last executing test programs: 3m1.94085983s ago: executing program 0 (id=1914): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000880)={0x2, 0x1, 0x2, {0xd, 0x746, 0xdfd5, 0x7}}) 3m1.741080781s ago: executing program 0 (id=1917): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698) 3m1.465866747s ago: executing program 0 (id=1922): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.260620661s ago: executing program 0 (id=1926): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX=0x0], 0x2, 0xc33, &(0x7f0000000800)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qzrPwA8Vq769z8AAAAAAAAAAAAAABx0KYp4MlLMXVlL49Xzjvrldt+t22NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebs98QP377bPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291sjoAjZuv35q8fn2hcfb5c5tevj3wfv8TxwcuDj576plu2bGh4eHRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE2NBw1ZHpdmtmsXxxpHsgiohGT6Vm9xhtPxZR63ugfdhZM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b97d31RRC1SfOfYWroWEYe6x+GL1cTgndtR7GMfd6FsZ6MvYrl4BMbsAOuPIl6NFD9750RM5PNMda75QsSrZf4g4q0yX4pI5QfjfMR723yOeDTVooi/LMf/4lqarM4H3fPK5a81vjJzfbanbPe88hGvD3edKR7S9eHIlnwwDvi5qR5FtKoz/lq69292AAAAAAAAAAAAAAAAALjfjkQRn4kUr/zHn1TziqOal37s4uAfDvxq75zxpz9kP2XZ5yNiqdjdnNzDeWLgSBpJ6SHPJX6c1aOIP83z/771sBsDAAAAAAAAAAAAAAAAAADwWCviJ5HixXdPpOXoXVO8PXOjcbV1bbqzKmx37d/umunr6+vrjdTJZs7xnEs5l3Ou5FzNGUWun7OZczznUs7lnCs5V3PGoVw/ZzPneM6lnMs5V3Ku5oxarp+zmXM851LO5ZwrOVdzxgFZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OOkiCJ+ESm+/Y21FCkimhHj0cmV/ofdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+H6kaPxR8862WkSk6v+OE+Uf56N5uMxPRnOwzJeieSlnq8pa81sPof3sTV8q4seRor/+9p0Bz+Pf13l252MQb31z49lna5081H1x4P3+J44fuzg4/BtP7/Q4bdeAk5fbM7duN8aGhodHezbX8rt/smfbQH7f4v50nYhYeOPN11vT01Pz9/6g/Ajsofoj9CDVHpeeelA9iNqBaMbD6TuPgfL6/16k+N13/7N7we9c/+vxK51nd67w8fM/27j+v7h1R7u8/te21svX//Kavt31/8mebS/m70b6ahH1xZtzfccj6gtvvHmqfbN1Y+rG1Mz506e/PDj45XOn+w5H1K+3p6d6Ht2XwwUAAAAAAAAAAAAAAADw4KQifj9StH68lhoRcbuarzVwcfDZU88cikPVfKtN87ZfG716qfHy7M25+amFhanJxthMe2J2cmq3b1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2rx+tX7q2sDjfmtj+5TgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVr5nSkX8PFL8zl89HZ+v2nk07jpmudzfRYqTFz6Xy8Xhsly3DZ37CnRmBpZl/y9S/NMvNpftzod8cqPsmV0f2EdEOf7HIsX3/+K78Zt52+b7P2w//ke37mifxv+pnm1HN92vYM9dJ4//qUjx0pNvx2/lbR90/4/uvTdO5MJ37s+xT+P/qZ5tA/l9f/v+dB0AAAAAAAAAAOCR1peK+PtI8cPhWnohb9vN7/9Nbt3RPv3+16d7tk3en/WKPvTBng8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLa8Wv2c79eq+wbcz5//9RrI7zu+924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dTHq/n8kzuup74SKV75n+dyuXS8LNddB36g+rN+ZXbm1KXp6dmJ1mLr2vRUY3SuNTFV1n0qUqz97edy3aJaX7273nxnjfeNtdjnI8XwP3TLdtZi765N/tRG2TNl2U9Eiv/+x81lu+tYf2qj7Nmy7N9Eiq//y/Zlj2+UPVeW/W6k+NHXG92yR8uy3fujfnqj7PMTs8U+jAoAAAAAAAAAAAAAAAAAAACPm75UxJ9Hiv+9uXxnLn9e/7+v52nlrW/2rPe/xe1qnf+Bav3/nR7fy/r/1X0FlnZ6VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S+fd9Qvt2du3R4bGt6+2pFU1TxUlS+/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UBaNx8/dbk9esLjbPPn9v08u2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3zu98l7bD9cBTx15Hiue/9NP2wP6KIvR+LD/ns7LcjVSdOVp0YGxquOjLdbs0sli+OdA9EEdHoqdTsHqMHMBZ70oxYKptfNvhk2b3RudZ869r0VGOkNb/YXmzPzoykTmvL/jSiiAspYjkiVvvv3l1fFPF6pPjOsbX0r/0Rh7rH4YtXRr96+uzO7Sj2sY+7ULaz0RexXDwCY3aA9UcR/xwpfvbOifi3/ohadL7iCxGvlvmDiLeiM96p/GCcj3hvm88Rj6ZaFPH/5fhfXEvv9Jfng+555fLXGl+ZuT7bU7Z7XuleH8q/eo/k9eFBOuDnpnoU8aPqjL+W/t3fawAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD78wpbs/caFxtXZvuTOvrzv3rzpleX19fb6RONnOO51zKuZxzJedqzihy/ZzNMuvr6+P5+VLO5ZwrOVdzxqFcP2cz53jOpZzLOVdyruaMWq6fs5lzPOdSzuWcKzlXc8YBmbsHAAAAAAAAAAAAAAAAAAB8vBTVfym+/Y21tN7fWV96PDq5Yj3Qj71fBgAA//8Ntfb5") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m0.898343106s ago: executing program 0 (id=1930): prlimit64(0x0, 0xb, &(0x7f0000000240)={0x0, 0x6}, 0x0) timer_create(0x0, 0x0, 0x0) 3m0.426905173s ago: executing program 0 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x13) 3m0.022321416s ago: executing program 32 (id=1938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad63367a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x13) 1m46.806136225s ago: executing program 1 (id=2926): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0xf, &(0x7f0000db9000/0x1000)=nil, 0x2) 1m46.64137519s ago: executing program 1 (id=2931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x63, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x46e}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 1m46.34514942s ago: executing program 1 (id=2938): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) write(r0, 0x0, 0x0) 1m46.184595112s ago: executing program 1 (id=2941): syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1d0, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m45.910250073s ago: executing program 1 (id=2948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xb0}}, 0x0) 1m45.384843558s ago: executing program 1 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f3100000017250017000000000400370009000300013725642558b9a64411f6bb744dc48f57", 0x39}], 0x1) 1m44.970614314s ago: executing program 33 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f3100000017250017000000000400370009000300013725642558b9a64411f6bb744dc48f57", 0x39}], 0x1) 3.38475653s ago: executing program 5 (id=4502): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) 3.297283186s ago: executing program 5 (id=4503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfb, {0x81, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) 3.00137682s ago: executing program 5 (id=4506): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:s}z '], 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.676786256s ago: executing program 5 (id=4510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @local}, {0x0, @broadcast}, 0x12, {0x2, 0x4e24, @loopback}, 'ip_vti0\x00'}) 2.632367571s ago: executing program 4 (id=4511): syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) 2.534607564s ago: executing program 5 (id=4512): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5952, &(0x7f0000005c80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1.232978685s ago: executing program 6 (id=4528): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x2, 0x6, 0xfffffffc, 'syz1\x00'}, 0x2, 0x20, 0x3, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 1.040040048s ago: executing program 6 (id=4531): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x5, @win={{0x8, 0x6, 0x8, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}}) 990.113445ms ago: executing program 2 (id=4532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsm_list_modules(0x0, 0x0, 0x3) 916.919363ms ago: executing program 3 (id=4533): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x49, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x50313134}) 886.094369ms ago: executing program 6 (id=4534): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x60}}, 0x0) 849.807841ms ago: executing program 2 (id=4535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000060000000000000000000085000000bc000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0x31, 0x0, 0x0, 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 752.750647ms ago: executing program 3 (id=4536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xac}}, 0x0) 733.688205ms ago: executing program 6 (id=4537): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x11}]}, 0x18}, 0x1, 0x0, 0x0, 0x30004832}, 0xc094) 683.869255ms ago: executing program 2 (id=4538): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 677.349204ms ago: executing program 4 (id=4539): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x40040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, 0x0) 556.778927ms ago: executing program 6 (id=4540): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00'}) 552.999489ms ago: executing program 4 (id=4541): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @mcast1, 0x9}, 0x1c) 510.078334ms ago: executing program 3 (id=4542): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14741313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 424.843372ms ago: executing program 2 (id=4543): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 393.707897ms ago: executing program 4 (id=4544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) 356.723118ms ago: executing program 6 (id=4545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 296.890775ms ago: executing program 3 (id=4546): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240), 0x0) 244.059518ms ago: executing program 5 (id=4547): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x2271, 0x0) 223.651068ms ago: executing program 2 (id=4548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 193.43568ms ago: executing program 4 (id=4549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x1}, 0x50) 153.084609ms ago: executing program 3 (id=4550): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) 47.226288ms ago: executing program 2 (id=4551): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 605.398µs ago: executing program 4 (id=4552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 0s ago: executing program 3 (id=4553): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x1, 0xa, 0x34524742, 0x7, 0x0, 0x3, 0x7, 0x3ff, 0x1, 0x2, 0x2, 0x1}}) kernel console output (not intermixed with test programs): /root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 298.845853][ T30] audit: type=1326 audit(1752670387.989:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 298.903341][ T30] audit: type=1326 audit(1752670388.019:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13430 comm="syz.5.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 298.916701][ T60] team0 (unregistering): Port device team_slave_0 removed [ 299.285196][T13453] netlink: 'syz.3.3066': attribute type 7 has an invalid length. [ 299.293508][T13453] netlink: 'syz.3.3066': attribute type 8 has an invalid length. [ 299.764622][ T5978] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 299.785100][T13238] chnl_net:caif_netlink_parms(): no params data found [ 299.806580][ T51] Bluetooth: hci3: command tx timeout [ 299.956221][ T5978] usb 4-1: Using ep0 maxpacket: 32 [ 299.982329][ T5978] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 300.037000][ T5978] usb 4-1: config 0 has no interface number 0 [ 300.043153][ T5978] usb 4-1: config 0 interface 244 altsetting 2 has an endpoint descriptor with address 0xB1, changing to 0x81 [ 300.172198][ T5978] usb 4-1: config 0 interface 244 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.234996][ T5978] usb 4-1: config 0 interface 244 has no altsetting 0 [ 300.279413][ T5978] usb 4-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 300.292229][T13484] loop2: detected capacity change from 0 to 1024 [ 300.299080][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.345354][ T5978] usb 4-1: Product: syz [ 300.370580][ T5978] usb 4-1: Manufacturer: syz [ 300.375206][ T5978] usb 4-1: SerialNumber: syz [ 300.400708][ T5978] usb 4-1: config 0 descriptor?? [ 300.418607][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.423625][ T5978] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort found [ 300.431907][T13484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.475269][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.501298][T13238] bridge_slave_0: entered allmulticast mode [ 300.509395][T13484] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 300.541750][T13238] bridge_slave_0: entered promiscuous mode [ 300.616546][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.623704][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.633608][ T5978] snd_usb_toneport 4-1:0.244: cannot get proper max packet size [ 300.640147][T13238] bridge_slave_1: entered allmulticast mode [ 300.653969][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.699602][ T5978] snd_usb_toneport 4-1:0.244: Line 6 GuitarPort now disconnected [ 300.717874][T13238] bridge_slave_1: entered promiscuous mode [ 300.748274][ T5978] snd_usb_toneport 4-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 300.848327][ T10] usb 4-1: USB disconnect, device number 21 [ 300.983808][T13511] netlink: 'syz.4.3085': attribute type 5 has an invalid length. [ 300.988993][T13506] bridge1: entered promiscuous mode [ 301.017666][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.087995][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.152363][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3086'. [ 301.203339][T13518] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 301.300662][T13238] team0: Port device team_slave_0 added [ 301.340500][T13238] team0: Port device team_slave_1 added [ 301.380406][T13523] loop5: detected capacity change from 0 to 512 [ 301.466583][T13523] __quota_error: 2 callbacks suppressed [ 301.466600][T13523] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 301.532976][T13523] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 301.552628][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.563690][T13523] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3088: Failed to acquire dquot type 1 [ 301.576572][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.603897][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.621664][T13523] EXT4-fs (loop5): 1 truncate cleaned up [ 301.629144][T13523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.666592][T13523] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.688118][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.695076][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.721039][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.840895][T13523] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 301.908605][ T51] Bluetooth: hci3: command tx timeout [ 301.954959][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.965930][T13523] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 301.989921][T13556] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3092'. [ 302.031423][T13523] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3088: Failed to acquire dquot type 1 [ 302.223510][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.343717][T13238] hsr_slave_0: entered promiscuous mode [ 302.381884][T13238] hsr_slave_1: entered promiscuous mode [ 302.413548][T13238] debugfs: 'hsr0' already exists in 'hsr' [ 302.442825][T13238] Cannot create hsr debugfs directory [ 302.649266][T13579] loop4: detected capacity change from 0 to 1024 [ 302.680346][T13587] netlink: 'syz.5.3104': attribute type 10 has an invalid length. [ 302.729127][T13587] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3104'. [ 302.754591][T13579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.815067][T13591] loop3: detected capacity change from 0 to 1024 [ 302.945578][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.367984][T13612] netlink: 'syz.5.3112': attribute type 1 has an invalid length. [ 303.433058][T13238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.528920][T13617] netlink: 636 bytes leftover after parsing attributes in process `syz.3.3115'. [ 303.553163][T13238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.590014][T13238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.611160][T13238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.646264][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 303.846958][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.873622][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.884818][ T10] usb 5-1: Product: syz [ 303.902452][ T10] usb 5-1: Manufacturer: syz [ 303.913949][ T10] usb 5-1: SerialNumber: syz [ 303.932025][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.998182][T11079] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 304.035838][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.168226][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.203848][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.211049][ T675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.292702][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.299900][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.474139][ T5849] usb 5-1: USB disconnect, device number 10 [ 304.557721][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 304.747420][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 304.776760][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.784786][ T10] usb 3-1: config 0 has no interface number 0 [ 304.823539][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 304.845253][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.875056][ T10] usb 3-1: Product: syz [ 304.879484][ T10] usb 3-1: Manufacturer: syz [ 304.885179][ T10] usb 3-1: SerialNumber: syz [ 304.892762][T13673] syz.3.3133 (13673): /proc/13671/oom_adj is deprecated, please use /proc/13671/oom_score_adj instead. [ 304.911991][ T10] usb 3-1: config 0 descriptor?? [ 304.921104][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 304.923405][T13238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.105406][T11079] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 305.150876][T11079] ath9k_htc: Failed to initialize the device [ 305.177045][ T5849] usb 5-1: ath9k_htc: USB layer deinitialized [ 305.286790][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3137'. [ 305.346770][ T5961] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 305.349270][ T10] gspca_spca1528: reg_w err -71 [ 305.406997][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 305.474059][ T10] usb 3-1: USB disconnect, device number 17 [ 305.529148][ T5961] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 305.562920][ T5961] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 305.591694][ T5961] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 305.633990][ T5961] usb 6-1: config 8 has no interface number 0 [ 305.660691][ T5961] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 305.686151][ T5961] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.734900][T13702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3142'. [ 305.747601][ T5961] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 305.783211][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.801207][ T5961] usb 6-1: Product: syz [ 305.820808][ T5961] usb 6-1: Manufacturer: syz [ 305.835611][ T5961] usb 6-1: SerialNumber: syz [ 305.858671][T13238] veth0_vlan: entered promiscuous mode [ 305.905997][T13238] veth1_vlan: entered promiscuous mode [ 306.016919][T13238] veth0_macvtap: entered promiscuous mode [ 306.065212][T13238] veth1_macvtap: entered promiscuous mode [ 306.091027][ T5961] usb 6-1: USB disconnect, device number 6 [ 306.169081][T13711] bond0: (slave bond_slave_0): Releasing backup interface [ 306.219824][T13717] overlay: Bad value for 'upperdir' [ 306.230884][T13238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.272952][T13238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.295957][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.345199][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.386675][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.389668][T13723] netlink: 'syz.2.3149': attribute type 1 has an invalid length. [ 306.418576][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.490297][T13548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.511767][T13548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.593201][ T675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.606589][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 306.615879][ T675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.684748][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3152'. [ 306.791618][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.826334][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.869998][T13740] netlink: 'syz.2.3156': attribute type 21 has an invalid length. [ 306.872899][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.930102][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 306.946147][ T10] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 306.954509][ T10] usb 4-1: Product: syz [ 306.977748][ T10] usb 4-1: Manufacturer: syz [ 306.982371][ T10] usb 4-1: SerialNumber: syz [ 307.006403][ T5961] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 307.012843][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input21 [ 307.028921][T11079] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 307.196532][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 307.197390][T11079] usb 6-1: Using ep0 maxpacket: 8 [ 307.236493][ T5961] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 307.264393][ T5961] usb 5-1: config 0 has no interface number 0 [ 307.282306][ T5961] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x3 has invalid maxpacket 51986, setting to 1024 [ 307.295296][T11079] usb 6-1: unable to get BOS descriptor or descriptor too short [ 307.307917][T11079] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 307.309490][ T5961] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 307.316005][T11079] usb 6-1: config 0 has no interface number 0 [ 307.336749][T11079] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 307.376599][ T5849] usb 4-1: USB disconnect, device number 22 [ 307.389641][T11079] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 307.409716][ T5961] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 307.427143][T11079] usb 6-1: config 0 interface 88 has no altsetting 0 [ 307.431613][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.449021][T11079] usb 6-1: language id specifier not provided by device, defaulting to English [ 307.454211][ T5849] appletouch 4-1:1.0: input: appletouch disconnected [ 307.480634][T11079] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 307.482664][ T5961] usb 5-1: Product: syz [ 307.514680][ T5961] usb 5-1: Manufacturer: syz [ 307.524801][ T5961] usb 5-1: SerialNumber: syz [ 307.525223][T11079] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 307.562417][T11079] usb 6-1: Product: syz [ 307.582112][ T5961] usb 5-1: config 0 descriptor?? [ 307.590235][T11079] usb 6-1: SerialNumber: syz [ 307.609114][T13735] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 307.640808][T11079] usb 6-1: config 0 descriptor?? [ 307.851380][ T5961] ath6kl: Failed to submit usb control message: -71 [ 307.869089][ T5961] ath6kl: unable to send the bmi data to the device: -71 [ 307.879797][T13734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.918242][ T5961] ath6kl: Unable to send get target info: -71 [ 307.938252][T11079] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input22 [ 307.964098][ T5961] ath6kl: Failed to init ath6kl core: -71 [ 307.989327][ T5961] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 308.035190][T13775] loop2: detected capacity change from 0 to 128 [ 308.056333][ T5961] usb 5-1: USB disconnect, device number 11 [ 308.076263][T11079] usb 6-1: USB disconnect, device number 7 [ 308.231792][ T6804] udevd[6804]: Error opening device "/dev/input/event4": No such file or directory [ 308.261704][ T6804] udevd[6804]: Unable to EVIOCGABS device "/dev/input/event4" [ 308.281029][ T6804] udevd[6804]: Unable to EVIOCGABS device "/dev/input/event4" [ 308.388091][T13786] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3169'. [ 308.597154][T13793] loop2: detected capacity change from 0 to 256 [ 308.931254][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3177'. [ 309.006365][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3177'. [ 309.133204][T13820] binder: 13819:13820 ioctl c018620c 200000000080 returned -22 [ 309.471483][T13831] loop3: detected capacity change from 0 to 1024 [ 309.532553][T13831] EXT4-fs: inline encryption not supported [ 309.556094][T13831] EXT4-fs: Ignoring removed i_version option [ 309.601955][T13831] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 309.719877][T13831] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3187: lblock 2 mapped to illegal pblock 2 (length 1) [ 309.806390][T13831] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 309.814535][T13831] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3187: lblock 0 mapped to illegal pblock 48 (length 1) [ 309.871083][T13831] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 309.904280][T13831] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3187: Failed to acquire dquot type 0 [ 309.980466][T13831] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6337: Corrupt filesystem [ 310.014099][T13831] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3187: mark_inode_dirty error [ 310.071824][T13831] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 310.106556][T13831] EXT4-fs (loop3): 1 orphan inode deleted [ 310.127022][T13548] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 310.177626][T13831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.208117][T13548] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 310.249851][T13548] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 310.261558][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3198'. [ 310.341226][T13831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.360323][T13831] EXT4-fs error (device loop3): __ext4_get_inode_loc:4864: comm syz.3.3187: Invalid inode table block 1 in block_group 0 [ 310.426122][T13831] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6337: Corrupt filesystem [ 310.487218][T13831] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.3187: mark_inode_dirty error [ 310.542633][ T30] audit: type=1326 audit(1752670399.789:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.6.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf18e929 code=0x7ffc0000 [ 310.546618][T13842] loop5: detected capacity change from 0 to 32768 [ 310.609252][T13875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 310.641272][ T30] audit: type=1326 audit(1752670399.819:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.6.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf18e929 code=0x7ffc0000 [ 310.656200][T13842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3192 (13842) [ 310.694612][T13875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3202'. [ 310.749748][ T30] audit: type=1326 audit(1752670399.819:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.6.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7ffbaf18e929 code=0x7ffc0000 [ 310.809955][T13842] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 310.883857][T13842] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 310.917701][ T30] audit: type=1326 audit(1752670399.819:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.6.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf18e929 code=0x7ffc0000 [ 310.944255][T13842] BTRFS info (device loop5): using free-space-tree [ 311.004086][ T30] audit: type=1326 audit(1752670399.819:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.6.3201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbaf18e929 code=0x7ffc0000 [ 311.107210][ T5961] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 311.178946][T13907] loop2: detected capacity change from 0 to 64 [ 311.199068][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 311.278861][T10656] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 311.289073][ T5961] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 311.289098][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.289117][ T5961] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.289136][ T5961] usb 4-1: config 1 has no interface number 0 [ 311.289162][ T5961] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 311.289195][ T5961] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 311.292989][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.401053][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.419516][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 311.439362][ T55] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.466933][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.474952][ T5961] usb 4-1: Product: syz [ 311.479662][ T55] usb 5-1: config 1 interface 0 has no altsetting 1 [ 311.516780][ T5961] usb 4-1: Manufacturer: syz [ 311.522103][ T5961] usb 4-1: SerialNumber: syz [ 311.536935][ T55] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.545987][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.554891][ T55] usb 5-1: Product: syz [ 311.580406][ T55] usb 5-1: Manufacturer: syz [ 311.587246][ T55] usb 5-1: SerialNumber: syz [ 311.608573][T13916] netlink: 'syz.2.3212': attribute type 3 has an invalid length. [ 311.646472][T13916] netlink: 'syz.2.3212': attribute type 1 has an invalid length. [ 311.676161][T13916] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3212'. [ 311.699550][ T55] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 311.723230][ T55] cdc_ncm 5-1:1.0: bind() failure [ 311.727174][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 311.785984][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 311.818072][T13922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.871382][ T10] usb 5-1: USB disconnect, device number 12 [ 312.075168][ T55] usb 4-1: USB disconnect, device number 23 [ 312.112082][T13930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.119357][T13930] IPv6: NLM_F_CREATE should be set when creating new route [ 312.286215][ T5961] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 312.447690][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 312.456672][ T5961] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 312.504196][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.525932][ T5961] usb 3-1: Product: syz [ 312.549905][ T5961] usb 3-1: Manufacturer: syz [ 312.554528][ T5961] usb 3-1: SerialNumber: syz [ 312.592593][ T5961] usb 3-1: config 0 descriptor?? [ 312.611388][ T5961] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 312.835457][ T5961] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 312.866232][ T5961] visor 3-1:0.0: probe with driver visor failed with error -5 [ 312.905742][T13957] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3224'. [ 312.938070][T13933] loop6: detected capacity change from 0 to 32768 [ 312.976746][T13933] btrfs: Deprecated parameter 'usebackuproot' [ 312.982862][T13933] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 313.023674][T13933] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3217 (13933) [ 313.044436][ T5961] usb 3-1: USB disconnect, device number 18 [ 313.109553][T13962] usb usb7: usbfs: process 13962 (syz.4.3226) did not claim interface 0 before use [ 313.111547][T13933] BTRFS info (device loop6 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 313.181700][T13933] BTRFS info (device loop6 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 313.253190][T13933] BTRFS info (device loop6 state S): disk space caching is enabled [ 313.296089][T13933] BTRFS warning (device loop6 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 313.333636][T13933] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 313.362852][T13969] kAFS: Can only specify source 'none' with -o dyn [ 313.419335][T13933] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 313.434057][T13971] loop3: detected capacity change from 0 to 2048 [ 313.481647][T13933] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 313.556167][T13933] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 313.564049][T13971] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.653634][ T30] audit: type=1800 audit(1752670402.889:67): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3229" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 313.695531][T13933] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 313.710766][T13986] loop5: detected capacity change from 0 to 64 [ 313.749458][T13933] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 313.840445][T13933] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 314.089613][T14004] __nla_validate_parse: 3 callbacks suppressed [ 314.089630][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 314.233599][T13933] btrfs: Deprecated parameter 'usebackuproot' [ 314.248151][T14008] loop2: detected capacity change from 0 to 256 [ 314.255134][T13933] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 314.325197][T13933] BTRFS warning (device loop6 state MCS): remount supports changing free space tree only from RO to RW [ 314.374904][T13933] BTRFS info (device loop6 state MCS): enabling free space tree [ 314.402494][T13933] BTRFS info (device loop6 state MCS): force clearing of disk cache [ 314.422005][T13984] loop4: detected capacity change from 0 to 32768 [ 314.433243][T13933] BTRFS info (device loop6 state MCS): trying to use backup root at mount time [ 314.462749][T13933] BTRFS info (device loop6 state MCS): disabling disk space caching [ 314.466546][T14008] FAT-fs (loop2): Directory bread(block 64) failed [ 314.471588][T13984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3231 (13984) [ 314.520199][T14008] FAT-fs (loop2): Directory bread(block 65) failed [ 314.561447][T14008] FAT-fs (loop2): Directory bread(block 66) failed [ 314.591049][T14008] FAT-fs (loop2): Directory bread(block 67) failed [ 314.592727][T13984] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.616437][T14008] FAT-fs (loop2): Directory bread(block 68) failed [ 314.622981][T14008] FAT-fs (loop2): Directory bread(block 69) failed [ 314.650708][T13984] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 314.651104][T13238] BTRFS info (device loop6 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 314.674861][T13984] BTRFS info (device loop4): using free-space-tree [ 314.685120][T14008] FAT-fs (loop2): Directory bread(block 70) failed [ 314.696076][T14008] FAT-fs (loop2): Directory bread(block 71) failed [ 314.696378][ T5961] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 314.702674][T14008] FAT-fs (loop2): Directory bread(block 72) failed [ 314.765415][T14008] FAT-fs (loop2): Directory bread(block 73) failed [ 314.866499][ T5961] usb 6-1: Using ep0 maxpacket: 8 [ 314.881122][ T5961] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 314.924771][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.953371][T13984] BTRFS info (device loop4): rebuilding free space tree [ 315.011296][ T5961] usb 6-1: config 0 descriptor?? [ 315.193858][ T5845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 315.248584][ T5961] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 315.364787][T14045] netlink: 'syz.3.3246': attribute type 2 has an invalid length. [ 315.457408][ T5961] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 315.498877][ T5961] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 315.530048][ T5961] asix 6-1:0.0: probe with driver asix failed with error -71 [ 315.560084][ T5961] usb 6-1: USB disconnect, device number 8 [ 316.418841][T14089] program syz.3.3264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.444608][T14092] netlink: 'syz.6.3266': attribute type 1 has an invalid length. [ 316.611747][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 316.626149][T14099] netlink: 'syz.3.3271': attribute type 3 has an invalid length. [ 316.644607][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3269'. [ 316.814854][T14103] loop5: detected capacity change from 0 to 4096 [ 316.820782][ T30] audit: type=1326 audit(1752670406.059:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee04b8e929 code=0x7ffc0000 [ 316.854377][T14105] loop6: detected capacity change from 0 to 4096 [ 316.866112][T14103] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 316.906448][T14105] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 316.937177][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.943507][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.958497][T14103] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 316.960088][ T30] audit: type=1326 audit(1752670406.059:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee04b8e929 code=0x7ffc0000 [ 317.084873][ T30] audit: type=1326 audit(1752670406.069:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fee04b8e929 code=0x7ffc0000 [ 317.154234][T14105] ntfs3(loop6): ino=19, mi_enum_attr [ 317.166884][T14105] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 317.188781][ T30] audit: type=1326 audit(1752670406.069:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee04b8e929 code=0x7ffc0000 [ 317.237101][T14105] ntfs3(loop6): failed to convert "c46c" to maccyrillic [ 317.257197][T14117] loop3: detected capacity change from 0 to 64 [ 317.282889][T14105] ntfs3(loop6): ino=20, mi_enum_attr [ 317.327157][ T30] audit: type=1326 audit(1752670406.069:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.3.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee04b8e929 code=0x7ffc0000 [ 317.943104][T14110] loop2: detected capacity change from 0 to 32768 [ 318.016460][T14110] ERROR: (device loop2): diNewExt: no free extents [ 318.016460][T14110] [ 318.051336][T14110] ialloc: diAlloc returned -5! [ 318.216229][ T5849] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 318.406068][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 318.430803][ T5849] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 318.460825][ T5849] usb 7-1: config 0 has no interface number 0 [ 318.494211][ T5849] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 318.525489][ T5849] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 318.564171][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.586413][ T5849] usb 7-1: Product: syz [ 318.590600][ T5849] usb 7-1: Manufacturer: syz [ 318.595223][ T5849] usb 7-1: SerialNumber: syz [ 318.621688][ T5849] usb 7-1: config 0 descriptor?? [ 318.683294][T14168] netlink: 'syz.2.3302': attribute type 5 has an invalid length. [ 318.790789][T14170] loop3: detected capacity change from 0 to 256 [ 318.804749][T14172] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 318.813968][T14170] exfat: Deprecated parameter 'utf8' [ 318.856157][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 318.872448][T14170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa943978a, utbl_chksum : 0xe619d30d) [ 318.958830][T14176] program syz.2.3306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.968994][T14170] overlay: filesystem on ./file0 not supported [ 319.077696][ T5849] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 319.107820][ T5849] usb 7-1: USB disconnect, device number 2 [ 319.402988][T14193] loop3: detected capacity change from 0 to 764 [ 319.498688][T14193] rock: directory entry would overflow storage [ 319.531848][T14193] rock: sig=0x4654, size=5, remaining=4 [ 319.572491][T14202] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.586441][T14193] isofs: Unable to find the ".." directory for NFS. [ 319.687285][T14206] netlink: 'syz.4.3319': attribute type 5 has an invalid length. [ 319.844516][T14212] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3320'. [ 319.881032][T14216] loop5: detected capacity change from 0 to 256 [ 319.958853][T14216] exfat: Deprecated parameter 'namecase' [ 320.029433][T14216] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 320.176464][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 320.210651][T14223] loop6: detected capacity change from 0 to 4096 [ 320.222082][T14228] netlink: 'syz.3.3329': attribute type 7 has an invalid length. [ 320.233482][T14223] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 320.243080][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3329'. [ 320.356369][ T43] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 320.386126][ T43] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 320.431469][ T43] usb 3-1: config 0 has no interface number 1 [ 320.442868][ T43] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.494676][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 320.581799][ T43] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 320.594670][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.603137][T14239] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3334'. [ 320.621657][ T43] usb 3-1: Product: syz [ 320.633356][ T43] usb 3-1: Manufacturer: syz [ 320.666070][ T43] usb 3-1: SerialNumber: syz [ 320.689041][ T43] usb 3-1: config 0 descriptor?? [ 320.723510][ T43] usb-storage 3-1:0.127: USB Mass Storage device detected [ 320.759355][ T43] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 320.795467][T14251] loop5: detected capacity change from 0 to 8 [ 320.903447][ T43] usb-storage 3-1:0.0: USB Mass Storage device detected [ 320.945327][T14218] loop2: detected capacity change from 0 to 1024 [ 320.984020][ T43] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 321.106692][T14218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.126142][ T5921] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 321.244729][T14269] loop4: detected capacity change from 0 to 1024 [ 321.293176][T11079] usb 3-1: USB disconnect, device number 19 [ 321.317312][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 321.347019][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.372659][ T5921] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 321.392925][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.409165][ T5921] usb 4-1: Product: syz [ 321.413758][ T5921] usb 4-1: Manufacturer: syz [ 321.423254][ T5921] usb 4-1: SerialNumber: syz [ 321.450861][ T5921] usb 4-1: config 0 descriptor?? [ 321.454901][T14273] loop6: detected capacity change from 0 to 1764 [ 321.713149][T11079] usb 4-1: USB disconnect, device number 24 [ 321.887233][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.559863][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3367'. [ 322.576574][T14321] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 322.588473][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3367'. [ 322.628405][T14318] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3367'. [ 323.074666][T14299] loop5: detected capacity change from 0 to 32768 [ 323.189339][T14343] loop6: detected capacity change from 0 to 1024 [ 323.282217][T14349] kAFS: No cell specified [ 323.357683][T14343] hfsplus: xattr searching failed [ 323.513374][T14357] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 323.556151][T14357] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 323.563577][T14357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.697850][T14364] autofs4:pid:14364:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.33), cmd(0xc0189375) [ 323.766560][T14364] autofs4:pid:14364:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 323.854544][T14368] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 323.896244][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 324.124549][ T30] audit: type=1326 audit(1752670413.369:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.5.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 324.213340][ T30] audit: type=1326 audit(1752670413.409:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.5.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 324.234276][T14384] loop6: detected capacity change from 0 to 512 [ 324.332430][ T30] audit: type=1326 audit(1752670413.409:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.5.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 324.341669][T14388] loop4: detected capacity change from 0 to 24 [ 324.392937][ T30] audit: type=1326 audit(1752670413.409:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.5.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 324.416137][ T30] audit: type=1326 audit(1752670413.409:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14379 comm="syz.5.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 324.424300][T14384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.439883][T14388] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 324.467766][T14393] loop2: detected capacity change from 0 to 64 [ 324.602451][T14388] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 324.722473][T14388] romfs: read error for inode 0x70040 [ 324.842465][T13238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.052427][T14413] loop2: detected capacity change from 0 to 128 [ 325.324713][T14419] loop5: detected capacity change from 0 to 2048 [ 325.368838][T14419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.381556][T14424] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 325.417503][T14424] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 325.437519][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 325.507658][T14427] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3410'. [ 325.544061][T14431] loop3: detected capacity change from 0 to 1764 [ 325.751003][T14440] C: renamed from team_slave_0 (while UP) [ 325.779614][T14438] loop6: detected capacity change from 0 to 2048 [ 325.819363][T14440] netlink: 'syz.5.3413': attribute type 1 has an invalid length. [ 325.841602][T14440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 325.907932][T14438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.920203][ T5978] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 325.997090][T14442] loop4: detected capacity change from 0 to 4096 [ 326.041558][T14442] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 326.067078][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3418'. [ 326.090572][T13238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.090968][T14452] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3418'. [ 326.131076][ T5978] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.163217][ T5978] usb 4-1: config 3 has an invalid interface number: 8 but max is 3 [ 326.175549][ T5978] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 326.186536][ T5978] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 326.215556][ T5978] usb 4-1: config 3 has no interface number 0 [ 326.289937][ T5978] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 326.342087][ T5978] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.395546][ T5978] usb 4-1: config 3 interface 8 has no altsetting 0 [ 326.408292][ T5978] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 326.436236][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.469159][ T5978] usb 4-1: Product: syz [ 326.473351][ T5978] usb 4-1: Manufacturer: syz [ 326.511566][ T5978] usb 4-1: SerialNumber: syz [ 326.781977][ T5978] appledisplay 4-1:3.8: Error while getting initial brightness: -71 [ 326.824327][ T5978] appledisplay 4-1:3.8: probe with driver appledisplay failed with error -71 [ 326.871334][ T5978] usbhid 4-1:3.8: can't add hid device: -22 [ 326.902566][T14476] loop5: detected capacity change from 0 to 512 [ 326.903523][ T5978] usbhid 4-1:3.8: probe with driver usbhid failed with error -22 [ 326.990566][ T5978] usb 4-1: USB disconnect, device number 25 [ 327.614296][T14489] loop2: detected capacity change from 0 to 4096 [ 327.644621][T14489] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 327.756611][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 327.912187][T14469] loop6: detected capacity change from 0 to 40427 [ 327.956119][T14469] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 327.962686][ T5921] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 328.007027][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.018155][T14469] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 328.042630][ T5921] usb 6-1: Product: syz [ 328.085080][ T5921] usb 6-1: Manufacturer: syz [ 328.089772][T14469] F2FS-fs (loop6): invalid crc value [ 328.100503][ T5921] usb 6-1: SerialNumber: syz [ 328.142071][T14510] loop3: detected capacity change from 0 to 164 [ 328.153410][ T5921] usb 6-1: config 0 descriptor?? [ 328.406529][ T5921] hso 6-1:0.0: Failed to find BULK IN ep [ 328.454348][ T5921] usb-storage 6-1:0.0: USB Mass Storage device detected [ 328.481479][T14469] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 328.574432][T14469] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 328.597064][T14469] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 328.698903][ T5921] usb 6-1: USB disconnect, device number 9 [ 328.777434][T14469] fscrypt (loop6, inode 3): Error -61 getting encryption context [ 328.973639][T14540] loop4: detected capacity change from 0 to 16 [ 329.001680][T14540] erofs (device loop4): mounted with root inode @ nid 36. [ 329.041859][T14542] loop3: detected capacity change from 0 to 128 [ 329.085788][T14542] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.142578][T14545] loop2: detected capacity change from 0 to 512 [ 329.315196][T14547] netlink: 'syz.5.3450': attribute type 28 has an invalid length. [ 329.342116][T14547] netlink: 'syz.5.3450': attribute type 29 has an invalid length. [ 329.382692][T14540] erofs (device loop4): corrupted dir block 72 @ nid 36 [ 329.390279][T14547] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3450'. [ 329.423490][T14545] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 329.525430][T14545] EXT4-fs (loop2): 1 truncate cleaned up [ 329.577510][T14545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.717327][T14545] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 329.881278][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.137196][T14577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 330.371499][T14588] loop5: detected capacity change from 0 to 512 [ 330.419936][T14588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.430699][T14592] loop6: detected capacity change from 0 to 1024 [ 330.444194][T14587] loop3: detected capacity change from 0 to 1024 [ 330.508665][T14588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 330.548352][T14588] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3464: invalid indirect mapped block 2683928664 (level 1) [ 330.622458][T14587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.666559][T14588] EXT4-fs (loop5): Remounting filesystem read-only [ 330.673570][T14588] EXT4-fs (loop5): 1 truncate cleaned up [ 330.681631][T14587] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.777814][T14588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.899809][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.916987][T14588] EXT4-fs warning (device loop5): ext4_empty_dir:3086: inode #2: comm syz.5.3464: directory missing '.' [ 331.072491][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.452294][T14584] loop2: detected capacity change from 0 to 32768 [ 331.578958][T14584] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 331.647143][ T30] audit: type=1800 audit(1752670420.879:78): pid=14584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3463" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 331.775662][ T5852] ocfs2: Unmounting device (7,2) on (node local) [ 331.929270][T14648] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 332.210001][T14658] loop5: detected capacity change from 0 to 1024 [ 332.453181][T14671] xt_limit: Overflow, try lower: 4294967295/4294966784 [ 332.480360][ T12] hfsplus: b-tree write err: -5, ino 4 [ 332.505009][T14662] loop3: detected capacity change from 0 to 4096 [ 332.599211][T14662] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 332.812624][T14662] ntfs3(loop3): ino=19, mi_enum_attr [ 332.890697][T14662] ntfs3(loop3): failed to convert "c46c" to macinuit [ 332.923922][T14662] ntfs3(loop3): ino=20, mi_enum_attr [ 332.933780][T14685] loop4: detected capacity change from 0 to 128 [ 333.079801][T14685] FAT-fs (loop4): error, clusters badly computed (4 != 3) [ 333.141636][T14685] FAT-fs (loop4): Filesystem has been set read-only [ 333.217007][T14685] FAT-fs (loop4): error, clusters badly computed (5 != 4) [ 333.224551][T14685] FAT-fs (loop4): error, clusters badly computed (6 != 5) [ 333.514120][T14701] loop6: detected capacity change from 0 to 2048 [ 333.634263][ T6543] Alternate GPT is invalid, using primary GPT. [ 333.656154][ T6543] loop6: p1 p2 p3 [ 333.757761][T14701] Alternate GPT is invalid, using primary GPT. [ 333.800390][T14701] loop6: p1 p2 p3 [ 334.029533][T14727] loop3: detected capacity change from 0 to 256 [ 334.121415][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 334.133733][ T6804] udevd[6804]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 334.133928][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 334.180309][T14727] FAT-fs (loop3): Directory bread(block 64) failed [ 334.234682][T14727] FAT-fs (loop3): Directory bread(block 65) failed [ 334.287509][T14727] FAT-fs (loop3): Directory bread(block 66) failed [ 334.294044][T14727] FAT-fs (loop3): Directory bread(block 67) failed [ 334.353527][T14727] FAT-fs (loop3): Directory bread(block 68) failed [ 334.380154][ T6095] udevd[6095]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 334.410676][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 334.421282][ T6804] udevd[6804]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 334.431404][T14727] FAT-fs (loop3): Directory bread(block 69) failed [ 334.456278][T14727] FAT-fs (loop3): Directory bread(block 70) failed [ 334.472098][T14727] FAT-fs (loop3): Directory bread(block 71) failed [ 334.516492][T14727] FAT-fs (loop3): Directory bread(block 72) failed [ 334.523043][T14727] FAT-fs (loop3): Directory bread(block 73) failed [ 335.202227][T14765] loop4: detected capacity change from 0 to 764 [ 335.260316][T14765] Symlink component flag not implemented [ 335.284581][T14721] loop5: detected capacity change from 0 to 32768 [ 335.284622][T14765] Symlink component flag not implemented [ 335.338480][T14765] Symlink component flag not implemented (129) [ 335.373029][T14765] Symlink component flag not implemented (6) [ 335.599559][T14776] loop6: detected capacity change from 0 to 256 [ 335.770713][T14776] FAT-fs (loop6): Directory bread(block 64) failed [ 335.826980][T14776] FAT-fs (loop6): Directory bread(block 65) failed [ 335.868356][T14776] FAT-fs (loop6): Directory bread(block 66) failed [ 335.874930][T14776] FAT-fs (loop6): Directory bread(block 67) failed [ 335.936501][T14776] FAT-fs (loop6): Directory bread(block 68) failed [ 335.943095][T14776] FAT-fs (loop6): Directory bread(block 69) failed [ 335.994877][T14776] FAT-fs (loop6): Directory bread(block 70) failed [ 336.029736][T14776] FAT-fs (loop6): Directory bread(block 71) failed [ 336.063637][T14776] FAT-fs (loop6): Directory bread(block 72) failed [ 336.096098][T14776] FAT-fs (loop6): Directory bread(block 73) failed [ 336.274641][T14762] loop3: detected capacity change from 0 to 32768 [ 336.373626][T14762] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3530 (14762) [ 336.431119][T14762] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 336.501885][T14762] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 336.556142][T14762] BTRFS info (device loop3): disk space caching is enabled [ 336.563378][T14762] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 336.833128][T14762] BTRFS info (device loop3): rebuilding free space tree [ 336.899963][T14762] BTRFS info (device loop3): disabling free space tree [ 336.930832][T14762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 337.002127][T14840] loop6: detected capacity change from 0 to 256 [ 337.016158][T14762] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 337.059201][T14840] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 337.165955][T14839] loop4: detected capacity change from 0 to 4096 [ 337.212549][T14839] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 337.246501][T11079] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 337.320669][ T5839] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 337.379307][T14846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3556'. [ 337.405544][T14846] netlink: 'syz.2.3556': attribute type 2 has an invalid length. [ 337.424191][T11079] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.462811][T11079] usb 6-1: config 0 has no interface number 0 [ 337.472322][T11079] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 337.473292][T14839] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 337.498194][T11079] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.566390][T11079] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 337.606093][T11079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.666546][T11079] usb 6-1: config 0 descriptor?? [ 337.712880][T11079] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 337.958036][T14842] iowarrior 6-1:0.1: Error -90 while submitting URB [ 338.009373][T11079] usb 6-1: USB disconnect, device number 10 [ 338.252163][T14873] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 338.834928][T14895] loop5: detected capacity change from 0 to 1764 [ 338.865919][T14897] loop3: detected capacity change from 0 to 128 [ 338.923169][T14897] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 338.945790][T14895] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 339.195900][T14876] loop4: detected capacity change from 0 to 32768 [ 339.433903][T14924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.491480][T14876] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 339.491506][T14876] allowing incompatible features above 0.0: (unknown version) [ 339.491517][T14876] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 339.655257][T14933] batadv_slave_0: entered promiscuous mode [ 339.655281][T14933] batadv_slave_0: entered allmulticast mode [ 339.738523][T14876] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 339.795688][T14876] bcachefs (loop4): initializing new filesystem [ 339.848265][T14937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.855487][T14937] IPv6: NLM_F_CREATE should be set when creating new route [ 339.862859][T14937] IPv6: NLM_F_CREATE should be set when creating new route [ 339.937290][T14876] bcachefs (loop4): going read-write [ 340.091881][T14945] xt_TCPMSS: Only works on TCP SYN packets [ 340.138740][T14876] bcachefs (loop4): initializing freespace [ 340.514692][T14934] loop6: detected capacity change from 0 to 32768 [ 340.610496][T14961] loop3: detected capacity change from 0 to 128 [ 340.618010][T14961] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.636318][T14961] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.666158][ T5849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.786101][ T5845] bcachefs (loop4): clean shutdown complete, journal seq 23 [ 340.871689][ T5849] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 340.906421][ T5849] usb 3-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 340.949957][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 340.988530][ T5849] usb 3-1: config 1 has no interface number 0 [ 340.995239][ T5849] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 341.025569][ T5849] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 341.051753][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.066098][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.084511][ T5849] usb 3-1: Product: syz [ 341.094644][ T5849] usb 3-1: Manufacturer: syz [ 341.104752][ T5849] usb 3-1: SerialNumber: syz [ 341.145854][ T5849] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 341.168344][ T5849] cdc_ncm 3-1:1.1: bind() failure [ 341.176190][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 341.235159][T14970] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3612'. [ 341.350266][ T5849] usb 3-1: USB disconnect, device number 20 [ 341.356314][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 341.375492][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 341.395883][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 341.420530][ T43] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 341.441534][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.455985][ T43] usb 7-1: Product: syz [ 341.460425][ T43] usb 7-1: Manufacturer: syz [ 341.465827][ T43] usb 7-1: SerialNumber: syz [ 341.487996][ T43] usb 7-1: config 0 descriptor?? [ 341.516473][T14978] netlink: 'syz.5.3616': attribute type 6 has an invalid length. [ 341.934483][ T5921] usb 7-1: USB disconnect, device number 3 [ 342.017500][T14998] loop3: detected capacity change from 0 to 256 [ 342.127762][T14998] FAT-fs (loop3): Directory bread(block 64) failed [ 342.134797][T14998] FAT-fs (loop3): Directory bread(block 65) failed [ 342.151010][T14998] FAT-fs (loop3): Directory bread(block 66) failed [ 342.176211][T14998] FAT-fs (loop3): Directory bread(block 67) failed [ 342.183727][T14998] FAT-fs (loop3): Directory bread(block 68) failed [ 342.204256][T14998] FAT-fs (loop3): Directory bread(block 69) failed [ 342.217620][T14998] FAT-fs (loop3): Directory bread(block 70) failed [ 342.224177][T14998] FAT-fs (loop3): Directory bread(block 71) failed [ 342.231196][T14998] FAT-fs (loop3): Directory bread(block 72) failed [ 342.238761][T14998] FAT-fs (loop3): Directory bread(block 73) failed [ 342.505429][T15014] netlink: 'syz.5.3635': attribute type 1 has an invalid length. [ 342.543351][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3635'. [ 342.604670][T15016] loop3: detected capacity change from 0 to 1024 [ 342.637148][T15020] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 342.753754][T15024] tmpfs: Bad value for 'mpol' [ 342.978145][T15028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 342.985579][T15028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.016470][T15026] loop6: detected capacity change from 0 to 2048 [ 343.056804][T15026] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 343.097153][T15026] NILFS (loop6): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 343.198884][T15026] kAFS: No cell specified [ 343.622514][T15060] loop2: detected capacity change from 0 to 128 [ 343.660242][T15060] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 344.441771][T15055] loop6: detected capacity change from 0 to 32768 [ 344.462697][T15055] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3654 (15055) [ 344.560514][T15055] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 344.606246][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 344.608116][T15055] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 344.623479][T15091] loop3: detected capacity change from 0 to 16 [ 344.640573][T15092] fuse: Invalid rootmode [ 344.670001][T15091] erofs (device loop3): mounted with root inode @ nid 36. [ 344.716183][T15055] BTRFS info (device loop6): using free-space-tree [ 344.807941][T15062] loop4: detected capacity change from 0 to 32768 [ 344.844779][T15105] CIFS mount error: No usable UNC path provided in device string! [ 344.844779][T15105] [ 344.876348][T15105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 344.960100][T15062] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.141906][T15062] XFS (loop4): Ending clean mount [ 345.308065][ T5845] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 345.366131][T13238] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 345.632567][T15084] loop5: detected capacity change from 0 to 32768 [ 345.687857][T15084] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3668 (15084) [ 345.798135][T15084] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 345.829471][T15084] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 345.894238][T15084] BTRFS info (device loop5): disk space caching is enabled [ 345.917582][T15084] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 346.123627][T15117] loop3: detected capacity change from 0 to 32768 [ 346.169914][T15084] BTRFS info (device loop5): rebuilding free space tree [ 346.290177][T15084] BTRFS info (device loop5): disabling free space tree [ 346.326250][T15084] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 346.337424][T15084] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 346.581811][T10656] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 347.494203][T15215] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 347.532849][T15215] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 347.629296][T15221] loop3: detected capacity change from 0 to 128 [ 347.730029][T15221] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 347.808836][T15232] loop4: detected capacity change from 0 to 64 [ 347.956454][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.536132][ T43] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 348.571982][T15231] loop6: detected capacity change from 0 to 32768 [ 348.628182][T15231] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.629052][T15258] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3732'. [ 348.736267][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 348.767051][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.775061][ T43] usb 4-1: Product: syz [ 348.805839][T15231] XFS (loop6): Ending clean mount [ 348.831225][ T43] usb 4-1: Manufacturer: syz [ 348.835845][ T43] usb 4-1: SerialNumber: syz [ 348.905762][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 348.931678][T13238] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 348.974719][ T5849] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 349.046776][T15278] netlink: 'syz.2.3739': attribute type 10 has an invalid length. [ 349.054763][T15278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3739'. [ 349.076301][T15278] team0: entered promiscuous mode [ 349.091072][T15278] team_slave_0: entered promiscuous mode [ 349.097672][T15278] team_slave_1: entered promiscuous mode [ 349.103759][T15278] team0: entered allmulticast mode [ 349.111403][T15278] team_slave_0: entered allmulticast mode [ 349.140491][T15278] team_slave_1: entered allmulticast mode [ 349.169928][T15278] bridge0: port 3(team0) entered blocking state [ 349.201983][T15278] bridge0: port 3(team0) entered disabled state [ 349.230249][T15278] bridge0: port 3(team0) entered blocking state [ 349.236667][T15278] bridge0: port 3(team0) entered forwarding state [ 349.451005][ T5978] usb 4-1: USB disconnect, device number 26 [ 349.483607][T15284] loop5: detected capacity change from 0 to 256 [ 349.543729][T15284] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 349.832716][T15290] bond1: entered promiscuous mode [ 349.851037][T15290] bond1: entered allmulticast mode [ 349.860546][T15290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.044458][T15302] loop5: detected capacity change from 0 to 256 [ 350.057202][ T5849] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 350.106204][ T5849] ath9k_htc: Failed to initialize the device [ 350.123673][ T5978] usb 4-1: ath9k_htc: USB layer deinitialized [ 350.139034][T15293] loop4: detected capacity change from 0 to 32768 [ 350.225231][T15302] FAT-fs (loop5): Directory bread(block 64) failed [ 350.260962][T15302] FAT-fs (loop5): Directory bread(block 65) failed [ 350.268094][T15302] FAT-fs (loop5): Directory bread(block 66) failed [ 350.276500][T15302] FAT-fs (loop5): Directory bread(block 67) failed [ 350.283206][T15302] FAT-fs (loop5): Directory bread(block 68) failed [ 350.291129][T15302] FAT-fs (loop5): Directory bread(block 69) failed [ 350.298758][T15302] FAT-fs (loop5): Directory bread(block 70) failed [ 350.319079][T15302] FAT-fs (loop5): Directory bread(block 71) failed [ 350.325721][T15302] FAT-fs (loop5): Directory bread(block 72) failed [ 350.387224][T15302] FAT-fs (loop5): Directory bread(block 73) failed [ 350.674102][T15320] loop3: detected capacity change from 0 to 128 [ 350.716344][T15320] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.806360][T15320] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.906189][T15320] ext4 filesystem being mounted at /778/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.967025][T15320] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.3758: No space for directory leaf checksum. Please run e2fsck -D. [ 350.987060][T15330] loop4: detected capacity change from 0 to 16 [ 350.994360][T15330] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 351.018277][T15320] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.3758: checksumming directory block 0 [ 351.091414][T15332] loop2: detected capacity change from 0 to 2048 [ 351.170905][T15336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.258230][T15332] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 351.272984][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.285513][T15312] loop6: detected capacity change from 0 to 40427 [ 351.319060][T15312] F2FS-fs: heap/no_heap options were deprecated [ 351.393903][T15312] F2FS-fs (loop6): invalid crc value [ 351.426277][T15312] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 351.675976][T15347] loop4: detected capacity change from 0 to 4096 [ 351.703536][T15353] netlink: 201916 bytes leftover after parsing attributes in process `syz.3.3772'. [ 351.715897][T15312] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 351.745143][T15347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.779619][T15312] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 351.867130][T15347] Quota error (device loop4): do_check_range: Getting block 65282 out of range 1-5 [ 351.921573][T15359] loop3: detected capacity change from 0 to 512 [ 351.940325][T15347] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 351.978051][T15347] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3770: Failed to acquire dquot type 0 [ 352.067780][T15359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.118596][T15359] ext4 filesystem being mounted at /781/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.216299][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.322395][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.805928][T15391] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 352.975961][T15399] dvmrp0: entered allmulticast mode [ 353.613478][T15431] xt_hashlimit: max too large, truncated to 1048576 [ 353.824336][T15441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3813'. [ 354.043084][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3820'. [ 354.087105][T15456] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (255) [ 354.215234][T15461] netlink: 'syz.5.3822': attribute type 15 has an invalid length. [ 354.241588][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3824'. [ 354.276471][T15464] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 354.940604][T15498] loop3: detected capacity change from 0 to 164 [ 355.017516][T15498] ISOFS: unable to read i-node block [ 355.034783][T15498] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 355.143731][T15502] Unknown options in mask 5 [ 355.223194][T15506] netlink: 'syz.6.3843': attribute type 1 has an invalid length. [ 355.266675][T15506] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3843'. [ 355.620794][T15485] loop5: detected capacity change from 0 to 32768 [ 355.635188][T15485] XFS: noikeep mount option is deprecated. [ 355.718741][T15485] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 355.934644][T15542] loop3: detected capacity change from 0 to 64 [ 355.954603][T15542] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 355.980096][T15542] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 356.002124][T15485] XFS (loop5): Ending clean mount [ 356.042238][T15485] XFS (loop5): Quotacheck needed: Please wait. [ 356.137326][T15485] XFS (loop5): Quotacheck: Done. [ 356.244967][T10656] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 356.828150][T15568] netlink: 'syz.6.3870': attribute type 1 has an invalid length. [ 356.863357][T15568] netlink: 'syz.6.3870': attribute type 2 has an invalid length. [ 356.893175][T15568] netlink: 'syz.6.3870': attribute type 1 has an invalid length. [ 357.165370][T15550] loop3: detected capacity change from 0 to 32768 [ 357.210449][T15550] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3860 (15550) [ 357.279924][T15585] loop5: detected capacity change from 0 to 1024 [ 357.291445][T15588] loop2: detected capacity change from 0 to 64 [ 357.301386][T15550] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 357.333589][T15550] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 357.350495][T15585] syz.5.3879: attempt to access beyond end of device [ 357.350495][T15585] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 357.367567][T15585] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 357.390304][T15590] loop4: detected capacity change from 0 to 8 [ 357.397236][T15585] syz.5.3879: attempt to access beyond end of device [ 357.397236][T15585] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 357.406109][T15550] BTRFS info (device loop3): using free-space-tree [ 357.451743][T15590] squashfs: Unknown parameter 'ÿÃ4…ãùrV¦w' [ 357.504854][T15585] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 357.815677][T15613] loop6: detected capacity change from 0 to 1764 [ 357.904284][ T5839] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 358.163664][T15626] netlink: 'syz.5.3893': attribute type 21 has an invalid length. [ 358.348602][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 359.131431][T15670] loop4: detected capacity change from 0 to 256 [ 359.180413][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3914'. [ 359.218095][T15670] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.294484][T15670] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 359.401175][T15670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 359.972762][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 360.000361][T15712] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 360.036043][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3932'. [ 360.271604][T15722] loop2: detected capacity change from 0 to 16 [ 360.329339][T15724] netlink: 'syz.4.3940': attribute type 7 has an invalid length. [ 360.361002][T15726] tmpfs: Group quota block hardlimit too large. [ 360.396742][T15722] erofs (device loop2): mounted with root inode @ nid 36. [ 360.743986][T15740] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3948'. [ 360.949647][T15710] loop6: detected capacity change from 0 to 32768 [ 360.977658][T15710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3933 (15710) [ 361.013299][T15748] loop5: detected capacity change from 0 to 128 [ 361.046132][T15710] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.082103][T15710] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 361.104628][T15710] BTRFS info (device loop6): using free-space-tree [ 361.275720][T15710] BTRFS info (device loop6): rebuilding free space tree [ 361.410958][T15775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.433436][T15773] netlink: 'syz.2.3958': attribute type 1 has an invalid length. [ 361.563327][T13238] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.758508][T15738] loop3: detected capacity change from 0 to 32768 [ 361.790295][T15738] [ 361.790295][T15738] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 361.790295][T15738] [ 361.862034][T15738] ERROR: (device loop3): diWrite: ixpxd invalid [ 361.862034][T15738] [ 361.909993][T15738] ERROR: (device loop3): remounting filesystem as read-only [ 361.954720][T15738] ERROR: (device loop3): txCommit: [ 361.954720][T15738] [ 362.542982][T15813] loop3: detected capacity change from 0 to 8 [ 362.573905][T15813] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 362.652584][ T6543] udevd[6543]: incorrect cramfs checksum on /dev/loop3 [ 362.846955][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3983'. [ 363.135306][T15837] loop2: detected capacity change from 0 to 256 [ 363.270968][T15837] FAT-fs (loop2): Directory bread(block 64) failed [ 363.297563][T15837] FAT-fs (loop2): Directory bread(block 65) failed [ 363.304262][T15837] FAT-fs (loop2): Directory bread(block 66) failed [ 363.339664][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 363.353019][T15837] FAT-fs (loop2): Directory bread(block 67) failed [ 363.388056][T15837] FAT-fs (loop2): Directory bread(block 68) failed [ 363.414772][T15837] FAT-fs (loop2): Directory bread(block 69) failed [ 363.443256][T15837] FAT-fs (loop2): Directory bread(block 70) failed [ 363.473312][T15837] FAT-fs (loop2): Directory bread(block 71) failed [ 363.515143][T15837] FAT-fs (loop2): Directory bread(block 72) failed [ 363.529005][ T10] usb 5-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 363.546232][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 363.560027][T15837] FAT-fs (loop2): Directory bread(block 73) failed [ 363.576544][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 363.607624][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 363.656493][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 363.695909][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 363.722560][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.729649][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3999'. [ 363.741369][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3999'. [ 363.748634][ T10] usb 5-1: Product: syz [ 363.754471][ T10] usb 5-1: Manufacturer: syz [ 363.769496][ T10] usb 5-1: SerialNumber: syz [ 363.780431][ T10] usb 5-1: config 0 descriptor?? [ 363.789355][T15835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.798773][ T10] usb 5-1: ucan: probing device on interface #0 [ 363.805057][ T10] usb 5-1: ucan: invalid endpoint configuration [ 363.830434][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 363.958475][T15866] loop2: detected capacity change from 0 to 64 [ 364.005264][ T5921] usb 5-1: USB disconnect, device number 13 [ 364.348340][T15880] netlink: 'syz.3.4008': attribute type 10 has an invalid length. [ 364.356375][T15880] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4008'. [ 364.365911][T15880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.330885][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.364771][T15886] loop5: detected capacity change from 0 to 32768 [ 365.506091][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 365.515943][ T5921] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 365.536141][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.553199][ T5921] usb 4-1: Product: syz [ 365.557951][ T5921] usb 4-1: Manufacturer: syz [ 365.562568][ T5921] usb 4-1: SerialNumber: syz [ 365.571329][ T5921] usb 4-1: config 0 descriptor?? [ 365.658696][T15886] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 365.658722][T15886] allowing incompatible features above 0.0: (unknown version) [ 365.658734][T15886] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 365.706120][T15886] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 365.714394][T15886] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 365.724140][T15886] bcachefs (loop5): Version upgrade required: [ 365.724140][T15886] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 365.724140][T15886] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 365.724140][T15886] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 365.814898][T15886] bcachefs (loop5): dropping and reconstructing all alloc info [ 365.824322][ T5921] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 365.888982][T15886] bcachefs (loop5): accounting_read... done [ 365.897055][T15886] bcachefs (loop5): alloc_read... done [ 365.914621][T15886] bcachefs (loop5): snapshots_read... done [ 365.936150][T15886] bcachefs (loop5): check_allocations... done [ 366.011768][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4037'. [ 366.029871][ T5921] usb 4-1: USB disconnect, device number 27 [ 366.041754][T15886] bcachefs (loop5): going read-write [ 366.085283][T15886] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 366.269765][T15922] loop4: detected capacity change from 0 to 32768 [ 366.319444][T10656] bcachefs (loop5): unclean shutdown complete, journal seq 13 [ 366.365226][T15922] ERROR: (device loop4): diAllocAG: error reading iag [ 366.365226][T15922] [ 366.414634][T15922] ialloc: diAlloc returned -5! [ 366.674552][T15966] netlink: 'syz.4.4045': attribute type 8 has an invalid length. [ 366.718787][T15962] loop2: detected capacity change from 0 to 4096 [ 366.978822][T15973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4051'. [ 367.117041][T15977] netlink: 'syz.6.4053': attribute type 1 has an invalid length. [ 367.137685][ T5849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 367.166139][T15977] netlink: 15 bytes leftover after parsing attributes in process `syz.6.4053'. [ 367.221314][T15982] program syz.2.4056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.321177][ T5849] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 367.333989][ T5849] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 367.381478][ T5849] usb 4-1: config 220 has no interface number 2 [ 367.413776][ T5849] usb 4-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 367.445674][ T5849] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid wMaxPacketSize 0 [ 367.471164][ T5849] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 367.494708][ T5849] usb 4-1: config 220 interface 0 has no altsetting 0 [ 367.501876][ T5849] usb 4-1: config 220 interface 76 has no altsetting 0 [ 367.509067][ T5849] usb 4-1: config 220 interface 1 has no altsetting 0 [ 367.519015][ T5849] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 367.523506][T15993] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4061'. [ 367.536050][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.554398][ T5849] usb 4-1: Product: syz [ 367.559585][ T5849] usb 4-1: Manufacturer: syz [ 367.564193][ T5849] usb 4-1: SerialNumber: syz [ 367.826655][ T5849] usb 4-1: selecting invalid altsetting 0 [ 367.860291][ T5849] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 367.870524][ T5849] usb 4-1: No valid video chain found. [ 367.929697][ T5849] usb 4-1: selecting invalid altsetting 0 [ 367.935455][ T5849] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 367.986134][ T5849] usb 4-1: USB disconnect, device number 28 [ 368.014514][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4069'. [ 368.376496][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.557932][ T43] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 368.592758][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.635673][ T43] usb 7-1: config 0 descriptor?? [ 368.859450][ T43] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 368.884987][T16042] loop5: detected capacity change from 0 to 1024 [ 368.992318][T16042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.019947][T16050] openvswitch: netlink: Message has 4 unknown bytes. [ 369.060009][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 369.065816][T16052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4086'. [ 369.084235][T16042] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 369.093179][T16042] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 369.107144][T16042] overlayfs: missing 'lowerdir' [ 369.124338][ T43] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 369.131585][ T43] [drm] Initialized udl on minor 2 [ 369.138658][ T43] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.194298][ T43] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 369.203151][ T5849] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.233228][ T5849] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 369.246517][ T43] usb 7-1: USB disconnect, device number 4 [ 369.260231][ T5849] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 369.270677][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.330538][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4091'. [ 369.439983][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4092'. [ 369.633798][T16071] Cannot find del_set index 2 as target [ 370.089917][T16097] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 370.309119][T16106] loop2: detected capacity change from 0 to 512 [ 370.347095][T16106] EXT4-fs: Ignoring removed orlov option [ 370.374526][T16106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.440138][T16106] EXT4-fs (loop2): orphan cleanup on readonly fs [ 370.471546][T16106] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4113: bg 0: block 248: padding at end of block bitmap is not set [ 370.575255][T16106] Quota error (device loop2): write_blk: dquota write failed [ 370.606565][T16106] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 370.633406][T16106] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4113: Failed to acquire dquot type 1 [ 370.679693][T16106] EXT4-fs (loop2): 1 truncate cleaned up [ 370.698122][T16106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.741789][T16106] EXT4-fs: Ignoring removed orlov option [ 370.748172][T16106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.802247][T16106] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 370.859951][T16106] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.4113: Abort forced by user [ 370.903494][T16106] EXT4-fs (loop2): Remounting filesystem read-only [ 370.918996][T16106] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 370.926246][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4121'. [ 370.938532][T16096] loop6: detected capacity change from 0 to 32768 [ 370.976076][T16127] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4121'. [ 370.976145][T16106] ext4 filesystem being remounted at /846/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.058888][T16096] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 371.129441][T16096] XFS (loop6): Ending clean mount [ 371.169100][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.360476][T16150] loop2: detected capacity change from 0 to 256 [ 371.372117][T13238] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 371.516153][ T5921] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 371.532541][T16150] FAT-fs (loop2): Directory bread(block 64) failed [ 371.550936][T16150] FAT-fs (loop2): Directory bread(block 65) failed [ 371.585094][T16150] FAT-fs (loop2): Directory bread(block 66) failed [ 371.612189][T16150] FAT-fs (loop2): Directory bread(block 67) failed [ 371.624117][T16150] FAT-fs (loop2): Directory bread(block 68) failed [ 371.642948][T16150] FAT-fs (loop2): Directory bread(block 69) failed [ 371.674269][T16150] FAT-fs (loop2): Directory bread(block 70) failed [ 371.696116][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 371.701387][T16150] FAT-fs (loop2): Directory bread(block 71) failed [ 371.717216][T16150] FAT-fs (loop2): Directory bread(block 72) failed [ 371.726252][ T5921] usb 4-1: config 0 has an invalid interface number: 54 but max is 0 [ 371.744128][T16150] FAT-fs (loop2): Directory bread(block 73) failed [ 371.751001][ T5921] usb 4-1: config 0 has no interface number 0 [ 371.763752][T16156] netlink: 41 bytes leftover after parsing attributes in process `syz.4.4133'. [ 371.775396][ T5921] usb 4-1: config 0 interface 54 has no altsetting 0 [ 371.795664][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4133'. [ 371.817206][ T5921] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 371.839402][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.855698][ T5921] usb 4-1: Product: syz [ 371.869383][ T5921] usb 4-1: Manufacturer: syz [ 371.883244][ T5921] usb 4-1: SerialNumber: syz [ 371.917005][ T5921] usb 4-1: config 0 descriptor?? [ 372.154500][ T5921] ums_eneub6250 4-1:0.54: USB Mass Storage device detected [ 372.424336][ T5921] usb 4-1: USB disconnect, device number 29 [ 372.663633][T16173] loop5: detected capacity change from 0 to 1024 [ 372.676927][T16173] EXT4-fs: Ignoring removed bh option [ 372.819864][T16179] loop3: detected capacity change from 0 to 2048 [ 372.836496][T16173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 372.861138][T16179] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 372.956373][T16183] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.014279][T16167] loop6: detected capacity change from 0 to 32768 [ 373.122134][T16167] JBD2: Ignoring recovery information on journal [ 373.201981][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 373.326201][T16167] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 373.478516][T16204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4151'. [ 373.611953][T13238] ocfs2: Unmounting device (7,6) on (node local) [ 373.720152][T16213] loop2: detected capacity change from 0 to 256 [ 374.073640][T16224] loop2: detected capacity change from 0 to 256 [ 374.229993][T16224] FAT-fs (loop2): Directory bread(block 64) failed [ 374.256910][T16224] FAT-fs (loop2): Directory bread(block 65) failed [ 374.263514][T16224] FAT-fs (loop2): Directory bread(block 66) failed [ 374.337983][T16224] FAT-fs (loop2): Directory bread(block 67) failed [ 374.344608][T16224] FAT-fs (loop2): Directory bread(block 68) failed [ 374.386273][T16237] netlink: 'syz.4.4168': attribute type 10 has an invalid length. [ 374.394205][T16224] FAT-fs (loop2): Directory bread(block 69) failed [ 374.416247][T16224] FAT-fs (loop2): Directory bread(block 70) failed [ 374.425752][T16237] team0: Device ipvlan1 failed to register rx_handler [ 374.440671][T16224] FAT-fs (loop2): Directory bread(block 71) failed [ 374.459903][T16224] FAT-fs (loop2): Directory bread(block 72) failed [ 374.484919][T16224] FAT-fs (loop2): Directory bread(block 73) failed [ 374.736111][ T5921] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 374.926781][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 374.939230][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 374.949812][ T5921] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 374.980659][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.023047][ T5921] usb 6-1: config 0 descriptor?? [ 375.049978][ T5921] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 375.118649][ T43] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 375.149709][ T43] usb 4-1: config 0 has no interface number 0 [ 375.175847][ T43] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 375.193338][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.209011][ T43] usb 4-1: Product: syz [ 375.214105][ T43] usb 4-1: Manufacturer: syz [ 375.223479][ T43] usb 4-1: SerialNumber: syz [ 375.266704][ T43] usb 4-1: config 0 descriptor?? [ 375.313509][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 375.483005][ T5921] gspca_vc032x: reg_w err -71 [ 375.492207][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.522487][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.538097][T16283] MTD: Couldn't look up '': -22 [ 375.539954][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.560195][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.579861][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.585169][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.607796][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.614714][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.656114][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.661421][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.686340][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.691650][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.705838][ T43] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 375.714962][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.723711][ T43] gspca_pac7302 4-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 375.732903][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.732918][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.732930][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.732941][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.732952][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 375.732962][ T5921] gspca_vc032x: Unknown sensor... [ 375.733037][ T5921] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 375.740309][ T5921] usb 6-1: USB disconnect, device number 11 [ 375.771537][ T43] usb 4-1: USB disconnect, device number 30 [ 375.936112][ T55] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 375.996387][T16276] loop4: detected capacity change from 0 to 32768 [ 376.096111][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 376.117058][ T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.129446][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 376.144119][ T55] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 376.153653][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.175929][ T55] usb 3-1: Product: syz [ 376.184180][T16276] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 376.184204][T16276] allowing incompatible features above 0.0: (unknown version) [ 376.184215][T16276] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 376.205944][ T55] usb 3-1: Manufacturer: syz [ 376.205963][ T55] usb 3-1: SerialNumber: syz [ 376.210392][ T55] usb 3-1: config 0 descriptor?? [ 376.219263][ T55] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 376.219402][ T55] imon 3-1:0.0: unable to initialize intf0, err -19 [ 376.219417][ T55] imon:imon_probe: failed to initialize context! [ 376.219429][ T55] imon 3-1:0.0: unable to register, err -19 [ 376.224124][T16306] netlink: 'syz.5.4191': attribute type 11 has an invalid length. [ 376.346180][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 376.437529][ T55] usb 3-1: USB disconnect, device number 21 [ 376.475712][T16276] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 376.506591][ T5921] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 376.515157][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5 [ 376.527396][T16276] bcachefs (loop4): initializing new filesystem [ 376.534536][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.551813][ T5921] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 376.586263][ T5921] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 376.594840][ T5921] usb 7-1: Manufacturer: syz [ 376.629224][T16276] bcachefs (loop4): going read-write [ 376.641698][ T5921] usb 7-1: config 0 descriptor?? [ 376.650606][ T5921] igorplugusb 7-1:0.0: endpoint incorrect [ 376.765202][T16276] bcachefs (loop4): initializing freespace [ 376.853759][ T5921] usb 7-1: USB disconnect, device number 5 [ 377.101261][T16335] loop2: detected capacity change from 0 to 1764 [ 377.155191][ T5845] bcachefs (loop4): clean shutdown complete, journal seq 8 [ 377.210688][T16340] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4206'. [ 377.217485][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'. [ 377.250805][T16341] xt_hashlimit: overflow, rate too high: 0 [ 377.478225][ T30] audit: type=1326 audit(1752670466.729:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb318e929 code=0x7ffc0000 [ 377.543290][ T30] audit: type=1326 audit(1752670466.749:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb318e929 code=0x7ffc0000 [ 377.549805][T16353] loop6: detected capacity change from 0 to 256 [ 377.593066][ T30] audit: type=1326 audit(1752670466.749:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3fb318e929 code=0x7ffc0000 [ 377.620938][T16355] loop2: detected capacity change from 0 to 256 [ 377.667671][ T30] audit: type=1326 audit(1752670466.759:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16347 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb318e929 code=0x7ffc0000 [ 377.724375][T16352] loop3: detected capacity change from 0 to 4096 [ 377.740332][T16353] FAT-fs (loop6): Directory bread(block 64) failed [ 377.789292][T16353] FAT-fs (loop6): Directory bread(block 65) failed [ 377.824581][T16353] FAT-fs (loop6): Directory bread(block 66) failed [ 377.844708][T16353] FAT-fs (loop6): Directory bread(block 67) failed [ 377.873124][T16359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.882264][T16353] FAT-fs (loop6): Directory bread(block 68) failed [ 377.912020][T16353] FAT-fs (loop6): Directory bread(block 69) failed [ 377.935503][T16353] FAT-fs (loop6): Directory bread(block 70) failed [ 377.962561][T16353] FAT-fs (loop6): Directory bread(block 71) failed [ 377.987886][T16353] FAT-fs (loop6): Directory bread(block 72) failed [ 378.024580][T16353] FAT-fs (loop6): Directory bread(block 73) failed [ 378.224632][T16369] loop5: detected capacity change from 0 to 256 [ 378.299738][T16369] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 378.380445][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.387825][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.667387][T16384] xt_hashlimit: size too large, truncated to 1048576 [ 379.356219][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 379.546176][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 379.563596][ T43] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 379.596507][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.629473][ T43] usb 3-1: Product: syz [ 379.633694][ T43] usb 3-1: Manufacturer: syz [ 379.658278][T16427] loop5: detected capacity change from 0 to 512 [ 379.665491][ T43] usb 3-1: SerialNumber: syz [ 379.688187][ T43] usb 3-1: config 0 descriptor?? [ 379.718617][ T43] s2255 3-1:0.0: Could not find bulk-in endpoint [ 379.752819][ T43] Sensoray 2255 driver load failed: 0xfffffff4 [ 379.776361][ T43] s2255 3-1:0.0: probe with driver s2255 failed with error -12 [ 379.780878][T16427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.831474][T16427] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.936716][ T43] usb 3-1: USB disconnect, device number 22 [ 379.970353][T16427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4246: bg 0: block 96: padding at end of block bitmap is not set [ 380.018379][T16427] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 380.123020][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.439482][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4260'. [ 380.564768][T16464] tmpfs: Bad value for 'mpol' [ 380.580925][T16462] loop3: detected capacity change from 0 to 2048 [ 380.613604][T16457] loop6: detected capacity change from 0 to 8192 [ 380.643036][T16462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.670020][T16457] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.066531][T16478] netlink: 'syz.4.4271': attribute type 10 has an invalid length. [ 381.074385][T16478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4271'. [ 381.080923][T16480] loop5: detected capacity change from 0 to 256 [ 381.156246][T16480] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 381.220817][T16478] geneve0: entered promiscuous mode [ 381.266252][T16478] geneve0: entered allmulticast mode [ 381.272619][T16478] team0: Port device geneve0 added [ 381.764990][T16511] loop6: detected capacity change from 0 to 16 [ 381.859767][T16511] erofs (device loop6): mounted with root inode @ nid 36. [ 381.926731][T16511] erofs (device loop6): readahead error at folio 3 @ nid 89 [ 381.934059][T16511] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 381.975324][T16511] erofs (device loop6): readahead error at folio 1 @ nid 89 [ 381.983165][T16522] netlink: 'syz.5.4292': attribute type 4 has an invalid length. [ 381.983195][T16522] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4292'. [ 382.012593][T16522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 382.021297][T16511] erofs (device loop6): readahead error at folio 0 @ nid 89 [ 382.061607][T16511] erofs (device loop6): read error -117 @ 0 of nid 89 [ 382.111148][ T30] audit: type=1800 audit(1752670471.349:83): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4284" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 382.232418][T16528] _ÐZ`Ô€@: entered promiscuous mode [ 382.451498][T16542] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4302'. [ 382.463677][T16542] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4302'. [ 382.584659][T16547] netlink: 'syz.5.4305': attribute type 1 has an invalid length. [ 382.619786][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4305'. [ 382.908526][ T30] audit: type=1326 audit(1752670472.149:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 382.962365][ T30] audit: type=1326 audit(1752670472.149:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 382.999871][ T30] audit: type=1326 audit(1752670472.209:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 383.075571][ T30] audit: type=1326 audit(1752670472.209:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 383.160980][ T30] audit: type=1326 audit(1752670472.209:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.5.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f111058e929 code=0x7ffc0000 [ 384.086225][T16618] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4338'. [ 384.376469][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 384.444613][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4347'. [ 384.481044][T16637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.571543][ T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 384.603193][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 384.632436][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 384.656566][ T43] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 384.682529][ T43] usb 4-1: Product: syz [ 384.689401][ T43] usb 4-1: Manufacturer: syz [ 384.694143][ T43] usb 4-1: SerialNumber: syz [ 384.747339][ T43] usb 4-1: config 0 descriptor?? [ 384.796952][ T43] usb 4-1: selecting invalid altsetting 0 [ 384.822468][T16650] loop2: detected capacity change from 0 to 1764 [ 384.841084][T16650] iso9660: Bad value for 'gid' [ 384.847700][T16650] iso9660: Bad value for 'gid' [ 384.900072][T16650] syz.2.4353: attempt to access beyond end of device [ 384.900072][T16650] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 384.942117][T16650] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 385.064743][ T43] usb 4-1: USB disconnect, device number 31 [ 385.118642][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4359'. [ 385.311775][ T6089] udevd[6089]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.481830][T16677] netlink: 'syz.5.4367': attribute type 4 has an invalid length. [ 385.746155][T16689] comedi comedi3: ni_at_a2150: I/O port conflict (0x2f00,28) [ 385.777055][T16690] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 386.157103][T16709] loop6: detected capacity change from 0 to 256 [ 386.164207][T16709] exfat: Deprecated parameter 'utf8' [ 386.249384][T16709] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 386.281358][T16713] loop5: detected capacity change from 0 to 256 [ 386.314692][T16713] exfat: Deprecated parameter 'namecase' [ 386.356211][T16713] exfat: Deprecated parameter 'namecase' [ 386.477046][T16713] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 386.700306][T16727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4390'. [ 386.742982][T16727] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4390'. [ 387.008961][T16740] trusted_key: encrypted_key: keyword 'lo„d' not recognized [ 387.188848][T16711] loop4: detected capacity change from 0 to 32768 [ 387.329543][T16752] netlink: 'syz.3.4403': attribute type 8 has an invalid length. [ 387.818057][T16771] loop2: detected capacity change from 0 to 512 [ 387.852804][T16775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4414'. [ 387.857369][T16771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 387.914313][T16771] EXT4-fs (loop2): 1 truncate cleaned up [ 387.925914][T16771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.111006][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.153911][T16789] loop5: detected capacity change from 0 to 512 [ 388.181264][T16789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.231169][T16787] netlink: 'syz.6.4419': attribute type 4 has an invalid length. [ 388.253946][T16789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 388.323504][T16789] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.336076][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 388.444141][T16789] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 388.496108][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 388.510956][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 388.519344][T16789] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 388.529380][T16800] netlink: 'syz.4.4424': attribute type 1 has an invalid length. [ 388.539294][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.560263][ T10] usb 4-1: config 0 descriptor?? [ 388.569743][T16800] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4424'. [ 388.576103][T16789] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4420: Failed to acquire dquot type 0 [ 388.589844][ T10] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 388.678261][T10656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 388.731887][T16796] loop2: detected capacity change from 0 to 32768 [ 388.879885][T16808] netlink: 'syz.5.4426': attribute type 30 has an invalid length. [ 389.007036][ T10] gspca_sunplus: reg_w_riv err -71 [ 389.012800][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 389.067223][ T10] usb 4-1: USB disconnect, device number 32 [ 389.395934][T16826] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 389.901988][ T30] audit: type=1326 audit(1752670479.149:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eb18e929 code=0x7ffc0000 [ 389.996628][ T30] audit: type=1326 audit(1752670479.149:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eb18e929 code=0x7ffc0000 [ 390.081935][ T30] audit: type=1326 audit(1752670479.179:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f35eb18e929 code=0x7ffc0000 [ 390.187444][ T30] audit: type=1326 audit(1752670479.179:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16850 comm="syz.4.4450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eb18e929 code=0x7ffc0000 [ 390.284573][T16854] loop6: detected capacity change from 0 to 4096 [ 390.330393][T16854] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 390.401016][T16854] ntfs3(loop6): Failed to load $MFTMirr (-22). [ 390.639035][T16872] loop2: detected capacity change from 0 to 4096 [ 390.659492][T16872] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 390.696244][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 390.768389][T16838] loop5: detected capacity change from 0 to 32768 [ 390.860699][T16838] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.871567][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.886309][ T5921] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 390.895916][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.907636][ T5921] usb 5-1: config 0 descriptor?? [ 391.099695][T16838] XFS (loop5): Ending clean mount [ 391.190873][T16890] loop6: detected capacity change from 0 to 8192 [ 391.239894][T16892] loop2: detected capacity change from 0 to 16 [ 391.280080][T16892] erofs (device loop2): mounted with root inode @ nid 36. [ 391.302406][T10656] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.351079][ T5921] usb 5-1: USB disconnect, device number 14 [ 391.368171][T16892] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 391.439606][T16892] erofs (device loop2): failed to decompress -23 in[64, 4032] out[1851] [ 391.486168][T16892] erofs (device loop2): read error -117 @ 43 of nid 36 [ 391.529536][T16878] loop3: detected capacity change from 0 to 32768 [ 392.029973][T16906] loop6: detected capacity change from 0 to 512 [ 392.095947][T16906] EXT4-fs (loop6): filesystem is read-only [ 392.131492][T16906] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 392.235590][T16906] EXT4-fs (loop6): filesystem is read-only [ 392.289351][ T5921] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 392.314303][T16906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 392.490770][T13238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.519667][ T5921] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 392.548583][ T5921] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 392.596051][ T5921] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.657933][ T5921] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.693159][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.738732][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.759132][ T5921] usb 3-1: invalid MIDI out EP 0 [ 392.887918][T16932] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 392.917852][T16932] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 392.941469][ T5921] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 392.986120][ T5921] usb 3-1: USB disconnect, device number 23 [ 393.098672][ T5851] Bluetooth: hci3: Malformed LE Event: 0x1d [ 393.111569][T16924] loop4: detected capacity change from 0 to 32768 [ 393.174097][T16920] loop3: detected capacity change from 0 to 32768 [ 393.186213][T16920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4480 (16920) [ 393.217935][T16920] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.229830][T16920] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 393.248859][T16920] BTRFS info (device loop3): disk space caching is enabled [ 393.257905][T16920] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 393.469912][T16920] BTRFS error (device loop3 state M): cannot disable free-space-tree [ 393.649450][ T5839] BTRFS info (device loop3 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.722246][T16964] comedi comedi3: comedi_parport: I/O port conflict (0xf0,3) [ 394.091900][T16970] loop4: detected capacity change from 0 to 4096 [ 394.165820][T16970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.256068][ T5921] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 394.290624][T16985] netlink: 'syz.2.4501': attribute type 21 has an invalid length. [ 394.333461][T16985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4501'. [ 394.343933][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5656: inode #15: comm syz.4.4497: corrupted inode contents [ 394.390180][T16970] EXT4-fs error (device loop4): ext4_dirty_inode:6541: inode #15: comm syz.4.4497: mark_inode_dirty error [ 394.411092][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5656: inode #15: comm syz.4.4497: corrupted inode contents [ 394.443582][T16970] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.4497: mark_inode_dirty error [ 394.477587][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 394.517649][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5656: inode #15: comm syz.4.4497: corrupted inode contents [ 394.536149][ T5921] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 394.545562][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.594410][T16970] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.4497: mark_inode_dirty error [ 394.622756][ T5921] usb 4-1: Product: syz [ 394.635954][ T5921] usb 4-1: Manufacturer: syz [ 394.649336][ T5921] usb 4-1: SerialNumber: syz [ 394.674951][T16993] trusted_key: encrypted_key: hex blob is missing [ 394.675790][ T5921] usb 4-1: config 0 descriptor?? [ 394.688538][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4505'. [ 394.696588][T16970] EXT4-fs error (device loop4): ext4_do_update_inode:5656: inode #15: comm syz.4.4497: corrupted inode contents [ 394.726362][ T5921] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 394.748052][T16970] EXT4-fs error (device loop4): ext4_truncate:4669: inode #15: comm syz.4.4497: mark_inode_dirty error [ 394.816459][T16970] EXT4-fs error (device loop4) in ext4_setattr:6074: Corrupt filesystem [ 394.961715][ T5921] usb 4-1: USB disconnect, device number 33 [ 394.981791][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.436073][ T5921] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 395.598257][ T5921] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 395.633344][T17006] loop5: detected capacity change from 0 to 32768 [ 395.636354][ T5921] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 395.659917][ T5921] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 395.687415][ T5921] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 395.715614][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 395.731724][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 395.750478][T17028] netlink: 'syz.2.4522': attribute type 11 has an invalid length. [ 395.756506][ T5921] usb 5-1: string descriptor 0 read error: -22 [ 395.764775][ T5921] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 395.795723][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.821042][ T5921] usb 5-1: config 0 descriptor?? [ 395.828527][T17012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.847085][ T5921] hub 5-1:0.0: bad descriptor, ignoring hub [ 395.860674][ T5921] hub 5-1:0.0: probe with driver hub failed with error -5 [ 395.887950][ T5921] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26 [ 395.961758][T17006] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 395.961785][T17006] allowing incompatible features above 0.0: (unknown version) [ 395.961799][T17006] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 395.995284][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 396.132706][T17041] loop3: detected capacity change from 0 to 4096 [ 396.139989][T17041] ntfs3(loop3): ino=3, Correct links count -> 2. [ 396.191581][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 396.219523][ T55] usb 5-1: USB disconnect, device number 15 [ 396.349715][T17006] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 396.383055][T17006] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 396.406259][T17006] bcachefs (loop5): Version upgrade required: [ 396.406259][T17006] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 396.406259][T17006] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 396.406259][T17006] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 396.541826][T17006] bcachefs (loop5): dropping and reconstructing all alloc info [ 396.612479][T17006] bcachefs (loop5): accounting_read... done [ 396.646377][T17006] bcachefs (loop5): alloc_read... done [ 396.666739][T17006] bcachefs (loop5): snapshots_read... done [ 396.718715][T17006] bcachefs (loop5): check_allocations... done [ 396.840072][T17006] bcachefs (loop5): going read-write [ 396.872600][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4536'. [ 396.922504][T17006] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 396.939555][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4536'. [ 397.147291][T17006] bcachefs (loop5): inode 4098:4294967295 has wrong backpointer: [ 397.147367][T17006] got 0:32 [ 397.147377][T17006] should be 4096:189491840996961599, fixing [ 397.313503][T10656] bcachefs (loop5): hash table key at wrong offset: should be at 6053843396831044271 [ 397.313553][T10656] u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0: ÿÿÿÿ1 -> 536870912 type reg, fixing [ 397.364629][T17084] geneve2: entered promiscuous mode [ 397.364651][T17084] geneve2: entered allmulticast mode [ 397.449960][T17089] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4548'. [ 397.551498][T10656] ------------[ cut here ]------------ [ 397.557240][T10656] kernel BUG at arch/x86/mm/physaddr.c:23! [ 397.614118][T10656] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 397.620388][T10656] CPU: 1 UID: 0 PID: 10656 Comm: syz-executor Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 397.632115][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.642197][T10656] RIP: 0010:__phys_addr+0x17b/0x180 [ 397.647440][T10656] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 397.667068][T10656] RSP: 0018:ffffc9001adef068 EFLAGS: 00010293 [ 397.673134][T10656] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff88801cf05a00 [ 397.681111][T10656] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 397.689073][T10656] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 397.697042][T10656] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001adef5f0 [ 397.705003][T10656] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 397.712971][T10656] FS: 000055557d057500(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 397.721899][T10656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.728475][T10656] CR2: 000000110c3b9d0c CR3: 00000000727ac000 CR4: 00000000003526f0 [ 397.736444][T10656] Call Trace: [ 397.739717][T10656] [ 397.742644][T10656] ? bch2_printbuf_exit+0x6f/0xb0 [ 397.747671][T10656] kfree+0x77/0x440 [ 397.751471][T10656] ? bch2_str_hash_repair_key+0x2b57/0x4030 [ 397.757361][T10656] bch2_printbuf_exit+0x6f/0xb0 [ 397.762209][T10656] bch2_str_hash_repair_key+0xf2b/0x4030 [ 397.767854][T10656] ? stack_depot_save_flags+0x429/0x900 [ 397.773395][T10656] ? kasan_save_track+0x4f/0x80 [ 397.778239][T10656] ? kasan_save_track+0x3e/0x80 [ 397.783090][T10656] ? kasan_save_free_info+0x46/0x50 [ 397.788287][T10656] ? __kasan_slab_free+0x62/0x70 [ 397.793219][T10656] ? kfree+0x18e/0x440 [ 397.797285][T10656] ? bch2_printbuf_exit+0x6f/0xb0 [ 397.802303][T10656] ? __bch2_fsck_err+0xe25/0x10b0 [ 397.807324][T10656] ? __bch2_str_hash_check_key+0x93a/0xd60 [ 397.813122][T10656] ? bch2_readdir+0x11cd/0x1700 [ 397.817980][T10656] ? bch2_vfs_readdir+0x4d0/0x6c0 [ 397.822996][T10656] ? iterate_dir+0x396/0x570 [ 397.827583][T10656] ? __se_sys_getdents64+0xe4/0x260 [ 397.832785][T10656] ? do_syscall_64+0xfa/0x3b0 [ 397.837473][T10656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.843539][T10656] ? __pfx_bch2_str_hash_repair_key+0x10/0x10 [ 397.849612][T10656] ? kasan_quarantine_put+0xdd/0x220 [ 397.854895][T10656] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.860090][T10656] ? bch2_printbuf_exit+0x6f/0xb0 [ 397.865111][T10656] ? kfree+0x18e/0x440 [ 397.869172][T10656] ? bch2_trans_log_str+0x279/0x3c0 [ 397.874375][T10656] ? bch2_printbuf_exit+0x6f/0xb0 [ 397.879402][T10656] ? __bch2_fsck_err+0xe25/0x10b0 [ 397.884424][T10656] ? __pfx___bch2_fsck_err+0x10/0x10 [ 397.889699][T10656] ? bch2_prt_printf+0x5a2/0x740 [ 397.894638][T10656] ? bch2_dirent_to_text+0x83a/0xd20 [ 397.899937][T10656] __bch2_str_hash_check_key+0xa85/0xd60 [ 397.905576][T10656] ? bch2_path_put+0xaa0/0x15d0 [ 397.910423][T10656] ? __pfx___bch2_str_hash_check_key+0x10/0x10 [ 397.916569][T10656] ? __asan_memset+0x22/0x50 [ 397.921154][T10656] ? SipHash_End+0x47f/0x550 [ 397.925748][T10656] ? __pfx___bch2_subvolume_get_snapshot+0x10/0x10 [ 397.932246][T10656] ? __bch2_subvolume_get_snapshot+0x15c/0x550 [ 397.938398][T10656] ? bch2_readdir+0x651/0x1700 [ 397.943164][T10656] bch2_readdir+0x11cd/0x1700 [ 397.947849][T10656] ? __pfx_bch2_readdir+0x10/0x10 [ 397.952878][T10656] ? bch2_readdir+0x23e/0x1700 [ 397.957643][T10656] bch2_vfs_readdir+0x4d0/0x6c0 [ 397.962500][T10656] ? __pfx_bch2_vfs_readdir+0x10/0x10 [ 397.967870][T10656] ? down_read_killable+0x1d1/0x350 [ 397.973073][T10656] iterate_dir+0x396/0x570 [ 397.977493][T10656] __se_sys_getdents64+0xe4/0x260 [ 397.982514][T10656] ? __pfx___se_sys_getdents64+0x10/0x10 [ 397.988162][T10656] ? exc_page_fault+0x76/0xf0 [ 397.992834][T10656] ? __pfx_filldir64+0x10/0x10 [ 397.997602][T10656] ? do_user_addr_fault+0xc8a/0x1390 [ 398.002890][T10656] ? do_syscall_64+0xbe/0x3b0 [ 398.007570][T10656] do_syscall_64+0xfa/0x3b0 [ 398.012068][T10656] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.017268][T10656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.023464][T10656] ? clear_bhb_loop+0x60/0xb0 [ 398.028167][T10656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.034055][T10656] RIP: 0033:0x7f11105c1293 [ 398.038464][T10656] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 398.058239][T10656] RSP: 002b:00007fff14d734f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 398.066660][T10656] RAX: ffffffffffffffda RBX: 000055557d072600 RCX: 00007f11105c1293 [ 398.074625][T10656] RDX: 0000000000008000 RSI: 000055557d072600 RDI: 0000000000000005 [ 398.082588][T10656] RBP: 000055557d0725d4 R08: 0000000000000000 R09: 0000000000000000 [ 398.090563][T10656] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 398.098534][T10656] R13: 0000000000000010 R14: 000055557d0725d0 R15: 00007fff14d757b0 [ 398.106508][T10656] [ 398.109526][T10656] Modules linked in: [ 398.116653][T10656] ---[ end trace 0000000000000000 ]--- [ 398.156922][T10656] RIP: 0010:__phys_addr+0x17b/0x180 [ 398.163049][T10656] Code: 50 fe fa 8d 48 89 de 4c 89 f2 e8 80 15 8b 03 e9 4d ff ff ff e8 e6 32 4b 00 90 0f 0b e8 de 32 4b 00 90 0f 0b e8 d6 32 4b 00 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 398.203663][T10656] RSP: 0018:ffffc9001adef068 EFLAGS: 00010293 [ 398.221988][T10656] RAX: ffffffff817473fa RBX: 000000007ffffffc RCX: ffff88801cf05a00 [ 398.231070][T10656] RDX: 0000000000000000 RSI: 000000007ffffffc RDI: 000000001fffffff [ 398.239237][T10656] RBP: 0000000000000002 R08: fffffffffffffffc R09: fffffffffffffffc [ 398.247494][T10656] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9001adef5f0 [ 398.255526][T10656] R13: fffffffffffff774 R14: 000000007ffffffc R15: dffffc0000000000 [ 398.264031][T10656] FS: 000055557d057500(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 398.273205][T10656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.279879][T10656] CR2: 00007fee04d7f2d8 CR3: 00000000727ac000 CR4: 00000000003526f0 [ 398.288013][T10656] Kernel panic - not syncing: Fatal exception [ 398.294424][T10656] Kernel Offset: disabled [ 398.298742][T10656] Rebooting in 86400 seconds..