last executing test programs: 17.518858472s ago: executing program 2 (id=2161): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) 15.397990562s ago: executing program 5 (id=2170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r1, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) 15.298963749s ago: executing program 2 (id=2171): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 14.614410329s ago: executing program 5 (id=2174): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_VIA={0x14, 0x12, {0x0, "fa9bc12ecfdd04968e8dc9d61ea9"}}]}, 0x30}}, 0x0) 14.588070688s ago: executing program 2 (id=2176): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 14.041255049s ago: executing program 5 (id=2178): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) 13.831218521s ago: executing program 2 (id=2180): ioperm(0x0, 0x3, 0xffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000002240)={0x140000080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.791652745s ago: executing program 5 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) 12.483963366s ago: executing program 2 (id=2185): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)=0x9b) 12.41920193s ago: executing program 0 (id=2186): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="27050200340f14000600002fb96dbcf7060645f491bdd54ec5ff1144ee162fd4b8bf7256d882f600102c21880b000000000100405700000006000040000000000b60400df1d884bf37663919573c0942d9037dcb0544088c6db48f1b61ae6070dea1cce492889fafc85ce72b92ea239e355d17f66c7855946a12aa68ac359b6066fb212f6aab908c5d81908ac606ec87fa24ebd6abd3a394f085c22eff454d7773", 0xa1}, {&(0x7f00000002c0)="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", 0xea9}], 0x2}, 0x8010) 12.27898887s ago: executing program 3 (id=2187): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c0001"], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 11.834270083s ago: executing program 2 (id=2189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x8925, &(0x7f0000000400)={@none, 0xffffff27, 0xfc, 0x77, 0x7f, 0xfffd, "b3b0f7ff1415cb451d92aca715527c2f9de12ea430c7e380e515917496f7bd70cb3f79452086899243a691af53b05228e6a60daa3952ea279cdcb15c793c7a1990b818f0c6f60dbd12f157c543a1241bac2f247a488f172566e0e9edb5f6c5d424b2136a373fa1307915bc21b5d062517afda385ed2f57daf95ec2c2cde18de7"}) 11.782565728s ago: executing program 0 (id=2190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f00)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 11.656506807s ago: executing program 5 (id=2191): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file1\x00', 0x200000, &(0x7f0000002d40)=ANY=[@ANYBLOB="009183ca169ea49b017c4525460e942861bdc4abce9dbb90bc2b4e8baf45173cca8416aad7588b75890f0417639f4a0f9733c06e63ecdf790818598bcab8ec62d21a3221757ec98d355e6d4f1794d2254f18beca38ff286a24f78e2ce4147c97a358e0d6f00bd0e176a499868ac13b8e5485922a1a05851e32a3147b22f9c663", @ANYRES32, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYBLOB="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"], 0x1, 0xee7, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8CT0gKiGKhDhVHKi4UCqlSEUCVapQT21PrXrrCfVCpSqVgnpoIyWusnlvvfuc6a7H9qy9+/tJ375982bn+8YbOTPj2bcBGFuN9uPRo4tFCO9+9s6jLz9VfHJ12V2dNQ60H4vYa4UQml39ItveF3HB5YsvnbheW4TD7cfUD49d6Lx2NoRwLhwIn4dW+Gh55asP33vk4Mevz9zy1tlnXtmm3e/I9wMAAEbR+T+t/O2+f/zxgYVL5/cfD9Od5en4vBX7s/G4/1A8UE7Hy43Q2y+6ottUtt5EjEa23kS23mSWZ7IkXzPbTrNkvak++Sa6ll1vPwEAAGA3Sue1rVA0lnr6jcbS0rXz/qu+mJ8qlp47vXLqzJAKBQAAACr796vtm26FEEIIIYQQQggxwrE6P+wrEAAAAMC4yecLW+fc1s7U1dlaa7D8Fx5uXP/1sAXq/vcv/+7K/8FrfuMAAFDdqB5Npv1Kx9FpHoN8HsGJ7HUbPf5vZNuZ3GCdZfMK9iwvdu7bVFZ//nPdqcrq3+j7OCxl9efzYe5UZfXn83TuVGX1T9dcR1Vl9c/UXEdVZfXvqbmOqsrq31tzHVWV1T9bcx1VldU/V3MdVZXVf0PNdVRVVv++muuoqqz+3XJbbVn9rZrrqKqs/oWa66iqrP4ba66jqrL6b6q5jqrK6r+55jqG5c7Ypp/D/my8+/w5P6fbLed4AAAAMO7+a/4/IYQQYl2074PYAXUIMdpR7IAahBBifOLVYV+AAAAAAIYufS4gfQB9NUrjE33GJ7vHZ9ZWSOPNPq+f6jM+3WccAAAACOG3b5y67e1i7XP+m50PL80btSd8ciVUmMcon+huo/k3O+/ZZvPvlnnLAAAAGC/F9z6/cv+j77+wcOn8/uNdZ79X4vlumgd0Ml4b+DT2030Bc1m/SOfQx3vzNErWy68P3FC2vcc3uaMAAAAwxtL5eysUjaWu8+5WaDSWltbOxxdDszh1euXkodhP38/yh/nm9NXlD9VcNwAAADC4tfP965//p+/xXQxTxdJzp1dOnbnWn+ssbza6rwvMry0vuq8LtLLlh0uWH4n99P2dP5jf016+dOKHK09t9c4DAADAmDjz4tlnnlxZOfkjTzzxxJPOk2H/ZgIAALbal1++0/zxkbnfXfv8/9r8d+nz/wdivxXn9vtzXCHdJ5A+B7Du8/pP9OaZL1vv+d71Wtl6EzGms7pnurYT2vMN9r5uoSxfq3c7UyX5ZrN8c1m+fJ6CyWz9lG9ftjyfnzCtN58tz+dhnMxyFFn+uwMAAACUW37h2eeXz7x49sHTzz759MmnTz535PCx7x47duih7zy03L6vf7n77n4AAABgN1q76XfYlQAAAAAAAAAAAAAAAAAAAMD4quPrxIa9jwAAADDu/vVqCOGcEEJUjtXp4dcghBBCCCHEron2d7vXn7cx7OsPAAAAwPi5fPGlE93tOueKLc3X2VrrWnMl5k3t3IN/XbgaabULD0/0vH7vllbDuKv737/8uyv/B69tbf6Z9GTg33/ZJePj1fLeu/zLxe78t08OmD/f/8er5T+Y5b83DJZ/9f0s/xPV8t+X5d87YP51+/98tfz3x/yLsX/wnkHz977/07FN+7FnwPzfzvb/qTBo/mz/WwMmzDwQ8wPAOBrVGwDSUUI6jp6N/bS/8XAzTGSv2+jxfyPbzuSmK+/dbjoOujX20/HSXJY32Wj9s9n2bqhYZy6va6cqq3+r3sftVlZ/s+Y6qiqrf6rmOqoqq3+65jqqKqt/puY6qiqrf9Dz0GErq3+3XFcuq3+25jqqKqt/ruY6qiqrf6P/jw9LWf37aq6jqrL652uuo6qy+iteVqtdWf0LNddRVVn9N9ZcR1Vl9d9Ucx1VldV/c811DMsdsS07H07nn/NxLPVbWX/6Oj/LUb22AAAAALvNP83/J4QQQghRKdr3y+yAOoYTXXfLDb0WsRXxn9Vrhl2HEGL7YnV1iBcfGLrt/TQzADuV3//jzfs/3rz/4837z/+T7uEvsn4y0Wd8ss94s8/4VDae/3ud7jN+U7bd1XRdM7q5z/jX+ozv6zN+a5/xxT7jt/UZv73P+B19xgEAABgPt8TW+SEAAACMrpd/9embv7n3iYsLl87vPx6m1s07fyj2p+Pf1t+I/Xze+6QZ/+b/k9j/RWx/H9u/Z+u7/wQAAAC2X/qeGH//BwAAgNGVvqfU+T8AAACMroXYOv8HAACA0XVjbJ3/AwAAwAgrZq6/OLbpusDdsR10Xj8AYOf7emzvjO3+2N4V22/ENh0H3BPbb9ZUHwCwdX7+/Z8ee7tYm+//SDZ+OS5P7Trnrl0pKBq9M/nvie3e2H5rwHry7wMYNH+yb8A825V/fpP5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDR0Wg/Hj26WITw7mfvPPqzqTf/cnXZXZ01DrQfi9hrhRCandel0bX+r+OKly++dKK7vRLbIhwORSg6y8NjFzqZZkMI58KB8HlohY+WV7768L1HDn78+swtb5195pVt/BH07B8AAACMov8FAAD//2hPI3g=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x7f, 0x11457213}}, 0x0, 0x1200) 11.498143278s ago: executing program 3 (id=2192): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x80, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000391d1079f6ea04d7c"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 11.132755062s ago: executing program 0 (id=2195): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)=ANY=[@ANYBLOB='uni_xlate=0,uni_xlate=1,iocharset=cp869,shortname=win95,codepage=949,flush,allow_utime=00000000000000000177777,shortname=lower,utf8=1,umask=0000000000010,nonumtail=0,utf8=0,\x00'/184], 0x1, 0x34c, &(0x7f0000001740)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 10.873995117s ago: executing program 3 (id=2196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'X'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 10.610107672s ago: executing program 1 (id=2197): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000000)=@secondary) keyctl$get_persistent(0x16, 0x0, r0) 10.384184155s ago: executing program 5 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x2000000, 0x20000, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0xd0e5, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x6, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x8, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x81, 0x4, 0x0, 0x6, 0xffffffff, 0xffff8000, 0x0, 0x2, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10.114193612s ago: executing program 1 (id=2199): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.73948361s ago: executing program 1 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 9.55739135s ago: executing program 0 (id=2201): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 8.430284523s ago: executing program 4 (id=2206): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x51, 0xa}) 8.309685418s ago: executing program 4 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) acct(0x0) 1.675956682s ago: executing program 4 (id=2208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0xe, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0) 1.658164926s ago: executing program 3 (id=2209): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r1, 0x300}}, 0x18) 1.0447303s ago: executing program 1 (id=2210): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x4e24, 0x4, @loopback, 0x3}}, {{0xa, 0x4e21, 0x1004, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}}, 0x108) 867.420849ms ago: executing program 3 (id=2211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) 858.255829ms ago: executing program 4 (id=2212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) 740.419389ms ago: executing program 0 (id=2213): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000002b00)=""/4065, 0xfe1}, {&(0x7f0000001b00)=""/4066, 0xfe2}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f00000002c0)=""/166, 0xa6}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)="4c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3658f60a84c9f4d4938037e70e4509c5bb", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 525.82681ms ago: executing program 1 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f4000085000000820000008500000007000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 481.210934ms ago: executing program 3 (id=2215): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbDbrbFqCmyZtQJVqNRIgIhI7VgrmQkAI5VChqhw4W4nTWNmkxXGRWyHq8PfaQw+cUDnkgjghcY9UOHCBW04gHyshcekFc1o0s7P2+i/rNPFu2s8nmn3vzZt57ze/2Zn9Y0Ub4DPryrk076fIlXOvrJTttXuznbV7s7f69SQTSVaTZpJGkuI/3W73w+RyUmwMU2wrd3h/ce61Bx+vfdRrNeul2r6x337b1NutJr9tDKxerZdMJTlSl5/AlvGufuLxio3ILyc5W5cwckeTdLf40V+f3ugZ0N5t72OHEiPweBXV6+a1f2xfP5kcry/08n1A71Wx95o9Jla3tCYeai8AAAB48gzzGfjz61nPSnHiEMIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAT4XVjd//L4tqafTrUyn6v//fqtelro+XFw+2+f3HFQcAAAAAAAAAHKIX17OelZzot7tF9Tf/l6rGqerxqbyVO1nIUs5nJfNZznKWMpNkcmCg1sr88vLSzBB7Xtx1z4v/J9CJumw/muMGAAAAAAAAgE+Zn+XK5t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHBTJkV6R4u7A6sk0mkmOJWmVK1aTv/frT7L7ow4AAAAADsFEsp6VnOi3u0VOJXmu+g7gWN7K7SxnMcvpZCHXqu8Fep/6G2v3Zjtr92ZvlcvOcb/97wOFUY2Y3ncPu898ptqinetZrNacz9W8kU6upVHtWTpTx9MfdSCuY0nuljEV36oNGdm1uiyP/L263OHdAx3sXg74ZcpklZGjGxmZrmMrs/FM/8zsfoYOeHa2zzSTxmCwW2ZqbT2Yh8r58bosj+dXe+V8JLZn4uLAs++5/XOefPlPf/jhdF0fn0MazpG67FaP7Z2ZmB3IxPPDZOJG5/bNG9fvnHvSMrHDdJWJ0xvtK/lefpBzmcqrWcpifpz5LGchU/luVZuvT34xcMnvkanLW1qv7hXBb+rbd6t+hvZOVhnTg6Fjeqna90QW8/28kWtZyMvVv4uZyddzKZcyN3CGT+9/hqurvrHHVd/93I4DKAM/+5W60U7y67ocD2V4zwzkdfCeO1n1Da7ZzNLJIbJ0wHtj84t1pZzj53U5HrZnYmYgE8/un4nfVbeVO53bN5duzL853HQn36sr5XX0y2RqtDeS1rb6yfJkVa2tz46y79ld+2aqvlMbfY0dfac3+npX6uqeV2qrfg+3c6SLVd/zu/bNVn1nBvp2e78FwNg7/tXjrfa/2n9rf9D+RftG+5Vj35n4xsQLrRz989FvNqePfKnxQvHHfJCfbn7+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt6dt9+5Od/pLCz1Kq0kVaXb7b67teuglWY9w0BXsfukj7qSqX8+VU6zS1f/58we4+zbK194Ojmsuca38t9ut1uvKfbY5vd/GZtEdWtjkboRVUZzPwIOz4XlW29euPP2O19bvDX/+sLrC7fnLl2am5679PLsheuLnYXp3uOoowQeh80X/VFHAgAAAAAAAAAAAAzrMP47waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyXTmX5v0UmZk+P1221+7NdsqlX9/cspmkkaT4SVJ8mFxOb8nkwHDFXvO8vzj32oOP1z7aHKvZ376x337DWa2XTCU50ivvPqrxrtblvor9DqHYOMIyYWf7iYNR+18AAAD///fgA7k=") mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) 411.578505ms ago: executing program 4 (id=2216): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 162.614287ms ago: executing program 0 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 86.73428ms ago: executing program 1 (id=2218): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) 0s ago: executing program 4 (id=2219): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @empty, @empty, 0x440003, 0x40, 0x5, 0x100, 0x3f, 0x490243}) kernel console output (not intermixed with test programs): op0 [ 233.513648][ T8715] NILFS (loop0): recovery complete [ 233.593891][ T8713] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks [ 233.608321][ T8713] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 233.815778][ T8735] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 233.844414][ T8735] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1207'. [ 233.853786][ T5833] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 233.864932][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.893833][ T8733] loop5: detected capacity change from 0 to 4096 [ 233.955255][ T8733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.011079][ T5833] usb 2-1: Using ep0 maxpacket: 16 [ 234.045695][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 234.099596][ T8744] loop0: detected capacity change from 0 to 8 [ 234.101894][ T5833] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.101969][ T5833] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 234.102009][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.111425][ T8744] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 234.115776][ T5833] usb 2-1: config 0 descriptor?? [ 234.227359][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.282029][ T5842] udevd[5842]: incorrect cramfs checksum on /dev/loop0 [ 234.582299][ T5833] hid (null): invalid report_count 220993173 [ 234.589827][ T8750] loop0: detected capacity change from 0 to 1024 [ 234.603255][ T5833] lg-g15 0003:046D:C222.002F: invalid report_count 220993173 [ 234.651283][ T5833] lg-g15 0003:046D:C222.002F: item 0 4 1 9 parsing failed [ 234.682653][ T5833] lg-g15 0003:046D:C222.002F: probe with driver lg-g15 failed with error -22 [ 234.741841][ T8750] hfsplus: xattr searching failed [ 234.852755][ T5833] usb 2-1: USB disconnect, device number 12 [ 234.933957][ T8756] loop5: detected capacity change from 0 to 2048 [ 234.989070][ T8756] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 235.088147][ T8761] loop2: detected capacity change from 0 to 2048 [ 235.138765][ T8756] UDF-fs: unknown compression code (0) [ 235.205740][ T8761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.338205][ T8761] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 235.422557][ T8761] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 235.526541][ T8761] EXT4-fs (loop2): This should not happen!! Data will be lost [ 235.526541][ T8761] [ 235.595835][ T8761] EXT4-fs (loop2): Total free blocks count 0 [ 235.612035][ T8776] loop0: detected capacity change from 0 to 64 [ 235.630708][ T8761] EXT4-fs (loop2): Free/Dirty block details [ 235.638238][ T8761] EXT4-fs (loop2): free_blocks=2415919504 [ 235.667033][ T8761] EXT4-fs (loop2): dirty_blocks=16 [ 235.700724][ T8761] EXT4-fs (loop2): Block reservation details [ 235.706801][ T8761] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 235.837438][ T8777] loop1: detected capacity change from 0 to 4096 [ 235.901086][ T8777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.990040][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.029064][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.268047][ T8785] netlink: 'syz.5.1229': attribute type 32 has an invalid length. [ 236.315658][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1229'. [ 236.355328][ T8782] loop0: detected capacity change from 0 to 2048 [ 236.425293][ T8785] bond1: Setting coupled_control to off (0) [ 236.458490][ T8764] loop4: detected capacity change from 0 to 32768 [ 236.540240][ T8782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.572074][ T8764] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.594007][ T8800] loop1: detected capacity change from 0 to 64 [ 236.659662][ T8782] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 236.676854][ T8782] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 236.691013][ T8782] EXT4-fs (loop0): This should not happen!! Data will be lost [ 236.691013][ T8782] [ 236.700920][ T8782] EXT4-fs (loop0): Total free blocks count 0 [ 236.706929][ T8782] EXT4-fs (loop0): Free/Dirty block details [ 236.713481][ T8782] EXT4-fs (loop0): free_blocks=2415919504 [ 236.719829][ T8782] EXT4-fs (loop0): dirty_blocks=16 [ 236.740728][ T8782] EXT4-fs (loop0): Block reservation details [ 236.743169][ T8764] XFS (loop4): Ending clean mount [ 236.755987][ T8782] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 236.789962][ T8764] XFS (loop4): Quotacheck needed: Please wait. [ 236.956854][ T8764] XFS (loop4): Quotacheck: Done. [ 237.089416][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.328190][ T5839] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.088330][ T8839] loop4: detected capacity change from 0 to 64 [ 238.095201][ T933] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 238.230735][ T5833] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 238.271083][ T933] usb 6-1: Using ep0 maxpacket: 16 [ 238.290048][ T933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.323873][ T933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.354273][ T933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.399627][ T933] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.419084][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.439978][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 238.454156][ T8845] loop1: detected capacity change from 0 to 1024 [ 238.454411][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.468802][ T933] usb 6-1: config 0 descriptor?? [ 238.493195][ T8845] EXT4-fs: Ignoring removed orlov option [ 238.525657][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.572400][ T8814] loop2: detected capacity change from 0 to 32768 [ 238.572911][ T8845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.603128][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.676834][ T5833] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.753985][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.809599][ T5833] usb 4-1: config 0 descriptor?? [ 238.919807][ T933] HID 045e:07da: Invalid code 65791 type 1 [ 238.970178][ T933] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0030/input/input18 [ 239.083525][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.097092][ T933] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 239.169649][ T933] usb 6-1: USB disconnect, device number 10 [ 239.192546][ T8855] loop4: detected capacity change from 0 to 2048 [ 239.247184][ T8855] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 239.384509][ T8855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.411420][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0031/input/input19 [ 239.497664][ T8857] fido_id[8857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 239.561256][ T5833] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 239.630974][ T5833] usb 4-1: USB disconnect, device number 15 [ 239.662785][ T8843] loop0: detected capacity change from 0 to 32768 [ 239.908563][ T8843] ialloc: diAlloc returned -17! [ 240.087367][ T8862] fido_id[8862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 240.247439][ T8870] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 240.392058][ T8876] loop1: detected capacity change from 0 to 256 [ 240.492817][ T8876] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 240.650770][ T6011] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 240.668988][ T8882] loop5: detected capacity change from 0 to 64 [ 240.852936][ T8886] loop4: detected capacity change from 0 to 1024 [ 240.860570][ T8886] EXT4-fs: Ignoring removed orlov option [ 240.878459][ T6011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.906844][ T6011] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.932238][ T6011] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 240.950562][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.007864][ T8884] loop0: detected capacity change from 0 to 4096 [ 241.017414][ T6011] usb 3-1: config 0 descriptor?? [ 241.052133][ T8884] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 241.080108][ T8886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.115789][ T8888] loop3: detected capacity change from 0 to 256 [ 241.275158][ T8888] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 241.408492][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.491249][ T6011] uclogic 0003:5543:0522.0032: unknown main item tag 0x0 [ 241.534068][ T6011] uclogic 0003:5543:0522.0032: unknown main item tag 0x0 [ 241.560030][ T6011] uclogic 0003:5543:0522.0032: unknown main item tag 0x0 [ 241.581782][ T6011] uclogic 0003:5543:0522.0032: unknown main item tag 0x0 [ 241.624076][ T6011] uclogic 0003:5543:0522.0032: unknown main item tag 0x0 [ 241.672065][ T6011] uclogic 0003:5543:0522.0032: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 241.722701][ T6011] usb 3-1: USB disconnect, device number 14 [ 241.761500][ T8898] loop5: detected capacity change from 0 to 2048 [ 241.813712][ T8898] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 241.887769][ T8898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.038407][ T8901] fido_id[8901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 242.090817][ T6012] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 242.272598][ T6012] usb 4-1: Using ep0 maxpacket: 16 [ 242.309601][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.348098][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.360535][ T6012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.417820][ T6012] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.449271][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.489825][ T6012] usb 4-1: config 0 descriptor?? [ 242.511601][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 242.691045][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 242.708843][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.746389][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.765664][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 242.783325][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 242.794199][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.819278][ T5909] usb 1-1: config 0 descriptor?? [ 242.945617][ T6012] HID 045e:07da: Invalid code 65791 type 1 [ 242.968188][ T6012] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0033/input/input20 [ 243.020705][ T6012] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 243.088032][ T8929] loop1: detected capacity change from 0 to 512 [ 243.118507][ T8931] loop2: detected capacity change from 0 to 256 [ 243.130858][ T5833] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 243.155356][ T8929] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1291: inode has both inline data and extents flags [ 243.181240][ T8929] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1291: couldn't read orphan inode 15 (err -117) [ 243.211888][ T8931] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 243.292628][ T5847] usb 4-1: USB disconnect, device number 16 [ 243.302553][ T8929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.342105][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 243.376620][ T5833] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 243.397849][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0034/input/input21 [ 243.422928][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.462865][ T5833] usb 6-1: config 0 descriptor?? [ 243.526363][ T5909] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 243.568913][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.602218][ T5909] usb 1-1: USB disconnect, device number 9 [ 243.893056][ T5833] logitech 0003:046D:C294.0035: reserved main item tag 0xe [ 243.903668][ T8940] loop4: detected capacity change from 0 to 512 [ 243.936196][ T5833] logitech 0003:046D:C294.0035: item fetching failed at offset 3/5 [ 243.965922][ T8936] fido_id[8936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 243.990579][ T5833] logitech 0003:046D:C294.0035: parse failed [ 243.998968][ T8940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.010787][ T5833] logitech 0003:046D:C294.0035: probe with driver logitech failed with error -22 [ 244.035155][ T8940] ext4 filesystem being mounted at /211/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.137260][ T5833] usb 6-1: USB disconnect, device number 11 [ 244.485483][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.931397][ T8968] loop5: detected capacity change from 0 to 256 [ 244.950723][ T5847] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 244.993362][ T8968] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd6e00b17, utbl_chksum : 0xe619d30d) [ 245.024294][ T8970] loop2: detected capacity change from 0 to 512 [ 245.059566][ T8970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 245.090807][ T8970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 245.110892][ T6012] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 245.120557][ T8970] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1307: inode has both inline data and extents flags [ 245.133944][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 245.167992][ T5847] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 245.168214][ T8970] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.1307: couldn't read orphan inode 15 (err -117) [ 245.207189][ T5847] usb 5-1: config 0 has no interface number 0 [ 245.218291][ T8970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.241589][ T5847] usb 5-1: config 0 interface 125 has no altsetting 0 [ 245.265406][ T5847] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 245.311371][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.322606][ T8976] loop3: detected capacity change from 0 to 64 [ 245.346589][ T5847] usb 5-1: Product: syz [ 245.352832][ T6012] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 245.370820][ T6012] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 245.379795][ T5847] usb 5-1: Manufacturer: syz [ 245.385030][ T5847] usb 5-1: SerialNumber: syz [ 245.403724][ T6012] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 245.425794][ T5847] usb 5-1: config 0 descriptor?? [ 245.444648][ T6012] usb 1-1: config 220 has no interface number 2 [ 245.458781][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.479666][ T6012] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 245.517007][ T6012] usb 1-1: config 220 interface 0 has no altsetting 0 [ 245.536907][ T6012] usb 1-1: config 220 interface 76 has no altsetting 0 [ 245.556434][ T6012] usb 1-1: config 220 interface 1 has no altsetting 0 [ 245.578976][ T6012] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 245.598610][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.617225][ T6012] usb 1-1: Product: syz [ 245.637386][ T6012] usb 1-1: Manufacturer: syz [ 245.649168][ T6012] usb 1-1: SerialNumber: syz [ 245.675873][ T5847] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 245.750354][ T8980] loop2: detected capacity change from 0 to 64 [ 245.759842][ T8982] loop3: detected capacity change from 0 to 64 [ 245.863244][ T8980] hfs: keylen 1794 too large [ 245.896672][ T8980] hfs: keylen 1794 too large [ 245.938430][ T6012] usb 1-1: selecting invalid altsetting 0 [ 245.968398][ T6012] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 245.991847][ T6012] uvcvideo 1-1:220.0: No valid video chain found. [ 246.042888][ T6012] usb 1-1: selecting invalid altsetting 0 [ 246.056740][ T6012] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 246.104629][ T6012] usb 1-1: USB disconnect, device number 10 [ 246.171492][ T5847] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 246.602236][ T5847] usb 5-1: failed to restore interface 125 altsetting 246 (error=-71) [ 246.647033][ T5847] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 246.697922][ T5847] usb 5-1: USB disconnect, device number 11 [ 246.979032][ T8989] loop2: detected capacity change from 0 to 32768 [ 246.994053][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 247.152749][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 247.180291][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.201157][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.250381][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.276425][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.300806][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.328295][ T5909] usb 2-1: config 0 descriptor?? [ 247.356074][ T9008] loop4: detected capacity change from 0 to 8 [ 247.407788][ T9008] SQUASHFS error: Unable to read directory block [629:46] [ 247.768572][ T5909] HID 045e:07da: Invalid code 65791 type 1 [ 247.812096][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0036/input/input22 [ 247.820803][ T9013] netlink: 'syz.0.1329': attribute type 2 has an invalid length. [ 247.889470][ T5909] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 248.059448][ T5909] usb 2-1: USB disconnect, device number 13 [ 248.185488][ T9020] loop0: detected capacity change from 0 to 512 [ 248.206827][ T9015] fido_id[9015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 248.269736][ T9020] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1331: inode has both inline data and extents flags [ 248.312062][ T9020] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1331: couldn't read orphan inode 15 (err -117) [ 248.404531][ T9020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.422108][ T5833] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 248.509035][ T9005] loop5: detected capacity change from 0 to 32768 [ 248.527751][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.600743][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 248.619029][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.652615][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.705186][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.752294][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 248.772315][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.791970][ T5833] usb 3-1: config 0 descriptor?? [ 249.266879][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0037/input/input23 [ 249.365197][ T5833] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 249.472852][ T5833] usb 3-1: USB disconnect, device number 15 [ 249.500993][ T9031] fido_id[9031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 250.167549][ T9045] loop1: detected capacity change from 0 to 136 [ 250.313863][ T9045] bio_check_eod: 278 callbacks suppressed [ 250.313890][ T9045] syz.1.1338: attempt to access beyond end of device [ 250.313890][ T9045] loop1: rw=524288, sector=164, nr_sectors = 64 limit=136 [ 250.388933][ T9045] syz.1.1338: attempt to access beyond end of device [ 250.388933][ T9045] loop1: rw=524288, sector=228, nr_sectors = 128 limit=136 [ 250.466143][ T9045] syz.1.1338: attempt to access beyond end of device [ 250.466143][ T9045] loop1: rw=0, sector=164, nr_sectors = 8 limit=136 [ 250.562404][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 250.562428][ T30] audit: type=1800 audit(1760958899.136:26): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1338" name="file0" dev="loop1" ino=1542 res=0 errno=0 [ 250.775032][ T9055] loop4: detected capacity change from 0 to 1024 [ 250.891404][ T2917] hfsplus: b-tree write err: -5, ino 4 [ 250.952188][ T9063] vlan2: entered allmulticast mode [ 251.050810][ T5833] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 251.240707][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 251.248189][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.287030][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.329029][ T5833] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.378601][ T5833] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 251.430138][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.459532][ T5833] usb 3-1: config 0 descriptor?? [ 251.483337][ T9044] loop0: detected capacity change from 0 to 32768 [ 251.928940][ T5833] HID 045e:07da: Invalid code 65791 type 1 [ 251.965686][ T5833] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0038/input/input25 [ 251.986242][ T5833] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 252.139514][ T5833] usb 3-1: USB disconnect, device number 16 [ 252.389170][ T9091] fido_id[9091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 252.587143][ T9099] loop3: detected capacity change from 0 to 256 [ 252.615148][ T9099] exfat: Deprecated parameter 'namecase' [ 252.632882][ T9099] exfat: Deprecated parameter 'namecase' [ 252.646877][ T9101] loop1: detected capacity change from 0 to 512 [ 252.731499][ T9099] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 252.750708][ T9101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.760065][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 252.785531][ T9101] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.847659][ T9101] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1369: corrupted inode contents [ 252.883383][ T9101] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.1369: mark_inode_dirty error [ 252.932678][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 252.940201][ T9101] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1369: corrupted inode contents [ 253.000179][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.017838][ T9107] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1369: corrupted inode contents [ 253.053385][ T5833] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 253.077255][ T9107] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.1369: mark_inode_dirty error [ 253.088888][ T5833] usb 5-1: config 7 has no interface number 0 [ 253.088950][ T5833] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.088992][ T5833] usb 5-1: config 7 interface 187 has no altsetting 0 [ 253.098428][ T9107] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.1369: corrupted inode contents [ 253.161995][ T5833] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 253.186156][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.214053][ T5833] usb 5-1: Product: syz [ 253.222225][ T5833] usb 5-1: Manufacturer: syz [ 253.226928][ T5833] usb 5-1: SerialNumber: syz [ 253.359725][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.539192][ T5833] usb 5-1: Unknown endpoint type found, address 0x07 [ 253.563233][ T9089] loop5: detected capacity change from 0 to 32768 [ 253.566420][ T5833] usb 5-1: Unknown endpoint type found, address 0x03 [ 253.620440][ T5833] usb 5-1: Not enough endpoints found in device, aborting! [ 253.673794][ T9089] non-latin1 character 0xffff found in JFS file name [ 253.705458][ T9089] mount with iocharset=utf8 to access [ 253.762202][ T5833] usb 5-1: USB disconnect, device number 12 [ 253.968540][ T9128] loop3: detected capacity change from 0 to 128 [ 254.033430][ T9128] EXT4-fs (loop3): Test dummy encryption mode enabled [ 254.099151][ T9128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.138270][ T9128] ext4 filesystem being mounted at /226/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.642380][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.690946][ T9148] loop4: detected capacity change from 0 to 128 [ 254.710226][ T9148] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 254.794046][ T5847] Process accounting resumed [ 254.799600][ T5847] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 254.840502][ T5847] FAT-fs (loop4): Filesystem has been set read-only [ 254.997748][ T9157] loop2: detected capacity change from 0 to 256 [ 255.010211][ T5839] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 255.063594][ T9157] exfat: Deprecated parameter 'namecase' [ 255.069339][ T9157] exfat: Deprecated parameter 'namecase' [ 255.134851][ T9159] loop5: detected capacity change from 0 to 128 [ 255.137285][ T9157] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 255.152503][ T9159] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.191436][ T9159] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.232911][ T9162] loop0: detected capacity change from 0 to 512 [ 255.266350][ T9162] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 255.302180][ T9162] EXT4-fs (loop0): 1 truncate cleaned up [ 255.363293][ T9162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.411782][ T9168] loop3: detected capacity change from 0 to 64 [ 255.621524][ T9172] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1400'. [ 255.780486][ T9162] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 255.868653][ T30] audit: type=1800 audit(1760958904.446:27): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1402" name="bus" dev="tmpfs" ino=1207 res=0 errno=0 [ 256.050202][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.103783][ T9184] loop4: detected capacity change from 0 to 256 [ 256.120291][ T9187] loop5: detected capacity change from 0 to 256 [ 256.135729][ T9184] exfat: Deprecated parameter 'utf8' [ 256.143620][ T9187] exfat: Deprecated parameter 'namecase' [ 256.190830][ T9187] exfat: Deprecated parameter 'utf8' [ 256.196429][ T9184] exfat: Deprecated parameter 'utf8' [ 256.230181][ T9187] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 256.290002][ T9184] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 256.680783][ T9200] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 258.359474][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 258.409521][ T9262] tmpfs: Cannot disable swap on remount [ 258.418141][ T30] audit: type=1326 audit(1760958906.996:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9260 comm="syz.3.1439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e3f98efc9 code=0x0 [ 258.627969][ T9265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1441'. [ 258.818286][ T9269] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 258.825105][ T9269] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.847980][ T9269] vhci_hcd vhci_hcd.0: Device attached [ 258.875449][ T9269] vhci_hcd vhci_hcd.0: port 0 already used [ 258.921185][ T9270] vhci_hcd: connection closed [ 258.926214][ T1108] vhci_hcd: stop threads [ 258.966518][ T1108] vhci_hcd: release socket [ 258.980192][ T1108] vhci_hcd: disconnect device [ 259.189773][ T9285] netlink: 'syz.5.1447': attribute type 62 has an invalid length. [ 259.624429][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 259.651581][ T9301] loop0: detected capacity change from 0 to 64 [ 259.651701][ T9299] veth0_macvtap: left promiscuous mode [ 259.713726][ T9301] hfs: hfs: Invalid key length: 94 [ 259.729942][ T9278] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.746705][ T9278] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 259.817854][ T5829] hfs: node 4:3 still has 1 user(s)! [ 259.829812][ T9278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.848849][ T9278] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.875419][ T9278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.893755][ T9278] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 259.942913][ T9278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.968859][ T9278] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.993100][ T9278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.005305][ T9308] mkiss: ax0: crc mode is auto. [ 260.013976][ T9278] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.051978][ T9278] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 260.078676][ T9278] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 260.168646][ T9278] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 260.317865][ T9317] loop5: detected capacity change from 0 to 2048 [ 260.342069][ T9317] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 260.393759][ T9317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.470093][ T30] audit: type=1800 audit(1760958909.046:29): pid=9317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1462" name="file2" dev="loop5" ino=1347 res=0 errno=0 [ 260.500763][ T6011] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 260.501004][ T5909] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 260.679758][ T6011] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 260.710707][ T6011] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 260.735006][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 260.756736][ T6011] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 260.777739][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.796388][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.818625][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.825426][ T6011] usb 4-1: config 0 descriptor?? [ 260.867807][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.922912][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.938048][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.997361][ T5909] usb 5-1: config 0 descriptor?? [ 261.006150][ T9331] loop5: detected capacity change from 0 to 256 [ 261.032711][ T9331] exfat: Deprecated parameter 'utf8' [ 261.040812][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 261.089500][ T9331] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 261.291394][ T6011] wacom 0003:056A:0315.0039: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 261.351790][ T6011] wacom 0003:056A:0315.0039: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 261.423742][ T6011] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0039/input/input26 [ 261.585399][ T5909] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.003A/input/input29 [ 261.766546][ T6011] usb 4-1: USB disconnect, device number 17 [ 261.842269][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 261.876486][ T5909] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 261.921870][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 261.924087][ T9349] [U] [ 261.930837][ T9349] [U] [ 261.933567][ T9349] [U] [ 261.936295][ T9349] [U] [ 261.939018][ T9349] [U] [ 261.941748][ T9349] [U] [ 261.944478][ T9349] [U] [ 261.947205][ T9349] [U] [ 262.000975][ T9349] [U] [ 262.003748][ T9349] [U] [ 262.006479][ T9349] [U] [ 262.009312][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 262.015741][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 262.039091][ T9347] [U] [ 262.051315][ T5909] usb 5-1: USB disconnect, device number 13 [ 262.080910][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 262.460557][ T9367] loop1: detected capacity change from 0 to 256 [ 262.634280][ T9362] fido_id[9362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 262.659858][ T9367] FAT-fs (loop1): Directory bread(block 64) failed [ 262.689550][ T9367] FAT-fs (loop1): Directory bread(block 65) failed [ 262.740778][ T9367] FAT-fs (loop1): Directory bread(block 66) failed [ 262.747416][ T9367] FAT-fs (loop1): Directory bread(block 67) failed [ 262.790848][ T9367] FAT-fs (loop1): Directory bread(block 68) failed [ 262.799149][ T9367] FAT-fs (loop1): Directory bread(block 69) failed [ 262.837778][ T9376] capability: warning: `syz.0.1491' uses 32-bit capabilities (legacy support in use) [ 262.857729][ T9367] FAT-fs (loop1): Directory bread(block 70) failed [ 262.890967][ T9367] FAT-fs (loop1): Directory bread(block 71) failed [ 262.912046][ T9380] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 262.915240][ T9367] FAT-fs (loop1): Directory bread(block 72) failed [ 262.973900][ T9367] FAT-fs (loop1): Directory bread(block 73) failed [ 262.985222][ T9380] overlayfs: missing 'lowerdir' [ 263.059876][ T9383] loop5: detected capacity change from 0 to 512 [ 263.098732][ T9383] EXT4-fs: inline encryption not supported [ 263.122970][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 263.166567][ T9383] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.240689][ T9383] EXT4-fs (loop5): Test dummy encryption mode enabled [ 263.283032][ T9383] EXT4-fs (loop5): orphan cleanup on readonly fs [ 263.319612][ T9383] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.1492: inode #13: comm syz.5.1492: iget: illegal inode # [ 263.349014][ T9383] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1492: couldn't read orphan inode 13 (err -117) [ 263.462817][ T9383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 263.558059][ T9383] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.1492: bg 0: block 426: padding at end of block bitmap is not set [ 263.644950][ T9390] loop0: detected capacity change from 0 to 4096 [ 263.675003][ T9390] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 263.779646][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.922019][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 264.000984][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 264.082558][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 264.089169][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 264.124070][ T9400] loop2: detected capacity change from 0 to 40427 [ 264.156504][ T9400] F2FS-fs (loop2): invalid crc value [ 264.160902][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 264.246403][ T9400] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:1,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 264.266037][ T9400] F2FS-fs (loop2): Failed to read root inode [ 264.266834][ T9390] ntfs3(loop0): Failed to load $Extend (-22). [ 264.349103][ T9390] ntfs3(loop0): Failed to initialize $Extend. [ 264.368951][ T9412] rdma_op ffff888144ff21f0 conn xmit_rdma 0000000000000000 [ 264.762607][ T9421] loop3: detected capacity change from 0 to 8 [ 264.793150][ T9421] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 264.843554][ T30] audit: type=1326 audit(1760958913.406:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40eed8efc9 code=0x7ffc0000 [ 264.930426][ T5854] udevd[5854]: incorrect cramfs checksum on /dev/loop3 [ 264.969074][ T9423] loop2: detected capacity change from 0 to 1024 [ 264.994183][ T30] audit: type=1326 audit(1760958913.416:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40eed8efc9 code=0x7ffc0000 [ 265.089818][ T5854] udevd[5854]: incorrect cramfs checksum on /dev/loop3 [ 265.116668][ T30] audit: type=1326 audit(1760958913.456:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f40eed8efc9 code=0x7ffc0000 [ 265.263932][ T30] audit: type=1326 audit(1760958913.456:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40eed8f003 code=0x7ffc0000 [ 265.301869][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.308219][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.349486][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 265.350712][ T30] audit: type=1326 audit(1760958913.466:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f40eed8da7f code=0x7ffc0000 [ 265.450700][ T30] audit: type=1326 audit(1760958913.536:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f40eed8f057 code=0x7ffc0000 [ 265.538466][ T30] audit: type=1326 audit(1760958913.536:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40eed8d810 code=0x7ffc0000 [ 265.563898][ T9398] loop1: detected capacity change from 0 to 32768 [ 265.624840][ T30] audit: type=1326 audit(1760958913.546:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40eed8ebcb code=0x7ffc0000 [ 265.675429][ T9437] loop2: detected capacity change from 0 to 164 [ 265.738045][ T30] audit: type=1326 audit(1760958913.576:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f40eed8dc2a code=0x7ffc0000 [ 265.798784][ T9435] loop0: detected capacity change from 0 to 4096 [ 265.845306][ T9435] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 265.867318][ T30] audit: type=1326 audit(1760958913.576:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9422 comm="syz.2.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f40eed8dc2a code=0x7ffc0000 [ 266.086312][ T9440] loop4: detected capacity change from 0 to 4096 [ 266.241015][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 266.667070][ T9457] loop2: detected capacity change from 0 to 256 [ 266.706790][ T9457] exfat: Deprecated parameter 'namecase' [ 266.740153][ T9457] exfat: Deprecated parameter 'utf8' [ 266.786413][ T9457] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 267.206464][ T9468] loop3: detected capacity change from 0 to 512 [ 267.287096][ T9468] EXT4-fs (loop3): filesystem is read-only [ 267.338510][ T9468] EXT4-fs (loop3): filesystem is read-only [ 267.355552][ T9468] EXT4-fs (loop3): orphan cleanup on readonly fs [ 267.367834][ T9468] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1530: bad orphan inode 16 [ 267.398621][ T9472] sp0: Synchronizing with TNC [ 267.459134][ T9468] ext4_test_bit(bit=15, block=3) = 0 [ 267.508691][ T9468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 267.686715][ T9480] nbd: must specify a size in bytes for the device [ 267.864804][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.883913][ T9484] loop2: detected capacity change from 0 to 1024 [ 267.991122][ T5833] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 268.017620][ T9484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.075698][ T9491] loop3: detected capacity change from 0 to 256 [ 268.121848][ T9491] exfat: Deprecated parameter 'utf8' [ 268.127239][ T9491] exfat: Deprecated parameter 'namecase' [ 268.148277][ T9491] exfat: Deprecated parameter 'namecase' [ 268.154473][ T9491] exfat: Deprecated parameter 'utf8' [ 268.169827][ T9451] loop1: detected capacity change from 0 to 40427 [ 268.198333][ T9464] loop5: detected capacity change from 0 to 32768 [ 268.204985][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 268.222914][ T9491] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 268.244711][ T5833] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 268.263872][ T9451] F2FS-fs (loop1): invalid crc value [ 268.270766][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.278775][ T5833] usb 1-1: Product: syz [ 268.290960][ T9464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1529 (9464) [ 268.315213][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.320645][ T5833] usb 1-1: Manufacturer: syz [ 268.332619][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 268.373873][ T5833] usb 1-1: SerialNumber: syz [ 268.406337][ T5833] usb 1-1: config 0 descriptor?? [ 268.415885][ T9464] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.443544][ T5833] safe_serial 1-1:0.0: safe_serial converter detected [ 268.460772][ T9464] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 268.484958][ T5833] usb 1-1: safe_serial converter now attached to ttyUSB0 [ 268.658607][ T5833] usb 1-1: USB disconnect, device number 11 [ 268.688526][ T9464] BTRFS info (device loop5): enabling ssd optimizations [ 268.711874][ T9451] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.735598][ T9464] BTRFS info (device loop5): turning on async discard [ 268.764851][ T9451] F2FS-fs (loop1): Start checkpoint disabled! [ 268.779259][ T9464] BTRFS info (device loop5): enabling free space tree [ 268.792237][ T5833] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 268.808008][ T9511] loop3: detected capacity change from 0 to 512 [ 268.818473][ T9451] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 268.821266][ T5833] safe_serial 1-1:0.0: device disconnected [ 268.869340][ T9451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 268.912038][ T9511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.970946][ T9511] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.092113][ T9517] loop2: detected capacity change from 0 to 1024 [ 269.099582][ T9517] EXT4-fs: Ignoring removed orlov option [ 269.176394][ T9517] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 269.243260][ T5837] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.260813][ T9517] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 269.332853][ T9517] EXT4-fs (loop2): invalid journal inode [ 269.338591][ T9517] EXT4-fs (loop2): can't get journal size [ 269.377102][ T1096] kworker/u8:6: attempt to access beyond end of device [ 269.377102][ T1096] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.397144][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.418987][ T9517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.435224][ T1096] CPU: 1 UID: 0 PID: 1096 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 269.435271][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.435296][ T1096] Workqueue: writeback wb_workfn (flush-7:1) [ 269.435341][ T1096] Call Trace: [ 269.435361][ T1096] [ 269.435375][ T1096] dump_stack_lvl+0x16c/0x1f0 [ 269.435436][ T1096] f2fs_handle_critical_error+0x624/0x9f0 [ 269.435497][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.435541][ T1096] ? f2fs_build_fault_attr+0x53/0x1f0 [ 269.435595][ T1096] f2fs_write_end_io+0x958/0xcf0 [ 269.435655][ T1096] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 269.435717][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.435771][ T1096] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 269.435825][ T1096] bio_endio+0x713/0x860 [ 269.435865][ T1096] submit_bio_noacct+0x306/0x1f60 [ 269.435928][ T1096] __submit_merged_bio+0x33c/0x770 [ 269.435989][ T1096] __submit_merged_write_cond+0x319/0x3f0 [ 269.436058][ T1096] f2fs_write_cache_pages+0x2067/0x2570 [ 269.436123][ T1096] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 269.436162][ T1096] ? __kernel_text_address+0xd/0x40 [ 269.436219][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436262][ T1096] ? unwind_get_return_address+0x59/0xa0 [ 269.436317][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436365][ T1096] ? arch_stack_walk+0x88/0x100 [ 269.436432][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436567][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436610][ T1096] ? lockdep_hardirqs_on+0x7c/0x110 [ 269.436673][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436721][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436772][ T1096] f2fs_write_data_pages+0x4ad/0xd90 [ 269.436819][ T1096] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 269.436872][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.436916][ T1096] ? __lock_acquire+0xb8a/0x1c90 [ 269.436964][ T1096] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 269.437004][ T1096] do_writepages+0x27a/0x600 [ 269.437064][ T1096] ? __pfx_do_writepages+0x10/0x10 [ 269.437110][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.437150][ T1096] ? reacquire_held_locks+0xcd/0x1f0 [ 269.437196][ T1096] ? writeback_sb_inodes+0x3b0/0xfa0 [ 269.437261][ T1096] __writeback_single_inode+0x160/0xfb0 [ 269.437325][ T1096] ? __pfx___writeback_single_inode+0x10/0x10 [ 269.437389][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.437432][ T1096] ? do_raw_spin_unlock+0x172/0x230 [ 269.437490][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.437541][ T1096] writeback_sb_inodes+0x60d/0xfa0 [ 269.437623][ T1096] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 269.437680][ T1096] ? __lock_acquire+0xb8a/0x1c90 [ 269.437799][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.437842][ T1096] ? rcu_is_watching+0x12/0xc0 [ 269.437876][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.437919][ T1096] ? queue_io+0x3f6/0x520 [ 269.437995][ T1096] wb_writeback+0x419/0xb70 [ 269.438066][ T1096] ? __pfx_wb_writeback+0x10/0x10 [ 269.438124][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438180][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438223][ T1096] ? mark_held_locks+0x49/0x80 [ 269.438276][ T1096] wb_workfn+0x14d/0xbe0 [ 269.438318][ T1096] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 269.438385][ T1096] ? __pfx_wb_workfn+0x10/0x10 [ 269.438428][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438472][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438517][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438560][ T1096] ? rcu_is_watching+0x12/0xc0 [ 269.438599][ T1096] process_one_work+0x9cf/0x1b70 [ 269.438665][ T1096] ? __pfx_process_one_work+0x10/0x10 [ 269.438718][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438768][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.438806][ T1096] ? assign_work+0x1a0/0x250 [ 269.438855][ T1096] worker_thread+0x6c8/0xf10 [ 269.438929][ T1096] ? __pfx_worker_thread+0x10/0x10 [ 269.438977][ T1096] kthread+0x3c5/0x780 [ 269.439022][ T1096] ? __pfx_kthread+0x10/0x10 [ 269.439069][ T1096] ? srso_alias_return_thunk+0x5/0xfbef5 [ 269.439110][ T1096] ? rcu_is_watching+0x12/0xc0 [ 269.439144][ T1096] ? __pfx_kthread+0x10/0x10 [ 269.439190][ T1096] ret_from_fork+0x675/0x7d0 [ 269.439230][ T1096] ? __pfx_kthread+0x10/0x10 [ 269.439275][ T1096] ret_from_fork_asm+0x1a/0x30 [ 269.439341][ T1096] [ 269.439365][ T1096] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 269.689445][ T9486] loop4: detected capacity change from 0 to 32768 [ 269.933394][ T9486] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 269.976272][ T9486] (syz.4.1538,9486,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 270.004338][ T9486] (syz.4.1538,9486,1):ocfs2_group_add:502 ERROR: Can't read the group descriptor # 691489804416 from the device. [ 270.013326][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.190873][ T6012] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.274142][ T5839] ocfs2: Unmounting device (7,4) on (node local) [ 270.406936][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.472606][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.517876][ T6012] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 270.583748][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.654168][ T6012] usb 4-1: config 0 descriptor?? [ 271.116179][ T6012] samsung 0003:0419:0600.003B: item fetching failed at offset 5/7 [ 271.178575][ T6012] samsung 0003:0419:0600.003B: parse failed [ 271.236424][ T6012] samsung 0003:0419:0600.003B: probe with driver samsung failed with error -22 [ 271.295803][ T6012] usb 4-1: USB disconnect, device number 18 [ 271.551950][ T9549] [U] s„ [ 271.873323][ T9558] loop0: detected capacity change from 0 to 1024 [ 271.905371][ T9558] EXT4-fs: Ignoring removed oldalloc option [ 271.949648][ T9558] EXT4-fs: Ignoring removed bh option [ 272.018400][ T9558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.096549][ T9565] loop3: detected capacity change from 0 to 256 [ 272.197515][ T9558] EXT4-fs error (device loop0): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 272.218317][ T9565] exfat: Deprecated parameter 'namecase' [ 272.224594][ T9565] exfat: Deprecated parameter 'namecase' [ 272.230276][ T9565] exfat: Deprecated parameter 'namecase' [ 272.259063][ T9569] loop1: detected capacity change from 0 to 64 [ 272.268199][ T9565] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 272.381135][ T9565] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 272.457661][ T9542] loop5: detected capacity change from 0 to 32768 [ 272.533581][ T9542] [ 272.533581][ T9542] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.533581][ T9542] [ 272.562281][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.896071][ T1108] ERROR: (device loop5): diWrite: ixpxd invalid [ 272.896071][ T1108] [ 273.037218][ T1108] ERROR: (device loop5): txAbort: [ 273.037218][ T1108] [ 273.072422][ T1108] jfs_write_inode: jfs_commit_inode failed! [ 273.132099][ T5837] [ 273.132099][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.132099][ T5837] [ 273.271371][ T5837] [ 273.271371][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.271371][ T5837] [ 273.710956][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 273.922556][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 273.953410][ T5909] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 274.007911][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.088739][ T5909] usb 4-1: Product: syz [ 274.138635][ T5909] usb 4-1: Manufacturer: syz [ 274.183941][ T5909] usb 4-1: SerialNumber: syz [ 274.243144][ T5909] usb 4-1: config 0 descriptor?? [ 274.313071][ T5909] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 274.382102][ T5909] usb 4-1: Detected FT232H [ 274.587849][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 274.648903][ T9593] loop0: detected capacity change from 0 to 1764 [ 274.874650][ T5909] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 274.987829][ T5909] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 275.115330][ T5909] usb 4-1: USB disconnect, device number 19 [ 275.214371][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 275.301711][ T5909] ftdi_sio 4-1:0.0: device disconnected [ 275.558739][ T9599] loop5: detected capacity change from 0 to 1764 [ 276.093813][ T9603] sch_fq: defrate 4294967295 ignored. [ 276.982094][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 278.064072][ T9629] loop2: detected capacity change from 0 to 2048 [ 278.144463][ T9629] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576 [ 278.310504][ T9629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.404520][ T9633] loop5: detected capacity change from 0 to 128 [ 278.504209][ T9633] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 278.620785][ T9633] hpfs: filesystem error: improperly stopped [ 278.626825][ T9633] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 278.709711][ T9633] hpfs: You really don't want any checks? You are crazy... [ 278.751670][ T9633] hpfs: hpfs_map_sector(): read error [ 278.757079][ T9633] hpfs: code page support is disabled [ 278.877398][ T9633] hpfs: hpfs_map_4sectors(): unaligned read [ 278.926309][ T9633] hpfs: hpfs_map_4sectors(): unaligned read [ 279.000925][ T9633] hpfs: filesystem error: unable to find root dir [ 279.210982][ T9644] hpfs: hpfs_map_4sectors(): unaligned read [ 279.366704][ T9637] loop0: detected capacity change from 0 to 4096 [ 279.879637][ T5194] udevd[5194]: worker [7248] terminated by signal 33 (Unknown signal 33) [ 279.953617][ T5194] udevd[5194]: worker [7248] failed while handling '/devices/virtual/block/loop0' [ 280.503408][ T9656] sp0: Synchronizing with TNC [ 282.211894][ T9672] loop0: detected capacity change from 0 to 4096 [ 282.351236][ T9677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.438802][ T9650] loop3: detected capacity change from 0 to 32768 [ 282.474614][ T9672] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 282.563046][ T9672] Remounting filesystem read-only [ 282.568771][ T9650] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 282.722107][ T9650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 282.863323][ T1096] (kworker/u8:6,1096,0):ocfs2_check_dir_entry:321 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 283.501238][ T5831] ocfs2: Unmounting device (7,3) on (node local) [ 284.781329][ T5909] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 285.020750][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.140909][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.253170][ T5909] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 285.340543][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.439539][ T5909] usb 2-1: config 0 descriptor?? [ 286.041746][ T5909] zydacron 0003:13EC:0006.003C: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 286.062927][ T9710] loop3: detected capacity change from 0 to 4096 [ 286.205340][ T5909] usb 2-1: USB disconnect, device number 14 [ 286.912233][ T9717] fido_id[9717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 288.229885][ T9743] loop1: detected capacity change from 0 to 47 [ 288.677107][ T9751] loop4: detected capacity change from 0 to 512 [ 288.791117][ T9751] EXT4-fs: Ignoring removed oldalloc option [ 288.928227][ T9753] loop5: detected capacity change from 0 to 164 [ 288.982804][ T9751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1640: Parent and EA inode have the same ino 15 [ 289.105149][ T9751] EXT4-fs (loop4): Remounting filesystem read-only [ 289.174246][ T9751] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 289.255941][ T9751] EXT4-fs (loop4): 1 orphan inode deleted [ 289.274350][ T9710] ntfs3(loop3): Failed to read $AttrDef (-4). [ 289.382815][ T9751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.986379][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.310626][ C1] sched: DL replenish lagged too much [ 291.368151][ T9786] loop0: detected capacity change from 0 to 2048 [ 291.459783][ T9791] loop5: detected capacity change from 0 to 128 [ 291.566200][ T9792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.658228][ T9791] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.852997][ T9791] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 291.883201][ T9796] smc: net device bond0 applied user defined pnetid SYZ2 [ 292.516556][ T5837] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.026504][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 294.481431][ T5833] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 294.710319][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 294.805731][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 294.817536][ T5909] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 294.886741][ T9840] loop2: detected capacity change from 0 to 512 [ 294.910790][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 295.013341][ T5833] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 295.054518][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.069836][ T9840] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.1673: error while reading EA inode 32 err=-116 [ 295.099300][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.137096][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 295.180402][ T5833] usb 4-1: Product: syz [ 295.215290][ T5833] usb 4-1: Manufacturer: syz [ 295.239816][ T9840] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 295.253680][ T5909] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 295.264497][ T5833] usb 4-1: SerialNumber: syz [ 295.307339][ T5833] usb 4-1: config 0 descriptor?? [ 295.317937][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.348832][ T9840] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: comm syz.2.1673: error while reading EA inode 32 err=-116 [ 295.371083][ T9833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.423685][ T9833] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 295.433220][ T5909] usb 6-1: config 0 descriptor?? [ 295.494967][ T9840] EXT4-fs (loop2): 1 orphan inode deleted [ 295.506126][ T5833] usb 4-1: ucan: probing device on interface #0 [ 295.545219][ T9840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.636552][ T9840] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1673: unexpected EA_INODE flag [ 295.800071][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.890971][ T5909] zydacron 0003:13EC:0006.003D: item fetching failed at offset 2/4 [ 295.925748][ T5833] usb 4-1: ucan: device reported invalid device info [ 295.941343][ T5909] zydacron 0003:13EC:0006.003D: parse failed [ 295.947503][ T5909] zydacron 0003:13EC:0006.003D: probe with driver zydacron failed with error -22 [ 295.960698][ T5833] usb 4-1: ucan: probe failed; try to update the device firmware [ 296.065102][ T9849] loop2: detected capacity change from 0 to 256 [ 296.092914][ T5909] usb 6-1: USB disconnect, device number 12 [ 296.164035][ T9849] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d) [ 296.181374][ T5833] usb 4-1: USB disconnect, device number 20 [ 296.968994][ T9857] program syz.2.1681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.014190][ T9859] loop3: detected capacity change from 0 to 256 [ 297.055418][ T9859] FAT-fs (loop3): Directory bread(block 1285) failed [ 297.105802][ T9859] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 297.190727][ T5833] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 297.395698][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 297.432609][ T5833] usb 6-1: config 0 interface 0 has no altsetting 0 [ 297.476584][ T5833] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 297.526409][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.594844][ T5833] usb 6-1: config 0 descriptor?? [ 297.684603][ T9865] loop3: detected capacity change from 0 to 512 [ 297.696499][ T9864] pim6reg: entered allmulticast mode [ 297.739101][ T9865] EXT4-fs: Ignoring removed bh option [ 297.793823][ T9865] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.892272][ T9865] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 297.960293][ T9865] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 298.018093][ T9865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 298.075707][ T5833] sony 0003:1345:3008.003E: unknown main item tag 0x0 [ 298.104090][ T9865] __quota_error: 16 callbacks suppressed [ 298.104122][ T9865] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 298.206654][ T5833] sony 0003:1345:3008.003E: hiddev0,hidraw0: USB HID v80.01 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 298.236096][ T9865] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 298.297837][ T9865] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.1685: Failed to acquire dquot type 1 [ 298.329970][ T5833] sony 0003:1345:3008.003E: failed to claim input [ 298.383489][ T9865] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.1685: Invalid block bitmap block 0 in block_group 0 [ 298.434619][ T5833] usb 6-1: USB disconnect, device number 13 [ 298.511356][ T9865] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.1685: Invalid block bitmap block 0 in block_group 0 [ 298.600396][ T9865] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.1685: Invalid block bitmap block 0 in block_group 0 [ 298.684202][ T9865] Quota error (device loop3): write_blk: dquota write failed [ 298.705684][ T9874] fido_id[9874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 298.743217][ T9865] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 298.779764][ T9865] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.1685: Failed to acquire dquot type 1 [ 298.864818][ T9865] Quota error (device loop3): write_blk: dquota write failed [ 298.926495][ T9865] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 298.994092][ T9865] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.1685: Failed to acquire dquot type 1 [ 299.065469][ T9865] EXT4-fs (loop3): 1 orphan inode deleted [ 299.109442][ T9865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.459497][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.173037][ T9892] loop5: detected capacity change from 0 to 256 [ 300.727142][ T9902] loop2: detected capacity change from 0 to 512 [ 300.816819][ T9902] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.580699][ T5909] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 301.680065][ T9916] loop5: detected capacity change from 0 to 128 [ 301.780724][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 301.830874][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.905628][ T9916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.982436][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.067349][ T9916] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.087883][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.235887][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.297142][ T30] audit: type=1326 audit(1760958950.866:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 302.350712][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.519094][ T5909] usb 1-1: config 0 descriptor?? [ 302.596440][ T30] audit: type=1326 audit(1760958950.926:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 302.723947][ T5837] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.890791][ T30] audit: type=1326 audit(1760958950.926:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 303.176445][ T30] audit: type=1326 audit(1760958950.926:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 303.232095][ T5909] microsoft 0003:045E:07DA.003F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 303.293137][ T10] kernel write not supported for file /input/mice (pid: 10 comm: kworker/0:1) [ 303.356342][ T5909] microsoft 0003:045E:07DA.003F: no inputs found [ 303.396897][ T30] audit: type=1326 audit(1760958950.926:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 303.431524][ T5909] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway [ 303.455456][ T9937] loop5: detected capacity change from 0 to 256 [ 303.538151][ T5909] usb 1-1: USB disconnect, device number 12 [ 303.649793][ T30] audit: type=1326 audit(1760958950.996:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 303.941100][ T30] audit: type=1326 audit(1760958950.996:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f98efc9 code=0x7ffc0000 [ 304.508700][ T9942] fido_id[9942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 304.736010][ T9953] comedi comedi3: mpc624: I/O port conflict (0x4f24,16) [ 305.599188][ T9964] loop5: detected capacity change from 0 to 128 [ 306.632226][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 306.712024][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 306.760752][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 306.768193][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 306.881153][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 306.955102][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 307.004758][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 307.070686][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 307.122054][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 307.177382][ T10] hid-generic 00A0:0006:0003.0040: unknown main item tag 0x0 [ 307.201631][ T30] audit: type=1326 audit(1760958955.776:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 307.284025][ T10] hid-generic 00A0:0006:0003.0040: hidraw0: HID v0.05 Device [syz1] on syz0 [ 307.420469][ T30] audit: type=1326 audit(1760958955.776:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 307.670666][ T30] audit: type=1326 audit(1760958955.846:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 307.948227][ T30] audit: type=1326 audit(1760958955.846:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 308.073168][ T9979] fido_id[9979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 308.133013][ T30] audit: type=1326 audit(1760958955.886:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 308.366762][ T30] audit: type=1326 audit(1760958955.886:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 311.065184][T10016] loop0: detected capacity change from 0 to 256 [ 311.226392][T10016] exfat: Deprecated parameter 'namecase' [ 311.270211][T10016] exfat: Deprecated parameter 'namecase' [ 311.464266][T10016] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 312.257363][T10033] loop5: detected capacity change from 0 to 512 [ 312.389845][T10033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.465764][T10038] loop3: detected capacity change from 0 to 512 [ 312.500833][T10033] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.529476][T10038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.620007][T10038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=800ec018, mo2=0082] [ 312.635268][T10033] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1758: corrupted inode contents [ 312.678395][T10038] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1762: inode has both inline data and extents flags [ 312.732067][T10033] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1758: mark_inode_dirty error [ 312.757215][T10038] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.1762: couldn't read orphan inode 15 (err -117) [ 312.817837][T10033] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1758: corrupted inode contents [ 312.848732][T10038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.899963][T10045] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1758: corrupted inode contents [ 312.974571][T10045] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.1758: mark_inode_dirty error [ 313.028564][T10045] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.1758: corrupted inode contents [ 314.699512][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.773327][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.004553][T10051] loop0: detected capacity change from 0 to 64 [ 315.840942][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 316.060732][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 316.099332][ T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 316.170852][ T10] usb 2-1: config 0 has no interface number 0 [ 316.280736][ T10] usb 2-1: config 0 interface 125 has no altsetting 0 [ 316.346877][ T10] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 316.422550][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.501239][ T10] usb 2-1: Product: syz [ 316.542190][ T10] usb 2-1: Manufacturer: syz [ 316.599610][ T10] usb 2-1: SerialNumber: syz [ 316.657464][ T10] usb 2-1: config 0 descriptor?? [ 317.034648][ T10] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 317.150047][T10079] loop2: detected capacity change from 0 to 512 [ 317.335730][T10079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.443000][T10079] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.459253][T10091] loop4: detected capacity change from 0 to 64 [ 317.563323][ T10] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 317.659335][T10079] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1781: corrupted inode contents [ 317.804751][T10079] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.1781: mark_inode_dirty error [ 317.906617][T10079] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1781: corrupted inode contents [ 317.997313][T10092] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1781: corrupted inode contents [ 318.026042][ T10] usb 2-1: failed to restore interface 125 altsetting 246 (error=-71) [ 318.065635][ T10] ueagle-atm 2-1:0.125: usbatm_usb_probe: bind failed: -19! [ 318.122481][T10092] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.1781: mark_inode_dirty error [ 318.157039][ T10] usb 2-1: USB disconnect, device number 15 [ 318.218832][T10092] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.1781: corrupted inode contents [ 318.422892][T10096] loop0: detected capacity change from 0 to 256 [ 318.441106][T10096] exfat: Deprecated parameter 'utf8' [ 318.477098][T10096] exfat: Deprecated parameter 'utf8' [ 318.532617][T10096] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 319.747333][T10100] loop1: detected capacity change from 0 to 32768 [ 319.803433][T10100] non-latin1 character 0xffff found in JFS file name [ 319.822714][T10100] mount with iocharset=utf8 to access [ 323.441321][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.982689][T10131] loop4: detected capacity change from 0 to 128 [ 325.090074][T10131] EXT4-fs (loop4): Test dummy encryption mode enabled [ 325.225917][T10131] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.351069][T10131] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.653838][T10145] loop1: detected capacity change from 0 to 64 [ 326.932468][ T5839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.940818][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.963943][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.241125][T10152] tmpfs: Cannot disable swap on remount [ 328.208975][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1808'. [ 328.568619][T10169] loop2: detected capacity change from 0 to 64 [ 328.777761][T10169] hfs: hfs: Invalid key length: 94 [ 329.025785][T10175] loop1: detected capacity change from 0 to 128 [ 329.104476][T10175] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.119151][T10179] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1817'. [ 329.239228][ T5830] hfs: node 4:3 still has 1 user(s)! [ 329.287977][T10175] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.911039][T10204] loop5: detected capacity change from 0 to 512 [ 331.020822][T10204] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1830: inode has both inline data and extents flags [ 331.515513][T10204] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1830: couldn't read orphan inode 15 (err -117) [ 331.675568][T10204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.785518][T10212] loop2: detected capacity change from 0 to 1764 [ 332.431712][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.094089][T10222] loop0: detected capacity change from 0 to 4096 [ 333.185849][T10222] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 333.452364][T10222] ntfs3(loop0): ino=1a, mi_enum_attr [ 333.457731][T10222] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 333.703504][T10235] loop5: detected capacity change from 0 to 1024 [ 334.201173][ T12] hfsplus: b-tree write err: -5, ino 4 [ 334.291747][ T5194] udevd[5194]: worker [10125] terminated by signal 33 (Unknown signal 33) [ 334.300336][ T5194] udevd[5194]: worker [10125] failed while handling '/devices/virtual/block/loop5' [ 334.702577][T10243] loop5: detected capacity change from 0 to 256 [ 334.790894][T10243] exfat: Deprecated parameter 'utf8' [ 334.908317][T10243] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 335.011169][ T5847] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 335.903853][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 336.087613][ T5847] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.121380][ T5847] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.173168][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.261847][ T5847] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 336.268155][T10264] loop0: detected capacity change from 0 to 2048 [ 336.292819][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.329326][T10264] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 336.351132][T10267] netlink: 1264 bytes leftover after parsing attributes in process `syz.5.1857'. [ 336.458858][T10264] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 336.577804][ T5847] usb 5-1: config 0 descriptor?? [ 336.663181][ T30] audit: type=1800 audit(1760958985.246:69): pid=10264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1856" name="file2" dev="loop0" ino=1347 res=0 errno=0 [ 337.216643][T10271] loop3: detected capacity change from 0 to 1024 [ 337.655086][ T996] hfsplus: b-tree write err: -5, ino 4 [ 337.856647][ T5847] zeroplus 0003:0C12:0005.0041: hidraw0: USB HID v0.07 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 337.921406][ T5847] zeroplus 0003:0C12:0005.0041: no inputs found [ 338.183740][ T5847] usb 5-1: USB disconnect, device number 14 [ 338.563316][T10288] fido_id[10288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 339.716843][T10284] loop2: detected capacity change from 0 to 32768 [ 341.584911][T10292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.932844][T10292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 341.975348][T10292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.012396][T10292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.067898][T10292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.103283][T10292] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 343.034660][T10332] loop1: detected capacity change from 0 to 40427 [ 343.110425][T10332] F2FS-fs (loop1): invalid crc value [ 343.220827][T10332] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:1,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 343.257539][T10332] F2FS-fs (loop1): Failed to read root inode [ 343.373041][ T30] audit: type=1326 audit(1760958991.926:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 343.514965][T10341] loop4: detected capacity change from 0 to 1024 [ 343.575499][ T30] audit: type=1326 audit(1760958991.936:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 343.701835][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 343.810789][ T30] audit: type=1326 audit(1760958992.016:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 344.004596][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 344.058974][ T2978] hfsplus: b-tree write err: -5, ino 4 [ 344.064749][ T30] audit: type=1326 audit(1760958992.016:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99c498f003 code=0x7ffc0000 [ 344.094484][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 344.102153][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 344.108183][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 344.164679][T10343] loop5: detected capacity change from 0 to 256 [ 344.180653][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 344.286286][T10343] exfat: Deprecated parameter 'namecase' [ 344.370799][T10343] exfat: Deprecated parameter 'utf8' [ 344.384561][ T30] audit: type=1326 audit(1760958992.026:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99c498da7f code=0x7ffc0000 [ 344.592290][T10343] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 344.686629][ T30] audit: type=1326 audit(1760958992.096:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99c498f057 code=0x7ffc0000 [ 344.948202][ T30] audit: type=1326 audit(1760958992.096:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99c498d810 code=0x7ffc0000 [ 345.181341][ T30] audit: type=1326 audit(1760958992.096:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99c498ebcb code=0x7ffc0000 [ 345.451199][ T30] audit: type=1326 audit(1760958992.196:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99c498dc2a code=0x7ffc0000 [ 345.682710][ T30] audit: type=1326 audit(1760958992.196:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10337 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f99c498dc2a code=0x7ffc0000 [ 346.428693][T10353] Falling back ldisc for ttyS3. [ 348.006378][T10378] [U] s„ [ 348.337287][T10384] loop5: detected capacity change from 0 to 256 [ 348.408137][T10384] exfat: Deprecated parameter 'namecase' [ 348.456906][T10384] exfat: Deprecated parameter 'namecase' [ 348.481726][T10384] exfat: Deprecated parameter 'namecase' [ 348.558103][T10384] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 348.638412][T10384] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 348.670754][ T933] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 348.870828][ T933] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 348.932857][ T933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 348.993173][ T933] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 349.030653][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.103167][ T933] usb 5-1: config 0 descriptor?? [ 349.600346][ T933] wacom 0003:056A:0315.0042: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 349.697600][ T933] wacom 0003:056A:0315.0042: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.4-1/input0 [ 349.787332][ T933] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0315.0042/input/input34 [ 350.010828][ T933] usb 5-1: USB disconnect, device number 15 [ 350.148535][T10405] loop3: detected capacity change from 0 to 256 [ 350.199661][T10405] exfat: Deprecated parameter 'namecase' [ 350.240269][T10401] fido_id[10401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 350.268256][T10405] exfat: Deprecated parameter 'utf8' [ 350.394124][T10405] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 351.051835][T10408] loop5: detected capacity change from 0 to 4096 [ 351.117101][T10411] loop4: detected capacity change from 0 to 1764 [ 351.123705][T10408] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 351.252596][T10414] loop0: detected capacity change from 0 to 512 [ 351.291902][T10414] EXT4-fs: Ignoring removed oldalloc option [ 351.397736][T10414] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1923: Parent and EA inode have the same ino 15 [ 351.466593][T10414] EXT4-fs (loop0): Remounting filesystem read-only [ 351.551046][T10414] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 351.625136][T10414] EXT4-fs (loop0): 1 orphan inode deleted [ 351.664014][T10414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.289029][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.540941][T10431] smc: net device bond0 applied user defined pnetid SYZ2 [ 352.569546][T10432] loop4: detected capacity change from 0 to 1024 [ 352.662100][T10432] EXT4-fs: Ignoring removed oldalloc option [ 352.668065][T10432] EXT4-fs: Ignoring removed bh option [ 352.778127][T10432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.017656][T10438] loop3: detected capacity change from 0 to 2048 [ 353.038744][T10432] EXT4-fs error (device loop4): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 353.182314][T10441] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.658642][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.920921][ T5847] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 354.154832][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.220836][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 354.354562][ T5847] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 354.396349][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.456372][ T5847] usb 3-1: config 0 descriptor?? [ 354.840315][T10460] loop5: detected capacity change from 0 to 512 [ 354.885708][T10459] loop0: detected capacity change from 0 to 256 [ 354.912124][T10460] EXT4-fs: Ignoring removed bh option [ 354.978929][ T5847] zydacron 0003:13EC:0006.0043: item fetching failed at offset 2/4 [ 355.000879][T10460] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.080652][T10460] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 355.091682][ T5847] zydacron 0003:13EC:0006.0043: parse failed [ 355.097790][ T5847] zydacron 0003:13EC:0006.0043: probe with driver zydacron failed with error -22 [ 355.185210][T10460] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 355.291033][T10460] EXT4-fs (loop5): orphan cleanup on readonly fs [ 355.301008][ T5847] usb 3-1: USB disconnect, device number 17 [ 355.356246][T10460] __quota_error: 8 callbacks suppressed [ 355.356270][T10460] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 4 [ 355.531072][T10460] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 355.612616][T10460] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1938: Failed to acquire dquot type 1 [ 355.667213][T10460] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.1938: Invalid block bitmap block 0 in block_group 0 [ 355.782194][T10460] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.1938: Invalid block bitmap block 0 in block_group 0 [ 355.830114][T10460] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.1938: Invalid block bitmap block 0 in block_group 0 [ 355.921606][T10460] Quota error (device loop5): write_blk: dquota write failed [ 355.930123][T10460] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 356.019708][T10460] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1938: Failed to acquire dquot type 1 [ 356.089817][T10460] Quota error (device loop5): write_blk: dquota write failed [ 356.152571][T10460] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 356.218282][T10460] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.1938: Failed to acquire dquot type 1 [ 356.319725][T10460] EXT4-fs (loop5): 1 orphan inode deleted [ 356.522132][ T30] audit: type=1326 audit(1760959005.096:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 356.808112][ T30] audit: type=1326 audit(1760959005.096:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 357.021078][ T30] audit: type=1326 audit(1760959005.216:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 357.231799][ T30] audit: type=1326 audit(1760959005.216:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10474 comm="syz.4.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99c498efc9 code=0x7ffc0000 [ 358.334886][T10497] loop1: detected capacity change from 0 to 2048 [ 358.453265][T10503] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.973921][T10510] loop4: detected capacity change from 0 to 128 [ 359.032399][T10510] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.722700][T10517] comedi comedi3: mpc624: I/O port conflict (0x4f24,16) [ 359.770769][ T5847] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 359.962580][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 360.019352][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.067707][ T5847] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 360.113532][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.169039][ T5847] usb 2-1: config 0 descriptor?? [ 360.500359][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1968'. [ 360.533790][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1968'. [ 360.691698][ T5847] ryos 0003:1E7D:3138.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 360.759747][T10523] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 360.866181][ T5847] usb 2-1: USB disconnect, device number 16 [ 360.991496][T10523] bond1 (unregistering): Released all slaves [ 361.222685][T10527] fido_id[10527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 361.413928][T10529] loop2: detected capacity change from 0 to 1024 [ 362.016811][T10521] loop0: detected capacity change from 0 to 32768 [ 362.109644][T10521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1980 (10521) [ 362.249996][T10521] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.315291][T10521] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 362.502510][T10544] loop3: detected capacity change from 0 to 64 [ 362.652590][ T933] IPVS: starting estimator thread 0... [ 362.692429][T10521] BTRFS info (device loop0): enabling ssd optimizations [ 362.742986][T10521] BTRFS info (device loop0): turning on async discard [ 362.785427][T10553] IPVS: using max 20 ests per chain, 48000 per kthread [ 362.795359][T10521] BTRFS info (device loop0): enabling free space tree [ 363.316060][ T5829] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.877943][T10562] loop2: detected capacity change from 0 to 2048 [ 364.070441][T10569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 365.837325][T10460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.189831][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.060873][ T5847] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 367.270785][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 367.300835][ T5847] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 367.389009][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.468830][ T5847] usb 3-1: Product: syz [ 367.493914][ T5847] usb 3-1: Manufacturer: syz [ 367.498653][ T5847] usb 3-1: SerialNumber: syz [ 367.570451][ T5847] usb 3-1: config 0 descriptor?? [ 367.645758][ T5847] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 367.659190][T10603] loop2: detected capacity change from 0 to 7 [ 367.757583][ T5847] dvb-usb: bulk message failed: -22 (2/0) [ 367.784782][T10603] Dev loop2: unable to read RDB block 7 [ 367.820367][T10603] loop2: unable to read partition table [ 367.845283][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 367.871068][T10603] loop2: partition table beyond EOD, truncated [ 367.912866][T10603] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.941312][ T5847] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 368.021574][ T5847] usb 3-1: media controller created [ 368.284276][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.466075][ T5849] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 368.614786][ T5847] cxusb: set interface failed [ 368.639854][ T5847] dvb-usb: bulk message failed: -22 (1/0) [ 369.106344][T10618] loop3: detected capacity change from 0 to 256 [ 369.116228][ T5847] DVB: Unable to find symbol mt352_attach() [ 369.165154][T10618] exfat: Deprecated parameter 'namecase' [ 369.172749][ T5847] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 369.235443][T10618] exfat: Deprecated parameter 'utf8' [ 369.360530][T10618] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 369.780811][ T5847] rc_core: IR keymap rc-dvico-portable not found [ 369.826841][ T5847] Registered IR keymap rc-empty [ 369.876850][ T5847] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 369.974460][ T5847] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input37 [ 370.082600][ T5847] dvb-usb: schedule remote query interval to 100 msecs. [ 370.176291][ T5847] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 370.287583][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 370.300807][ T5847] usb 3-1: USB disconnect, device number 18 [ 370.839516][ T5847] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 371.485406][T10647] nbd: must specify a device to reconfigure [ 372.237456][T10661] loop4: detected capacity change from 0 to 512 [ 372.347425][T10661] EXT4-fs (loop4): Test dummy encryption mode enabled [ 372.406302][T10661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.448651][T10667] loop2: detected capacity change from 0 to 512 [ 372.535551][T10661] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.2026: corrupted xattr entries [ 372.659183][T10661] EXT4-fs (loop4): 1 orphan inode deleted [ 372.694628][T10667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.734687][T10661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.843546][T10667] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.296075][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.393242][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.023569][T10685] loop1: detected capacity change from 0 to 256 [ 374.065876][T10685] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 374.212651][T10685] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.569573][T10664] loop5: detected capacity change from 0 to 32768 [ 374.639122][T10664] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2028 (10664) [ 374.683265][T10664] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 374.683918][T10664] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 374.857125][T10664] BTRFS info (device loop5): enabling ssd optimizations [ 374.857166][T10664] BTRFS info (device loop5): turning on async discard [ 374.857196][T10664] BTRFS info (device loop5): enabling free space tree [ 374.857224][T10664] BTRFS info (device loop5): use lzo compression, level 1 [ 374.857258][T10664] BTRFS info (device loop5): max_inline set to 0 [ 374.870674][ T933] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 375.280633][ T933] usb 5-1: Using ep0 maxpacket: 32 [ 375.291628][ T933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.291692][ T933] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 375.291732][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.303791][ T933] usb 5-1: config 0 descriptor?? [ 375.889640][ T933] magicmouse 0003:05AC:0265.0045: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 376.025500][ T5837] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 376.093945][ T933] usb 5-1: USB disconnect, device number 16 [ 376.577907][T10712] fido_id[10712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 377.043634][T10723] loop0: detected capacity change from 0 to 1024 [ 378.172055][T10732] loop3: detected capacity change from 0 to 1024 [ 378.180236][T10732] EXT4-fs: Ignoring removed oldalloc option [ 378.340913][T10732] EXT4-fs: Ignoring removed bh option [ 378.485647][T10732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.593353][T10745] loop2: detected capacity change from 0 to 1024 [ 378.613479][ T933] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 378.728930][T10745] EXT4-fs: Ignoring removed nobh option [ 378.778820][T10745] EXT4-fs: Ignoring removed bh option [ 378.791768][T10732] EXT4-fs error (device loop3): mb_free_blocks:2014: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 378.880938][ T933] usb 2-1: Using ep0 maxpacket: 8 [ 378.891301][T10745] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 378.953247][ T933] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 379.025128][ T933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.092162][T10745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.140954][ T933] usb 2-1: Product: syz [ 379.145161][ T933] usb 2-1: Manufacturer: syz [ 379.208825][ T933] usb 2-1: SerialNumber: syz [ 379.272080][ T933] usb 2-1: config 0 descriptor?? [ 379.335251][ T933] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 379.674814][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.841545][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.999531][ T933] gspca_sonixj: reg_w1 err -71 [ 380.019495][ T933] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 380.091037][ T933] usb 2-1: USB disconnect, device number 17 [ 380.290725][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 380.306354][T10760] loop0: detected capacity change from 0 to 256 [ 380.319273][T10754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 380.391651][T10760] FAT-fs (loop0): Directory bread(block 64) failed [ 380.415454][T10760] FAT-fs (loop0): Directory bread(block 65) failed [ 380.448385][T10760] FAT-fs (loop0): Directory bread(block 66) failed [ 380.478370][T10760] FAT-fs (loop0): Directory bread(block 67) failed [ 380.490757][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 380.508094][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.520985][T10760] FAT-fs (loop0): Directory bread(block 68) failed [ 380.527527][T10760] FAT-fs (loop0): Directory bread(block 69) failed [ 380.565020][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.611977][T10760] FAT-fs (loop0): Directory bread(block 70) failed [ 380.639312][ T43] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 380.663816][T10760] FAT-fs (loop0): Directory bread(block 71) failed [ 380.670499][T10760] FAT-fs (loop0): Directory bread(block 72) failed [ 380.710677][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.749247][T10760] FAT-fs (loop0): Directory bread(block 73) failed [ 380.778602][ T43] usb 5-1: config 0 descriptor?? [ 381.068021][T10764] netlink: 'syz.1.2063': attribute type 23 has an invalid length. [ 381.295395][ T43] hid-multitouch 0003:1FD2:6007.0046: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 381.561398][ T43] usb 5-1: USB disconnect, device number 17 [ 381.787323][T10765] fido_id[10765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 382.795778][T10777] ipvlan2: entered promiscuous mode [ 383.076835][T10781] loop3: detected capacity change from 0 to 512 [ 383.280333][T10781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.377682][T10781] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.661457][T10762] loop5: detected capacity change from 0 to 40427 [ 383.705045][T10762] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 383.752492][T10762] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 383.813912][T10762] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 383.828184][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.398260][T10800] loop3: detected capacity change from 0 to 128 [ 384.489309][T10800] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.543264][T10800] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.670810][ T6011] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 384.701854][T10800] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.2074: No space for directory leaf checksum. Please run e2fsck -D. [ 384.780184][T10800] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.2074: Directory block failed checksum [ 384.905661][ T6011] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 384.940082][ T6011] usb 3-1: config 0 has no interface number 0 [ 384.987786][ T6011] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.073271][ T6011] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 385.152701][ T5831] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.165947][ T6011] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 385.231518][ T6011] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 385.337993][ T6011] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 385.420747][ T6011] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 385.536903][ T6011] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 385.607393][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.702027][ T6011] usb 3-1: config 0 descriptor?? [ 385.732262][T10811] loop0: detected capacity change from 0 to 4096 [ 385.762002][T10802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.769364][T10802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.881541][ T6011] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 386.048118][T10811] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 386.232797][T10811] ntfs3(loop0): Failed to load $Extend (-22). [ 386.238949][T10811] ntfs3(loop0): Failed to initialize $Extend. [ 386.450847][ T933] usb 3-1: USB disconnect, device number 19 [ 386.562579][ T933] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 386.791736][T10821] loop4: detected capacity change from 0 to 4096 [ 386.895300][T10821] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 387.013678][T10821] ntfs3(loop4): failed to replay log file. Can't mount rw! [ 387.427995][T10828] loop3: detected capacity change from 0 to 512 [ 387.632938][T10828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.752360][T10828] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.063806][T10840] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.2089: directory missing '.' [ 388.175171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.182496][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.463660][T10844] loop2: detected capacity change from 0 to 256 [ 388.614760][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.688135][T10839] loop4: detected capacity change from 0 to 8192 [ 388.732049][T10844] FAT-fs (loop2): Directory bread(block 64) failed [ 388.776317][T10844] FAT-fs (loop2): Directory bread(block 65) failed [ 388.849816][T10844] FAT-fs (loop2): Directory bread(block 66) failed [ 388.895511][T10844] FAT-fs (loop2): Directory bread(block 67) failed [ 388.991079][T10844] FAT-fs (loop2): Directory bread(block 68) failed [ 388.997756][T10844] FAT-fs (loop2): Directory bread(block 69) failed [ 389.070781][T10844] FAT-fs (loop2): Directory bread(block 70) failed [ 389.124632][T10844] FAT-fs (loop2): Directory bread(block 71) failed [ 389.185282][T10844] FAT-fs (loop2): Directory bread(block 72) failed [ 389.252953][T10844] FAT-fs (loop2): Directory bread(block 73) failed [ 389.546335][T10853] loop4: detected capacity change from 0 to 1024 [ 389.880922][ T996] hfsplus: b-tree write err: -5, ino 4 [ 390.480804][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 390.712690][ T43] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 390.760725][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.834285][ T43] usb 5-1: config 0 descriptor?? [ 390.913548][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 391.500055][ T43] gp8psk: usb out operation failed. [ 391.523488][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 391.580732][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 391.656510][ T43] usb 5-1: USB disconnect, device number 18 [ 392.470706][ T933] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 392.553507][T10887] loop0: detected capacity change from 0 to 64 [ 392.660651][ T933] usb 4-1: Using ep0 maxpacket: 8 [ 392.722477][ T933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 392.790649][ T933] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 392.836883][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.882225][ T933] usb 4-1: config 0 descriptor?? [ 393.116895][T10865] loop2: detected capacity change from 0 to 32768 [ 393.285802][T10865] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 393.338735][T10900] loop0: detected capacity change from 0 to 512 [ 393.406172][ T933] corsair 0003:1B1C:1B09.0047: unbalanced delimiter at end of report description [ 393.483170][T10900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 393.524803][ T933] corsair 0003:1B1C:1B09.0047: parse failed [ 393.585594][ T933] corsair 0003:1B1C:1B09.0047: probe with driver corsair failed with error -22 [ 393.623703][T10865] XFS (loop2): Ending clean mount [ 393.636848][T10900] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 393.760045][T10865] XFS (loop2): Quotacheck needed: Please wait. [ 393.793269][ T933] usb 4-1: USB disconnect, device number 21 [ 393.880827][T10900] EXT4-fs (loop0): 1 truncate cleaned up [ 393.925991][T10900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.057480][T10865] XFS (loop2): Quotacheck: Done. [ 394.306496][T10900] EXT4-fs warning (device loop0): ext4_block_to_path:105: block 1969368878 > max in inode 18 [ 394.662954][ T5830] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 394.928474][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.318497][T10930] loop0: detected capacity change from 0 to 512 [ 396.635792][T10930] EXT4-fs (loop0): 1 orphan inode deleted [ 396.722982][T10930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.893153][T10930] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.325102][T10945] vlan0: entered promiscuous mode [ 397.448647][T10945] team0: Port device vlan0 added [ 397.567276][ T2978] __quota_error: 4 callbacks suppressed [ 397.567300][ T2978] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 397.720776][ T2978] EXT4-fs error (device loop0): ext4_release_dquot:6979: comm kworker/u8:10: Failed to release dquot type 1 [ 397.950858][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.105406][T10955] vlan2: entered allmulticast mode [ 398.163488][T10955] bond0: entered allmulticast mode [ 398.191962][T10957] loop4: detected capacity change from 0 to 512 [ 398.236955][T10955] bond_slave_0: entered allmulticast mode [ 398.263267][T10955] bond_slave_1: entered allmulticast mode [ 398.273949][T10957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.424724][T10957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.542045][T10957] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.171602][T10975] netlink: 'syz.3.2147': attribute type 10 has an invalid length. [ 399.251598][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2147'. [ 399.317209][T10979] loop0: detected capacity change from 0 to 256 [ 399.326404][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.335652][T10978] bridge_slave_1: left allmulticast mode [ 399.382160][T10978] bridge_slave_1: left promiscuous mode [ 399.416596][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.512011][T10979] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 399.567974][T10978] bridge_slave_0: left allmulticast mode [ 399.621649][T10978] bridge_slave_0: left promiscuous mode [ 399.668088][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.963256][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 400.061235][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 400.390023][T10990] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.2155'. [ 400.470701][T10990] openvswitch: netlink: Duplicate key (type 1). [ 400.683486][T10994] loop2: detected capacity change from 0 to 512 [ 400.878536][T10996] binder: 10995:10996 ioctl 541b 0 returned -22 [ 401.015765][T11000] loop1: detected capacity change from 0 to 256 [ 401.192935][T11000] FAT-fs (loop1): Directory bread(block 64) failed [ 401.260995][T11000] FAT-fs (loop1): Directory bread(block 65) failed [ 401.344822][T11000] FAT-fs (loop1): Directory bread(block 66) failed [ 401.401744][T11000] FAT-fs (loop1): Directory bread(block 67) failed [ 401.408429][T11000] FAT-fs (loop1): Directory bread(block 68) failed [ 401.536277][T11000] FAT-fs (loop1): Directory bread(block 69) failed [ 401.580244][T11000] FAT-fs (loop1): Directory bread(block 70) failed [ 401.643502][T11000] FAT-fs (loop1): Directory bread(block 71) failed [ 401.687003][T11000] FAT-fs (loop1): Directory bread(block 72) failed [ 401.725932][T11000] FAT-fs (loop1): Directory bread(block 73) failed [ 402.149338][T11010] loop5: detected capacity change from 0 to 1024 [ 403.204396][T11018] loop4: detected capacity change from 0 to 164 [ 403.356019][T11018] Unsupported NM flag settings (240) [ 404.331171][T11034] loop0: detected capacity change from 0 to 164 [ 404.346559][T11033] mkiss: ax0: crc mode is auto. [ 404.485778][T11037] loop4: detected capacity change from 0 to 1024 [ 404.682960][T11037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.093636][T11042] loop5: detected capacity change from 0 to 4096 [ 405.230280][T11042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.356335][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.845520][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.607217][T11062] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 406.696399][T11062] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2187'. [ 407.209331][T11069] mkiss: ax0: crc mode is auto. [ 407.514323][T11071] loop5: detected capacity change from 0 to 4096 [ 407.620725][T10422] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 407.750603][T11081] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 407.774183][T11080] loop0: detected capacity change from 0 to 256 [ 407.850987][T10422] usb 5-1: Using ep0 maxpacket: 8 [ 407.917049][T10422] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 408.003759][T11080] FAT-fs (loop0): Directory bread(block 64) failed [ 408.010340][T11080] FAT-fs (loop0): Directory bread(block 65) failed [ 408.031148][T10422] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 408.121651][T11080] FAT-fs (loop0): Directory bread(block 66) failed [ 408.151002][T10422] usb 5-1: config 0 interface 0 has no altsetting 0 [ 408.187393][T11080] FAT-fs (loop0): Directory bread(block 67) failed [ 408.205791][T10422] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 408.220607][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 11 already freed [ 408.241371][T11080] FAT-fs (loop0): Directory bread(block 68) failed [ 408.258523][T10422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.270743][T11080] FAT-fs (loop0): Directory bread(block 69) failed [ 408.307241][T11080] FAT-fs (loop0): Directory bread(block 70) failed [ 408.329498][T11080] FAT-fs (loop0): Directory bread(block 71) failed [ 408.351152][T10422] usb 5-1: config 0 descriptor?? [ 408.365793][T11080] FAT-fs (loop0): Directory bread(block 72) failed [ 408.415179][T11080] FAT-fs (loop0): Directory bread(block 73) failed [ 408.843021][T10422] holtek_mouse 0003:04D9:A0C2.0048: item fetching failed at offset 4/5 [ 408.887943][T10422] holtek_mouse 0003:04D9:A0C2.0048: hid parse failed: -22 [ 408.930707][T10422] holtek_mouse 0003:04D9:A0C2.0048: probe with driver holtek_mouse failed with error -22 [ 409.018603][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 409.031960][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 409.053474][T11089] netlink: 'syz.1.2200': attribute type 15 has an invalid length. [ 409.073670][T11089] netlink: 'syz.1.2200': attribute type 18 has an invalid length. [ 409.087018][T10422] usb 5-1: USB disconnect, device number 19 [ 416.862023][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 416.941039][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 417.073274][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 417.332132][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 417.418852][ T5837] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 417.550307][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2201'. [ 418.093145][T11120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2213'. [ 418.159286][T11119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2213'. [ 418.387473][T11125] loop3: detected capacity change from 0 to 1024 [ 418.620912][T11125] [ 418.623277][T11125] ====================================================== [ 418.630295][T11125] WARNING: possible circular locking dependency detected [ 418.637315][T11125] syzkaller #0 Not tainted [ 418.641731][T11125] ------------------------------------------------------ [ 418.648749][T11125] syz.3.2215/11125 is trying to acquire lock: [ 418.654814][T11125] ffff8880581c73c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1ca/0x12b0 [ 418.665928][T11125] [ 418.665928][T11125] but task is already holding lock: [ 418.673291][T11125] ffff8880472f80b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x186/0x2d0 [ 418.683034][T11125] [ 418.683034][T11125] which lock already depends on the new lock. [ 418.683034][T11125] [ 418.693432][T11125] [ 418.693432][T11125] the existing dependency chain (in reverse order) is: [ 418.702440][T11125] [ 418.702440][T11125] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 418.710401][T11125] __mutex_lock+0x193/0x1060 [ 418.715531][T11125] hfsplus_find_init+0x186/0x2d0 [ 418.721028][T11125] hfsplus_ext_read_extent+0x18e/0x250 [ 418.727033][T11125] hfsplus_file_extend+0x73e/0x12b0 [ 418.732777][T11125] hfsplus_get_block+0x1a9/0xaa0 [ 418.738259][T11125] __block_write_begin_int+0x4f4/0x16d0 [ 418.744346][T11125] block_write_begin+0x9a/0x1d0 [ 418.749730][T11125] cont_write_begin+0x61a/0x950 [ 418.755118][T11125] hfsplus_write_begin+0x64/0x120 [ 418.760682][T11125] cont_write_begin+0x34f/0x950 [ 418.766067][T11125] hfsplus_write_begin+0x64/0x120 [ 418.771630][T11125] generic_cont_expand_simple+0x122/0x200 [ 418.777898][T11125] hfsplus_setattr+0x250/0x320 [ 418.783200][T11125] notify_change+0x6d2/0x12a0 [ 418.788410][T11125] do_truncate+0x1d7/0x230 [ 418.793383][T11125] vfs_truncate+0x5d6/0x6e0 [ 418.798450][T11125] __x64_sys_truncate+0x172/0x1e0 [ 418.804023][T11125] do_syscall_64+0xcd/0xfa0 [ 418.809065][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.815504][T11125] [ 418.815504][T11125] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 418.824579][T11125] __lock_acquire+0x126f/0x1c90 [ 418.829977][T11125] lock_acquire+0x179/0x350 [ 418.835023][T11125] __mutex_lock+0x193/0x1060 [ 418.840147][T11125] hfsplus_file_extend+0x1ca/0x12b0 [ 418.845888][T11125] hfsplus_bmap_reserve+0x31f/0x420 [ 418.851637][T11125] __hfsplus_ext_write_extent+0x474/0x5e0 [ 418.857897][T11125] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 418.864071][T11125] hfsplus_file_truncate+0x44d/0xcb0 [ 418.869900][T11125] hfsplus_setattr+0x19f/0x320 [ 418.875206][T11125] notify_change+0x6d2/0x12a0 [ 418.880414][T11125] do_truncate+0x1d7/0x230 [ 418.885375][T11125] vfs_truncate+0x5d6/0x6e0 [ 418.890414][T11125] __x64_sys_truncate+0x172/0x1e0 [ 418.895983][T11125] do_syscall_64+0xcd/0xfa0 [ 418.901019][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.907448][T11125] [ 418.907448][T11125] other info that might help us debug this: [ 418.907448][T11125] [ 418.917677][T11125] Possible unsafe locking scenario: [ 418.917677][T11125] [ 418.925122][T11125] CPU0 CPU1 [ 418.930479][T11125] ---- ---- [ 418.935845][T11125] lock(&tree->tree_lock/1); [ 418.940555][T11125] lock(&HFSPLUS_I(inode)->extents_lock); [ 418.948894][T11125] lock(&tree->tree_lock/1); [ 418.956117][T11125] lock(&HFSPLUS_I(inode)->extents_lock); [ 418.961940][T11125] [ 418.961940][T11125] *** DEADLOCK *** [ 418.961940][T11125] [ 418.970077][T11125] 4 locks held by syz.3.2215/11125: [ 418.975275][T11125] #0: ffff88807a358420 (sb_writers#12){.+.+}-{0:0}, at: vfs_truncate+0x336/0x6e0 [ 418.984578][T11125] #1: ffff8880581c3238 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: do_truncate+0x146/0x230 [ 418.995015][T11125] #2: ffff8880581c3048 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x211/0xcb0 [ 419.005532][T11125] #3: ffff8880472f80b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x186/0x2d0 [ 419.015719][T11125] [ 419.015719][T11125] stack backtrace: [ 419.021612][T11125] CPU: 0 UID: 0 PID: 11125 Comm: syz.3.2215 Not tainted syzkaller #0 PREEMPT(full) [ 419.021659][T11125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.021682][T11125] Call Trace: [ 419.021693][T11125] [ 419.021707][T11125] dump_stack_lvl+0x116/0x1f0 [ 419.021770][T11125] print_circular_bug+0x275/0x350 [ 419.021820][T11125] check_noncircular+0x14c/0x170 [ 419.021871][T11125] __lock_acquire+0x126f/0x1c90 [ 419.021923][T11125] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.021970][T11125] lock_acquire+0x179/0x350 [ 419.022016][T11125] ? hfsplus_file_extend+0x1ca/0x12b0 [ 419.022063][T11125] ? __pfx___might_resched+0x10/0x10 [ 419.022101][T11125] ? hfsplus_file_extend+0x1ca/0x12b0 [ 419.022145][T11125] __mutex_lock+0x193/0x1060 [ 419.022181][T11125] ? hfsplus_file_extend+0x1ca/0x12b0 [ 419.022228][T11125] ? check_path.constprop.0+0x24/0x50 [ 419.022271][T11125] ? __pfx___mutex_lock+0x10/0x10 [ 419.022314][T11125] ? __lock_acquire+0x1053/0x1c90 [ 419.022368][T11125] ? hfsplus_file_extend+0x1ca/0x12b0 [ 419.022411][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.022456][T11125] hfsplus_file_extend+0x1ca/0x12b0 [ 419.022509][T11125] ? __pfx___mutex_trylock_common+0x10/0x10 [ 419.022560][T11125] ? __pfx___might_resched+0x10/0x10 [ 419.022594][T11125] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 419.022638][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.022683][T11125] ? rcu_is_watching+0x12/0xc0 [ 419.022718][T11125] ? trace_contention_end+0xdd/0x130 [ 419.022767][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.022811][T11125] ? __mutex_lock+0x1c5/0x1060 [ 419.022846][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.022890][T11125] ? hfsplus_brec_find+0x4e6/0x660 [ 419.022948][T11125] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 419.023011][T11125] hfsplus_bmap_reserve+0x31f/0x420 [ 419.023068][T11125] __hfsplus_ext_write_extent+0x474/0x5e0 [ 419.023112][T11125] ? hfsplus_find_init+0x97/0x2d0 [ 419.023172][T11125] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 419.023217][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023265][T11125] hfsplus_file_truncate+0x44d/0xcb0 [ 419.023310][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023354][T11125] ? __up_read+0x1f8/0x750 [ 419.023410][T11125] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 419.023460][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023516][T11125] ? inode_newsize_ok+0x13b/0x200 [ 419.023551][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023602][T11125] hfsplus_setattr+0x19f/0x320 [ 419.023642][T11125] ? __pfx_hfsplus_setattr+0x10/0x10 [ 419.023679][T11125] notify_change+0x6d2/0x12a0 [ 419.023720][T11125] do_truncate+0x1d7/0x230 [ 419.023762][T11125] ? __pfx_do_truncate+0x10/0x10 [ 419.023812][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023856][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.023900][T11125] ? mnt_get_write_access+0x1e9/0x2f0 [ 419.023962][T11125] vfs_truncate+0x5d6/0x6e0 [ 419.024005][T11125] ? __pfx_vfs_truncate+0x10/0x10 [ 419.024049][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.024093][T11125] ? putname+0x154/0x1a0 [ 419.024147][T11125] __x64_sys_truncate+0x172/0x1e0 [ 419.024193][T11125] ? __pfx___x64_sys_truncate+0x10/0x10 [ 419.024238][T11125] ? srso_alias_return_thunk+0x5/0xfbef5 [ 419.024289][T11125] do_syscall_64+0xcd/0xfa0 [ 419.024325][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.024363][T11125] RIP: 0033:0x7f2e3f98efc9 [ 419.024390][T11125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.024428][T11125] RSP: 002b:00007f2e40807038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 419.024462][T11125] RAX: ffffffffffffffda RBX: 00007f2e3fbe5fa0 RCX: 00007f2e3f98efc9 [ 419.024494][T11125] RDX: 0000000000000000 RSI: 000000000000fbb0 RDI: 0000200000000000 [ 419.024518][T11125] RBP: 00007f2e3fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.024542][T11125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.024564][T11125] R13: 00007f2e3fbe6038 R14: 00007f2e3fbe5fa0 R15: 00007ffd38d858c8 [ 419.024604][T11125] [ 421.955399][T10422] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 12 already freed