last executing test programs: 3m16.288791297s ago: executing program 2 (id=1515): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)='M', 0x1}], 0x1, &(0x7f0000008f80)=ANY=[@ANYBLOB="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"], 0x478}}], 0x1, 0x40) 3m16.032324805s ago: executing program 2 (id=1517): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 3m15.74323737s ago: executing program 2 (id=1520): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x80000001) 3m15.500000757s ago: executing program 2 (id=1524): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m14.873558501s ago: executing program 2 (id=1530): creat(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_rdma(&(0x7f00000027c0), &(0x7f0000002800)='./file0\x00', &(0x7f0000002840), 0x4400, &(0x7f0000002880)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x10001}}]}}) 3m13.878929637s ago: executing program 2 (id=1542): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f00000000c0)=0x800, 0x4) 3m13.303691468s ago: executing program 32 (id=1542): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f00000000c0)=0x800, 0x4) 6.268555309s ago: executing program 6 (id=3934): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x0) 5.944861292s ago: executing program 6 (id=3938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 5.792655984s ago: executing program 1 (id=3940): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.926401838s ago: executing program 6 (id=3952): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0xcb}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x45, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0xfffffff7, 0x6, 0x7, 0x4c, 0x1, 0x80, 0x8, 0xa, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x10, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xefa, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x801, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x8, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x5, 0x2, 0x3, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0xe32, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000fc4c2608fd0b24019f3a010203010902240001000000000904000002c55bef000905ad1e0000000000090502"], 0x0) 3.694017293s ago: executing program 1 (id=3957): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000065c0)={0xe0, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xd0, 0x8d, 0x0, 0x1, [@nested={0xca, 0xa6, 0x0, 0x1, [@generic="30c93588b33a73351d6306804bbca9af01552c4063782990544119418a4fb6cb31fc348944931d05c4935e65da048f5bdad4d9fe1d40a2613e435748f5a05d07196e3f4733a6d79ce78e5dcc675fdaf3531bad7641432f3aea8a8bbd847022ed8030870c10a64b3881a17d1ffdf36ee6087bf52be86199ce887c27a93415a55db9213cb6eab522f03207e17cd8370beeca4c78feb958a43cf67df9d2562cd498e1bb321b2c1d8bdf8f0023209e03ec0dadbb71728bcf32d94bc3f03f3d7e29b551c739cb0953"]}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 3.378447246s ago: executing program 1 (id=3963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 3.122505137s ago: executing program 1 (id=3966): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 3.006681965s ago: executing program 4 (id=3968): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x808, &(0x7f00000000c0)=ANY=[], 0xff, 0x1aa, &(0x7f00000001c0)="$eJzsVb9v00AU/s652AkDMCMkBhAkA4njAGKDCeUPYEZYxoQoDj/iSJAoQ5jyf7DkH2FhR+rQqks6VJU6pHt11d29c51KrVqlVdPqPin53q/P7z1ZvvuS/kg9AIeLcYS3UCjgLjYZAwfwiOnYO0/znqu5Rv4u11yl+B/iLeJ0OOqGSRL3Txrs9NRFjRX1Hi5pjis2Ppyv2FlhHfky12DTW27QJ4NuyM/6Qq7P+PcfWIMxVjeO3Te/Heyrs2xjMY6k8RGAEEIA5n2A5WsKAP5mNcADrn6sAJHVSKV0ngGoD3rf6+lw9LzTC9txO/4aBM1X/gvffxnUP3eS2Nf/TLVwAIwjh/pKrgKQZ2o5N0IRwHZZ19zBMlhuNMqzvNbNHc6Vx8tah/FMa7hEOan1TAMA7/FU5X5OmCAA4h5Vq5VaYMw4DZ6bT+9WUola9C35NAWDvFeEB/gzcDjgWjZH0ThSmjlx8/XEjD0lfkLcIp4Rz4nNnWXuIq6esENeZQK4+BUOBv2GDGkriwVZLLifdXao64G7vNxDDxYWFhYWFhYWNwxHAQAA//8Utlwo") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.847565325s ago: executing program 1 (id=3970): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.67916242s ago: executing program 4 (id=3972): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000140)='./file1\x00', 0x4400, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES8, @ANYRESHEX], 0x1, 0xa30, &(0x7f0000000a80)="$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") creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) 2.562058537s ago: executing program 1 (id=3974): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@autodefrag}, {@nossd}, {@nossd_spread}, {@usebackuproot}, {@noacl}, {@space_cache}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@datacow}, {@ssd_spread}]}, 0x9, 0x559d, &(0x7f000000ac40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x22520a2, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 2.407152915s ago: executing program 5 (id=3975): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_lifetime={0x4, 0x3, 0x7, 0x4ab, 0xfffffffffffffff8, 0xff}]}, 0x78}, 0x1, 0x7}, 0x40) 2.276750246s ago: executing program 4 (id=3978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x21}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000144}, 0x44080) 2.173514259s ago: executing program 5 (id=3979): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=") open(&(0x7f000000ab00)='.\x02\x00', 0x143142, 0x88) 1.989945354s ago: executing program 6 (id=3982): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x20, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xb, 0x18, 0x0, 0x0, @str='default'}]}, 0x20}}, 0x84) 1.946793731s ago: executing program 4 (id=3983): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 1.761776242s ago: executing program 6 (id=3984): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000040)={[{@minixdf}, {@nolazytime}, {@noblock_validity}]}, 0x1, 0x538, &(0x7f0000000600)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.699084298s ago: executing program 3 (id=3986): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1.511278338s ago: executing program 4 (id=3987): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000000)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@bh}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40400, 0xd) 1.391567532s ago: executing program 5 (id=3988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768812003308020300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) 1.258542496s ago: executing program 0 (id=3990): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) 1.181065234s ago: executing program 3 (id=3991): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000), 0x4) 1.163011586s ago: executing program 0 (id=3992): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x12, 0x905, 0x70bd26, 0x25dfdbfe, {0x21, 0x9, 0xb, 0x0, {0x4e22, 0x4e26, [0xfffffffc, 0x923, 0x0, 0x4006], [0x401, 0x4, 0x3, 0x2], 0x0, [0x30000, 0x2005]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0790331702609c95282c1cf8402e6eb7"}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 1.114818203s ago: executing program 6 (id=3993): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x2004004, &(0x7f0000000040)=ANY=[], 0x5, 0x5f45, &(0x7f000000c440)="$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") lsetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@random={'os2.', 'user.incfs.metadata\x00'}, 0x0, 0x0, 0x3) 1.071055777s ago: executing program 5 (id=3994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 984.736755ms ago: executing program 3 (id=3995): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_unlink(0x0) 773.425074ms ago: executing program 3 (id=3996): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80108906, 0x0) 772.643388ms ago: executing program 0 (id=3997): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x6, 0x0) 611.935804ms ago: executing program 4 (id=3998): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x7fff7ffc}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000) 537.996787ms ago: executing program 5 (id=3999): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0xffffffff, 0x0, 0x20, 0x20}) 487.675997ms ago: executing program 0 (id=4000): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@type={'type', 0x3d, "6c588757"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@nobarrier}, {@nobarrier}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 487.000058ms ago: executing program 3 (id=4001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 350.439632ms ago: executing program 0 (id=4002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002c427"], 0x38}}, 0x0) 169.906199ms ago: executing program 3 (id=4003): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b326d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) 41.568438ms ago: executing program 5 (id=4004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) 0s ago: executing program 0 (id=4005): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzs279qU1EABvAvNmrVIRmcxOGCi1NI+gQWqSAGBCWDgqDYFqRXChYCOthuLj6Ez9QncewgHGlv6Z+QDg71QvL7Lfng5INzhnvPPRfu+4efdzZ397aH7w6z2umk+yRVjjrp50ZW0jgIALBIjkrJ71JKuX2QO79SSml7RgDAdbP/A8Dysf8DwPKx/wPA8nn95u2L9fF441VVrSb1j+lkOml+m/H17XxKna0M08ufHD8gnGrys+fjjWF1op+f9f5pf386WbncH6WX/vz+qOlXl/s3c/dify293J/fX5vbv5XHjy70B+nl8GN2U2czx93z/vdRVT19OZ7p3zv5HwAAACyCQXVm7vl9MLhqvOn/w/uBmfN1Nw+67a4dAJbV3tdvOx/qeuuLIAjCWWj7zgRct/OLvu2ZAAAAAAAAAAAAAAAAV/kfnxO1vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY9TcAAP//xBqwEw==") chmod(&(0x7f0000000180)='./file0\x00', 0x140) kernel console output (not intermixed with test programs): 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 295.447952][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2656'. [ 295.500761][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2653'. [ 295.664225][T12125] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 295.729346][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2656'. [ 295.917095][ T30] audit: type=1326 audit(1753814026.341:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12131 comm="syz.1.2665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x0 [ 296.091438][T12133] loop4: detected capacity change from 0 to 4096 [ 296.187659][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 296.211014][T12146] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.219917][T12143] netlink: 'syz.1.2669': attribute type 5 has an invalid length. [ 296.275086][T12133] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 296.306524][T12149] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136) [ 296.332653][T12133] Remounting filesystem read-only [ 296.347953][T12149] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 296.830526][T12162] loop5: detected capacity change from 0 to 736 [ 296.991117][T12162] rock: directory entry would overflow storage [ 296.997458][T12162] rock: sig=0x3b10, size=4, remaining=3 [ 297.200687][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 297.381881][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 297.389248][ T43] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.421530][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.461740][ T43] usb 7-1: config 0 descriptor?? [ 297.471200][ T5911] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 297.498764][ T43] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 297.499295][T12178] loop5: detected capacity change from 0 to 4096 [ 297.515523][T12182] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 297.603481][T12178] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 297.686397][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.713563][ T5911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.764442][ T5911] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.819479][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 297.873756][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 297.893333][ T43] gspca_nw80x: reg_r err -71 [ 297.908401][ T5911] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.920790][ T43] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 297.965027][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.975231][ T43] usb 7-1: USB disconnect, device number 4 [ 298.005393][T12174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 298.045899][ T5911] hub 5-1:1.0: bad descriptor, ignoring hub [ 298.090986][ T5911] hub 5-1:1.0: probe with driver hub failed with error -5 [ 298.098700][ T5911] cdc_wdm 5-1:1.0: skipping garbage [ 298.164119][ T5911] cdc_wdm 5-1:1.0: skipping garbage [ 298.231103][ T5911] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 298.237061][ T5911] cdc_wdm 5-1:1.0: Unknown control protocol [ 298.340851][ T5911] usb 5-1: USB disconnect, device number 6 [ 298.391085][ T6022] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 298.427005][T12202] ip6tnl1: entered promiscuous mode [ 298.495620][T12206] loop5: detected capacity change from 0 to 8 [ 298.564146][ T6022] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 298.598238][ T6022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.637833][ T6022] usb 4-1: config 0 descriptor?? [ 298.652912][ T30] audit: type=1800 audit(1753814029.081:1423): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2699" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 298.887223][ T6022] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 299.042761][T12212] loop6: detected capacity change from 0 to 4096 [ 299.111045][ T6022] [drm:udl_init] *ERROR* Selecting channel failed [ 299.149373][T12220] QAT: failed to copy from user cfg_data. [ 299.188019][ T6022] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 299.231773][ T6022] [drm] Initialized udl on minor 2 [ 299.259133][ T6022] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 299.304758][ T6022] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 299.323300][ T5911] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 299.381581][ T6022] usb 4-1: USB disconnect, device number 13 [ 299.389073][ T5911] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 299.441763][ T5911] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 299.557709][T12227] loop4: detected capacity change from 0 to 1024 [ 299.761229][T12204] loop1: detected capacity change from 0 to 32768 [ 299.790502][T12204] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES [ 299.840843][T12204] bcachefs: bch2_fs_get_tree() error: EACCES [ 299.860857][ T36] hfsplus: b-tree write err: -5, ino 4 [ 300.500441][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2724'. [ 300.620893][ T2146] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 300.771369][ T2146] usb 5-1: Using ep0 maxpacket: 32 [ 300.793888][ T2146] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 300.829032][ T2146] usb 5-1: config 0 has no interface number 0 [ 300.840834][ T2146] usb 5-1: config 0 interface 146 has no altsetting 0 [ 300.861718][ T2146] usb 5-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=8d.92 [ 300.880678][ T2146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.891115][ T2146] usb 5-1: Product: syz [ 300.895325][ T2146] usb 5-1: Manufacturer: syz [ 300.930374][ T2146] usb 5-1: SerialNumber: syz [ 300.961906][ T2146] usb 5-1: config 0 descriptor?? [ 300.989234][ T2146] f81232 5-1:0.146: f81534a converter detected [ 301.010791][ T6022] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 301.213732][ T6022] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 301.214560][ T2146] usb 5-1: f81534a converter now attached to ttyUSB0 [ 301.225463][ T6022] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.297226][ T6022] usb 2-1: config 0 descriptor?? [ 301.342300][T12278] xt_connbytes: Forcing CT accounting to be enabled [ 301.472851][ T2146] usb 5-1: USB disconnect, device number 7 [ 301.479231][T12285] netlink: 'syz.3.2738': attribute type 12 has an invalid length. [ 301.507003][ T2146] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 301.532003][ T6022] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 301.555572][ T2146] f81232 5-1:0.146: device disconnected [ 301.609659][T12289] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2739'. [ 301.732548][ T6022] [drm:udl_init] *ERROR* Selecting channel failed [ 301.800294][ T6022] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 301.829581][ T30] audit: type=1326 audit(1753814032.251:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe185b8e9a9 code=0x7ffc0000 [ 301.858103][ T6022] [drm] Initialized udl on minor 2 [ 301.885038][ T6022] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.910408][ T6022] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 301.918818][ T5911] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.922224][ T30] audit: type=1326 audit(1753814032.251:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe185b8e9a9 code=0x7ffc0000 [ 301.970860][ T5911] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.981183][ T6022] usb 2-1: USB disconnect, device number 9 [ 302.000826][ T5911] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 302.073458][ T30] audit: type=1326 audit(1753814032.291:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fe185b8e9a9 code=0x7ffc0000 [ 302.183261][ T30] audit: type=1326 audit(1753814032.291:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe185b8e9a9 code=0x7ffc0000 [ 302.273247][T12267] loop6: detected capacity change from 0 to 40427 [ 302.288355][ T30] audit: type=1326 audit(1753814032.291:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12292 comm="syz.0.2742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe185b8e9a9 code=0x7ffc0000 [ 302.323852][T12267] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9) [ 302.337745][T12267] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 302.392715][T12267] F2FS-fs (loop6): invalid crc value [ 302.467911][T12310] libceph: resolve '400' (ret=-3): failed [ 302.628592][T12320] loop3: detected capacity change from 0 to 764 [ 302.725422][T12320] rock: directory entry would overflow storage [ 302.763299][T12320] rock: sig=0x5245, size=8, remaining=5 [ 302.781058][T12267] F2FS-fs (loop6): Start checkpoint disabled! [ 302.819622][T12267] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 302.870695][T12267] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 303.127346][T12335] loop4: detected capacity change from 0 to 128 [ 303.203605][T12338] vivid-007: ================= START STATUS ================= [ 303.244748][T12338] vivid-007: Enable Output Cropping: true [ 303.291546][T12338] vivid-007: Enable Output Composing: true [ 303.332475][T12338] vivid-007: Enable Output Scaler: true [ 303.338128][T12338] vivid-007: Tx RGB Quantization Range: Automatic [ 303.410551][T12338] vivid-007: Transmit Mode: HDMI [ 303.435611][T12338] vivid-007: Hotplug Present: 0x00000000 [ 303.466859][T12338] vivid-007: RxSense Present: 0x00000000 [ 303.492887][T12338] vivid-007: EDID Present: 0x00000000 [ 303.498317][T12338] vivid-007: ================== END STATUS ================== [ 303.928850][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 303.991438][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 304.090766][T12357] loop0: detected capacity change from 0 to 4096 [ 304.206205][T12367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.546947][T12347] syz.4.2766 (12347): drop_caches: 2 [ 304.559484][T12374] loop0: detected capacity change from 0 to 1024 [ 304.784031][ T12] hfsplus: b-tree write err: -5, ino 4 [ 304.912556][T12378] loop1: detected capacity change from 0 to 4096 [ 305.279352][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 305.282362][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 305.362237][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 305.387410][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 305.510463][T12366] loop5: detected capacity change from 0 to 32768 [ 305.557482][T12366] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2775 (12366) [ 305.652681][T12366] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 305.697800][T12406] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 305.726251][T12366] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 305.784833][T12366] BTRFS info (device loop5): disk space caching is enabled [ 305.828966][T12366] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 306.051982][T12404] loop4: detected capacity change from 0 to 4096 [ 306.061241][T12404] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 306.118837][T12366] BTRFS info (device loop5): rebuilding free space tree [ 306.263200][T12404] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 306.297109][T12366] BTRFS info (device loop5): disabling free space tree [ 306.304681][T12366] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 306.310282][T12404] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 306.324576][T12366] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 306.542841][T12366] BTRFS error (device loop5): balance: mixed groups data and metadata options must be the same [ 306.681689][ T6022] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 306.782102][ T5850] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 306.902588][ T6022] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.920738][ T6022] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.982072][ T6022] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 307.026529][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.070725][ T6022] usb 7-1: SerialNumber: syz [ 307.105739][ T6022] usb 7-1: 0:2 : does not exist [ 307.277848][T12453] loop4: detected capacity change from 0 to 4096 [ 307.307605][T12458] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 307.336705][T12453] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 307.468365][T12453] ntfs3(loop4): ino=1a, mi_enum_attr [ 307.507850][T12453] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 307.535464][T12453] ntfs3(loop4): ino=1a, mi_enum_attr [ 307.570501][T12453] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 307.594901][T12453] ntfs3(loop4): ino=5, "/" indx_read [ 307.599824][ T5927] usb 7-1: USB disconnect, device number 5 [ 307.972724][T12438] loop1: detected capacity change from 0 to 32768 [ 307.997950][T12438] XFS: ikeep mount option is deprecated. [ 308.179051][T12472] loop0: detected capacity change from 0 to 4096 [ 308.227073][T12472] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 308.643280][ T30] audit: type=1326 audit(1753814039.061:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.3.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 308.680818][ T5911] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 308.761023][ T30] audit: type=1326 audit(1753814039.061:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.3.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 308.820826][ T30] audit: type=1326 audit(1753814039.091:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.3.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 308.845946][ T30] audit: type=1326 audit(1753814039.091:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.3.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 308.870759][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 308.879610][ T30] audit: type=1326 audit(1753814039.091:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12489 comm="syz.3.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 308.911511][ T5911] usb 7-1: unable to get BOS descriptor or descriptor too short [ 308.961096][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 309.024569][ T5911] usb 7-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 309.083628][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.110889][ T5911] usb 7-1: Product: syz [ 309.140223][ T5911] usb 7-1: Manufacturer: syz [ 309.145986][ T5911] usb 7-1: SerialNumber: syz [ 309.168764][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'. [ 309.192292][ T5911] usb 7-1: config 0 descriptor?? [ 309.444720][ T5911] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input14 [ 309.684970][ T5911] usb 7-1: USB disconnect, device number 6 [ 309.959269][T12527] netlink: 'syz.0.2845': attribute type 1 has an invalid length. [ 310.085572][T12529] loop3: detected capacity change from 0 to 256 [ 310.194417][T12529] FAT-fs (loop3): Directory bread(block 64) failed [ 310.227349][T12529] FAT-fs (loop3): Directory bread(block 65) failed [ 310.254601][T12529] FAT-fs (loop3): Directory bread(block 66) failed [ 310.275897][T12529] FAT-fs (loop3): Directory bread(block 67) failed [ 310.300849][T12498] loop4: detected capacity change from 0 to 32768 [ 310.331210][T12529] FAT-fs (loop3): Directory bread(block 68) failed [ 310.370878][T12529] FAT-fs (loop3): Directory bread(block 69) failed [ 310.377534][T12529] FAT-fs (loop3): Directory bread(block 70) failed [ 310.435036][T12529] FAT-fs (loop3): Directory bread(block 71) failed [ 310.460817][T12529] FAT-fs (loop3): Directory bread(block 72) failed [ 310.495235][T12529] FAT-fs (loop3): Directory bread(block 73) failed [ 311.040888][T12552] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 311.134993][T12523] loop1: detected capacity change from 0 to 32768 [ 311.170917][T12523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2843 (12523) [ 311.252676][T12523] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13 [ 311.407479][ T30] audit: type=1326 audit(1753814041.831:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 311.525117][ T30] audit: type=1326 audit(1753814041.881:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 311.685196][ T30] audit: type=1326 audit(1753814041.881:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 311.750854][T12571] trusted_key: encrypted_key: hex blob is missing [ 311.808501][ T30] audit: type=1326 audit(1753814041.881:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 312.707868][T12559] loop0: detected capacity change from 0 to 32768 [ 312.811138][T12559] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2860 (12559) [ 312.960739][T12559] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.996137][T12559] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 313.010567][T12555] loop6: detected capacity change from 0 to 40427 [ 313.054658][T12559] BTRFS info (device loop0): using free-space-tree [ 313.133183][T12555] F2FS-fs (loop6): build fault injection rate: 690 [ 313.196938][T12555] F2FS-fs (loop6): invalid crc value [ 313.362436][T12559] BTRFS info (device loop0): rebuilding free space tree [ 313.521364][T12575] loop5: detected capacity change from 0 to 32768 [ 313.626297][T12555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 313.860456][ T5845] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.060811][ T6022] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 315.076312][T12619] loop4: detected capacity change from 0 to 32768 [ 315.179155][T12619] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 315.230393][T12619] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 315.250751][ T6022] usb 6-1: Using ep0 maxpacket: 8 [ 315.250947][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 315.261527][ T6022] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 315.284544][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.292750][ T6022] usb 6-1: Product: syz [ 315.297437][ T6022] usb 6-1: Manufacturer: syz [ 315.302130][ T6022] usb 6-1: SerialNumber: syz [ 315.311688][ T6022] usb 6-1: config 0 descriptor?? [ 315.333760][ T6022] usb 6-1: selecting invalid altsetting 3 [ 315.340044][ T6022] comedi comedi5: could not set alternate setting 3 in high speed [ 315.348408][ T6022] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 315.354080][T12619] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 315.386087][ T6022] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 315.420754][T12619] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 315.480699][T12619] OCFS2: File system is now read-only. [ 315.516653][T12619] (syz.4.2880,12619,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 315.550498][T12619] (syz.4.2880,12619,0):ocfs2_search_chain:1940 ERROR: status = -30 [ 315.583395][ T5888] usb 6-1: USB disconnect, device number 11 [ 315.592843][T12619] (syz.4.2880,12619,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 315.634444][T12619] (syz.4.2880,12619,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 315.670970][T12619] (syz.4.2880,12619,0):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 315.716077][T12619] (syz.4.2880,12619,0):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 315.755661][T12619] (syz.4.2880,12619,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 315.803959][T12619] (syz.4.2880,12619,1):ocfs2_mknod:385 ERROR: status = -30 [ 315.834100][T12619] (syz.4.2880,12619,1):ocfs2_mknod:502 ERROR: status = -30 [ 315.887028][T12619] (syz.4.2880,12619,1):ocfs2_create:675 ERROR: status = -30 [ 316.007064][T12670] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2905'. [ 316.046271][ T5841] ocfs2: Unmounting device (7,4) on (node local) [ 316.049953][T12670] netlink: zone id is out of range [ 316.088597][T12670] netlink: get zone limit has 8 unknown bytes [ 316.383858][T12648] loop0: detected capacity change from 0 to 32768 [ 316.458921][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.490413][T12648] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 316.490413][T12648] [ 316.574971][T12648] ERROR: (device loop0): remounting filesystem as read-only [ 316.575751][T12680] loop6: detected capacity change from 0 to 256 [ 316.621537][T12648] jfs_lookup: dtSearch returned -5 [ 316.834170][T12680] FAT-fs (loop6): Directory bread(block 64) failed [ 316.867538][T12680] FAT-fs (loop6): Directory bread(block 65) failed [ 316.900986][T12680] FAT-fs (loop6): Directory bread(block 66) failed [ 316.908976][T12690] netlink: 'syz.5.2915': attribute type 2 has an invalid length. [ 316.930970][T12680] FAT-fs (loop6): Directory bread(block 67) failed [ 316.937610][T12680] FAT-fs (loop6): Directory bread(block 68) failed [ 316.954512][T12690] netlink: 'syz.5.2915': attribute type 1 has an invalid length. [ 317.010931][T12680] FAT-fs (loop6): Directory bread(block 69) failed [ 317.064791][T12680] FAT-fs (loop6): Directory bread(block 70) failed [ 317.110777][T12680] FAT-fs (loop6): Directory bread(block 71) failed [ 317.117404][T12680] FAT-fs (loop6): Directory bread(block 72) failed [ 317.160697][T12680] FAT-fs (loop6): Directory bread(block 73) failed [ 317.400259][T12703] overlayfs: failed to resolve './file0': -2 [ 317.430705][ T6022] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 317.640709][ T6022] usb 5-1: Using ep0 maxpacket: 32 [ 317.656983][ T6022] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.681440][ T6022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 317.728221][ T6022] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 317.772036][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.800723][ T6022] usb 5-1: Product: syz [ 317.804902][ T6022] usb 5-1: Manufacturer: syz [ 317.809504][ T6022] usb 5-1: SerialNumber: syz [ 317.854695][ T6022] usb 5-1: config 0 descriptor?? [ 318.085914][ T6022] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 318.267716][T12732] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2936'. [ 318.325455][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2936'. [ 318.346851][T12732] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2936'. [ 318.361020][ T6022] usb 5-1: USB disconnect, device number 8 [ 319.111339][T12761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.744423][T12742] loop0: detected capacity change from 0 to 32768 [ 319.789775][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2957'. [ 319.807733][T12742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2941 (12742) [ 319.908956][T12742] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.990724][T12742] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm [ 320.000009][T12742] BTRFS info (device loop0 state S): using free-space-tree [ 320.246337][ T1080] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x5afefc99 level 0, ignored [ 320.309382][T12753] loop6: detected capacity change from 0 to 32768 [ 320.311932][ T1106] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x23b2bbff level 0, ignored [ 320.403698][T12810] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 320.440316][ T69] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 320.470928][T12753] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.518397][T12742] BTRFS error (device loop0 state CS): block group 5242880 len 1638400 mismatch with chunk 5242880 len 3298536521728 [ 320.522415][T12772] loop3: detected capacity change from 0 to 32768 [ 320.568222][T12772] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2954 (12772) [ 320.600671][ T6022] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.630187][ T1080] BTRFS warning (device loop0 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0xa0eee3fd level 0, ignored [ 320.678114][T12772] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 320.738526][T12753] XFS (loop6): Ending clean mount [ 320.760770][T12772] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 320.802360][ T6022] usb 2-1: Using ep0 maxpacket: 32 [ 320.830927][T12772] BTRFS info (device loop3): using free-space-tree [ 320.852352][ T6022] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.909910][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 320.935665][ T6022] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 320.942975][ T9397] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.991567][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.007110][ T6022] usb 2-1: Product: syz [ 321.012783][ T6022] usb 2-1: Manufacturer: syz [ 321.017423][ T6022] usb 2-1: SerialNumber: syz [ 321.042330][ T6022] usb 2-1: config 0 descriptor?? [ 321.102955][T12772] BTRFS info (device loop3): rebuilding free space tree [ 321.161762][ T5845] BTRFS info (device loop0 state CS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.315988][ T6022] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 321.537942][ T5844] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.548959][T12848] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 321.605992][ T5888] usb 2-1: USB disconnect, device number 10 [ 321.746414][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 322.387781][T12863] xt_CT: No such helper "snmp_trap" [ 322.489751][T12870] loop1: detected capacity change from 0 to 256 [ 323.080710][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 323.251102][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 323.262713][ T43] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 323.296825][ T43] usb 4-1: config 179 has no interface number 0 [ 323.335796][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 323.395180][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 323.440696][ T2146] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 323.461647][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 323.505596][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 323.557832][ T43] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 323.612151][ T43] usb 4-1: config 179 interface 65 has no altsetting 0 [ 323.633232][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 323.644476][ T43] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 323.669217][T12902] loop6: detected capacity change from 0 to 4096 [ 323.677044][ T2146] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 323.698119][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.709937][T12902] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 323.719633][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 323.775809][ T43] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input17 [ 323.795847][ T2146] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 323.822955][ T2146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.834182][ T2146] usb 5-1: Product: syz [ 323.838404][ T2146] usb 5-1: Manufacturer: syz [ 323.882028][ T5186] input input17: unable to receive magic message: -110 [ 323.885449][ T2146] usb 5-1: SerialNumber: syz [ 323.944190][ T5186] input input17: unable to receive magic message: -32 [ 323.977163][ T2146] usb 5-1: config 0 descriptor?? [ 324.015693][T12894] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.043622][T12894] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.063622][ T5186] input input17: unable to receive magic message: -32 [ 324.097457][ T2146] usb 5-1: ucan: probing device on interface #0 [ 324.204027][ T6022] usb 4-1: USB disconnect, device number 14 [ 324.204077][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 324.329374][ T2146] usb 5-1: ucan: device protocol version 0 is not supported [ 324.375393][ T2146] usb 5-1: ucan: probe failed; try to update the device firmware [ 324.574376][ T6022] usb 5-1: USB disconnect, device number 9 [ 324.717517][T12898] loop5: detected capacity change from 0 to 32768 [ 324.771723][T12898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2996 (12898) [ 324.826406][T12924] netlink: 'syz.0.3009': attribute type 5 has an invalid length. [ 324.881219][T12898] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.898620][T12924] ip6erspan0: entered promiscuous mode [ 324.940808][T12898] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 324.970750][T12898] BTRFS info (device loop5): using free-space-tree [ 325.284585][T12954] loop6: detected capacity change from 0 to 256 [ 325.344458][T12954] exfat: Deprecated parameter 'namecase' [ 325.400098][T12954] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 325.437017][ T5850] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.519462][T12959] loop3: detected capacity change from 0 to 2048 [ 325.571933][T12959] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 325.630205][T12962] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 325.682302][T12959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.700993][T12966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3022'. [ 325.819222][T12969] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 326.262330][T12982] loop3: detected capacity change from 0 to 8 [ 326.447845][ T30] audit: type=1800 audit(1753814056.861:1438): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3028" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 327.220834][T13012] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0 [ 327.309570][T13010] loop3: detected capacity change from 0 to 2048 [ 327.385615][T13010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.461872][T12971] loop5: detected capacity change from 0 to 32768 [ 327.498167][T12971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3020 (12971) [ 327.604624][T12971] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.646936][T12971] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 327.700794][T12971] BTRFS info (device loop5): using free-space-tree [ 327.713958][T13022] loop1: detected capacity change from 0 to 16 [ 327.755878][T13022] erofs (device loop1): mounted with root inode @ nid 36. [ 327.833203][T13022] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 327.929852][T13022] erofs (device loop1): read error -117 @ 43 of nid 36 [ 328.164854][T13005] loop0: detected capacity change from 0 to 32768 [ 328.202245][T13005] XFS: ikeep mount option is deprecated. [ 328.356237][T13005] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 328.538376][ T5850] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.740532][T13005] XFS (loop0): Ending clean mount [ 328.789975][T13005] XFS (loop0): Quotacheck needed: Please wait. [ 328.924236][T13005] XFS (loop0): Quotacheck: Done. [ 329.032417][T13076] xt_TCPMSS: Only works on TCP SYN packets [ 329.301268][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 329.384003][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3065'. [ 329.596006][ T5888] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 329.671418][T13092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3072'. [ 329.756332][ T30] audit: type=1326 audit(1753814060.181:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.1.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 329.822564][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 329.844871][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.860717][ T30] audit: type=1326 audit(1753814060.181:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.1.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 329.891557][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 329.916621][ T5888] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 329.956184][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.964292][ T30] audit: type=1326 audit(1753814060.231:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.1.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 330.020632][ T5888] usb 4-1: Product: syz [ 330.024839][ T5888] usb 4-1: Manufacturer: syz [ 330.059589][ T5888] usb 4-1: SerialNumber: syz [ 330.098023][ T30] audit: type=1326 audit(1753814060.231:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.1.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 330.148483][T13102] loop4: detected capacity change from 0 to 16 [ 330.149277][ T5888] usb 4-1: config 0 descriptor?? [ 330.195187][ T30] audit: type=1326 audit(1753814060.231:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13096 comm="syz.1.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 330.253482][T13102] erofs (device loop4): mounted with root inode @ nid 36. [ 330.271056][T13105] loop1: detected capacity change from 0 to 512 [ 330.384551][ T5888] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 330.553105][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3080'. [ 330.613965][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3080'. [ 330.643820][ T5911] usb 4-1: USB disconnect, device number 15 [ 330.739392][T13119] netlink: 'syz.4.3082': attribute type 13 has an invalid length. [ 330.911148][T13122] loop5: detected capacity change from 0 to 512 [ 330.918190][T13119] gretap0: refused to change device tx_queue_len [ 330.958135][T13119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 330.965072][T13122] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.121786][ T5850] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 331.469564][T13139] netlink: 'syz.5.3090': attribute type 12 has an invalid length. [ 331.489695][T13139] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.3090'. [ 331.655368][T13143] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 331.939308][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 331.971077][ T5911] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 331.992592][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 332.161218][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 332.183564][ T5911] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.222899][ T5911] usb 1-1: config 1 has an invalid interface number: 231 but max is 0 [ 332.249660][ T5911] usb 1-1: config 1 has no interface number 0 [ 332.275841][ T5911] usb 1-1: config 1 interface 231 has no altsetting 0 [ 332.299178][T13160] netlink: 'syz.4.3103': attribute type 5 has an invalid length. [ 332.319455][ T5911] usb 1-1: string descriptor 0 read error: -22 [ 332.333498][ T5911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5 [ 332.390770][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.647257][ T5911] usbtest 1-1:1.231: Linux gadget zero [ 332.660870][ T5911] usbtest 1-1:1.231: high-speed {control in/out int-out} tests (+alt) [ 332.710184][T13135] loop6: detected capacity change from 0 to 32768 [ 332.904197][ T2146] usb 1-1: USB disconnect, device number 10 [ 333.087648][T13177] netlink: 'syz.1.3113': attribute type 10 has an invalid length. [ 333.125434][T13177] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 333.269373][T13135] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 333.269406][T13135] allowing incompatible features above 0.0: (unknown version) [ 333.269421][T13135] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 333.411320][T13135] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 333.459311][T13135] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 333.495891][T13135] bcachefs (loop6): Version upgrade required: [ 333.495891][T13135] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 333.495891][T13135] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 333.495891][T13135] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 333.569037][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.660947][T13135] bcachefs (loop6): dropping and reconstructing all alloc info [ 333.787423][T13135] bcachefs (loop6): accounting_read... [ 333.807910][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 333.826009][T13135] done [ 333.828854][T13135] bcachefs (loop6): alloc_read... done [ 333.860733][T13135] bcachefs (loop6): snapshots_read... done [ 333.880433][T13135] bcachefs (loop6): check_allocations... [ 333.892513][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 334.044457][T13135] done [ 334.065574][T13135] bcachefs (loop6): going read-write [ 334.102922][T13135] bcachefs (loop6): insufficient writeable journal devices available: have 0, need 1 [ 334.102922][T13135] rw journal devs: [ 334.181755][T13135] bcachefs (loop6): done starting filesystem [ 334.234116][T13194] 9pnet_fd: p9_fd_create_tcp (13194): problem connecting socket to 127.0.0.1 [ 334.300721][ T5927] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 334.480781][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 334.499804][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.545626][ T9397] bcachefs (loop6): shutting down [ 334.558962][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 334.560698][ T9397] bcachefs (loop6): going read-only [ 334.605729][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.619005][ T9397] bcachefs (loop6): finished waiting for writes to stop [ 334.665372][ T9397] bcachefs (loop6): flushing journal and stopping allocators, journal seq 10 [ 334.670862][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 334.701658][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.721780][ T5927] usb 2-1: config 0 descriptor?? [ 334.728389][ T9397] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 10 [ 334.759001][ T9397] bcachefs (loop6): unclean shutdown complete, journal seq 10 [ 334.781725][ T5927] hub 2-1:0.0: USB hub found [ 334.799630][ T9397] bcachefs (loop6): done going read-only, filesystem not clean [ 334.846556][ T30] audit: type=1326 audit(1753814065.271:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.3.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 334.946837][ T5927] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 334.948870][ T30] audit: type=1326 audit(1753814065.271:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.3.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 334.977388][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.020858][ T30] audit: type=1326 audit(1753814065.331:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.3.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 335.043273][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.052154][ T30] audit: type=1326 audit(1753814065.331:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.3.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 335.052625][ T9397] bcachefs (loop6): shutdown complete [ 335.074557][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.074754][ T30] audit: type=1326 audit(1753814065.331:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13234 comm="syz.3.3136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 335.108446][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.217414][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 335.224117][T13243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.231406][T13243] IPv6: NLM_F_CREATE should be set when creating new route [ 335.251625][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 335.274847][ T30] audit: type=1326 audit(1753814065.601:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2359f8e9a9 code=0x7ffc0000 [ 335.332152][ T5927] usb 2-1: USB disconnect, device number 11 [ 335.355647][ T30] audit: type=1326 audit(1753814065.601:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2359f8e9a9 code=0x7ffc0000 [ 335.378057][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.489445][ T30] audit: type=1326 audit(1753814065.631:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f2359f8e9a9 code=0x7ffc0000 [ 335.499247][T13246] IPv6: Can't replace route, no match found [ 335.511939][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.565788][T13248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3143'. [ 335.589715][ T30] audit: type=1326 audit(1753814065.631:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2359f8e9a9 code=0x7ffc0000 [ 335.612179][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.652163][ T30] audit: type=1326 audit(1753814065.631:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13238 comm="syz.4.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2359f8e9a9 code=0x7ffc0000 [ 335.674602][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.731561][T13231] loop0: detected capacity change from 0 to 32768 [ 335.742207][T13231] XFS: attr2 mount option is deprecated. [ 335.947282][T13231] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 335.967466][T13231] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 336.096407][T13231] XFS (loop0): Ending clean mount [ 336.323854][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.350752][T13302] kernel profiling enabled (shift: 17) [ 337.420854][T13304] loop3: detected capacity change from 0 to 1764 [ 337.492362][T13304] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 337.778207][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 338.023639][T13326] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 338.054009][T13328] loop1: detected capacity change from 0 to 256 [ 338.140937][T13331] unsupported nla_type 52263 [ 338.190009][T13334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3182'. [ 338.837581][T13354] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 339.098467][T13364] loop6: detected capacity change from 0 to 2048 [ 339.149474][T13364] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.238984][T13371] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.308160][T13364] syz.6.3196: attempt to access beyond end of device [ 339.308160][T13364] loop6: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 339.333851][T13364] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=1) [ 339.707177][T13387] loop3: detected capacity change from 0 to 128 [ 339.840786][ T2146] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 340.033734][ T2146] usb 6-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.058935][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 340.080733][T13399] netlink: 'syz.4.3214': attribute type 10 has an invalid length. [ 340.088096][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3213'. [ 340.103969][ T2146] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.160631][ T2146] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.171193][T13399] veth0_macvtap: left promiscuous mode [ 340.203632][ T2146] usb 6-1: config 0 interface 0 has no altsetting 0 [ 340.212507][T13399] batman_adv: batadv0: Adding interface: macvtap0 [ 340.232081][ T2146] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 340.255953][T13399] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.300677][ T2146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.318748][ T2146] usb 6-1: Product: syz [ 340.328824][ T2146] usb 6-1: Manufacturer: syz [ 340.334140][T13399] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 340.350821][ T2146] usb 6-1: SerialNumber: syz [ 340.366051][ T2146] usb 6-1: config 0 descriptor?? [ 340.611429][ T2146] usbtest 6-1:0.0: Linux user mode ISO test driver [ 340.617999][ T2146] usbtest 6-1:0.0: high-speed {control iso-in} tests (+alt) [ 340.863834][ T2146] usb 6-1: USB disconnect, device number 12 [ 340.903421][T13421] loop3: detected capacity change from 0 to 8 [ 340.981189][T13421] SQUASHFS error: Failed to read block 0x1ec: -5 [ 341.020970][T13421] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 341.040738][T13392] loop6: detected capacity change from 0 to 32768 [ 341.087779][T13392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3208 (13392) [ 341.134777][T13392] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 341.196494][T13392] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 341.249728][T13392] BTRFS info (device loop6): using free-space-tree [ 341.443970][T13443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3228'. [ 341.542620][T13447] loop0: detected capacity change from 0 to 16 [ 341.625574][T13447] erofs (device loop0): mounted with root inode @ nid 36. [ 342.347751][ T9397] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.438328][T13417] loop4: detected capacity change from 0 to 32768 [ 342.453289][T13417] XFS: ikeep mount option is deprecated. [ 342.541076][T13417] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 342.684053][T13472] netlink: 'syz.0.3240': attribute type 1 has an invalid length. [ 342.915604][T13479] loop1: detected capacity change from 0 to 512 [ 342.951530][T13479] EXT4-fs: Ignoring removed bh option [ 342.957060][T13417] XFS (loop4): Ending clean mount [ 343.001596][T13417] XFS (loop4): Quotacheck needed: Please wait. [ 343.145627][T13417] XFS (loop4): Quotacheck: Done. [ 343.425901][ T5841] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 343.479874][T13498] loop6: detected capacity change from 0 to 128 [ 343.583383][T13498] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.630742][T13498] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 343.680739][T13498] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 7 (only 1 groups) [ 343.837436][ T9397] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.346703][T13529] loop6: detected capacity change from 0 to 512 [ 344.433820][ T6021] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 344.460475][T13529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.480886][T13535] netlink: 'syz.5.3266': attribute type 11 has an invalid length. [ 344.528142][T13529] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.565979][T13541] loop0: detected capacity change from 0 to 512 [ 344.586177][T13529] Quota error (device loop6): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 344.619804][T13541] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 3: comm syz.0.3269: lblock 0 mapped to illegal pblock 3 (length 1) [ 344.622713][ T6021] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.635261][T13529] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 344.670941][T13529] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3264: Failed to acquire dquot type 0 [ 344.720352][T13541] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.3269: error -117 reading directory block [ 344.735259][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.785976][ T6021] usb 2-1: config 0 descriptor?? [ 344.801299][T13541] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 344.804127][ T6021] cp210x 2-1:0.0: cp210x converter detected [ 344.873751][T13541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.001962][ T9397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.078361][T13541] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.3269: Abort forced by user [ 345.156295][T13541] EXT4-fs (loop0): Remounting filesystem read-only [ 345.212889][T13541] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 345.243532][ T6021] usb 2-1: cp210x converter now attached to ttyUSB0 [ 345.294665][ T6021] usb 2-1: USB disconnect, device number 12 [ 345.336445][ T6021] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 345.361764][ T6021] cp210x 2-1:0.0: device disconnected [ 345.414892][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.535427][ T5927] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 345.650178][T13570] loop3: detected capacity change from 0 to 256 [ 345.651801][T13568] xt_socket: unknown flags 0x8 [ 345.653061][T13571] loop4: detected capacity change from 0 to 8 [ 345.697038][T13570] exfat: Deprecated parameter 'utf8' [ 345.711381][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 345.747956][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 345.798566][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.837320][ T5927] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.857560][T13570] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 345.910681][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 345.955582][ T5927] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 346.005573][ T5927] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 346.065150][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.108605][ T5927] usb 7-1: config 0 descriptor?? [ 346.139178][T13557] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 346.279919][T13587] Unknown options in mask 5 [ 346.397462][ T6022] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 346.442533][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.450017][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.457537][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.465050][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.472055][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.479027][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.486016][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.494157][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.501215][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.508201][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.515746][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.522777][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.529668][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.537432][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.544896][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.551922][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.558185][T13589] loop3: detected capacity change from 0 to 4096 [ 346.558811][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.579894][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.586963][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.595000][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.601929][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.608847][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.616448][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.617595][T13589] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 346.624273][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.639702][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.646636][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.653817][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.660802][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.667701][ T5835] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 346.674640][ T6022] usb 1-1: Using ep0 maxpacket: 8 [ 346.682504][ T6022] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 346.691108][ T6022] usb 1-1: config 179 has no interface number 0 [ 346.699426][ T6022] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 346.710925][ T6022] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 346.722643][ T5888] usb 7-1: USB disconnect, device number 7 [ 346.730056][ T5151] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 346.737242][ T6022] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 346.748715][ T6022] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 346.760281][ T6022] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 346.774053][ T6022] usb 1-1: config 179 interface 65 has no altsetting 0 [ 346.781244][ T6022] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 346.790292][ T6022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.822125][ T6022] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 346.882626][ T5186] input input21: unable to receive magic message: -110 [ 346.946825][ T5186] input input21: unable to receive magic message: -32 [ 346.995660][T13589] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 347.009805][ T5186] input input21: unable to receive magic message: -32 [ 347.053519][T13589] ntfs3(loop3): ino=1f, "file2" failed to open parent directory r=5 to update [ 347.079296][ T5186] input input21: unable to receive magic message: -32 [ 347.210746][ T6602] input input21: unable to receive magic message: -32 [ 347.290154][ T1106] ntfs3(loop3): ino=1f, failed to open parent directory r=5 to update [ 347.299022][ T5186] input input21: unable to receive magic message: -32 [ 347.315977][ T6022] usb 1-1: USB disconnect, device number 11 [ 347.316058][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 347.316113][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 347.760775][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 347.930991][T13615] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 348.279775][T13597] loop5: detected capacity change from 0 to 32768 [ 348.374825][T13597] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3295 (13597) [ 348.425668][T13631] loop6: detected capacity change from 0 to 4096 [ 348.463363][T13631] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 348.473289][T13597] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 348.503656][T13597] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 348.550043][T13597] BTRFS info (device loop5): disk space caching is enabled [ 348.582761][T13597] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 348.840918][T13597] BTRFS info (device loop5): rebuilding free space tree [ 348.902332][T13597] BTRFS info (device loop5): disabling free space tree [ 348.939935][T13597] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 349.025944][T13597] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 349.319018][ T5850] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 349.568166][T13622] loop1: detected capacity change from 0 to 32768 [ 349.611778][T13622] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3307 (13622) [ 349.760374][T13622] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 349.831019][T13622] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 349.884035][T13622] BTRFS info (device loop1): using free-space-tree [ 350.292594][ T1140] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 350.468717][T13622] BTRFS error (device loop1): failed to load root extent [ 350.498796][T13713] loop6: detected capacity change from 0 to 1764 [ 350.517161][ T1140] BTRFS warning (device loop1): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 350.664767][T13622] BTRFS error (device loop1): failed to load root free space [ 350.726199][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0 [ 350.752472][T13713] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 350.757540][T13720] loop5: detected capacity change from 0 to 16 [ 350.833692][ T1106] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 350.861285][T13720] erofs (device loop5): mounted with root inode @ nid 36. [ 350.861350][T13724] openvswitch: netlink: Message has 16 unknown bytes. [ 351.169800][ T5832] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 351.804046][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 351.976559][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 352.031499][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 352.063250][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.092096][T13759] binder: 13758:13759 ioctl c00c620f 0 returned -14 [ 352.111805][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.161252][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 352.213191][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 352.280911][ T5888] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 352.290086][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.369755][ T5888] usb 5-1: config 0 descriptor?? [ 352.384279][T13746] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 352.537251][T13777] netlink: 'syz.6.3367': attribute type 10 has an invalid length. [ 352.668718][T13777] team0: Port device wlan1 added [ 352.704267][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.712892][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.719845][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.727549][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.734723][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.742810][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.749659][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.758870][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.765783][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.772945][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.779799][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.786801][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.793711][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.804344][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.811308][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.818176][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.825183][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.832185][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.840000][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.846979][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.854044][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.861053][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.867900][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.874830][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.881995][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.888926][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.895843][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.902735][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.909588][ T5151] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 352.930184][ T5835] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 352.939420][ T6022] usb 5-1: USB disconnect, device number 10 [ 353.072987][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3372'. [ 353.423600][T13800] IPv6: Can't replace route, no match found [ 354.248025][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3395'. [ 354.340679][ T5927] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 354.540887][T13846] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 354.570486][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 354.611293][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 354.670674][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.708241][ T5927] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 354.734394][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.780874][ T5927] usb 7-1: config 0 descriptor?? [ 354.818133][ T30] audit: type=1326 audit(1753814085.231:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 354.849208][ T5927] em28xx 7-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 354.870649][ T30] audit: type=1326 audit(1753814085.231:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 354.931164][ T5927] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 354.934881][ T30] audit: type=1326 audit(1753814085.241:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 354.980748][ T5911] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 355.040761][ T30] audit: type=1326 audit(1753814085.241:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13852 comm="syz.1.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x7ffc0000 [ 355.070752][ T5927] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 355.101739][ T5927] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 355.125479][ T5927] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 355.134878][T13864] netlink: 'syz.0.3411': attribute type 10 has an invalid length. [ 355.155296][ T5927] em28xx 7-1:0.0: No AC97 audio processor [ 355.180702][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 355.207167][ T5927] usb 7-1: USB disconnect, device number 8 [ 355.239132][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.255919][ T5911] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 355.269515][ T5911] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 355.281608][ T5911] usb 5-1: config 255 has no interface number 0 [ 355.288047][ T5927] em28xx 7-1:0.0: Disconnecting em28xx [ 355.312265][ T5927] em28xx 7-1:0.0: Freeing device [ 355.322843][ T5911] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 355.348327][T13864] team0: Port device wlan1 added [ 355.361544][ T5911] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.388398][ T5911] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 355.443077][ T5911] usb 5-1: config 255 interface 81 has no altsetting 0 [ 355.475496][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 355.491216][ T5911] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 355.520231][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.627064][ T5911] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:255.81/input/input22 [ 355.992693][ T5911] usb 5-1: USB disconnect, device number 11 [ 356.034027][T13892] capability: warning: `syz.5.3425' uses 32-bit capabilities (legacy support in use) [ 356.166597][T13896] loop1: detected capacity change from 0 to 512 [ 356.410815][ T5823] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 356.570768][ T5823] usb 7-1: Using ep0 maxpacket: 16 [ 356.602340][ T5823] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 356.610543][ T5823] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.665820][ T5823] usb 7-1: config 0 has no interface number 0 [ 356.697285][ T5823] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 356.757910][ T5823] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 356.802545][ T5823] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 356.840670][ T5823] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 356.853918][ T5823] usb 7-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 356.882779][ T5823] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 356.939942][ T5823] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 356.973799][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.000533][ T5823] usb 7-1: config 0 descriptor?? [ 357.009059][T13897] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 357.036268][ T5823] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.176987][T13889] loop0: detected capacity change from 0 to 32768 [ 357.264167][T13889] ERROR: (device loop0): diAllocAG: nfreeinos = 0, but iag on freelist [ 357.264167][T13889] [ 357.319913][T13889] ERROR: (device loop0): remounting filesystem as read-only [ 357.348735][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.366203][ T5823] snd-usb-audio 7-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 357.385776][T13889] ialloc: diAlloc returned -5! [ 357.429996][ T5823] usb 7-1: USB disconnect, device number 9 [ 357.740858][ T5911] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 357.940028][ T5911] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 357.990625][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.029989][ T5911] usb 6-1: Product: syz [ 358.049646][ T5911] usb 6-1: Manufacturer: syz [ 358.069863][ T5911] usb 6-1: SerialNumber: syz [ 358.093791][T13950] netlink: 'syz.6.3453': attribute type 6 has an invalid length. [ 358.132192][ T5911] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 358.158112][ T6022] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 358.397577][ C0] usb 6-1: ath9k_htc: invalid pkt_len (ffd7) [ 358.500045][T13963] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3459'. [ 358.638893][ T5888] usb 6-1: USB disconnect, device number 13 [ 358.770197][ T30] audit: type=1326 audit(1753814089.191:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13971 comm="syz.1.3464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5e118e9a9 code=0x0 [ 359.162006][T13976] loop3: detected capacity change from 0 to 4096 [ 359.200725][T13976] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 359.270798][ T6022] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 359.277886][ T6022] ath9k_htc: Failed to initialize the device [ 359.328319][T13976] ntfs3(loop3): ino=19, mi_enum_attr [ 359.338513][ T5888] usb 6-1: ath9k_htc: USB layer deinitialized [ 359.365665][T13976] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 359.419636][T13976] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 359.572093][T13998] tc_dump_action: action bad kind [ 359.605255][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 359.990866][ T6022] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 360.176191][ T6022] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 360.203131][ T6022] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 360.252387][ T6022] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 360.273175][ T30] audit: type=1326 audit(1753814090.681:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 360.280973][T14026] tmpfs: Group quota block hardlimit too large. [ 360.310261][ T6022] usb 7-1: config 8 has no interface number 0 [ 360.328337][ T6022] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 360.390959][ T6022] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.397125][ T30] audit: type=1326 audit(1753814090.681:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 360.480171][ T6022] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 360.502149][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.526675][ T30] audit: type=1326 audit(1753814090.751:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 360.535500][T14032] loop0: detected capacity change from 0 to 512 [ 360.560751][ T6022] usb 7-1: Product: syz [ 360.564937][ T6022] usb 7-1: Manufacturer: syz [ 360.579603][ T6022] usb 7-1: SerialNumber: syz [ 360.580747][T14030] loop1: detected capacity change from 0 to 64 [ 360.599056][T14032] EXT4-fs: Ignoring removed nobh option [ 360.642798][ T30] audit: type=1326 audit(1753814090.751:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 360.700130][ T30] audit: type=1326 audit(1753814090.751:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14023 comm="syz.5.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 360.757587][T14032] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 360.801503][T14032] System zones: 0-2, 18-18, 34-34 [ 360.872182][ T6022] usb 7-1: USB disconnect, device number 10 [ 360.906637][T14032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.960699][T14032] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.960844][T14045] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3497' sets config #-3 [ 361.165085][T14050] libceph: resolve '00' (ret=-3): failed [ 361.185367][T14051] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3500'. [ 361.298778][T14032] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 361.612267][T14064] mmap: syz.1.3507 (14064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 361.638696][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.864195][T14074] dlm: Unknown command passed to DLM device : 11 [ 361.864195][T14074] [ 362.246080][T14088] loop5: detected capacity change from 0 to 764 [ 362.366112][ T30] audit: type=1326 audit(1753814092.791:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.6.3519" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ddbb8e9a9 code=0x0 [ 362.707684][T14098] loop0: detected capacity change from 0 to 4096 [ 362.768165][T14109] netlink: 'syz.5.3524': attribute type 10 has an invalid length. [ 362.795972][T14109] macvlan0: entered promiscuous mode [ 362.821659][T14098] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 362.841648][T14109] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 363.303884][T14123] netlink: 'syz.3.3529': attribute type 2 has an invalid length. [ 363.314234][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.350699][T14123] netlink: 'syz.3.3529': attribute type 8 has an invalid length. [ 363.395906][T14123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3529'. [ 363.830703][T14140] ip6gre1: entered promiscuous mode [ 364.890682][ T30] audit: type=1326 audit(1753814095.311:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 365.023741][ T30] audit: type=1326 audit(1753814095.311:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 365.075085][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3560'. [ 365.140905][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3560'. [ 365.161186][ T30] audit: type=1326 audit(1753814095.321:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 365.211344][T14198] netlink: 'syz.5.3563': attribute type 28 has an invalid length. [ 365.273827][ T30] audit: type=1326 audit(1753814095.321:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7898e9a9 code=0x7ffc0000 [ 365.454081][ T6022] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 365.530786][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 365.660811][ T6022] usb 4-1: Using ep0 maxpacket: 16 [ 365.688017][ T6022] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 365.709030][ T6022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.752456][ T5911] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.776335][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.787011][ T6022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 114, changing to 7 [ 365.808866][ T5911] usb 2-1: Product: syz [ 365.813497][ T6022] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25856, setting to 1024 [ 365.824981][ T5911] usb 2-1: Manufacturer: syz [ 365.829603][ T5911] usb 2-1: SerialNumber: syz [ 365.870711][ T6022] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.902095][ T5911] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 365.949831][ T6022] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 365.980693][ T6021] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 366.013459][ T6022] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.054219][ T6022] usb 4-1: Manufacturer: syz [ 366.081038][T14229] loop6: detected capacity change from 0 to 512 [ 366.090196][ T6022] usb 4-1: config 0 descriptor?? [ 366.119530][T14229] EXT4-fs (loop6): Test dummy encryption mode enabled [ 366.228275][T14229] EXT4-fs error (device loop6): __ext4_iget:5374: inode #11: block 1: comm syz.6.3575: invalid block [ 366.261024][ T5927] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 366.279201][T14229] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3575: couldn't read orphan inode 11 (err -117) [ 366.313605][T14229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.353115][ T6022] usb 4-1: USB disconnect, device number 16 [ 366.420867][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 366.435104][ T5927] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 366.460678][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.465566][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 366.661967][ T9397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.722711][ T5888] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 366.789865][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.799713][ T2146] usb 2-1: USB disconnect, device number 13 [ 366.804626][ T5927] usb 6-1: Product: syz [ 366.809785][ T5927] usb 6-1: Manufacturer: syz [ 366.818946][ T5927] usb 6-1: SerialNumber: syz [ 366.836007][ T5927] usb 6-1: config 0 descriptor?? [ 366.878875][ T5888] usb 5-1: config 0 descriptor?? [ 366.881183][ T5927] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 366.896691][ T5888] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 367.094157][ T6021] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 367.111745][ T5888] usb 5-1: USB disconnect, device number 12 [ 367.128586][ T6021] ath9k_htc: Failed to initialize the device [ 367.140785][ T5823] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.188973][ T2146] usb 2-1: ath9k_htc: USB layer deinitialized [ 367.282658][ T5927] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 367.334864][ T5927] visor 6-1:0.0: probe with driver visor failed with error -71 [ 367.350993][ T5823] usb 1-1: Using ep0 maxpacket: 32 [ 367.376763][ T5823] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 367.393078][ T5927] usb 6-1: USB disconnect, device number 14 [ 367.416402][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.459260][ T5823] usb 1-1: config 0 descriptor?? [ 367.697687][ T5823] usb 1-1: USB disconnect, device number 12 [ 367.970783][T14272] netlink: 'syz.4.3590': attribute type 1 has an invalid length. [ 367.978557][T14272] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3590'. [ 368.255636][T14277] loop5: detected capacity change from 0 to 4096 [ 368.338677][T14277] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 368.421020][T14277] ntfs3(loop5): ino=19, mi_enum_attr [ 368.448081][T14277] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 369.379288][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'. [ 369.431952][T14321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'. [ 369.469283][T14325] loop1: detected capacity change from 0 to 512 [ 369.479236][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'. [ 369.496052][T14325] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 369.558337][T14325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 369.645252][T14325] System zones: 1-12 [ 369.649465][T14325] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 369.685263][T14325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 369.909926][T14340] loop3: detected capacity change from 0 to 512 [ 369.968472][T14340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.990785][T14340] ext4 filesystem being mounted at /630/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.005015][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 370.117288][T14297] loop4: detected capacity change from 0 to 32768 [ 370.174722][T14346] loop0: detected capacity change from 0 to 1024 [ 370.244462][T14297] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 370.272269][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.538951][ T5841] ocfs2: Unmounting device (7,4) on (node local) [ 370.790828][T14366] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3633'. [ 371.082039][ T6021] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 371.165403][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3640'. [ 371.206802][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3640'. [ 371.277326][ T6021] usb 7-1: Using ep0 maxpacket: 16 [ 371.342444][ T6021] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 371.365861][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.390646][ T6021] usb 7-1: Product: syz [ 371.394841][ T6021] usb 7-1: Manufacturer: syz [ 371.399442][ T6021] usb 7-1: SerialNumber: syz [ 371.484575][ T6021] r8152-cfgselector 7-1: Unknown version 0x0000 [ 371.504467][ T6021] r8152-cfgselector 7-1: config 0 descriptor?? [ 371.671085][T14398] netlink: 'syz.5.3649': attribute type 16 has an invalid length. [ 371.678978][T14398] netlink: 'syz.5.3649': attribute type 3 has an invalid length. [ 371.688421][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 371.718139][T14398] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3649'. [ 371.739763][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3650'. [ 371.839251][T14404] sctp: [Deprecated]: syz.1.3652 (pid 14404) Use of int in maxseg socket option. [ 371.839251][T14404] Use struct sctp_assoc_value instead [ 371.886977][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 371.905345][ T5911] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 371.920673][ T30] audit: type=1326 audit(1753814102.351:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 371.949226][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.968174][ T6021] r8152-cfgselector 7-1: USB disconnect, device number 11 [ 372.009914][ T5911] usb 5-1: config 0 descriptor?? [ 372.024307][ T5911] gspca_main: sunplus-2.14.0 probing 041e:400b [ 372.033079][ T30] audit: type=1326 audit(1753814102.351:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 372.102278][ T30] audit: type=1326 audit(1753814102.351:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 372.171347][ T30] audit: type=1326 audit(1753814102.351:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 372.220875][T14412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3656'. [ 372.281558][ T30] audit: type=1326 audit(1753814102.351:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 372.396376][T14418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3659'. [ 372.446972][ T5911] gspca_sunplus: reg_w_riv err -71 [ 372.454282][ T5911] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 372.472671][T14418] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 372.498132][ T5911] usb 5-1: USB disconnect, device number 13 [ 372.536461][T14418] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 373.237480][T14437] netlink: 'syz.4.3668': attribute type 1 has an invalid length. [ 373.305551][T14443] netlink: 'syz.5.3670': attribute type 21 has an invalid length. [ 373.313551][T14437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3668'. [ 373.339220][T14443] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3670'. [ 373.444667][T14414] loop1: detected capacity change from 0 to 32768 [ 373.507069][T14414] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3657 (14414) [ 373.571082][T14421] loop3: detected capacity change from 0 to 32768 [ 373.579466][T14414] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13 [ 373.769701][T14421] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 373.866729][T14421] (syz.3.3660,14421,0):ocfs2_mknod:502 ERROR: status = -2 [ 373.898466][T14421] (syz.3.3660,14421,1):ocfs2_create:675 ERROR: status = -2 [ 374.158815][ T5844] (syz-executor,5844,0):ocfs2_inode_is_valid_to_delete:866 ERROR: Skipping delete of root inode. [ 374.190054][T14473] loop6: detected capacity change from 0 to 256 [ 374.305450][ T5844] ocfs2: Unmounting device (7,3) on (node local) [ 374.462885][T14473] FAT-fs (loop6): Directory bread(block 64) failed [ 374.500745][T14473] FAT-fs (loop6): Directory bread(block 65) failed [ 374.523067][T14473] FAT-fs (loop6): Directory bread(block 66) failed [ 374.529634][T14473] FAT-fs (loop6): Directory bread(block 67) failed [ 374.572951][T14473] FAT-fs (loop6): Directory bread(block 68) failed [ 374.609473][T14473] FAT-fs (loop6): Directory bread(block 69) failed [ 374.654822][T14473] FAT-fs (loop6): Directory bread(block 70) failed [ 374.713938][T14473] FAT-fs (loop6): Directory bread(block 71) failed [ 374.735597][T14473] FAT-fs (loop6): Directory bread(block 72) failed [ 374.790727][T14473] FAT-fs (loop6): Directory bread(block 73) failed [ 374.801514][T14490] netlink: 'syz.1.3692': attribute type 11 has an invalid length. [ 374.833987][T14490] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3692'. [ 375.081010][T14497] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 375.189728][T14501] loop3: detected capacity change from 0 to 1024 [ 375.241943][T14501] EXT4-fs: inline encryption not supported [ 375.247812][T14501] EXT4-fs: Ignoring removed i_version option [ 375.329462][T14501] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 375.478179][T14501] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3697: lblock 2 mapped to illegal pblock 2 (length 1) [ 375.589498][T14501] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 375.630027][T14501] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.3697: lblock 0 mapped to illegal pblock 48 (length 1) [ 375.730156][T14501] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 375.770811][T14501] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3697: Failed to acquire dquot type 0 [ 375.793318][ T6021] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 375.872113][T14501] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 375.920300][T14501] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3697: mark_inode_dirty error [ 375.965254][ T6021] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 375.974524][T14501] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 375.987753][ T6021] usb 2-1: config 0 has no interface number 0 [ 376.009765][T14523] loop0: detected capacity change from 0 to 8192 [ 376.020728][T14501] EXT4-fs (loop3): 1 orphan inode deleted [ 376.028276][T14501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.041370][ T6021] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 376.059513][ T36] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 376.095436][ T6021] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 376.120645][ T36] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 376.157802][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.199139][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 376.211319][T14501] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm syz.3.3697: lblock 1 mapped to illegal pblock 1 (length 1) [ 376.220059][ T6021] usb 2-1: config 0 descriptor?? [ 376.318511][T14501] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 376.323858][ T6021] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input24 [ 376.488982][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.544233][ T5835] Bluetooth: hci3: unexpected event for opcode 0x200a [ 376.640860][ T6021] usb 2-1: USB disconnect, device number 14 [ 376.666918][ T5844] EXT4-fs error (device loop3): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 376.733939][ T5844] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 376.782132][ T5844] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 377.314151][T14562] openvswitch: netlink: IP tunnel dst address not specified [ 377.900328][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.021097][T14588] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 378.480725][ T2146] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 378.672251][ T2146] usb 2-1: config 7 has an invalid interface number: 170 but max is 0 [ 378.681332][ T2146] usb 2-1: config 7 has no interface number 0 [ 378.708338][ T2146] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=24.83 [ 378.747978][ T2146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.776511][ T2146] usb 2-1: Product: syz [ 378.799064][ T2146] usb 2-1: Manufacturer: syz [ 378.844062][ T2146] usb 2-1: SerialNumber: syz [ 378.902582][T14619] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 378.953943][T14621] netlink: 'syz.5.3754': attribute type 1 has an invalid length. [ 379.005036][T14621] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3754'. [ 379.067951][T14626] loop0: detected capacity change from 0 to 1024 [ 379.106249][ T2146] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 379.145866][ T2146] command write [95] error -22 [ 379.225934][ T2146] usb 2-1: USB disconnect, device number 15 [ 379.342348][T14634] vlan1: entered allmulticast mode [ 379.347525][T14634] veth0_vlan: entered allmulticast mode [ 379.375976][ T36] hfsplus: b-tree write err: -5, ino 4 [ 379.772600][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 379.825893][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 379.874143][T14649] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3766'. [ 379.924566][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 379.984590][T14657] loop1: detected capacity change from 0 to 512 [ 380.910963][ T30] audit: type=1326 audit(1753814111.321:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 381.036842][T14694] loop1: detected capacity change from 0 to 512 [ 381.040742][ T30] audit: type=1326 audit(1753814111.321:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 381.110656][ T30] audit: type=1326 audit(1753814111.401:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 381.272488][T14645] loop0: detected capacity change from 0 to 32768 [ 381.301063][ T30] audit: type=1326 audit(1753814111.401:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14688 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 381.331908][T14645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3764 (14645) [ 381.485786][T14645] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 381.524327][T14645] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 381.568569][T14645] BTRFS info (device loop0): using free-space-tree [ 381.594470][T14712] kAFS: unable to lookup cell 'syz169@¬=áÌ “‡RŒÑ' [ 381.941709][T14736] x_tables: unsorted entry at hook 1 [ 382.282470][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.360701][ T5911] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 382.540727][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 382.569439][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 382.626771][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 382.678593][ T5911] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 382.718373][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.763354][ T5911] usb 7-1: Product: syz [ 382.782206][ T5911] usb 7-1: Manufacturer: syz [ 382.810774][ T5911] usb 7-1: SerialNumber: syz [ 382.839241][ T5911] usb 7-1: config 0 descriptor?? [ 382.942704][ T5911] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 383.113158][ T5911] usb 7-1: USB disconnect, device number 12 [ 383.120820][ T69] usb 7-1: Failed to submit usb control message: -71 [ 383.127767][ T69] usb 7-1: unable to send the bmi data to the device: -71 [ 383.198479][ T69] usb 7-1: unable to get target info from device [ 383.220038][ T69] usb 7-1: could not get target info (-71) [ 383.245998][ T69] usb 7-1: could not probe fw (-71) [ 383.335257][T14784] loop1: detected capacity change from 0 to 128 [ 383.684210][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3821'. [ 383.730963][T14793] netlink: 'syz.1.3821': attribute type 5 has an invalid length. [ 383.738709][T14793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3821'. [ 383.835899][T14793] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 383.900668][T14793] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 383.942142][T14793] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 383.990750][T14793] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 384.031232][T14793] geneve2: entered promiscuous mode [ 384.047088][T14793] geneve2: entered allmulticast mode [ 384.392546][T14807] loop1: detected capacity change from 0 to 256 [ 384.400280][T14779] loop0: detected capacity change from 0 to 32768 [ 384.458691][T14779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3815 (14779) [ 384.538277][T14779] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 384.561686][T14779] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 384.604594][T14779] BTRFS info (device loop0): using free-space-tree [ 384.702626][T14789] loop4: detected capacity change from 0 to 32768 [ 384.721242][T14789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3820 (14789) [ 384.823954][T14789] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.878898][T14789] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 384.923802][T14789] BTRFS info (device loop4): disk space caching is enabled [ 384.980640][T14789] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 385.186974][T14851] netlink: 'syz.6.3838': attribute type 1 has an invalid length. [ 385.240904][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.392203][T14789] BTRFS info (device loop4): rebuilding free space tree [ 385.507006][T14789] BTRFS info (device loop4): disabling free space tree [ 385.550881][T14789] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 385.600693][T14789] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 385.669570][T14789] BTRFS info (device loop4): checking UUID tree [ 385.925307][T14830] loop1: detected capacity change from 0 to 32768 [ 386.046913][ T5841] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.650723][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 386.712469][T14891] xt_bpf: check failed: parse error [ 386.831123][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 386.881989][ T5911] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 386.916753][ T5911] usb 7-1: config 0 has no interface number 0 [ 386.940683][ T5911] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 387.003897][ T5911] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 387.033113][ T5911] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 387.046203][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 387.079736][ T5911] usb 7-1: Manufacturer: syz [ 387.126455][ T5911] usb 7-1: SerialNumber: syz [ 387.185442][ T5911] usb 7-1: config 0 descriptor?? [ 387.217211][T14885] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 387.253833][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3862'. [ 387.298666][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3862'. [ 387.549605][T14915] ipt_rpfilter: unknown options [ 387.666504][ T5911] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 387.724729][T14919] C: renamed from team_slave_0 (while UP) [ 387.753491][ T5911] usb 7-1: USB disconnect, device number 13 [ 387.788476][T14919] netlink: 'syz.5.3868': attribute type 1 has an invalid length. [ 387.819414][T14919] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3868'. [ 387.858164][T14919] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.051584][T14925] loop0: detected capacity change from 0 to 4096 [ 388.055910][T14927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3872'. [ 388.105447][T14928] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 388.190227][T14930] netlink: 'syz.5.3873': attribute type 2 has an invalid length. [ 388.218613][T14930] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3873'. [ 388.430899][T14932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.461317][T14932] batadv_slave_0: entered promiscuous mode [ 388.519531][T14932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.567419][T14913] loop4: detected capacity change from 0 to 32768 [ 388.640516][T14932] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 388.650362][T14913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3864 (14913) [ 388.754251][T14913] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.793806][T14913] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 388.840843][T14913] BTRFS info (device loop4): using free-space-tree [ 388.985413][T14923] loop1: detected capacity change from 0 to 32768 [ 389.013863][T14953] loop5: detected capacity change from 0 to 256 [ 389.044987][T14953] exfat: Deprecated parameter 'namecase' [ 389.141637][T14953] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 389.373139][ T5841] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.522832][ T5888] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 389.546190][T14972] loop0: detected capacity change from 0 to 256 [ 389.705919][T14972] FAT-fs (loop0): Directory bread(block 64) failed [ 389.721832][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 389.739843][T14972] FAT-fs (loop0): Directory bread(block 65) failed [ 389.766833][ T5888] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 389.770287][T14972] FAT-fs (loop0): Directory bread(block 66) failed [ 389.800061][ T5888] usb 6-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 389.815255][T14972] FAT-fs (loop0): Directory bread(block 67) failed [ 389.822279][ T6022] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 389.842602][ T5888] usb 6-1: config 0 has no interface number 0 [ 389.861049][T14972] FAT-fs (loop0): Directory bread(block 68) failed [ 389.869027][ T5888] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 389.880189][T14972] FAT-fs (loop0): Directory bread(block 69) failed [ 389.928569][ T5888] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 389.941218][T14972] FAT-fs (loop0): Directory bread(block 70) failed [ 389.971824][ T5888] usb 6-1: config 0 interface 122 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 389.974339][T14972] FAT-fs (loop0): Directory bread(block 71) failed [ 390.011186][ T6022] usb 7-1: Using ep0 maxpacket: 16 [ 390.025432][ T5888] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 30788, setting to 64 [ 390.030375][ T6022] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 390.053261][T14972] FAT-fs (loop0): Directory bread(block 72) failed [ 390.081653][T14972] FAT-fs (loop0): Directory bread(block 73) failed [ 390.090250][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.090602][ T5888] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 390.117950][ T6022] usb 7-1: Product: syz [ 390.140668][ T6022] usb 7-1: Manufacturer: syz [ 390.160813][ T6022] usb 7-1: SerialNumber: syz [ 390.192510][ T5888] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 390.201492][ T6022] usb 7-1: config 0 descriptor?? [ 390.220735][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.228467][ T6022] usb-storage 7-1:0.0: USB Mass Storage device detected [ 390.228760][ T5888] usb 6-1: Product: syz [ 390.279771][ T5888] usb 6-1: Manufacturer: syz [ 390.333128][ T6022] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 390.337428][ T5888] usb 6-1: SerialNumber: syz [ 390.361638][ T5888] usb 6-1: config 0 descriptor?? [ 390.367911][T14953] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 390.383272][ T6022] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-syzkaller-02094-g86aa72182095) [ 390.383272][ T6022] Please send a copy of this message to and [ 390.603977][ T5888] usb 6-1: NFC: intf ffff888057046000 id ffffffff8eb4ebc0 [ 390.656653][ T6022] usb 7-1: USB disconnect, device number 14 [ 390.693711][ T5888] usb 6-1: USB disconnect, device number 15 [ 391.166165][T15011] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 391.215872][T15011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 391.497197][T15023] netlink: 'syz.6.3909': attribute type 3 has an invalid length. [ 391.551607][T15023] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3909'. [ 391.617153][T15028] loop5: detected capacity change from 0 to 128 [ 391.626100][T15027] loop0: detected capacity change from 0 to 256 [ 391.665063][T15028] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 391.741145][ T6022] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 391.772248][T15028] ext4 filesystem being mounted at /656/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.935861][ T6022] usb 4-1: not running at top speed; connect to a high speed hub [ 391.951852][ T6022] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 391.994598][ T6022] usb 4-1: config 95 has no interface number 0 [ 392.029338][ T6022] usb 4-1: config 95 interface 1 has no altsetting 0 [ 392.047451][ T5850] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.079092][ T6022] usb 4-1: string descriptor 0 read error: -22 [ 392.087570][ T6022] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 392.153952][ T6022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.230855][T15046] sg_write: data in/out 197440/1 bytes for SCSI command 0xdd-- guessing data in; [ 392.230855][T15046] program syz.4.3921 not setting count and/or reply_len properly [ 392.682497][ T6022] usb 4-1: USB disconnect, device number 17 [ 393.110910][T15079] openvswitch: netlink: IP tunnel dst address not specified [ 393.239455][T15081] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 393.302212][T15081] exFAT-fs (nullb0): invalid boot record signature [ 393.340739][T15081] exFAT-fs (nullb0): failed to read boot sector [ 393.367632][T15085] loop5: detected capacity change from 0 to 1024 [ 393.409974][T15081] exFAT-fs (nullb0): failed to recognize exfat type [ 393.412823][T15085] EXT4-fs: Ignoring removed orlov option [ 393.487148][T15085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.611447][ T6022] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 393.690879][T15093] loop4: detected capacity change from 0 to 2048 [ 393.701676][ T5927] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 393.742181][T15093] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 393.779030][ T5850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.784621][T15093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 393.796890][ T6022] usb 7-1: Using ep0 maxpacket: 32 [ 393.847097][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.881479][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 393.892221][ T5927] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 393.920726][ T6022] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 393.940694][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.958887][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.017207][ T5927] usb 2-1: Product: syz [ 394.021638][ T6022] usb 7-1: Product: syz [ 394.025812][ T6022] usb 7-1: Manufacturer: syz [ 394.030410][ T6022] usb 7-1: SerialNumber: syz [ 394.049283][ T5927] usb 2-1: Manufacturer: syz [ 394.280683][ T5927] usb 2-1: SerialNumber: syz [ 394.298504][ T6022] usb 7-1: config 0 descriptor?? [ 394.304545][ T5927] usb 2-1: config 0 descriptor?? [ 394.342164][ T6022] usb 7-1: bad CDC descriptors [ 394.347774][ T6022] usb 7-1: unsupported MDLM descriptors [ 394.388390][T15070] loop0: detected capacity change from 0 to 40427 [ 394.451773][T15070] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 394.481659][T15070] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 394.512776][T15070] F2FS-fs (loop0): invalid crc value [ 394.532043][T15101] loop4: detected capacity change from 0 to 256 [ 394.583368][ T6022] usb 7-1: USB disconnect, device number 15 [ 394.602170][ T5927] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 016 [ 394.803068][ T5927] usb 2-1: USB disconnect, device number 16 [ 395.023363][T15070] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 395.037044][T15070] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 395.495639][ T5888] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 395.681189][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 395.697341][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 395.739818][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 395.795792][ T5888] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 395.829351][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.851028][T15137] loop4: detected capacity change from 0 to 164 [ 395.889907][ T5888] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.941443][ T5888] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 395.982676][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.030616][ T5888] usb 7-1: Product: syz [ 396.049498][ T5888] usb 7-1: Manufacturer: syz [ 396.075329][ T5888] usb 7-1: SerialNumber: syz [ 396.162223][ T5888] usb 7-1: config 0 descriptor?? [ 396.187583][ T5888] kvaser_usb 7-1:0.0: error -EMSGSIZE: Cannot get software info [ 396.231332][ T5888] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90 [ 396.325812][T15149] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3969'. [ 396.395617][T15149] 0ªX¹¦À: renamed from caif0 [ 396.435445][ T5888] usb 7-1: USB disconnect, device number 16 [ 396.479858][T15149] 0ªX¹¦À: entered allmulticast mode [ 396.490911][T15149] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 396.589744][T15155] loop4: detected capacity change from 0 to 1024 [ 396.627818][T15155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.661521][T15160] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3973'. [ 396.900161][T15168] binder: 15167:15168 ioctl c0306201 200000000100 returned -14 [ 397.088807][T15172] loop5: detected capacity change from 0 to 512 [ 397.171723][T15176] netlink: 'syz.0.3980': attribute type 7 has an invalid length. [ 397.195756][T15172] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 397.202502][T15175] loop3: detected capacity change from 0 to 164 [ 397.210929][T15176] netlink: 'syz.0.3980': attribute type 8 has an invalid length. [ 397.245971][T15175] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 397.263774][T15172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 397.302753][T15172] EXT4-fs (loop5): orphan cleanup on readonly fs [ 397.344149][T15172] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.3979: iget: bad i_size value: 12154761577498 [ 397.412697][T15172] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3979: couldn't read orphan inode 13 (err -117) [ 397.513869][T15172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 397.557024][T15185] loop6: detected capacity change from 0 to 1024 [ 397.575882][T15172] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.3979: dx entry: limit 65535 != root limit 120 [ 397.600067][T15172] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3979: Corrupt directory, running e2fsck is recommended [ 397.638688][T15185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.692604][T15185] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.715583][ T5850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.857974][T15192] loop4: detected capacity change from 0 to 1024 [ 397.884649][T15192] EXT4-fs: Ignoring removed bh option [ 397.890063][T15192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.968491][T15192] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.042734][T15162] loop1: detected capacity change from 0 to 32768 [ 398.050211][T15162] btrfs: Deprecated parameter 'usebackuproot' [ 398.057245][T15162] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 398.058782][T15192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.093370][T15162] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3974 (15162) [ 398.146036][ T30] audit: type=1326 audit(1753814128.571:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 398.190281][ T9397] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.244546][ T30] audit: type=1326 audit(1753814128.591:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 398.295989][T15192] VFS: Lookup of 'file0' in ext4 loop4 would have caused loop [ 398.310302][T15162] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 398.366402][T15162] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 398.377532][ T30] audit: type=1326 audit(1753814128.601:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 398.448431][T15162] BTRFS info (device loop1): disk space caching is enabled [ 398.471808][T15162] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 398.527232][ T30] audit: type=1326 audit(1753814128.601:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 398.628468][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.657543][T15221] loop0: detected capacity change from 0 to 1024 [ 398.697105][ T30] audit: type=1326 audit(1753814128.611:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15204 comm="syz.3.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3958e9a9 code=0x7ffc0000 [ 398.786778][ T1106] hfsplus: b-tree write err: -5, ino 4 [ 399.083815][T15162] btrfs: Deprecated parameter 'usebackuproot' [ 399.089942][T15162] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 399.165271][T15243] netlink: 'syz.5.4004': attribute type 24 has an invalid length. [ 399.166774][T15162] BTRFS warning (device loop1 state M): Skipping commit of aborted transaction. [ 399.166827][T15162] ------------[ cut here ]------------ [ 399.166876][T15162] BTRFS: Transaction aborted (error -28) [ 399.167466][T15162] WARNING: CPU: 0 PID: 15162 at fs/btrfs/transaction.c:2023 btrfs_commit_transaction+0x2f67/0x3950 [ 399.167509][T15162] Modules linked in: [ 399.167532][T15162] CPU: 0 UID: 0 PID: 15162 Comm: syz.1.3974 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(full) [ 399.167567][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.167584][T15162] RIP: 0010:btrfs_commit_transaction+0x2f67/0x3950 [ 399.167614][T15162] Code: 0f 55 e2 fd 84 c0 74 2b e8 96 51 fb fd eb 73 e8 8f 51 fb fd 90 48 c7 c7 40 a0 cd 8b 8b 5c 24 18 89 de e8 2c 3e bf fd 89 d9 90 <0f> 0b 90 90 e9 1a 01 00 00 e8 7b fc aa 07 89 c3 31 ff 89 c6 e8 a0 [ 399.167637][T15162] RSP: 0018:ffffc9001c79f780 EFLAGS: 00010246 [ 399.167662][T15162] RAX: b56b626df5906200 RBX: 00000000ffffffe4 RCX: 00000000ffffffe4 [ 399.167682][T15162] RDX: ffffc9000c2d9000 RSI: 000000000000839d RDI: 000000000000839e [ 399.167700][T15162] RBP: ffffc9001c79fac0 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 399.167721][T15162] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff8880256c4e78 [ 399.167742][T15162] R13: ffff888046e64000 R14: ffff888046e64000 R15: 0000000000000000 [ 399.167765][T15162] FS: 00007fc5e1f676c0(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 399.167789][T15162] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.167808][T15162] CR2: 00007f3dd2309000 CR3: 0000000031371000 CR4: 0000000000350ef0 [ 399.167829][T15162] Call Trace: [ 399.167840][T15162] [ 399.167858][T15162] ? btrfs_commit_transaction+0x161/0x3950 [ 399.167914][T15162] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 399.167949][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.167985][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168015][T15162] ? do_raw_spin_unlock+0x122/0x240 [ 399.168060][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168089][T15162] ? btrfs_record_root_in_trans+0x91/0x180 [ 399.168135][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168165][T15162] ? start_transaction+0x439/0x1620 [ 399.168228][T15162] btrfs_set_free_space_cache_v1_active+0x71/0x430 [ 399.168265][T15162] ? do_raw_spin_unlock+0x122/0x240 [ 399.168303][T15162] btrfs_reconfigure+0x1bd4/0x2160 [ 399.168372][T15162] ? __pfx_btrfs_reconfigure+0x10/0x10 [ 399.168410][T15162] ? __pfx_shrink_dcache_sb+0x10/0x10 [ 399.168453][T15162] ? rcu_is_watching+0x15/0xb0 [ 399.168483][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168518][T15162] reconfigure_super+0x227/0x890 [ 399.168563][T15162] path_mount+0xd18/0xfe0 [ 399.168596][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168640][T15162] __se_sys_mount+0x317/0x410 [ 399.168683][T15162] ? __pfx___se_sys_mount+0x10/0x10 [ 399.168726][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168755][T15162] ? __x64_sys_mount+0x20/0xc0 [ 399.168794][T15162] do_syscall_64+0xfa/0x3b0 [ 399.168828][T15162] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.168860][T15162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.168886][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.168916][T15162] ? exc_page_fault+0x9f/0xf0 [ 399.168950][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.168976][T15162] RIP: 0033:0x7fc5e119014a [ 399.168998][T15162] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.169021][T15162] RSP: 002b:00007fc5e1f66e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.169049][T15162] RAX: ffffffffffffffda RBX: 00007fc5e1f66ef0 RCX: 00007fc5e119014a [ 399.169070][T15162] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 399.169089][T15162] RBP: 0000200000000180 R08: 00007fc5e1f66ef0 R09: 00000000022520a2 [ 399.169109][T15162] R10: 00000000022520a2 R11: 0000000000000246 R12: 0000200000000100 [ 399.169127][T15162] R13: 00007fc5e1f66eb0 R14: 0000000000000000 R15: 00002000000002c0 [ 399.169167][T15162] [ 399.169181][T15162] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.169196][T15162] CPU: 0 UID: 0 PID: 15162 Comm: syz.1.3974 Not tainted 6.16.0-syzkaller-02094-g86aa72182095 #0 PREEMPT(full) [ 399.169226][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.169242][T15162] Call Trace: [ 399.169252][T15162] [ 399.169262][T15162] dump_stack_lvl+0x99/0x250 [ 399.169293][T15162] ? __asan_memcpy+0x40/0x70 [ 399.169320][T15162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.169349][T15162] ? __pfx__printk+0x10/0x10 [ 399.169393][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.169427][T15162] panic+0x2db/0x790 [ 399.169463][T15162] ? __pfx_panic+0x10/0x10 [ 399.169489][T15162] ? show_trace_log_lvl+0x4fb/0x550 [ 399.169540][T15162] __warn+0x31b/0x4b0 [ 399.169570][T15162] ? btrfs_commit_transaction+0x2f67/0x3950 [ 399.169601][T15162] ? btrfs_commit_transaction+0x2f67/0x3950 [ 399.169628][T15162] report_bug+0x2be/0x4f0 [ 399.169659][T15162] ? btrfs_commit_transaction+0x2f67/0x3950 [ 399.169687][T15162] ? btrfs_commit_transaction+0x2f67/0x3950 [ 399.169716][T15162] ? btrfs_commit_transaction+0x2f69/0x3950 [ 399.169744][T15162] handle_bug+0x84/0x160 [ 399.169781][T15162] exc_invalid_op+0x1a/0x50 [ 399.169818][T15162] asm_exc_invalid_op+0x1a/0x20 [ 399.169843][T15162] RIP: 0010:btrfs_commit_transaction+0x2f67/0x3950 [ 399.169872][T15162] Code: 0f 55 e2 fd 84 c0 74 2b e8 96 51 fb fd eb 73 e8 8f 51 fb fd 90 48 c7 c7 40 a0 cd 8b 8b 5c 24 18 89 de e8 2c 3e bf fd 89 d9 90 <0f> 0b 90 90 e9 1a 01 00 00 e8 7b fc aa 07 89 c3 31 ff 89 c6 e8 a0 [ 399.169894][T15162] RSP: 0018:ffffc9001c79f780 EFLAGS: 00010246 [ 399.169918][T15162] RAX: b56b626df5906200 RBX: 00000000ffffffe4 RCX: 00000000ffffffe4 [ 399.169938][T15162] RDX: ffffc9000c2d9000 RSI: 000000000000839d RDI: 000000000000839e [ 399.169956][T15162] RBP: ffffc9001c79fac0 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 399.169976][T15162] R10: dffffc0000000000 R11: ffffed10170c4853 R12: ffff8880256c4e78 [ 399.169997][T15162] R13: ffff888046e64000 R14: ffff888046e64000 R15: 0000000000000000 [ 399.170045][T15162] ? btrfs_commit_transaction+0x161/0x3950 [ 399.170104][T15162] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 399.170139][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170174][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170205][T15162] ? do_raw_spin_unlock+0x122/0x240 [ 399.170250][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170278][T15162] ? btrfs_record_root_in_trans+0x91/0x180 [ 399.170319][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170348][T15162] ? start_transaction+0x439/0x1620 [ 399.170408][T15162] btrfs_set_free_space_cache_v1_active+0x71/0x430 [ 399.170443][T15162] ? do_raw_spin_unlock+0x122/0x240 [ 399.170478][T15162] btrfs_reconfigure+0x1bd4/0x2160 [ 399.170547][T15162] ? __pfx_btrfs_reconfigure+0x10/0x10 [ 399.170587][T15162] ? __pfx_shrink_dcache_sb+0x10/0x10 [ 399.170628][T15162] ? rcu_is_watching+0x15/0xb0 [ 399.170655][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170688][T15162] reconfigure_super+0x227/0x890 [ 399.170725][T15162] path_mount+0xd18/0xfe0 [ 399.170756][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170798][T15162] __se_sys_mount+0x317/0x410 [ 399.170839][T15162] ? __pfx___se_sys_mount+0x10/0x10 [ 399.170880][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.170908][T15162] ? __x64_sys_mount+0x20/0xc0 [ 399.170944][T15162] do_syscall_64+0xfa/0x3b0 [ 399.170975][T15162] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.171006][T15162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.171029][T15162] ? srso_alias_return_thunk+0x5/0xfbef5 [ 399.171057][T15162] ? exc_page_fault+0x9f/0xf0 [ 399.171090][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.171115][T15162] RIP: 0033:0x7fc5e119014a [ 399.171135][T15162] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.171156][T15162] RSP: 002b:00007fc5e1f66e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.171181][T15162] RAX: ffffffffffffffda RBX: 00007fc5e1f66ef0 RCX: 00007fc5e119014a [ 399.171200][T15162] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 399.171217][T15162] RBP: 0000200000000180 R08: 00007fc5e1f66ef0 R09: 00000000022520a2 [ 399.171235][T15162] R10: 00000000022520a2 R11: 0000000000000246 R12: 0000200000000100 [ 399.171252][T15162] R13: 00007fc5e1f66eb0 R14: 0000000000000000 R15: 00002000000002c0 [ 399.171289][T15162] [ 399.178271][T15162] Kernel Offset: disabled