: no stack [ 66.155895][ T4570] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 66.321301][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 66.589232][ T4605] loop2: detected capacity change from 0 to 128 [ 66.610424][ T4605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 66.637117][ T4607] loop3: detected capacity change from 0 to 512 [ 66.644943][ T4605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.693782][ T4607] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 66.706439][ T4607] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.752156][ T4607] Quota error (device loop3): find_block_dqentry: Quota for id 62708 referenced but not present [ 66.764311][ T4607] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 62708 [ 66.775245][ T4607] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.114: Failed to acquire dquot type 0 [ 66.915304][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 66.942812][ T4615] loop1: detected capacity change from 0 to 16 [ 67.018126][ T4615] erofs: (device loop1): mounted with root inode @ nid 36. [ 67.080368][ T4615] binder: 4613:4615 ioctl c0306201 200000000240 returned -14 [ 67.270544][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.279288][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.688391][ T4639] loop0: detected capacity change from 0 to 4096 [ 67.730552][ T4647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.132'. [ 67.735872][ T4620] loop2: detected capacity change from 0 to 32768 [ 67.762618][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 67.902426][ T4185] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 67.922075][ T4239] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 67.933948][ T4185] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 68.091424][ T4641] loop1: detected capacity change from 0 to 32768 [ 68.128558][ T4641] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.129 (4641) [ 68.176692][ T4641] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 68.190169][ T4641] BTRFS info (device loop1): force zlib compression, level 3 [ 68.198030][ T4641] BTRFS info (device loop1): force clearing of disk cache [ 68.205341][ T4641] BTRFS info (device loop1): setting nodatasum [ 68.211726][ T4641] BTRFS info (device loop1): allowing degraded mounts [ 68.218734][ T4641] BTRFS info (device loop1): enabling disk space caching [ 68.225981][ T4641] BTRFS info (device loop1): disk space caching is enabled [ 68.252583][ T4641] BTRFS info (device loop1): has skinny extents [ 68.268654][ T4657] loop0: detected capacity change from 0 to 136 [ 68.306284][ T4239] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 68.352774][ T4657] Attempt to read inode for relocated directory [ 68.361045][ T4239] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.425418][ T4239] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 68.489461][ T4239] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 68.507763][ T4641] BTRFS info (device loop1): clearing free space tree [ 68.517726][ T4641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 68.528902][ T4641] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.558692][ T4239] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.580491][ T4681] capability: warning: `syz.2.135' uses 32-bit capabilities (legacy support in use) [ 68.642049][ T4239] usb 4-1: config 0 interface 0 has no altsetting 0 [ 68.794140][ T4641] BTRFS info (device loop1): balance: start -susage=3,devid=0,vrange=1..3,limit=233 [ 68.814318][ T4641] BTRFS info (device loop1): balance: ended with status: 0 [ 68.822807][ T4239] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 68.844401][ T4239] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 68.883094][ T4239] usb 4-1: Product: syz [ 68.919804][ T4239] usb 4-1: Manufacturer: syz [ 68.932184][ T4239] usb 4-1: SerialNumber: syz [ 68.952056][ T4315] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.954079][ T4239] usb 4-1: config 0 descriptor?? [ 68.981402][ T4696] loop0: detected capacity change from 0 to 2048 [ 68.995807][ T4643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.013283][ T4239] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.101035][ T4239] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.145803][ T4696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.160114][ T4696] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.197623][ T4696] EXT4-fs (loop0): shut down requested (2) [ 69.222992][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 69.342124][ T4315] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.347717][ T4423] usb 4-1: USB disconnect, device number 3 [ 69.361577][ T4315] usb 3-1: config 179 has no interface number 0 [ 69.381415][ T4315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.402374][ T4315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.417498][ T4423] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 69.421934][ T4315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.454700][ T4694] loop4: detected capacity change from 0 to 32768 [ 69.461512][ T4315] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 69.482150][ T4315] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.500866][ T4315] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.514319][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.548914][ T4694] jfs_readdir called with invalid offset! [ 69.562350][ T4685] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.639860][ T4708] loop1: detected capacity change from 0 to 8192 [ 69.716123][ T4708] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 69.776366][ T4708] REISERFS (device loop1): using ordered data mode [ 69.803502][ T4708] reiserfs: using flush barriers [ 69.822023][ T4703] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.839125][ T4708] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 69.870802][ T4315] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 69.938106][ T4708] REISERFS (device loop1): checking transaction log (loop1) [ 69.994719][ T4239] Bluetooth: hci4: command 0x0405 tx timeout [ 70.018623][ T4708] REISERFS (device loop1): Using r5 hash to sort names [ 70.044297][ T4708] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 70.079232][ T4712] loop4: detected capacity change from 0 to 32768 [ 70.148312][ T4315] usb 3-1: USB disconnect, device number 3 [ 70.171899][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 70.181655][ T4315] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 70.462089][ T4703] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 70.471163][ T4703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.491969][ T4703] usb 1-1: Product: syz [ 70.502181][ T4703] usb 1-1: Manufacturer: syz [ 70.506795][ T4703] usb 1-1: SerialNumber: syz [ 70.550119][ T4703] usb 1-1: config 0 descriptor?? [ 70.751292][ T4719] program syz.2.153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.818682][ T4722] Set syz0 is full, maxelem 0 reached [ 70.869136][ T4725] device wg0 entered promiscuous mode [ 71.281687][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.288409][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502182][ T4703] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 71.522824][ T4703] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 71.529941][ T4732] loop3: detected capacity change from 0 to 32768 [ 71.545496][ T4703] asix: probe of 1-1:0.0 failed with error -71 [ 71.582102][ T4703] usb 1-1: USB disconnect, device number 3 [ 71.640444][ T4750] loop1: detected capacity change from 0 to 512 [ 71.818195][ T4742] loop4: detected capacity change from 0 to 40427 [ 71.827200][ T4750] EXT4-fs (loop1): Test dummy encryption mode enabled [ 71.852444][ T4734] loop2: detected capacity change from 0 to 40427 [ 71.857365][ T4750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.882179][ T4742] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 71.905473][ T4734] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 71.930675][ T4734] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.939978][ T4742] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.950268][ T4750] EXT4-fs (loop1): 1 truncate cleaned up [ 71.956792][ T4750] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,errors=remount-ro,inode_readahead_blks=0x0000000000000100,. Quota mode: none. [ 71.979161][ T4734] F2FS-fs (loop2): invalid crc_offset: 266236 [ 72.073108][ T4742] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.086987][ T4734] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.160088][ T4742] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 72.177677][ T4742] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.240206][ T4750] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 72.263696][ T4734] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.270786][ T4734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.344272][ T4774] loop0: detected capacity change from 0 to 1024 [ 72.352381][ T4762] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.165: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 72.433122][ T4774] EXT4-fs (loop0): Ignoring removed oldalloc option [ 72.467672][ T26] audit: type=1800 audit(1761851796.376:3): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.160" name="file1" dev="loop2" ino=455 res=0 errno=0 [ 72.495720][ T4774] EXT4-fs (loop0): Ignoring removed bh option [ 72.513324][ T4778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.514334][ T4762] EXT4-fs (loop1): Remounting filesystem read-only [ 72.547428][ T4774] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.550754][ T1152] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 72.566093][ T4762] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 72.609829][ T1152] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 72.614237][ T4774] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 72.650142][ T4762] EXT4-fs (loop1): Remounting filesystem read-only [ 72.662173][ T4762] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.165: Deleting old file: nlink 4, error=-117 [ 72.875371][ T4784] Zero length message leads to an empty skb [ 73.258396][ T4803] loop3: detected capacity change from 0 to 64 [ 73.389647][ T4812] netlink: 7 bytes leftover after parsing attributes in process `syz.4.171'. [ 73.390505][ T4809] loop2: detected capacity change from 0 to 1024 [ 73.577986][ T4818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.185'. [ 73.594466][ T4819] attempt to access beyond end of device [ 73.594466][ T4819] loop2: rw=0, want=5780, limit=1024 [ 73.654833][ T4809] attempt to access beyond end of device [ 73.654833][ T4809] loop2: rw=0, want=5780, limit=1024 [ 73.743283][ T4827] Failed to get privilege flags for destination (handle=0x2:0x25) [ 73.879824][ T4834] loop3: detected capacity change from 0 to 256 [ 73.941136][ T4833] loop2: detected capacity change from 0 to 4096 [ 73.977015][ T4814] loop0: detected capacity change from 0 to 32768 [ 73.999161][ T4833] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 74.019983][ T4834] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 74.081312][ T4833] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 74.113472][ T4833] ntfs3: loop2: mft corrupted [ 74.122007][ T4833] ntfs3: loop2: Failed to load $Extend. [ 74.126531][ T4814] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 74.181440][ T4814] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 74.331233][ T4185] ocfs2: Unmounting device (7,0) on (node local) [ 74.657201][ T4852] loop4: detected capacity change from 0 to 4096 [ 74.676082][ T4852] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 74.730119][ T4852] ntfs3: loop4: Inode r=19 is not in use! [ 74.752617][ T4852] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 74.855354][ T4851] loop0: detected capacity change from 0 to 32768 [ 74.865319][ T9] ntfs3: loop4: ino=1d, failed to open parent directory r=400 to update [ 74.994023][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 75.020798][ T4851] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 75.020798][ T4851] [ 75.045570][ T4851] ERROR: (device loop0): remounting filesystem as read-only [ 75.061232][ T4851] jfs_lookup: dtSearch returned -5 [ 75.100152][ T276] blkno = 8ed2c, nblocks = 1 [ 75.117510][ T276] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 75.117510][ T276] [ 75.158554][ T276] JFS: metapage_get_blocks failed [ 75.170600][ T276] ERROR: (device loop0): release_metapage: write_one_page() failed [ 75.170600][ T276] [ 75.189091][ T276] blkno = 8ed2c, nblocks = 1 [ 75.194249][ T276] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 75.194249][ T276] [ 75.534611][ T4878] loop2: detected capacity change from 0 to 1024 [ 75.688734][ T4885] process 'syz.4.218' launched './file0' with NULL argv: empty string added [ 76.098386][ T4907] loop3: detected capacity change from 0 to 1024 [ 76.184837][ T26] audit: type=1800 audit(1761851800.096:4): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.225" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 76.252101][ T4704] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.405419][ T1106] cfg80211: failed to load regulatory.db [ 76.492139][ T4704] usb 3-1: Using ep0 maxpacket: 16 [ 76.497277][ T4931] loop3: detected capacity change from 0 to 512 [ 76.612164][ T4704] usb 3-1: config 0 has no interfaces? [ 76.613605][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 76.677350][ T4931] EXT4-fs (loop3): 1 orphan inode deleted [ 76.718880][ T4931] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.772109][ T4704] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.781336][ T4704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.783564][ T4931] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.789795][ T4704] usb 3-1: Product: syz [ 76.804436][ T4704] usb 3-1: Manufacturer: syz [ 76.809112][ T4704] usb 3-1: SerialNumber: syz [ 76.839797][ T4704] r8152-cfgselector 3-1: config 0 descriptor?? [ 77.119059][ T4704] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 77.155931][ T4933] loop1: detected capacity change from 0 to 32768 [ 77.200493][ T4944] loop3: detected capacity change from 0 to 65 [ 77.220134][ T4933] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.234 (4933) [ 77.262583][ T4944] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 77.291526][ T4933] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 77.311452][ T4933] BTRFS info (device loop1): using free space tree [ 77.322078][ T4933] BTRFS info (device loop1): has skinny extents [ 77.422915][ T4944] BFS-fs: bfs_readdir(): Bad f_pos=00000012 for loop3:00000002 [ 77.452265][ T4315] usb 3-1: USB disconnect, device number 4 [ 77.531932][ T4423] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.547258][ T4942] loop4: detected capacity change from 0 to 40427 [ 77.612401][ T4933] BTRFS info (device loop1): enabling ssd optimizations [ 77.635103][ T4942] F2FS-fs (loop4): invalid crc value [ 77.658393][ T4942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.738002][ T26] audit: type=1800 audit(1761851801.646:5): pid=4933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 77.759233][ T4942] F2FS-fs (loop4): Start checkpoint disabled! [ 77.790146][ T4942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 77.864753][ T4423] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 77.952203][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.961299][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.004752][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.112177][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.121098][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.132425][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.233644][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.246852][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.278394][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.422178][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.440021][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.478223][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.616822][ T4999] loop1: detected capacity change from 0 to 256 [ 78.623470][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.637395][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.664127][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.692882][ T4999] exfat: Deprecated parameter 'utf8' [ 78.717868][ T4999] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 78.777152][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.799345][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.830261][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.942181][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.943892][ T4315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.953557][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.004452][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.112848][ T4423] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.122656][ T4423] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.139329][ T4423] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.225944][ T4315] usb 5-1: Using ep0 maxpacket: 8 [ 79.288165][ T5006] loop2: detected capacity change from 0 to 32768 [ 79.308129][ T5006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.254 (5006) [ 79.325734][ T4423] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.338036][ T4423] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.342307][ T4315] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 79.351082][ T4423] usb 1-1: Product: syz [ 79.367542][ T4423] usb 1-1: Manufacturer: syz [ 79.372710][ T4423] usb 1-1: SerialNumber: syz [ 79.375000][ T4315] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 79.379897][ T4423] usb 1-1: config 0 descriptor?? [ 79.401359][ T4315] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 79.436502][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.445665][ T4423] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.489875][ T5006] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 79.539453][ T5006] BTRFS info (device loop2): setting nodatasum [ 79.555344][ T5006] BTRFS info (device loop2): force zlib compression, level 3 [ 79.607164][ T5006] BTRFS info (device loop2): enabling ssd optimizations [ 79.637191][ T5006] BTRFS info (device loop2): allowing degraded mounts [ 79.677067][ T5006] BTRFS info (device loop2): using free space tree [ 79.701216][ T5025] loop3: detected capacity change from 0 to 256 [ 79.725462][ T5025] exfat: Deprecated parameter 'utf8' [ 79.732341][ T4315] usb 5-1: string descriptor 0 read error: -71 [ 79.732581][ T5006] BTRFS info (device loop2): has skinny extents [ 79.741798][ T4315] hub 5-1:32.0: USB hub found [ 79.793756][ T4253] usb 1-1: USB disconnect, device number 4 [ 79.802113][ T4315] hub 5-1:32.0: config failed, can't read hub descriptor (err -22) [ 79.816019][ T4253] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 79.874112][ T4315] usb 5-1: USB disconnect, device number 2 [ 80.142524][ T26] audit: type=1800 audit(1761851804.056:6): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.254" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 80.352111][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.617326][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 80.742310][ T4260] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.777283][ T4260] usb 4-1: config 0 interface 0 has no altsetting 0 [ 80.797548][ T4260] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 80.824534][ T4260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.857582][ T4260] usb 4-1: config 0 descriptor?? [ 81.038570][ T5073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.274'. [ 81.263642][ T5064] loop0: detected capacity change from 0 to 32768 [ 81.317898][ T5085] loop4: detected capacity change from 0 to 4096 [ 81.363906][ T5064] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.269 (5064) [ 81.376976][ T5085] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 81.390442][ T4260] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 81.418598][ T5064] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 81.432452][ T5064] BTRFS info (device loop0): metadata ratio 2 [ 81.440384][ T5064] BTRFS info (device loop0): allowing degraded mounts [ 81.454777][ T5064] BTRFS info (device loop0): force zlib compression, level 3 [ 81.468465][ T5085] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 81.476268][ T4260] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 81.501620][ T5064] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.513978][ T4260] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -38 [ 81.548896][ T5064] BTRFS info (device loop0): use zstd compression, level 3 [ 81.590354][ T5064] BTRFS info (device loop0): force clearing of disk cache [ 81.630426][ T5064] BTRFS info (device loop0): turning on flush-on-commit [ 81.678731][ T5064] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 81.722262][ T5064] BTRFS info (device loop0): trying to use backup root at mount time [ 81.730475][ T5064] BTRFS info (device loop0): using free space tree [ 81.767085][ T5064] BTRFS info (device loop0): has skinny extents [ 81.805806][ T4977] usb 4-1: USB disconnect, device number 4 [ 81.866814][ T5101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 82.188874][ T5064] BTRFS info (device loop0): enabling ssd optimizations [ 82.222538][ T5064] BTRFS info (device loop0): clearing free space tree [ 82.261045][ T5064] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.271169][ T5064] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.336191][ T5064] BTRFS info (device loop0): creating free space tree [ 82.382889][ T5064] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.411779][ T5064] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.461712][ T5129] loop4: detected capacity change from 0 to 40427 [ 83.496013][ T5129] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 83.510856][ T5145] loop0: detected capacity change from 0 to 512 [ 83.534184][ T5129] F2FS-fs (loop4): invalid crc value [ 83.551508][ T5129] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.565932][ T5145] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.570406][ T4315] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.634767][ T5145] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.682034][ T5129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.720183][ T5145] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.304: bg 0: block 248: padding at end of block bitmap is not set [ 83.758290][ T5145] Quota error (device loop0): write_blk: dquota write failed [ 83.769191][ T5145] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 83.779596][ T5145] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.304: Failed to acquire dquot type 1 [ 83.808824][ T4188] attempt to access beyond end of device [ 83.808824][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 83.833613][ T5145] EXT4-fs (loop0): 1 truncate cleaned up [ 83.839418][ T5145] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.892287][ T26] audit: type=1800 audit(1761851807.806:7): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.304" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 83.937039][ T5145] syz.0.304 (5145) used greatest stack depth: 20776 bytes left [ 83.943319][ T4315] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 84.052188][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.079604][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.088776][ T5157] loop0: detected capacity change from 0 to 64 [ 84.102008][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.202098][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.231971][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.273922][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.367612][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.392118][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.429376][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.532139][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.550015][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.579601][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.614262][ T5155] loop3: detected capacity change from 0 to 32768 [ 84.641114][ T5155] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.297 (5155) [ 84.653694][ T5168] loop0: detected capacity change from 0 to 8192 [ 84.673198][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.685561][ T5168] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 84.709399][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.762917][ T5159] loop4: detected capacity change from 0 to 40427 [ 84.766309][ T5168] REISERFS (device loop0): using ordered data mode [ 84.800332][ T5159] F2FS-fs (loop4): invalid crc value [ 84.814836][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.825111][ T5168] reiserfs: using flush barriers [ 84.840584][ T5159] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.846504][ T5168] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 84.864542][ T5168] REISERFS (device loop0): checking transaction log (loop0) [ 84.886790][ T5155] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 84.900595][ T5168] REISERFS (device loop0): Using r5 hash to sort names [ 84.908316][ T5155] BTRFS info (device loop3): using free space tree [ 84.917540][ T5168] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 84.931944][ T5155] BTRFS info (device loop3): has skinny extents [ 84.932196][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.027475][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.115327][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.123994][ T5159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.129064][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 85.160564][ T5194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 85.222132][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.257132][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.279082][ T5155] BTRFS info (device loop3): enabling ssd optimizations [ 85.304120][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.348612][ T26] audit: type=1800 audit(1761851809.256:8): pid=5155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.297" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 85.382583][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.402609][ T4315] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.465735][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.519368][ T5207] loop1: detected capacity change from 0 to 64 [ 85.659488][ T4315] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.678438][ T4315] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.688017][ T4315] usb 3-1: Product: syz [ 85.698158][ T4315] usb 3-1: Manufacturer: syz [ 85.711431][ T4315] usb 3-1: SerialNumber: syz [ 85.741077][ T4315] usb 3-1: config 0 descriptor?? [ 85.793766][ T4315] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 86.154125][ T4975] usb 3-1: USB disconnect, device number 5 [ 86.214499][ T5222] loop4: detected capacity change from 0 to 64 [ 86.221391][ T4975] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 86.257757][ T5222] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 86.323821][ T5221] loop1: detected capacity change from 0 to 4096 [ 86.347757][ T5210] loop0: detected capacity change from 0 to 32768 [ 86.400116][ T5210] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.321 (5210) [ 86.423194][ T26] audit: type=1800 audit(1761851810.336:9): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.325" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 86.510990][ T5210] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.560485][ T5210] BTRFS info (device loop0): using free space tree [ 86.598861][ T5210] BTRFS info (device loop0): has skinny extents [ 86.789211][ T5210] BTRFS info (device loop0): enabling ssd optimizations [ 86.839841][ T26] audit: type=1800 audit(1761851810.746:10): pid=5210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.321" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 87.715321][ T5255] loop2: detected capacity change from 0 to 40427 [ 87.782596][ T5250] loop1: detected capacity change from 0 to 32768 [ 87.794254][ T5255] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 87.800901][ T5255] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.851667][ T5255] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.901919][ T5250] XFS (loop1): Mounting V5 Filesystem [ 87.928056][ T5251] loop3: detected capacity change from 0 to 32768 [ 87.950348][ T5255] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.988900][ T5255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.028458][ T5250] XFS (loop1): Ending clean mount [ 88.042619][ T5250] XFS (loop1): Quotacheck needed: Please wait. [ 88.130357][ T5250] XFS (loop1): Quotacheck: Done. [ 88.270143][ T4182] XFS (loop1): Unmounting Filesystem [ 88.277769][ T5276] loop4: detected capacity change from 0 to 512 [ 88.413239][ T5276] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 88.482592][ T5276] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.533731][ T5276] Quota error (device loop4): find_block_dqentry: Quota for id 62708 referenced but not present [ 88.552244][ T5276] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 62708 [ 88.564176][ T5276] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.329: Failed to acquire dquot type 0 [ 88.676348][ T5281] loop3: detected capacity change from 0 to 4096 [ 88.740988][ T5284] loop2: detected capacity change from 0 to 2048 [ 88.888596][ T5293] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.891213][ T5292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.993997][ T5284] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 89.029219][ T5284] Remounting filesystem read-only [ 89.050948][ T5284] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 89.115019][ T5284] NILFS error (device loop2): nilfs_readdir: bad page in #12 [ 89.166147][ T5305] input: syz0 as /devices/virtual/input/input7 [ 89.541309][ T5320] loop2: detected capacity change from 0 to 512 [ 89.610502][ T5322] loop4: detected capacity change from 0 to 512 [ 89.619819][ T5320] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 89.657454][ T5320] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.681481][ T5322] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.695338][ T5304] loop0: detected capacity change from 0 to 40427 [ 89.712573][ T5320] Quota error (device loop2): find_block_dqentry: Quota for id 62708 referenced but not present [ 89.723611][ T5320] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 62708 [ 89.733936][ T5320] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.342: Failed to acquire dquot type 0 [ 89.772403][ T5304] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 89.780195][ T5322] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 89.824820][ T5304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 89.840201][ T5322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.343: bg 0: block 248: padding at end of block bitmap is not set [ 89.858715][ T5304] F2FS-fs (loop0): invalid crc value [ 89.859428][ T5322] Quota error (device loop4): write_blk: dquota write failed [ 89.876665][ T5322] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 89.887464][ T5322] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.343: Failed to acquire dquot type 1 [ 89.929772][ T5304] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 89.996410][ T5322] EXT4-fs (loop4): 1 truncate cleaned up [ 90.021172][ T5322] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.099169][ T5335] loop2: detected capacity change from 0 to 512 [ 90.108733][ T5304] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 90.141458][ T5304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.156795][ T26] audit: type=1800 audit(1761851814.066:11): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 90.204312][ T5335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 90.251779][ T5335] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.299167][ T5345] loop3: detected capacity change from 0 to 128 [ 90.332808][ T5335] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.370350][ T5335] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 90.392328][ T5335] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.345: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 90.401037][ T5345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.431185][ T4185] attempt to access beyond end of device [ 90.431185][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 90.462186][ T5345] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.508621][ T5335] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.345: couldn't read orphan inode 13 (err -117) [ 90.558901][ T5335] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 90.718066][ T5354] program syz.3.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.748875][ T5335] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 90.807017][ T5335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 90.832390][ T5357] loop4: detected capacity change from 0 to 4096 [ 90.841172][ T5335] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.899720][ T5357] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 90.937969][ T5365] loop3: detected capacity change from 0 to 1024 [ 91.030762][ T5367] program syz.2.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.052214][ T26] audit: type=1800 audit(1761851814.956:12): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.355" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 91.085943][ T5365] attempt to access beyond end of device [ 91.085943][ T5365] loop3: rw=34817, want=5780, limit=1024 [ 91.172181][ T9] ntfs3: loop4: ntfs3_write_inode r=1a failed, -22. [ 91.179880][ T4188] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 91.190889][ T4188] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 91.203381][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 91.414625][ T5374] loop4: detected capacity change from 0 to 4096 [ 91.550426][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 91.560744][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 91.720504][ T5378] tap0: tun_chr_ioctl cmd 1074025678 [ 91.722400][ T5375] loop3: detected capacity change from 0 to 40427 [ 91.726095][ T5378] tap0: group set to 0 [ 91.751659][ T5380] loop0: detected capacity change from 0 to 4096 [ 91.808763][ T5382] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.863345][ T5375] F2FS-fs (loop3): invalid crc value [ 91.902870][ T5375] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.097112][ T5375] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.255767][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 92.435344][ T4181] attempt to access beyond end of device [ 92.435344][ T4181] loop3: rw=2049, want=45104, limit=40427 [ 92.518110][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.376'. [ 92.542006][ T4246] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.792235][ T4246] usb 1-1: Using ep0 maxpacket: 32 [ 92.878599][ T5426] loop3: detected capacity change from 0 to 2048 [ 92.932897][ T5427] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.954308][ T4246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.966429][ T5426] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 92.976860][ T5426] Remounting filesystem read-only [ 92.982176][ T5426] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 92.994654][ T5426] NILFS error (device loop3): nilfs_readdir: bad page in #12 [ 93.042328][ T4246] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 93.050746][ T4246] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 93.061611][ T4246] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 93.082692][ T4246] usb 1-1: config 128 has no interface number 0 [ 93.091366][ T4246] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 93.108291][ T4246] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.119714][ T4246] usb 1-1: config 128 interface 127 has no altsetting 0 [ 93.166906][ T5433] loop3: detected capacity change from 0 to 128 [ 93.240849][ T5433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 93.271463][ T5433] hpfs: filesystem error: improperly stopped [ 93.292253][ T5433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.292326][ T4246] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 93.302675][ T5433] hpfs: You really don't want any checks? You are crazy... [ 93.322847][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.341061][ T4246] usb 1-1: Product: syz [ 93.350336][ T4246] usb 1-1: Manufacturer: syz [ 93.363671][ T5433] hpfs: hpfs_map_sector(): read error [ 93.365213][ T4246] usb 1-1: SerialNumber: syz [ 93.369080][ T5433] hpfs: code page support is disabled [ 93.369870][ T5433] hpfs: hpfs_map_4sectors(): unaligned read [ 93.480495][ T5433] hpfs: hpfs_map_4sectors(): unaligned read [ 93.518272][ T5433] hpfs: filesystem error: unable to find root dir [ 93.652585][ T5433] hpfs: hpfs_map_4sectors(): unaligned read [ 93.673870][ T5433] hpfs: hpfs_map_sector(): read error [ 93.717318][ T5433] hpfs: hpfs_map_sector(): read error [ 93.820390][ T4246] usb 1-1: USB disconnect, device number 5 [ 94.062565][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.128610][ T5475] loop2: detected capacity change from 0 to 128 [ 94.270944][ T5475] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue. Quota mode: none. [ 94.310684][ T5475] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.358809][ T5475] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop2' because it doesn't have stable inode numbers [ 94.375075][ T4975] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.588162][ T5467] loop4: detected capacity change from 0 to 32768 [ 94.607676][ T5492] program syz.1.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.683087][ T5467] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 94.757771][ T5467] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 94.772340][ T4975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.791899][ T4975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.802095][ T4975] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.811142][ T4975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.837862][ T5501] netlink: 256 bytes leftover after parsing attributes in process `syz.1.412'. [ 94.849653][ T4975] usb 4-1: config 0 descriptor?? [ 94.857584][ T5501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'. [ 95.045550][ T5467] syz.4.398 (5467) used greatest stack depth: 18824 bytes left [ 95.047790][ T5505] netlink: 72 bytes leftover after parsing attributes in process `syz.1.414'. [ 95.087228][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 95.399471][ T5496] loop0: detected capacity change from 0 to 32768 [ 95.483684][ T5496] XFS (loop0): Mounting V5 Filesystem [ 95.519775][ T5524] loop4: detected capacity change from 0 to 512 [ 95.552186][ T4975] usb 4-1: language id specifier not provided by device, defaulting to English [ 95.619655][ T5496] XFS (loop0): Ending clean mount [ 95.630484][ T5524] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,abort,auto_da_alloc,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 95.718650][ T5496] XFS (loop0): Quotacheck needed: Please wait. [ 95.789128][ T4975] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 95.815229][ T5524] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.818445][ T4975] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 95.871660][ T5496] XFS (loop0): Quotacheck: Done. [ 95.911907][ T4975] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 95.966223][ T4975] usb 4-1: USB disconnect, device number 5 [ 95.976416][ T5538] EXT4-fs warning (device loop4): __ext4_unlink:3335: inode #16: comm syz.4.419: Deleting file 'file3' with no links [ 96.098343][ T4185] XFS (loop0): Unmounting Filesystem [ 96.525368][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.590831][ T5558] loop3: detected capacity change from 0 to 512 [ 96.669098][ T5558] EXT4-fs (loop3): Ignoring removed nobh option [ 96.777362][ T5558] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 96.948157][ T5558] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.011794][ T5568] loop4: detected capacity change from 0 to 2048 [ 97.137950][ T5568] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 97.177996][ T5543] loop2: detected capacity change from 0 to 32768 [ 97.222645][ T5568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.314805][ T5543] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 97.426796][ T5543] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 97.477298][ T4423] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.484255][ T5597] loop4: detected capacity change from 0 to 512 [ 97.544523][ T5597] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.599571][ T5597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 4294967295 (level 1) [ 97.633116][ T5597] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.447: invalid indirect mapped block 4294967295 (level 1) [ 97.664408][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 97.717783][ T5597] EXT4-fs (loop4): 2 truncates cleaned up [ 97.724944][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,init_itable=0x0000000000004004,barrier=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 97.761205][ T4423] usb 4-1: Using ep0 maxpacket: 32 [ 97.812520][ T5597] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.447: bg 0: block 5: invalid block bitmap [ 97.883944][ T4423] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 97.895778][ T4423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.989844][ T4423] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 98.134407][ T5627] syz.2.459 uses obsolete (PF_INET,SOCK_PACKET) [ 98.250094][ T5626] loop0: detected capacity change from 0 to 8192 [ 98.312040][ T4422] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.338875][ T5626] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 98.348475][ T5626] REISERFS (device loop0): using ordered data mode [ 98.360147][ T5626] reiserfs: using flush barriers [ 98.372872][ T5626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 98.391827][ T5626] REISERFS (device loop0): checking transaction log (loop0) [ 98.409780][ T5626] REISERFS (device loop0): Using r5 hash to sort names [ 98.422209][ T5626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 98.624353][ T4422] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 98.678700][ T5634] loop2: detected capacity change from 0 to 40427 [ 98.718267][ T5634] F2FS-fs (loop2): invalid crc value [ 98.724810][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.742214][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.762478][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.776687][ T5634] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.840939][ T4423] gspca_nw80x: reg_r err -71 [ 98.845726][ T4423] nw80x: probe of 4-1:3.0 failed with error -71 [ 98.852273][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.855581][ T5634] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 98.861149][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.861176][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.866320][ T5644] loop0: detected capacity change from 0 to 4096 [ 98.909598][ T4423] usb 4-1: USB disconnect, device number 6 [ 98.952053][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 98.960964][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 98.984022][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 98.992825][ T4187] attempt to access beyond end of device [ 98.992825][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 98.995289][ T5644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.052784][ T5644] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #15: comm syz.0.467: corrupted inode contents [ 99.070839][ T5644] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #15: comm syz.0.467: mark_inode_dirty error [ 99.090781][ T5644] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #15: comm syz.0.467: corrupted inode contents [ 99.108529][ T5644] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.467: mark_inode_dirty error [ 99.112222][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.127406][ T5644] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #15: comm syz.0.467: corrupted inode contents [ 99.142491][ T5644] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #15: comm syz.0.467: mark_inode_dirty error [ 99.154142][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.165858][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.172999][ T5644] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #15: comm syz.0.467: corrupted inode contents [ 99.190506][ T5644] EXT4-fs error (device loop0): ext4_truncate:4279: inode #15: comm syz.0.467: mark_inode_dirty error [ 99.202450][ T5644] EXT4-fs error (device loop0) in ext4_setattr:5622: Corrupt filesystem [ 99.270986][ T5649] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #15: comm syz.0.467: corrupted inode contents [ 99.292416][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.301330][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.348194][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.399186][ T5655] loop1: detected capacity change from 0 to 512 [ 99.416855][ T4185] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 99.435254][ T5656] sctp: [Deprecated]: syz.3.471 (pid 5656) Use of int in max_burst socket option. [ 99.435254][ T5656] Use struct sctp_assoc_value instead [ 99.453491][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.469738][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.481455][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.532537][ T5655] EXT4-fs (loop1): Ignoring removed oldalloc option [ 99.572952][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.591307][ T5655] EXT4-fs (loop1): 1 truncate cleaned up [ 99.630091][ T5655] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 99.655989][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.689187][ T5669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'. [ 99.699708][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.768250][ T5672] loop2: detected capacity change from 0 to 256 [ 99.847185][ T4422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.865983][ T4422] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.884031][ T4422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.928141][ T5676] loop3: detected capacity change from 0 to 4096 [ 100.042487][ T4422] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 100.051567][ T4422] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.060010][ T4423] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.092285][ T5676] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 100.100095][ T4422] usb 5-1: Product: syz [ 100.107554][ T5676] ntfs3: loop3: Failed to load $Extend. [ 100.131970][ T4422] usb 5-1: Manufacturer: syz [ 100.147137][ T4422] usb 5-1: SerialNumber: syz [ 100.172455][ T4422] usb 5-1: config 0 descriptor?? [ 100.220357][ T5683] loop2: detected capacity change from 0 to 4096 [ 100.227835][ T5676] ntfs3: loop3: ino=1b, "file0" directory corrupted [ 100.239632][ T4422] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.325066][ T5683] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 100.332073][ T4423] usb 1-1: Using ep0 maxpacket: 8 [ 100.366183][ T5683] ntfs3: loop2: Inode r=19 is not in use! [ 100.381707][ T5683] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 100.522302][ T5692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.542132][ T4423] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.550752][ T4284] ntfs3: loop2: ino=1d, failed to open parent directory r=400 to update [ 100.608369][ T1323] usb 5-1: USB disconnect, device number 3 [ 100.632342][ T4423] usb 1-1: config 4 interface 0 has no altsetting 0 [ 100.635164][ T1323] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 100.716272][ T5694] loop3: detected capacity change from 0 to 8192 [ 100.818823][ T5694] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 100.864828][ T5694] REISERFS (device loop3): using ordered data mode [ 100.882022][ T4423] usb 1-1: string descriptor 0 read error: -22 [ 100.901587][ T4423] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 100.922280][ T4423] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.928951][ T5694] reiserfs: using flush barriers [ 100.984195][ T4423] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 101.008940][ T4423] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.009126][ T5694] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.039897][ T4423] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 101.075744][ T4423] usb 1-1: media controller created [ 101.092254][ T5694] REISERFS (device loop3): checking transaction log (loop3) [ 101.112344][ T5694] REISERFS (device loop3): Using r5 hash to sort names [ 101.133234][ T5694] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 101.133895][ T4423] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.252186][ T5665] usb 1-1: dvb_usb_au6610: wlen=0, aborting [ 101.447214][ T5718] loop4: detected capacity change from 0 to 1024 [ 101.473436][ T4423] zl10353_read_register: readreg error (reg=127, ret==0) [ 101.517878][ T26] audit: type=1800 audit(1761851825.426:13): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.497" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 101.680028][ T4423] usb 1-1: USB disconnect, device number 6 [ 101.809646][ T5727] loop1: detected capacity change from 0 to 512 [ 101.898096][ T5727] EXT4-fs (loop1): 1 orphan inode deleted [ 101.929424][ T5727] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.944298][ T5735] loop4: detected capacity change from 0 to 512 [ 101.957354][ T5727] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.002209][ T5735] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.045847][ T5735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.074725][ T5735] EXT4-fs (loop4): 1 truncate cleaned up [ 102.084140][ T5735] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,errors=remount-ro,inode_readahead_blks=0x0000000000000100,. Quota mode: none. [ 102.217631][ T5735] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.503: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 102.304464][ T5735] EXT4-fs (loop4): Remounting filesystem read-only [ 102.322112][ T5735] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 102.351806][ T5735] EXT4-fs (loop4): Remounting filesystem read-only [ 102.372732][ T5735] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.503: Deleting old file: nlink 4, error=-117 [ 102.472641][ T5772] loop0: detected capacity change from 0 to 16 [ 102.546658][ T5772] erofs: (device loop0): mounted with root inode @ nid 36. [ 102.586654][ T5773] loop1: detected capacity change from 0 to 4096 [ 102.656233][ T5773] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 102.987593][ T5780] loop0: detected capacity change from 0 to 4096 [ 103.057251][ T5780] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 103.266481][ T5766] loop3: detected capacity change from 0 to 32768 [ 103.295779][ T5798] debugfs: File 'dropped' in directory 'loop4' already present! [ 103.343153][ T5798] debugfs: File 'msg' in directory 'loop4' already present! [ 103.349849][ T5801] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 103.389870][ T5801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.534'. [ 103.479129][ T5766] XFS (loop3): Mounting V5 Filesystem [ 103.501761][ T5798] debugfs: File 'trace0' in directory 'loop4' already present! [ 103.667224][ T5766] XFS (loop3): Ending clean mount [ 103.707465][ T5766] XFS (loop3): Quotacheck needed: Please wait. [ 103.840768][ T5766] XFS (loop3): Quotacheck: Done. [ 103.938552][ T5789] loop2: detected capacity change from 0 to 40427 [ 103.958788][ T4181] XFS (loop3): Unmounting Filesystem [ 104.063744][ T5789] F2FS-fs (loop2): invalid crc value [ 104.114903][ T5789] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.160096][ T5833] loop4: detected capacity change from 0 to 8192 [ 104.209266][ T5833] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 104.244238][ T5833] REISERFS (device loop4): using ordered data mode [ 104.250811][ T5833] reiserfs: using flush barriers [ 104.261135][ T5833] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.284206][ T26] audit: type=1326 audit(1761851828.196:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.0.549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a1d5dfc9 code=0x0 [ 104.307483][ T5833] REISERFS (device loop4): checking transaction log (loop4) [ 104.319753][ T5789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.348437][ T5833] REISERFS (device loop4): Using r5 hash to sort names [ 104.355980][ T5833] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 104.827979][ T4187] attempt to access beyond end of device [ 104.827979][ T4187] loop2: rw=2049, want=45104, limit=40427 [ 105.117725][ T5867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 105.147225][ T5869] binder: BINDER_SET_CONTEXT_MGR already set [ 105.158678][ T5869] binder: 5868:5869 ioctl 4018620d 200000000140 returned -16 [ 105.306032][ T5850] loop4: detected capacity change from 0 to 40427 [ 105.341666][ T5850] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 105.366567][ T5850] F2FS-fs (loop4): invalid crc value [ 105.391506][ T5850] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.556810][ T5850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.687541][ T4188] attempt to access beyond end of device [ 105.687541][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 106.051674][ T5881] loop0: detected capacity change from 0 to 40427 [ 106.131161][ T5881] F2FS-fs (loop0): invalid crc value [ 106.187954][ T5881] F2FS-fs (loop0): Found nat_bits in checkpoint [ 106.381271][ T5881] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.463957][ T5888] loop2: detected capacity change from 0 to 32768 [ 106.685023][ T5890] loop1: detected capacity change from 0 to 40427 [ 106.712079][ T4699] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 106.753578][ T5890] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 106.786925][ T5890] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.803648][ T4185] attempt to access beyond end of device [ 106.803648][ T4185] loop0: rw=2049, want=45104, limit=40427 [ 106.848870][ T5890] F2FS-fs (loop1): invalid crc_offset: 266236 [ 106.900861][ T5917] loop4: detected capacity change from 0 to 256 [ 106.924751][ T5890] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.021896][ T5914] loop2: detected capacity change from 0 to 4096 [ 107.027009][ T5917] FAT-fs (loop4): Directory bread(block 64) failed [ 107.048037][ T5917] FAT-fs (loop4): Directory bread(block 65) failed [ 107.065771][ T5917] FAT-fs (loop4): Directory bread(block 66) failed [ 107.091209][ T5917] FAT-fs (loop4): Directory bread(block 67) failed [ 107.103758][ T5917] FAT-fs (loop4): Directory bread(block 68) failed [ 107.110984][ T5917] FAT-fs (loop4): Directory bread(block 69) failed [ 107.110988][ T5890] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.111011][ T5890] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.121329][ T5917] FAT-fs (loop4): Directory bread(block 70) failed [ 107.124891][ T4699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.137584][ T5917] FAT-fs (loop4): Directory bread(block 71) failed [ 107.151969][ T4699] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 107.164964][ T5914] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 107.192276][ T4699] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 107.219238][ T4699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.222804][ T5917] FAT-fs (loop4): Directory bread(block 72) failed [ 107.234930][ T5914] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 107.245993][ T4699] usb 4-1: config 0 descriptor?? [ 107.269390][ T5917] FAT-fs (loop4): Directory bread(block 73) failed [ 107.279926][ T26] audit: type=1800 audit(1761851831.186:15): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.570" name="file1" dev="loop1" ino=455 res=0 errno=0 [ 107.313850][ T4699] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 107.320864][ T4699] dvb-usb: bulk message failed: -22 (3/0) [ 107.374350][ T4699] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 107.388503][ T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 107.437984][ T4699] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 107.445255][ T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 107.461973][ T4699] usb 4-1: media controller created [ 107.468217][ T4699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.503521][ T4699] dvb-usb: bulk message failed: -22 (6/0) [ 107.512405][ T4699] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 107.520517][ T5904] dvb-usb: bulk message failed: -22 (4/0) [ 107.573842][ T4699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 107.628163][ T4699] dvb-usb: schedule remote query interval to 150 msecs. [ 107.653918][ T4699] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 107.672908][ T4699] usb 4-1: USB disconnect, device number 7 [ 107.759957][ T4699] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 107.955387][ T5934] loop1: detected capacity change from 0 to 256 [ 107.977275][ T5934] exfat: Deprecated parameter 'utf8' [ 107.992257][ T4246] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.181047][ T5940] loop3: detected capacity change from 0 to 256 [ 108.252245][ T4246] usb 3-1: Using ep0 maxpacket: 32 [ 108.272152][ T5928] loop4: detected capacity change from 0 to 32768 [ 108.309065][ T5928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.585 (5928) [ 108.372333][ T4246] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.407231][ T4246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.424778][ T4246] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 108.446952][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.457674][ T4246] usb 3-1: config 0 descriptor?? [ 108.471217][ T5936] loop0: detected capacity change from 0 to 32768 [ 108.493525][ T5928] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 108.534039][ T5928] BTRFS info (device loop4): metadata ratio 2 [ 108.546589][ T5936] jfs_readdir called with invalid offset! [ 108.580151][ T5928] BTRFS info (device loop4): allowing degraded mounts [ 108.621563][ T5928] BTRFS info (device loop4): force zlib compression, level 3 [ 108.631565][ T5928] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.665355][ T5928] BTRFS info (device loop4): use zstd compression, level 3 [ 108.679333][ T5928] BTRFS info (device loop4): force clearing of disk cache [ 108.689088][ T5928] BTRFS info (device loop4): turning on flush-on-commit [ 108.696440][ T5928] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 108.710768][ T5928] BTRFS info (device loop4): trying to use backup root at mount time [ 108.727883][ T5928] BTRFS info (device loop4): using free space tree [ 108.748126][ T5928] BTRFS info (device loop4): has skinny extents [ 108.803401][ T5928] BTRFS info (device loop4): enabling ssd optimizations [ 108.813075][ T5928] BTRFS info (device loop4): clearing free space tree [ 108.820900][ T5928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.831031][ T5928] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.847561][ T5928] BTRFS info (device loop4): creating free space tree [ 108.855042][ T5928] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.864931][ T5928] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.948728][ T4246] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 109.032594][ T4246] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 109.041203][ T4315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.062361][ T4246] corsair-psu: probe of 0003:1B1C:1C09.0004 failed with error -38 [ 109.105760][ T5969] loop0: detected capacity change from 0 to 64 [ 109.284124][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 109.380235][ T4421] usb 3-1: USB disconnect, device number 6 [ 109.402911][ T4315] usb 4-1: config 0 has no interfaces? [ 109.408436][ T4315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.425925][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.441715][ T4315] usb 4-1: config 0 descriptor?? [ 109.708232][ T4315] usb 4-1: USB disconnect, device number 8 [ 109.859388][ T5979] loop0: detected capacity change from 0 to 32768 [ 109.876326][ T5977] loop4: detected capacity change from 0 to 40427 [ 109.922846][ T5977] F2FS-fs (loop4): invalid crc value [ 109.950962][ T5977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.111561][ T5977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.387580][ T6001] netlink: 88 bytes leftover after parsing attributes in process `syz.2.606'. [ 110.532857][ T4188] attempt to access beyond end of device [ 110.532857][ T4188] loop4: rw=2049, want=45104, limit=40427 [ 110.689265][ T6003] loop0: detected capacity change from 0 to 32768 [ 110.758187][ T6003] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.616 (6003) [ 110.819555][ T6003] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 110.829004][ T6003] BTRFS info (device loop0): force zlib compression, level 3 [ 110.841993][ T6003] BTRFS info (device loop0): force clearing of disk cache [ 110.849150][ T6003] BTRFS info (device loop0): setting nodatasum [ 110.876495][ T6003] BTRFS info (device loop0): allowing degraded mounts [ 110.892069][ T6003] BTRFS info (device loop0): enabling disk space caching [ 110.899179][ T6003] BTRFS info (device loop0): disk space caching is enabled [ 110.953875][ T6003] BTRFS info (device loop0): has skinny extents [ 111.193596][ T4421] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.255723][ T6003] BTRFS info (device loop0): clearing free space tree [ 111.271973][ T6003] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.291996][ T6003] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.392827][ T6003] BTRFS info (device loop0): balance: start -susage=3,devid=0,vrange=1..3,limit=233 [ 111.406863][ T6003] BTRFS info (device loop0): balance: ended with status: 0 [ 111.451963][ T4421] usb 5-1: Using ep0 maxpacket: 32 [ 111.569303][ T6010] loop3: detected capacity change from 0 to 32768 [ 111.644361][ T4421] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.688200][ T6010] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 111.782185][ T4421] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 111.804789][ T4421] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 111.845881][ T6010] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.886654][ T4421] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 111.920297][ T4421] usb 5-1: config 128 has no interface number 0 [ 111.941677][ T4421] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 111.967160][ T4421] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.986348][ T4421] usb 5-1: config 128 interface 127 has no altsetting 0 [ 112.028575][ T4181] ocfs2: Unmounting device (7,3) on (node local) [ 112.192233][ T4421] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 112.214773][ T4421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.246004][ T4421] usb 5-1: Product: syz [ 112.267279][ T4421] usb 5-1: Manufacturer: syz [ 112.302015][ T4421] usb 5-1: SerialNumber: syz [ 112.575106][ T6059] loop2: detected capacity change from 0 to 4096 [ 112.780253][ T4421] usb 5-1: USB disconnect, device number 4 [ 112.840513][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.926210][ T6061] loop0: detected capacity change from 0 to 4096 [ 113.032528][ T6061] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 113.081995][ T6061] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.517682][ T6069] loop1: detected capacity change from 0 to 4096 [ 113.897173][ T6064] loop2: detected capacity change from 0 to 32768 [ 113.910463][ T6078] loop4: detected capacity change from 0 to 4096 [ 113.967645][ T6064] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.623 (6064) [ 114.361854][ C1] sched: RT throttling activated [ 114.487151][ T6069] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 114.740740][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 114.758037][ T4182] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 114.788238][ T4182] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 114.853141][ T4182] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 114.932333][ T6073] loop0: detected capacity change from 0 to 32768 [ 114.940986][ T9] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 114.957394][ T4182] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 115.009409][ T6075] loop3: detected capacity change from 0 to 262144 [ 115.028904][ T6064] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 115.043231][ T6064] BTRFS info (device loop2): force zlib compression, level 3 [ 115.050649][ T6064] BTRFS info (device loop2): force clearing of disk cache [ 115.073304][ T6064] BTRFS info (device loop2): setting nodatasum [ 115.079686][ T6064] BTRFS info (device loop2): allowing degraded mounts [ 115.152985][ T6075] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.198237][ T6075] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.232772][ T6064] BTRFS info (device loop2): enabling disk space caching [ 115.242567][ T6064] BTRFS info (device loop2): disk space caching is enabled [ 115.306292][ T6064] BTRFS info (device loop2): has skinny extents [ 115.330932][ T6073] XFS (loop0): Mounting V5 Filesystem [ 115.472527][ T6073] XFS (loop0): Ending clean mount [ 115.584653][ T4185] XFS (loop0): Unmounting Filesystem [ 115.693057][ T6064] BTRFS info (device loop2): clearing free space tree [ 115.699918][ T6064] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.761970][ T6064] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.872382][ T6064] BTRFS info (device loop2): balance: start -susage=3,devid=0,vrange=1..3,limit=233 [ 115.909897][ T6064] BTRFS info (device loop2): balance: ended with status: 0 [ 115.936615][ T6113] loop3: detected capacity change from 0 to 32768 [ 116.003472][ T6081] loop4: detected capacity change from 0 to 32768 [ 116.166391][ T6113] XFS (loop3): Mounting V5 Filesystem [ 116.269399][ T6087] loop1: detected capacity change from 0 to 32768 [ 116.747517][ T6113] XFS (loop3): Ending clean mount [ 116.873608][ T4181] XFS (loop3): Unmounting Filesystem [ 116.896849][ T6134] netlink: 'syz.4.638': attribute type 5 has an invalid length. [ 116.930618][ T6131] loop0: detected capacity change from 0 to 4096 [ 117.092236][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.156808][ T6136] loop4: detected capacity change from 0 to 2048 [ 117.237296][ T6136] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 117.278701][ T6136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.368444][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 117.436560][ T6138] loop0: detected capacity change from 0 to 256 [ 117.451377][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.637'. [ 117.489903][ T26] audit: type=1800 audit(1761851841.396:16): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.641" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 117.545366][ T6141] FAT-fs (loop0): error, clusters badly computed (0 != 128) [ 117.546990][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.622147][ T6141] FAT-fs (loop0): Filesystem has been set read-only [ 117.650297][ T6141] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.700410][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.732187][ T4232] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 117.761664][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.770348][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.802085][ T4232] usb 3-1: Product: syz [ 117.806416][ T4232] usb 3-1: Manufacturer: syz [ 117.811027][ T4232] usb 3-1: SerialNumber: syz [ 117.819957][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.866697][ T4232] usb 3-1: config 0 descriptor?? [ 117.867197][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.906396][ T6151] loop1: detected capacity change from 0 to 4096 [ 117.919570][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.971405][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.025287][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.049918][ T6151] ntfs: (device loop1): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 118.058092][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.090374][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.125469][ T6151] ntfs: volume version 3.1. [ 118.127752][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.150829][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.215887][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.246312][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.246975][ T6151] ntfs: (device loop1): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 118.274413][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.313146][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.342122][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.362096][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.377398][ T4232] airspy 3-1:0.0: Board ID: 00 [ 118.392049][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.396790][ T4232] airspy 3-1:0.0: Firmware version: [ 118.436942][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.447033][ T6147] loop3: detected capacity change from 0 to 32768 [ 118.463673][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.479136][ T6147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.639 (6147) [ 118.540347][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.552121][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.564083][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.577018][ T6147] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 118.586662][ T6147] BTRFS info (device loop3): metadata ratio 2 [ 118.623245][ T6147] BTRFS info (device loop3): allowing degraded mounts [ 118.630233][ T6166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.651'. [ 118.640989][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.653531][ T6169] loop4: detected capacity change from 0 to 128 [ 118.660830][ T6147] BTRFS info (device loop3): force zlib compression, level 3 [ 118.669279][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.677933][ T6147] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.696666][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.711383][ T6147] BTRFS info (device loop3): use zstd compression, level 3 [ 118.718772][ T6169] FAT-fs (loop4): bogus sectors per cluster 0 [ 118.725099][ T6169] FAT-fs (loop4): Can't find a valid FAT filesystem [ 118.733745][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.743242][ T6147] BTRFS info (device loop3): force clearing of disk cache [ 118.750708][ T6147] BTRFS info (device loop3): turning on flush-on-commit [ 118.774785][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.783661][ T6147] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.794734][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.803630][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.813925][ T6147] BTRFS info (device loop3): trying to use backup root at mount time [ 118.822971][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.831518][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.841064][ T6147] BTRFS info (device loop3): using free space tree [ 118.885754][ T6147] BTRFS info (device loop3): has skinny extents [ 118.899278][ T6173] comedi comedi0: s526: I/O port conflict (0xffffffffffffffff,64) [ 118.926262][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.959479][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.968564][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.977402][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.986967][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.995782][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.004686][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.031745][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.051096][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.062105][ T4232] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 119.082960][ T4232] airspy 3-1:0.0: Registered as swradio24 [ 119.088855][ T4232] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 119.104447][ T4232] usb 3-1: USB disconnect, device number 7 [ 119.111257][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.153851][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.163233][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.172361][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.180935][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.190273][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.199745][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.209166][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.218334][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.227625][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.236603][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.245998][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.255367][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.262080][ T6147] BTRFS info (device loop3): enabling ssd optimizations [ 119.264205][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.282101][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.290735][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.300165][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.304415][ T6147] BTRFS info (device loop3): clearing free space tree [ 119.308989][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.324583][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.334091][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.352219][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.364245][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.381985][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.390548][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.399604][ T6147] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.409529][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.431955][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.440600][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.447072][ T6147] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.467265][ T6202] loop4: detected capacity change from 0 to 4096 [ 119.472355][ T6147] BTRFS info (device loop3): creating free space tree [ 119.481783][ T6147] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.491977][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.498752][ T6147] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.500546][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.523732][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.534990][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.544145][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.552729][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.561267][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.592934][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.621938][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.639653][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.660053][ T6207] syz.2.662 sent an empty control message without MSG_MORE. [ 119.670663][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.688233][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.717574][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.718205][ T4188] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 119.740502][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.764943][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.782395][ T4188] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 119.799493][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.826554][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.854382][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.877844][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.897630][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.932510][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 119.989148][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.045751][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.079321][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.115753][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.136695][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.174505][ T6221] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.195479][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.216899][ T6221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.232327][ T6221] IPv6: NLM_F_CREATE should be set when creating new route [ 120.239599][ T6221] IPv6: NLM_F_CREATE should be set when creating new route [ 120.253183][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.301686][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.321374][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.392437][ T6222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.452056][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.494761][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.581966][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.589513][ T6224] loop1: detected capacity change from 0 to 40427 [ 120.640787][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.671828][ T6226] loop4: detected capacity change from 0 to 4096 [ 120.672086][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.694750][ T6224] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 120.701498][ T6224] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.736211][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.780822][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.787780][ T6226] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.789750][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.809541][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.819361][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.828009][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.836822][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.845886][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.854653][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.863517][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.874828][ T6224] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.912009][ T6224] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.919079][ T6224] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.926907][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.953597][ T26] audit: type=1800 audit(1761851844.866:17): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.670" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 120.994204][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.040614][ T4182] attempt to access beyond end of device [ 121.040614][ T4182] loop1: rw=2049, want=45104, limit=40427 [ 121.059205][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.131954][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.140783][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.162868][ T6216] loop2: detected capacity change from 0 to 40427 [ 121.224463][ T6216] F2FS-fs (loop2): invalid crc value [ 121.238253][ T6216] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.260496][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.290370][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.347899][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.411972][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.420782][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.445956][ T6216] F2FS-fs (loop2): Start checkpoint disabled! [ 121.490193][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.499545][ T6216] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 121.517229][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.528110][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.540059][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.577870][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.620945][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.624789][ T6246] loop4: detected capacity change from 0 to 128 [ 121.659330][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.691377][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.711588][ T6246] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 121.715937][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.765827][ T4271] attempt to access beyond end of device [ 121.765827][ T4271] loop2: rw=1, want=45104, limit=40427 [ 121.784309][ T6246] attempt to access beyond end of device [ 121.784309][ T6246] loop4: rw=0, want=13269810, limit=128 [ 121.797193][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.806413][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.825459][ T4271] attempt to access beyond end of device [ 121.825459][ T4271] loop2: rw=2049, want=40976, limit=40427 [ 121.848505][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.866684][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.896423][ T4188] sysv_free_block: trying to free block not in datazone [ 121.904796][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.935219][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 121.937069][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.950730][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 121.990376][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.021300][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.051757][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.090886][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.106531][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.116460][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.160733][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.185011][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.217234][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.241935][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.250591][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.283265][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.322009][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.331382][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.360534][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.362037][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.379763][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.392848][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.414433][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.453753][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.480271][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.519504][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.553475][ T6250] loop1: detected capacity change from 0 to 32768 [ 122.560139][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.577837][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.587581][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.597311][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.609853][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.623293][ T6250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.679 (6250) [ 122.631828][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.674675][ T6250] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 122.677718][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.702284][ T6250] BTRFS info (device loop1): metadata ratio 2 [ 122.727952][ T6250] BTRFS info (device loop1): allowing degraded mounts [ 122.728036][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.758660][ T6250] BTRFS info (device loop1): force zlib compression, level 3 [ 122.762336][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.782025][ T6250] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 122.800995][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.801970][ T6250] BTRFS info (device loop1): use zstd compression, level 3 [ 122.810002][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.845926][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.847413][ T6250] BTRFS info (device loop1): force clearing of disk cache [ 122.859795][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.891989][ T6250] BTRFS info (device loop1): turning on flush-on-commit [ 122.893321][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.912012][ T6250] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 122.913250][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.941772][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 122.943205][ T6250] BTRFS info (device loop1): trying to use backup root at mount time [ 122.958437][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.958484][ T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.964042][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.989015][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.012990][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.026235][ T6250] BTRFS info (device loop1): using free space tree [ 123.036148][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.046048][ T6250] BTRFS info (device loop1): has skinny extents [ 123.062111][ T23] usb 5-1: config 0 descriptor?? [ 123.071494][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.102500][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.111177][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.150526][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.189844][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.211327][ T6266] loop3: detected capacity change from 0 to 32768 [ 123.229381][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.238458][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.245024][ T6266] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.686 (6266) [ 123.247344][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.268613][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.278231][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.287473][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.300555][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.317112][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.326321][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.335143][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.345003][ T6266] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.356325][ T6250] BTRFS info (device loop1): enabling ssd optimizations [ 123.361975][ T6138] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.373071][ T6250] BTRFS info (device loop1): clearing free space tree [ 123.387256][ T26] audit: type=1800 audit(1761851847.296:18): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.641" name="file1" dev="loop0" ino=1048594 res=0 errno=0 [ 123.401926][ T6266] BTRFS info (device loop3): force zlib compression, level 3 [ 123.417692][ T6250] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.447373][ T6250] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.455527][ T6266] BTRFS info (device loop3): force clearing of disk cache [ 123.485153][ T6266] BTRFS info (device loop3): setting nodatasum [ 123.491637][ T6250] BTRFS info (device loop1): creating free space tree [ 123.509784][ T6250] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.512000][ T6266] BTRFS info (device loop3): allowing degraded mounts [ 123.547405][ T6250] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.564715][ T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 123.587949][ T6268] loop2: detected capacity change from 0 to 32768 [ 123.595067][ T6266] BTRFS info (device loop3): enabling disk space caching [ 123.621965][ T6266] BTRFS info (device loop3): disk space caching is enabled [ 123.657085][ T6266] BTRFS info (device loop3): has skinny extents [ 123.678215][ T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.680846][ T26] audit: type=1800 audit(1761851847.586:19): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.687" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 123.738818][ T6291] loop0: detected capacity change from 0 to 4096 [ 123.745754][ T26] audit: type=1800 audit(1761851847.636:20): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.687" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 123.828673][ T6291] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 123.943965][ T6291] ntfs: volume version 3.1. [ 124.039308][ T4395] usb 5-1: USB disconnect, device number 5 [ 124.109475][ T6266] BTRFS info (device loop3): clearing free space tree [ 124.137605][ T6266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.182574][ T6266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.250377][ T4271] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 124.372949][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 124.420164][ T6266] BTRFS info (device loop3): balance: start -susage=3,devid=0,vrange=1..3,limit=233 [ 124.473233][ T6266] BTRFS info (device loop3): balance: ended with status: 0 [ 125.044209][ T6343] loop1: detected capacity change from 0 to 16 [ 125.074593][ T6343] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.087076][ T5056] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.130814][ T6341] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 125.452263][ T5056] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.472425][ T5056] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.582342][ T5056] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.604154][ T5056] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.620356][ T5056] usb 1-1: SerialNumber: syz [ 125.652389][ T4703] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.736141][ T6368] loop4: detected capacity change from 0 to 64 [ 125.771388][ T26] audit: type=1800 audit(1761851849.676:21): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 125.916917][ T5056] usb 1-1: 0:2 : does not exist [ 125.969848][ T5056] usb 1-1: USB disconnect, device number 7 [ 126.057120][ T4703] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 126.074961][ T4703] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 126.104144][ T6361] loop1: detected capacity change from 0 to 32768 [ 126.137062][ T6361] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.710 (6361) [ 126.157551][ T6361] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 126.175683][ T6361] BTRFS info (device loop1): using free space tree [ 126.185381][ T6361] BTRFS info (device loop1): has skinny extents [ 126.214556][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.262016][ T4423] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.282135][ T4703] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 126.306138][ T4703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.346264][ T4703] usb 3-1: Product: syz [ 126.350982][ T4703] usb 3-1: Manufacturer: syz [ 126.363098][ T4703] usb 3-1: SerialNumber: syz [ 126.387368][ T4703] usb 3-1: config 0 descriptor?? [ 126.462284][ T6350] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.469362][ T6350] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.488673][ T6361] BTRFS info (device loop1): enabling ssd optimizations [ 126.537709][ T6361] BTRFS error (device loop1): balance: mixed groups data and metadata options must be the same [ 126.692159][ T4423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.712189][ T6350] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.738759][ T6350] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.747862][ T4423] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.802046][ T4423] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 126.816520][ T6398] loop0: detected capacity change from 0 to 64 [ 126.856452][ T4423] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.926546][ T6398] [ 126.927346][ T4423] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.928915][ T6398] ====================================================== [ 126.928923][ T6398] WARNING: possible circular locking dependency detected [ 126.950958][ T6398] syzkaller #0 Not tainted [ 126.955348][ T6398] ------------------------------------------------------ [ 126.962344][ T6398] syz.0.719/6398 is trying to acquire lock: [ 126.968210][ T6398] ffff8880593b40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 126.977508][ T6398] [ 126.977508][ T6398] but task is already holding lock: [ 126.984881][ T6398] ffff888020d99af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 126.995647][ T6398] [ 126.995647][ T6398] which lock already depends on the new lock. [ 126.995647][ T6398] [ 127.006030][ T6398] [ 127.006030][ T6398] the existing dependency chain (in reverse order) is: [ 127.015026][ T6398] [ 127.015026][ T6398] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 127.024222][ T6398] __mutex_lock_common+0x1eb/0x2390 [ 127.030114][ T6398] mutex_lock_nested+0x17/0x20 [ 127.035384][ T6398] hfs_extend_file+0xd7/0x1280 [ 127.040655][ T6398] hfs_bmap_reserve+0x103/0x420 [ 127.046016][ T6398] __hfs_ext_write_extent+0x1fa/0x470 [ 127.051899][ T6398] __hfs_ext_cache_extent+0x6b/0x9b0 [ 127.057694][ T6398] hfs_extend_file+0x313/0x1280 [ 127.063338][ T6398] hfs_get_block+0x3d4/0xbd0 [ 127.068430][ T6398] __block_write_begin_int+0x54e/0x15a0 [ 127.074476][ T6398] cont_write_begin+0x58a/0x7b0 [ 127.079830][ T6398] hfs_write_begin+0x92/0xe0 [ 127.084926][ T6398] cont_write_begin+0x26c/0x7b0 [ 127.090284][ T6398] hfs_write_begin+0x92/0xe0 [ 127.095385][ T6398] hfs_file_truncate+0x18f/0x9c0 [ 127.100831][ T6398] hfs_inode_setattr+0x4ab/0x6f0 [ 127.106297][ T6398] notify_change+0xbcd/0xee0 [ 127.111389][ T6398] do_truncate+0x197/0x220 [ 127.116319][ T6398] do_sys_ftruncate+0x31b/0x3d0 [ 127.121673][ T6398] do_syscall_64+0x4c/0xa0 [ 127.126592][ T6398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.132992][ T6398] [ 127.132992][ T6398] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 127.140887][ T6398] __lock_acquire+0x2c33/0x7c60 [ 127.146247][ T6398] lock_acquire+0x197/0x3f0 [ 127.151253][ T6398] __mutex_lock_common+0x1eb/0x2390 [ 127.156953][ T6398] mutex_lock_nested+0x17/0x20 [ 127.162221][ T6398] hfs_find_init+0x15b/0x1d0 [ 127.167315][ T6398] hfs_extend_file+0x2eb/0x1280 [ 127.172661][ T6398] hfs_bmap_reserve+0x103/0x420 [ 127.178018][ T6398] hfs_cat_create+0x1c0/0x8d0 [ 127.183196][ T6398] hfs_mkdir+0x68/0xe0 [ 127.187768][ T6398] vfs_mkdir+0x387/0x570 [ 127.192517][ T6398] do_mkdirat+0x1d7/0x5a0 [ 127.197352][ T6398] __x64_sys_mkdir+0x6a/0x80 [ 127.202451][ T6398] do_syscall_64+0x4c/0xa0 [ 127.207363][ T6398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.213758][ T6398] [ 127.213758][ T6398] other info that might help us debug this: [ 127.213758][ T6398] [ 127.223961][ T6398] Possible unsafe locking scenario: [ 127.223961][ T6398] [ 127.231390][ T6398] CPU0 CPU1 [ 127.236764][ T6398] ---- ---- [ 127.242111][ T6398] lock(&HFS_I(tree->inode)->extents_lock); [ 127.248092][ T6398] lock(&tree->tree_lock/1); [ 127.255272][ T6398] lock(&HFS_I(tree->inode)->extents_lock); [ 127.263832][ T6398] lock(&tree->tree_lock/1); [ 127.268488][ T6398] [ 127.268488][ T6398] *** DEADLOCK *** [ 127.268488][ T6398] [ 127.276604][ T6398] 4 locks held by syz.0.719/6398: [ 127.281600][ T6398] #0: ffff88805aafa460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 127.290794][ T6398] #1: ffff888020d9a328 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 127.301385][ T6398] #2: ffff88802a9220b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 127.310927][ T6398] #3: ffff888020d99af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 127.322123][ T6398] [ 127.322123][ T6398] stack backtrace: [ 127.327996][ T6398] CPU: 0 PID: 6398 Comm: syz.0.719 Not tainted syzkaller #0 [ 127.335255][ T6398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.345388][ T6398] Call Trace: [ 127.348742][ T6398] [ 127.351667][ T6398] dump_stack_lvl+0x168/0x230 [ 127.356325][ T6398] ? load_image+0x3b0/0x3b0 [ 127.360806][ T6398] ? show_regs_print_info+0x20/0x20 [ 127.365990][ T6398] ? print_circular_bug+0x12b/0x1a0 [ 127.371216][ T6398] check_noncircular+0x274/0x310 [ 127.376149][ T6398] ? add_chain_block+0x940/0x940 [ 127.381080][ T6398] ? lockdep_lock+0xdc/0x1e0 [ 127.385688][ T6398] ? __bfs+0x2a3/0x5c0 [ 127.389744][ T6398] ? mark_lock+0x94/0x320 [ 127.394063][ T6398] __lock_acquire+0x2c33/0x7c60 [ 127.398901][ T6398] ? mark_lock+0x94/0x320 [ 127.403300][ T6398] ? verify_lock_unused+0x140/0x140 [ 127.408477][ T6398] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 127.414436][ T6398] ? lock_chain_count+0x20/0x20 [ 127.419400][ T6398] ? __rwlock_init+0x140/0x140 [ 127.424244][ T6398] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 127.429608][ T6398] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 127.435573][ T6398] ? lockdep_hardirqs_on+0x94/0x140 [ 127.440755][ T6398] lock_acquire+0x197/0x3f0 [ 127.445332][ T6398] ? hfs_find_init+0x15b/0x1d0 [ 127.450172][ T6398] ? __might_sleep+0xf0/0xf0 [ 127.454745][ T6398] ? read_lock_is_recursive+0x10/0x10 [ 127.460102][ T6398] ? __kasan_kmalloc+0xcc/0xf0 [ 127.464843][ T6398] ? __kasan_kmalloc+0xb5/0xf0 [ 127.469586][ T6398] ? hfs_find_init+0x84/0x1d0 [ 127.474243][ T6398] ? hfs_bmap_reserve+0x103/0x420 [ 127.479244][ T6398] ? hfs_cat_create+0x1c0/0x8d0 [ 127.484084][ T6398] ? hfs_mkdir+0x68/0xe0 [ 127.488307][ T6398] ? do_mkdirat+0x1d7/0x5a0 [ 127.492789][ T6398] ? __x64_sys_mkdir+0x6a/0x80 [ 127.497532][ T6398] ? do_syscall_64+0x4c/0xa0 [ 127.502102][ T6398] ? hfs_find_init+0x15b/0x1d0 [ 127.506847][ T6398] __mutex_lock_common+0x1eb/0x2390 [ 127.512026][ T6398] ? hfs_find_init+0x15b/0x1d0 [ 127.516821][ T6398] ? mutex_lock_io_nested+0x60/0x60 [ 127.522009][ T6398] mutex_lock_nested+0x17/0x20 [ 127.526759][ T6398] hfs_find_init+0x15b/0x1d0 [ 127.531346][ T6398] hfs_extend_file+0x2eb/0x1280 [ 127.536258][ T6398] ? rcu_lock_release+0x20/0x20 [ 127.541093][ T6398] ? vfs_mkdir+0x387/0x570 [ 127.545494][ T6398] ? hfs_get_block+0xbd0/0xbd0 [ 127.550251][ T6398] ? hfs_find_init+0x15b/0x1d0 [ 127.555013][ T6398] ? __mutex_lock_common+0x431/0x2390 [ 127.560371][ T6398] ? mutex_lock_io_nested+0x60/0x60 [ 127.565550][ T6398] hfs_bmap_reserve+0x103/0x420 [ 127.570385][ T6398] hfs_cat_create+0x1c0/0x8d0 [ 127.575043][ T6398] ? hfs_cat_build_key+0x170/0x170 [ 127.580141][ T6398] hfs_mkdir+0x68/0xe0 [ 127.584191][ T6398] vfs_mkdir+0x387/0x570 [ 127.588412][ T6398] do_mkdirat+0x1d7/0x5a0 [ 127.592720][ T6398] ? vfs_mkdir+0x570/0x570 [ 127.597117][ T6398] ? getname_flags+0x1fe/0x500 [ 127.601861][ T6398] __x64_sys_mkdir+0x6a/0x80 [ 127.606441][ T6398] do_syscall_64+0x4c/0xa0 [ 127.610833][ T6398] ? clear_bhb_loop+0x30/0x80 [ 127.615482][ T6398] ? clear_bhb_loop+0x30/0x80 [ 127.620135][ T6398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.626019][ T6398] RIP: 0033:0x7f97a1d5dfc9 [ 127.630411][ T6398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.650086][ T6398] RSP: 002b:00007f979ffc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 127.658502][ T6398] RAX: ffffffffffffffda RBX: 00007f97a1fb4fa0 RCX: 00007f97a1d5dfc9 [ 127.666456][ T6398] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 127.674406][ T6398] RBP: 00007f97a1de0f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.682355][ T6398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.690306][ T6398] R13: 00007f97a1fb5038 R14: 00007f97a1fb4fa0 R15: 00007fff45fb1658 [ 127.698262][ T6398] [ 127.760090][ T4423] usb 5-1: config 0 descriptor?? [ 128.122057][ T4703] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 128.134819][ T4703] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, ee:00:00:00:00:00 [ 128.148778][ T4703] usb 3-1: USB disconnect, device number 8 [ 128.160041][ T4703] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 128.253156][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.260588][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.271139][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.280579][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.289774][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.298789][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.307975][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.315755][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.324918][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.332562][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.340465][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.349816][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.357558][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.366742][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.375479][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.384623][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.392246][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.399748][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.409031][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.416648][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.425813][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.433434][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.440842][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.449994][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.457640][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.466785][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.476095][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.485345][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.493015][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.500426][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.513738][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.521162][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.536638][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.545151][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.552592][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.559992][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.568411][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.577658][ T4423] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 128.585937][ T4423] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 128.595719][ T4423] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 128.610333][ T4423] usb 5-1: USB disconnect, device number 6 [ 128.634330][ T6430] fido_id[6430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 132.713063][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.719393][ T1420] ieee802154 phy1 wpan1: encryption failed: -22