last executing test programs: 4m10.647953565s ago: executing program 1 (id=3822): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) name_to_handle_at(r0, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) 4m10.475153094s ago: executing program 1 (id=3827): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="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", 0x148) 4m10.289812994s ago: executing program 1 (id=3832): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x101002) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x2e, '\x00', @data=0x9, 0x6285}]}) 4m10.096969943s ago: executing program 1 (id=3835): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$eJzs3U1sHGcZAOB31uuNN5XcbZu0BSHFakQEDSS2l5IgIRGqCvlQQSQuvS6J01heu8F2kRMh4gCFI5xQDj0UIXPoCfWAVMQBUc5ISFxR7pF6jziwaP7Wu/5Zr+u/JH0eaXa+mfl+3nk983k9m2gD+NyaeStG1yKJmfNvrqbbD9ab7QfrzYWyHBEnIqISUc1XkSxGJJ9EXIl8iS+kO4vukp3Gee3hx++fu/9hM9+qFktWvzKo3YbOgBHWiiUmImKkWMfYnjJR3am/a/F63l+Pu3vqOunGnSbsbJk4OG6dLdb20nyI+xZ43N2NGBndZn8j4mTxqzR9HxDF7FA54vAO3J5mOQAAAHg8jexW4dlH8ShWY/xowgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnQ5J/Z2BSLJWyPBFJ+f3/tWJfqlY75ngH+9oux9+7cUSBAAAAAAAAAMCh+Kj44P7Mo3gUqzFe7u8k2Wf+r2Qbp7LXZ+LdWI7ZWIoLsRqtWImVWIqpiNHxng5rq62VlaWprS1/F2nLTqdzt2g5HRGNLS2ndwi0csAnDgAAAAAAAABPp5/HTIwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriRjJV9lyqiw3olKNiLGIqKX11iL+WpafZH877gAAAADg8NWL9Xjyv7zQSbK/+V/M/u4fi3djMVZiLlaiHbNxPXsWkP/VX/nXWrP9YL25kC5bO/7up3uKI+sxIkbi3g4jT2Y1TndbzMT34odxPibiaizFXPwkWrESszER9fQkohVJNOr504tGGef28V7p27raLXXysz2zKdaXs0jqcSPmstguxLVa5I9NsnNIx3y5Z7Q/1yI2jXgvzU7yncKQObre8/P6bfFcpoz02SH7OByN7MxHuxmZTHNfZOO5wbkfeJ38eNeRpqLSfQZ1amOUdHPzSGXOf7SXnJ/MV2Ppy6/6c37QBjxKG91m3+ZMTEeluPoiXuzP+a0v33++v/FX//33qzcri/M3byyfP8RT2o+J3Sp0k7I5E82eTLw0+OorMtFOM7E2fCa2/DzGhm15uGpFNrKpaMjZ8o2s1IpXei7Bd+J6zMalmIypuByT8a2Yjmb3CkuX0315rTYX+nOS3WuVrfNbfUDwZ7/SU+nXu1Q+WmlenuvJa+9M18iOFXuu/CYme66+5wdfffc+feMHeWnIGSkd/4tFOR3jF93fOI+DvkwUc3MZ3QuDM/H7Tvq63F6cX7rZujXkeOeKdXrbvtc/N/9h+Kg3/3bfjzKC9HpJZ9xqtpXlpF5eL+mxF7p1+/NVKz5xydtVthw73T3WiPGYi+/veKfWivdwW3vKj73Ue+w/GzNnrXh/Ux7re5cT70Q7exeyya5TNQBH7OSrJ2v1h/V/1j+o/7J+s/7m2OsnLp/4Ui1G/1H9y8ifKn+sfDt5NT6In8X4cUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg+Xbd+Zb7fbsUrcQY5v37LdQ23GswYWo7Fpn/ZnhOoxGxOCxkqJQO9hzfxIL9di0p/x+o/32/FFEDKhT23fwyZ6vsT0X0jwcSIedTp7UbE9nZA/Nq2Wr7etUY3ks5ltJdZs77sTGXRCN+Vb7v52+5vXouWWAp9zFlYVbF5dv3/n63ELr7dm3ZxenL1+6fKn5zalvXLwx156dzF+PO0rgMCzfvjOyze7tvnkYAAAAAAAAAAAAeEwU//p/5TP/Z4bqLnVqS8vbj3zmqE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeELNvBWja5HE1OSFyXT7wXqznS5luahW2VglP41IPom4EvkSjZ7ukp3Gee3hx++fu/9hM9+qFktWvzKo3XDWiiUmImKkWO/uxDbdbO3vWk9/a58pvKR7hmnCzpaJg+P2/wAAAP//hd/4FA==") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) 4m9.841484926s ago: executing program 1 (id=3841): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x3c, [0xff, 0x9, 0x8, 0x7fff, 0x5, 0x800, 0x107, 0xfffa, 0xfc11, 0x1, 0x8, 0x10, 0x400, 0xa, 0x5, 0x2, 0x7, 0xa, 0x81, 0x9, 0x4, 0x3, 0x97, 0x4577, 0x2, 0x5, 0x78, 0x1, 0x81, 0x8544, 0xb, 0x5, 0x6, 0x7683, 0x98bd, 0x0, 0x7fff, 0x8, 0x5, 0x2, 0x0, 0x9, 0x79da, 0xf, 0x6, 0x3, 0x5, 0x5], 0x9}) 4m9.232425187s ago: executing program 1 (id=3849): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 4m8.96824936s ago: executing program 32 (id=3849): r0 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) 2m5.866852726s ago: executing program 5 (id=6093): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='loginuid\x00') write$P9_RVERSION(r0, &(0x7f00000026c0)=ANY=[@ANYRESDEC], 0x15) 2m5.644779627s ago: executing program 5 (id=6096): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f0000000240)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="2c6d6f64653d3078303030303030303038303030303030310086cb4be138f89f69aed82c696f636861727365743d6d6163696e7569742c66756e633d4250524d5f434845434b2c0020e70c853946a2904771793dc06c06611e03f5e2c7602f64a957c88cc3d8ee83589beff40c21fbbb1601b5869235b81f95cf0a39f6c3195e5125f94f2f8c75c38fc0c09c03ea3fbd2e56cce2a69c86db67514e59f271f5f87b7b075aabe717344a6eaeb832436386d4424b4a3d25832eb577d44c6accfaa75c7ae620d71699794e59af4cb377883fc3e4c9dfdb6340cb6395e3776c2b7e56043e63b8dd704ed4ede91e42537942c5e62bf46bf7b8542c03f6240d54f161466db4e9134915ca2839bbf4d798c1de7af1366d9b142b4e603178a6862a8b03340d309cab1a0cd33fb757910ccc8420000000934038e92ed734e0eb7d200c8283ff14dcc7b61114a4fef9561fa91274ac0114c707f4e3bf295693ab"], 0x1, 0x5ae, &(0x7f00000004c0)="$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") mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000380)='source') 2m5.368440611s ago: executing program 5 (id=6104): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x98) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100f8, 0x0, 0x601, 0xffffffff, 0xdae}) 2m5.086745505s ago: executing program 5 (id=6111): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 2m4.875228306s ago: executing program 5 (id=6117): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001740), 0x4) 2m4.309686095s ago: executing program 5 (id=6126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m3.958574182s ago: executing program 33 (id=6126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.56966642s ago: executing program 3 (id=7992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000000, 0x13, r0, 0x8cee000) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) 3.245592806s ago: executing program 3 (id=7994): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) 3.065662045s ago: executing program 6 (id=7995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20049081}, 0x40040c0) 2.863715196s ago: executing program 6 (id=7997): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x2}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.595691289s ago: executing program 6 (id=7999): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) unshare(0x20000400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) 2.334368893s ago: executing program 6 (id=8002): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f0000000300)={[{@nombcache}, {@nodioread_nolock}, {@delalloc}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@usrquota}, {@bh}]}, 0x21, 0x5c7, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 2.259984226s ago: executing program 2 (id=8003): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$eJzs3UFsHFcZAOB/XCdxXIiqgkIUpek0LVIipe7aSV1ZlWi367Ezrb1rdtdVIoTaiDhRFKetEiqRHEhzAYGKKsSBY9sDFzghLiAkkEACTkhw5VapEocWBIIDqJLRzKwTO/baSeomUfk+K56Z997M++ftZv4dr2YmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBIGpO12mgSM3lz/njaX2Oy3ZrdoH55e79eNdmg34ik+BdDQ7GnKtrz+evVu4tfB2JftbQvhorJUFy+f/cDT39ucGB5/Q0C2mqD6xVevHT53MnFxYULdzCQT8B3f7lq8UfDcZMjO501804rn61PZ2neaaUT4+O1J45NddKpfCbrnOh0s9m00c7q3VY7Pdg4lI5OTBxJs5ETrfnm9GR9JksHq8KnHh+r1cbT50fmsnq702o+8fxIp3Esn5nJm9PlikV10eap4o34Qt5Nu1l9Nk1Pn11cOLI6pJ1rgiwaja4q+Whp5dK+xx54//X3/nl2YWyz3R2rjY2Njo6NjY4nEVGrDV4veHLiyadqtcHaDWJNizv6puUetMVHcLh9A738HzORRzPm43ik6/40YjLa0YrZuP4GXlnfs5z/v/jE3/64Ub9vVfn/6opI9u25vrA3yvy/v1ra3y//V31v39En5k/q5/r+X4xLcTnOxclYjMVYiAsr2+3Yqv6SrYt94NbaD29SPx1ZNCOPTrQij9molyVprySNiRiP8ajFS3EspqITaUxFHjORRSdORCe6kZXvqEa0I4t6dKMV7UjjYDTiUKQxGhMxEUcijSxG4kS0Yj6aMR2TUS+3cjrOluN+5Ia4dn/z5V+c+dP7b5ev1nKj0Y2G+I2IstE/Nmi0JpnL/9yyiPjtFhy54eNbWs7/AAAAwKdWUn7HXpz/b4uHyrmpfCb7yiZrDRa/3rgzEQIAAAAfV/nN/75isq2YeyiS4vy/trrRT7bdneAAAACALZGU19glETEcD1dzy5dL1e52bAAAAMDWKL//319MhiOu7Fwudv4PAAAAnyIv/qw3c+M99t97vlhMkhiY25H86u/Rbm9Ljr5z/LHkfL2oqJ+/r1qvN3nx2ha7U3uT6N1QsNzW+ODl+4vlwUa2L1m+ee5HO6rph+XvvYPXVl8dx7O9v0gkSVIEcHWubwCxKoBdvb24FkC5FG/GI1WbR05V01PLNdUdhYen8plspNGaeXo06vVdA93sePf1V85+I8rd/05zdlcSp88uLox87dXFU2Us5Q2Mr57v7e+a+yhuEMtSbwTiobV3Ny42ta28EKPX73DVb23l/g9c3FXMDNxCn9+KA58p2xwYrtoOr97/oaLP0ZF+ez9c7d/omj0fXPvGqqI40Vu6IYpHq9JHDz5aTdaJYmyjKIqxGFsZRW8Qbm0s1o0iHoiItx+5cvzfv2sl2ZHNojjyMaMAuFtOl3f9KbJQlY6qLPTfpUqR/9vtbdtjVd6pVrjZo1xS9tJ7ks+ZN9e/k//NZ/f/LG1wRD9YtTlYfZ4Y3LtOXqmtc0R/7exrv+8d0Y/++IfvfHX/H35623l9aLnJte9SHvzN/QNRRrGzF8XlXk17W/K9a5mkyqrvFuXv9u23MzOWFB8X7vv6+ddi98VLlx8/e/7kmYUzC6+MjR0Zrx2t1Z5Mkt6Lt1R+YpB7AFjHgdhfJfK+z9jp8xSe8gNAlbuPbnRWfV8kD167pKDIia/GYpyKw+XVBhHx8Pr9Dlfr/Kv4VHI4DlRtv9wL+oaz1uEVT3g5vMm55faIXtuxTdsOr3i8zHVf+P4n+HIAwB1xYJM83Df/rzh3P7zJeffwiksKD8ehqu2h5Qj65/KIeObOjgYA/H/I2h8mw91vJ+12PvfS6MTEaL17LEvbrcYLaTufnM7SvNnN2jFYb05n6Vy71W01WjPFzIv5ZNZJO/Nzc612N51qtdO5Vic/Xj75Pe09+r2Tzdab3bzRmZvJ6p0sbbSa3Xqjm07mnUY6N//cTN45lrXLlTtzWSOfyhv1bt5qpp3WfLuRjaRpJ8tWNMwns2Y3n8qL2WY6185n6+2rETEzP5ulk1mn0c7nuq1qg8t95c2pVnu23Oxfd93t0QaAe8PFS5fPnVxcXLhwUzM/iIhVJX+5mbX69z7kxsIAcBdcz9IffPbGOn98BwAAAAAAAAAAAACAe8OtXf93EzM7t3aDQ32qvrRrceHC0pWItVXJ0tLSLXSxMzZps703VFs8UHdk5uqWbGcg1hvne2cm6V/18jPPnOu3+nNX9hzr85aoXCvZ9H/KYNG6utT1jQ+2//ytqurZ29qdgVtf688RcRt9LSUbtLl7xyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Od/AQAA//8WKmR4") syz_emit_ethernet(0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd681b56d9003c3a01000000000000000000da505446ae2fd7400200000000000000000000000000010102907803000000679aef123fff110000000000000000000000ff"], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 1.846742197s ago: executing program 2 (id=8006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a010400000000000000000200ffff28000480240001800b000100657874686472000014000280080006400000000208000140000000130900010073797a30000000000900020073797a3200000000060007"], 0x84}}, 0x0) 1.753482202s ago: executing program 6 (id=8008): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.584426741s ago: executing program 0 (id=8009): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000040)=ANY=[], 0x0, 0x295, &(0x7f0000000140)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.545180013s ago: executing program 2 (id=8010): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x3, &(0x7f0000000300)=0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 1.489308565s ago: executing program 4 (id=8011): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x9f02, 0x4000, 0x1, 0x0, 0x17, "f6a6756c9832488c"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="18", 0x1}], 0x1) 1.40567563s ago: executing program 3 (id=8012): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 1.278621546s ago: executing program 4 (id=8013): r0 = semget$private(0x0, 0x4000000009, 0x42a) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) semctl$SETVAL(r0, 0x2, 0x10, 0x0) 1.1862351s ago: executing program 4 (id=8014): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, 0x0) 1.109598125s ago: executing program 0 (id=8015): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x121c, &(0x7f0000008440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40047211, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 1.109447465s ago: executing program 3 (id=8016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.019073889s ago: executing program 4 (id=8017): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 831.526559ms ago: executing program 4 (id=8018): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x34, 0x701, 0x0, 0x0, {0x7}}, 0x14}}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 777.535961ms ago: executing program 3 (id=8019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 777.338081ms ago: executing program 0 (id=8020): r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 637.704688ms ago: executing program 4 (id=8021): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744a, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 570.949901ms ago: executing program 0 (id=8022): socket(0x1, 0x1, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 569.121621ms ago: executing program 2 (id=8023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x10, 0x13, r0, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 445.646618ms ago: executing program 3 (id=8024): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") sync() truncate(&(0x7f0000000080)='./file2\x00', 0x1ffa) 416.534149ms ago: executing program 0 (id=8025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000040000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 345.599543ms ago: executing program 2 (id=8026): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, &(0x7f0000002fc0)=""/4096, 0x1000) 185.632791ms ago: executing program 0 (id=8027): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000240)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'cp932'}}, {@umask={'umask', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@umask={'umask', 0x3d, 0x80}}, {@uid}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 67.364897ms ago: executing program 6 (id=8028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) 0s ago: executing program 2 (id=8029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): ialNumber: syz [ 455.832305][T19313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 455.840302][T19313] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 455.854738][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 456.093402][ T126] ums-usbat 7-1:2.43: USB Mass Storage device detected [ 456.124023][ T126] ums-usbat 7-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 456.222465][ T126] ums-usbat: probe of 7-1:2.43 failed with error -5 [ 456.259623][ T126] usb 7-1: USB disconnect, device number 2 [ 456.489840][T19377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6704'. [ 456.685696][T19387] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 456.747202][T19391] xt_connbytes: Forcing CT accounting to be enabled [ 457.064446][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.210373][T19413] netlink: 'syz.0.6720': attribute type 2 has an invalid length. [ 457.232202][T19413] netlink: 'syz.0.6720': attribute type 1 has an invalid length. [ 457.321322][ T26] audit: type=1326 audit(457.368:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.2.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 457.427129][ T26] audit: type=1326 audit(457.368:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.2.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 457.448866][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.593186][ T26] audit: type=1326 audit(457.408:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.2.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 457.696728][ T26] audit: type=1326 audit(457.408:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.2.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 457.802634][ T26] audit: type=1326 audit(457.408:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.2.6723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 457.868186][T19445] loop6: detected capacity change from 0 to 128 [ 457.952780][T19445] FAT-fs (loop6): Directory bread(block 162) failed [ 457.982060][T19445] FAT-fs (loop6): Directory bread(block 163) failed [ 457.988722][T19445] FAT-fs (loop6): Directory bread(block 164) failed [ 458.012482][T19451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 458.052220][T19445] FAT-fs (loop6): Directory bread(block 165) failed [ 458.058869][T19445] FAT-fs (loop6): Directory bread(block 166) failed [ 458.104796][T19445] FAT-fs (loop6): Directory bread(block 167) failed [ 458.112157][T19445] FAT-fs (loop6): Directory bread(block 168) failed [ 458.118797][T19445] FAT-fs (loop6): Directory bread(block 169) failed [ 458.159429][T19445] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.273438][T19445] FAT-fs (loop6): Directory bread(block 162) failed [ 458.280881][T19445] FAT-fs (loop6): Directory bread(block 163) failed [ 458.325354][T19445] syz.6.6732: attempt to access beyond end of device [ 458.325354][T19445] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 458.340467][ T26] audit: type=1326 audit(458.388:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19466 comm="syz.4.6742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944139c799 code=0x7ffc0000 [ 458.363333][T19445] syz.6.6732: attempt to access beyond end of device [ 458.363333][T19445] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 458.382518][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 458.455592][ T26] audit: type=1326 audit(458.388:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19466 comm="syz.4.6742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f944139c799 code=0x7ffc0000 [ 458.521704][T19473] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6744'. [ 458.573388][ T26] audit: type=1326 audit(458.388:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19466 comm="syz.4.6742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944139c799 code=0x7ffc0000 [ 458.694719][ T26] audit: type=1326 audit(458.388:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19466 comm="syz.4.6742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f944139c799 code=0x7ffc0000 [ 458.703912][T19482] loop2: detected capacity change from 0 to 16 [ 458.731696][T19480] loop6: detected capacity change from 0 to 512 [ 458.785078][T19484] loop3: detected capacity change from 0 to 512 [ 458.812326][T19482] erofs: (device loop2): mounted with root inode @ nid 36. [ 458.847750][T19482] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 458.865840][T19480] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 458.919190][T19484] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 458.922693][T19482] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 459.002738][T19482] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 459.094081][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 459.153038][T17923] EXT4-fs (loop6): unmounting filesystem. [ 459.319340][T19508] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6755'. [ 460.183929][T19552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6775'. [ 460.228069][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6775'. [ 460.704835][ T26] audit: type=1326 audit(460.758:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.2.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 461.205001][T19607] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.407985][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6801'. [ 461.455057][T19622] loop2: detected capacity change from 0 to 512 [ 461.504824][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6801'. [ 461.517592][T19622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 461.531202][T19622] ext4 filesystem being mounted at /1358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.560856][T19622] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.6803: Failed to acquire dquot type 0 [ 461.631251][T19631] QAT: failed to copy from user cfg_data. [ 461.867988][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 461.876187][T19642] loop0: detected capacity change from 0 to 256 [ 461.909327][T19642] exfat: Deprecated parameter 'utf8' [ 461.971864][T19642] exfat: Deprecated parameter 'utf8' [ 462.001853][T19642] exfat: Deprecated parameter 'namecase' [ 462.023874][T19642] exfat: Deprecated parameter 'namecase' [ 462.085352][T19642] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 462.183337][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.471476][T19662] loop6: detected capacity change from 0 to 4096 [ 462.691890][ T4314] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 462.797438][T19679] loop4: detected capacity change from 0 to 1764 [ 462.811363][T19682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.894649][ T4314] usb 1-1: Using ep0 maxpacket: 8 [ 462.901640][ T4314] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 462.968667][ T4314] usb 1-1: config 179 has no interface number 0 [ 462.990743][ T4314] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 463.039214][ T4314] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 463.073362][ T4314] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.097028][ T4314] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 463.127624][ T4314] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 463.161130][T19695] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6831'. [ 463.161572][ T4314] usb 1-1: config 179 interface 65 has no altsetting 0 [ 463.206312][ T4314] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 463.231408][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.284017][T19693] loop6: detected capacity change from 0 to 4096 [ 463.311824][ T4314] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input27 [ 463.332800][T19693] __ntfs_warning: 9 callbacks suppressed [ 463.332816][T19693] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 463.334275][ T7159] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 463.392190][T19693] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 463.442100][T19693] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 463.516109][T19693] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 463.568114][ T4314] usb 1-1: USB disconnect, device number 36 [ 463.574128][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 463.596483][T19693] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 463.625764][ T4314] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 463.653492][ T7159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.685354][T19693] ntfs: volume version 3.1. [ 463.703872][ T7159] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 463.720210][T19693] ntfs: (device loop6): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 463.737819][T19686] loop2: detected capacity change from 0 to 32768 [ 463.743556][ T7159] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 463.770420][T19693] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 463.776360][ T7159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.795713][T19686] blkno = 8ed2c, nblocks = 1 [ 463.809964][T19686] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 463.809964][T19686] [ 463.844446][ T7159] usb 4-1: config 0 descriptor?? [ 463.848961][T19686] ERROR: (device loop2): remounting filesystem as read-only [ 463.875734][T19686] ialloc: diAlloc returned -17! [ 464.112000][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.241574][T19717] loop6: detected capacity change from 0 to 64 [ 464.275963][ T7159] Bluetooth: Can't get state to change to load configuration err [ 464.294245][ T7159] Bluetooth: Loading sysconfig file failed [ 464.300116][ T7159] ath3k: probe of 4-1:0.0 failed with error -16 [ 464.386481][ T7159] usb 4-1: USB disconnect, device number 31 [ 464.733978][T19737] netlink: 'syz.4.6846': attribute type 21 has an invalid length. [ 464.762819][T19737] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 465.082251][T19755] netlink: 'syz.2.6856': attribute type 11 has an invalid length. [ 465.130492][T19759] loop6: detected capacity change from 0 to 512 [ 465.254622][T19759] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 465.292417][T19759] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.355046][T19772] loop3: detected capacity change from 0 to 256 [ 465.424893][T19772] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 465.536069][T17923] EXT4-fs (loop6): unmounting filesystem. [ 465.583746][T19772] exFAT-fs (loop3): error, invalid size(size(2) > aligned(9223372036854777344) [ 465.583746][T19772] [ 465.616781][T19772] exFAT-fs (loop3): Filesystem has been set read-only [ 466.027974][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6878'. [ 466.060171][T19800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6878'. [ 466.091720][T19800] netlink: 'syz.3.6878': attribute type 1 has an invalid length. [ 466.201402][T19812] loop6: detected capacity change from 0 to 256 [ 466.534900][T19826] netlink: 'syz.0.6890': attribute type 21 has an invalid length. [ 466.575609][T19826] netlink: 'syz.0.6890': attribute type 6 has an invalid length. [ 466.696484][T19834] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 466.717708][T19834] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 466.857989][T19836] loop4: detected capacity change from 0 to 4096 [ 466.894166][T19836] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 466.905764][T19841] loop2: detected capacity change from 0 to 4096 [ 466.939143][T19841] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 466.985668][T19841] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 467.009451][T19841] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 467.015220][T19841] ntfs: volume version 3.1. [ 467.344664][T19856] loop4: detected capacity change from 0 to 128 [ 467.491625][ T7159] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 467.711490][ T7159] usb 7-1: Using ep0 maxpacket: 32 [ 467.724356][ T7159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.751559][ T7159] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.796058][ T7159] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.816468][ T7159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.842493][ T7159] usb 7-1: config 0 descriptor?? [ 467.876290][ T7159] hub 7-1:0.0: USB hub found [ 467.941789][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.077754][ T7159] hub 7-1:0.0: 31 ports detected [ 468.086826][ T7159] hub 7-1:0.0: insufficient power available to use all downstream ports [ 468.233108][T19892] loop0: detected capacity change from 0 to 1764 [ 468.240413][T19894] loop3: detected capacity change from 0 to 1024 [ 468.252004][T19896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6924'. [ 468.280895][ T7159] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 468.290285][ T7159] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 468.325621][ T7159] usbhid 7-1:0.0: can't add hid device: -71 [ 468.351529][ T7159] usbhid: probe of 7-1:0.0 failed with error -71 [ 468.402510][ T7159] usb 7-1: USB disconnect, device number 3 [ 468.418469][ T11] hfsplus: b-tree write err: -5, ino 25 [ 468.434648][ T11] hfsplus: b-tree write err: -5, ino 4 [ 468.470226][ T11] hfsplus: b-tree write err: -5, ino 2 [ 468.502503][ T11] hfsplus: b-tree write err: -5, ino 20 [ 468.706673][T19909] netlink: 'syz.2.6930': attribute type 2 has an invalid length. [ 468.739527][T19909] netlink: 'syz.2.6930': attribute type 1 has an invalid length. [ 468.750256][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6930'. [ 468.764713][T19910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 468.784711][T19910] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.6931: directory missing '..' [ 468.831626][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 469.006506][T19924] ipt_REJECT: TCP_RESET invalid for non-tcp [ 469.186333][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6942'. [ 469.525714][T19918] set_capacity_and_notify: 1 callbacks suppressed [ 469.525731][T19918] loop3: detected capacity change from 0 to 32768 [ 469.649813][T19918] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 469.734060][T19918] (syz.3.6934,19918,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 469.807216][T19918] (syz.3.6934,19918,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 469.853572][T19918] (syz.3.6934,19918,1):ocfs2_symlink:2065 ERROR: status = -117 [ 469.970359][ T4269] ocfs2: Unmounting device (7,3) on (node local) [ 470.380476][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6966'. [ 470.999592][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 470.999607][ T26] audit: type=1326 audit(2000000009.740:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.001544][ T22] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 471.021165][ T26] audit: type=1326 audit(2000000009.740:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.076308][T20030] program syz.0.6984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.123218][ T26] audit: type=1326 audit(2000000009.750:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.175770][ T26] audit: type=1326 audit(2000000009.750:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.229009][ T26] audit: type=1326 audit(2000000009.780:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.231439][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 471.271462][ T26] audit: type=1326 audit(2000000009.780:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.307542][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.337463][ T26] audit: type=1326 audit(2000000009.780:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.342490][ T22] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.370648][T20041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 471.411024][ T22] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 471.411250][ T26] audit: type=1326 audit(2000000009.810:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.425214][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.481556][ T22] usb 5-1: Product: syz [ 471.491988][ T22] usb 5-1: Manufacturer: syz [ 471.496712][ T22] usb 5-1: SerialNumber: syz [ 471.515290][ T22] r8152-cfgselector 5-1: config 0 descriptor?? [ 471.519200][ T26] audit: type=1326 audit(2000000009.810:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.2.6983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 471.775640][ T22] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 472.065421][ T7159] usb 5-1: USB disconnect, device number 29 [ 472.089403][ T4296] usb 5-1: config 0 descriptor?? [ 472.315362][T20083] libceph: resolve '0' (ret=-3): failed [ 472.361308][ T126] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 472.422516][T20088] overlayfs: missing 'lowerdir' [ 472.553627][ T126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 472.583284][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.619965][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 472.666575][ T126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 24 [ 472.703079][T20095] loop3: detected capacity change from 0 to 4096 [ 472.715207][ T126] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 472.715405][T20097] loop6: detected capacity change from 0 to 164 [ 472.734149][T20095] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 472.753977][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.813206][T20095] ntfs: volume version 3.1. [ 472.819003][ T126] usb 1-1: Product: syz [ 472.837299][ T126] usb 1-1: Manufacturer: syz [ 472.880788][ T126] usb 1-1: SerialNumber: syz [ 472.912258][ T126] usb 1-1: config 0 descriptor?? [ 472.918263][T20069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 472.931978][T20069] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 472.968490][ C0] usb 1-1: NFC: Urb failure (status -71) [ 472.983925][ C0] usb 1-1: NFC: Urb failure (status -71) [ 473.012978][ T126] usb 1-1: NFC: Unable to get FW version [ 473.020003][ T126] pn533_usb: probe of 1-1:0.0 failed with error -71 [ 473.055274][T20105] x_tables: unsorted entry at hook 2 [ 473.190607][ T4314] usb 1-1: USB disconnect, device number 37 [ 473.289186][T20085] loop2: detected capacity change from 0 to 40427 [ 473.326483][T20085] F2FS-fs (loop2): invalid crc value [ 473.356516][T20085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 473.507155][T20085] F2FS-fs (loop2): Start checkpoint disabled! [ 473.559218][T20085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 473.661008][T20126] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551609) [ 473.693453][T20126] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 473.704058][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.714651][T20128] loop6: detected capacity change from 0 to 256 [ 473.725571][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.527176][T20161] ieee802154 phy1 wpan1: encryption failed: -90 [ 474.759518][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7056'. [ 474.784364][T20176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7056'. [ 474.994400][T20185] loop0: detected capacity change from 0 to 16 [ 475.013519][T20185] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 475.039771][T13503] udevd[13503]: incorrect cramfs checksum on /dev/loop0 [ 475.050879][T20185] cramfs: Error -3 while decompressing! [ 475.064654][T20185] cramfs: ffffffff96d8b1e8(27)->ffff88804f2a0000(4096) [ 475.093880][T20185] cramfs: Error -3 while decompressing! [ 475.109748][T20185] cramfs: ffffffff96d8b1e8(27)->ffff88804f2a0000(4096) [ 475.130530][T13503] udevd[13503]: incorrect cramfs checksum on /dev/loop0 [ 475.263631][T20169] loop6: detected capacity change from 0 to 32768 [ 475.313578][T20169] blkno = 8ed2c, nblocks = 1 [ 475.325751][T20169] ERROR: (device loop6): dbFree: block to be freed is outside the map [ 475.325751][T20169] [ 475.330902][T20196] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.7063'. [ 475.347179][T20169] ERROR: (device loop6): remounting filesystem as read-only [ 475.364107][T20196] netlink: zone id is out of range [ 475.391177][T20169] ialloc: diAlloc returned -17! [ 475.624357][T20205] loop2: detected capacity change from 0 to 164 [ 475.793127][T20212] x_tables: duplicate underflow at hook 3 [ 475.832667][T20214] loop0: detected capacity change from 0 to 1024 [ 475.894050][T20214] EXT4-fs: Ignoring removed bh option [ 476.016635][T20214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 476.050117][T20214] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.7072: reserved inode found cleared - inode=18 [ 476.077218][T20214] EXT4-fs (loop0): Remounting filesystem read-only [ 476.192481][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 476.366143][T20243] netlink: 920 bytes leftover after parsing attributes in process `syz.6.7086'. [ 476.519104][T20247] loop4: detected capacity change from 0 to 16 [ 476.550442][T20247] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 476.595274][T20252] loop6: detected capacity change from 0 to 512 [ 476.628161][T20252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 476.718766][T20252] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.7092: invalid indirect mapped block 4294967295 (level 1) [ 476.761632][T20252] EXT4-fs (loop6): Remounting filesystem read-only [ 476.768234][T20252] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.7092: invalid indirect mapped block 4294967295 (level 1) [ 476.780025][T20258] xt_bpf: check failed: parse error [ 476.783787][T20252] EXT4-fs (loop6): Remounting filesystem read-only [ 476.794629][T20252] EXT4-fs (loop6): 2 truncates cleaned up [ 476.804531][T20252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 476.883312][T20262] QAT: failed to copy from user cfg_data. [ 477.014979][T17923] EXT4-fs (loop6): unmounting filesystem. [ 477.116227][T20275] loop4: detected capacity change from 0 to 512 [ 477.171675][T20275] EXT4-fs: Ignoring removed nobh option [ 477.202727][T20275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 477.284704][T20278] loop6: detected capacity change from 0 to 4096 [ 477.289268][T20275] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 477.345508][T20275] EXT4-fs (loop4): 1 truncate cleaned up [ 477.351619][T20275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 477.421740][T20278] ntfs3: loop6: ino=1e, "file1" attr_set_size [ 477.427947][T20278] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 477.569892][T20291] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 477.639795][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 477.882363][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7116'. [ 477.899698][T20305] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 478.181334][ T22] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 478.380906][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 478.387950][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 478.426404][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.455658][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.471977][T20336] loop2: detected capacity change from 0 to 128 [ 478.498682][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 478.513648][T20336] EXT4-fs (loop2): Test dummy encryption mode enabled [ 478.527176][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 478.547623][ T22] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 478.576584][T20336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 478.602059][T20336] ext4 filesystem being mounted at /1427/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.615511][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.633884][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.749354][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 478.768947][ T22] usb 1-1: config 0 descriptor?? [ 478.794334][T20307] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.903530][T20355] IPv6: sit4: Disabled Multicast RS [ 478.919964][T20353] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7140'. [ 479.142389][T20361] netlink: 'syz.4.7143': attribute type 4 has an invalid length. [ 479.150161][T20361] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7143'. [ 479.306083][T20367] loop2: detected capacity change from 0 to 1024 [ 479.377864][ T4282] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 479.378946][ T7169] usb 1-1: USB disconnect, device number 38 [ 479.461120][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.472371][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.620876][ T4283] Bluetooth: hci0: command 0x0c20 tx timeout [ 479.738838][T20383] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7155'. [ 480.170048][T20403] set_capacity_and_notify: 1 callbacks suppressed [ 480.170064][T20403] loop0: detected capacity change from 0 to 1024 [ 480.238912][T20403] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 480.279192][T20403] hfsplus: xattr searching failed [ 480.592458][T20424] loop0: detected capacity change from 0 to 256 [ 480.743058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 481.036009][T20446] netlink: 'syz.2.7186': attribute type 11 has an invalid length. [ 481.100756][ T22] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 481.148568][T20438] infiniband syz2: set active [ 481.160713][T20438] infiniband syz2: added team0 [ 481.184984][T20452] openvswitch: netlink: Message has 4 unknown bytes. [ 481.291029][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 481.297780][ T22] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.339414][T20438] RDS/IB: syz2: added [ 481.348964][ T22] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.362989][T20438] smc: adding ib device syz2 with port count 1 [ 481.385013][T20438] smc: ib device syz2 port 1 has pnetid [ 481.415279][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 481.432420][ T22] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 481.461781][ T22] usb 4-1: Product: syz [ 481.469039][ T22] usb 4-1: Manufacturer: syz [ 481.503073][ T22] hub 4-1:4.0: USB hub found [ 481.666657][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 481.666671][ T26] audit: type=1326 audit(2000000020.411:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 481.708270][ T22] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 481.783208][ T26] audit: type=1326 audit(2000000020.421:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 481.840804][ T26] audit: type=1326 audit(2000000020.421:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 481.895155][T20478] loop2: detected capacity change from 0 to 1024 [ 481.914458][ T26] audit: type=1326 audit(2000000020.421:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.7199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 481.932238][T20478] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 482.049737][T20478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 482.070997][T10492] usb 4-1: USB disconnect, device number 32 [ 482.171741][T20478] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 482.188529][T20471] loop6: detected capacity change from 0 to 32768 [ 482.286653][T20471] XFS (loop6): Mounting V5 Filesystem [ 482.375725][T20471] XFS (loop6): Ending clean mount [ 482.819152][T20504] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 482.910874][T17923] XFS (loop6): Unmounting Filesystem [ 482.928411][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 482.967822][T20506] netlink: 'syz.3.7210': attribute type 2 has an invalid length. [ 483.315056][T20514] loop3: detected capacity change from 0 to 4096 [ 483.342740][T20514] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 483.445831][T20514] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 483.605962][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7220'. [ 484.183786][T20555] loop4: detected capacity change from 0 to 4096 [ 484.200051][T20555] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 484.309721][T20555] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 484.607292][T20579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.614600][T20579] IPv6: NLM_F_CREATE should be set when creating new route [ 484.621873][T20579] IPv6: NLM_F_CREATE should be set when creating new route [ 484.820557][ T4283] Bluetooth: hci0: command 0x0c1a tx timeout [ 485.087759][T20604] netlink: 'syz.4.7254': attribute type 21 has an invalid length. [ 485.114995][T20604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7254'. [ 485.221089][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.232752][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.424524][T20623] loop2: detected capacity change from 0 to 22 [ 485.473435][T20623] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 485.493105][T20623] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 485.786461][T20641] UBIFS error (pid: 20641): cannot open "(null)", error -22 [ 485.953812][T20648] netlink: 'syz.3.7278': attribute type 6 has an invalid length. [ 486.003055][T20651] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7279'. [ 486.218950][T20659] loop3: detected capacity change from 0 to 1024 [ 486.283200][T20659] hfsplus: invalid file type 0174377 for inode 21 [ 486.691732][T20684] loop4: detected capacity change from 0 to 1024 [ 486.861616][ T4947] hfsplus: b-tree write err: -5, ino 25 [ 486.867316][ T4947] hfsplus: b-tree write err: -5, ino 4 [ 486.875886][ T4947] hfsplus: b-tree write err: -5, ino 2 [ 487.035123][T20699] netlink: 'syz.4.7303': attribute type 1 has an invalid length. [ 487.607395][T20729] loop0: detected capacity change from 0 to 512 [ 487.624492][T20728] loop3: detected capacity change from 0 to 1024 [ 487.638825][T20729] EXT4-fs: Ignoring removed bh option [ 487.646513][T20729] EXT4-fs: Ignoring removed oldalloc option [ 487.668711][T20728] EXT4-fs: Ignoring removed orlov option [ 487.698190][T20729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 487.753867][T20728] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 487.785990][T20728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 487.808750][T20729] EXT4-fs (loop0): 1 truncate cleaned up [ 487.821868][T20729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 488.074192][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 488.085136][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 488.089654][T20713] loop2: detected capacity change from 0 to 32768 [ 488.246845][T20713] XFS (loop2): Mounting V5 Filesystem [ 488.338299][T20766] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7329'. [ 488.370422][T20713] XFS (loop2): Ending clean mount [ 488.380666][T20766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.387941][T20766] IPv6: NLM_F_CREATE should be set when creating new route [ 488.395364][T20766] IPv6: NLM_F_CREATE should be set when creating new route [ 488.506240][T20772] loop0: detected capacity change from 0 to 512 [ 488.571504][ T4267] XFS (loop2): Unmounting Filesystem [ 488.635435][T20772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 488.660692][T20772] ext4 filesystem being mounted at /1465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.867087][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 488.915296][T20784] loop3: detected capacity change from 0 to 64 [ 489.130466][T20790] xt_TCPMSS: Only works on TCP SYN packets [ 489.224826][T20794] xt_bpf: check failed: parse error [ 489.398427][T20802] loop3: detected capacity change from 0 to 256 [ 489.469792][T20802] FAT-fs (loop3): Directory bread(block 64) failed [ 489.492584][T20802] FAT-fs (loop3): Directory bread(block 65) failed [ 489.515174][T20802] FAT-fs (loop3): Directory bread(block 66) failed [ 489.554391][T20802] FAT-fs (loop3): Directory bread(block 67) failed [ 489.569183][T20802] FAT-fs (loop3): Directory bread(block 68) failed [ 489.597694][T20802] FAT-fs (loop3): Directory bread(block 69) failed [ 489.612449][T20802] FAT-fs (loop3): Directory bread(block 70) failed [ 489.641543][T20802] FAT-fs (loop3): Directory bread(block 71) failed [ 489.648285][T20802] FAT-fs (loop3): Directory bread(block 72) failed [ 489.696182][T20814] netlink: 'syz.2.7353': attribute type 10 has an invalid length. [ 489.710270][T20802] FAT-fs (loop3): Directory bread(block 73) failed [ 489.745235][T20814] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7353'. [ 490.080393][T20832] loop3: detected capacity change from 0 to 256 [ 490.174185][T20832] FAT-fs (loop3): Directory bread(block 64) failed [ 490.205211][T20832] FAT-fs (loop3): Directory bread(block 65) failed [ 490.220480][T20832] FAT-fs (loop3): Directory bread(block 66) failed [ 490.227032][T20832] FAT-fs (loop3): Directory bread(block 67) failed [ 490.230269][ T22] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 490.258841][T20832] FAT-fs (loop3): Directory bread(block 68) failed [ 490.267893][T20832] FAT-fs (loop3): Directory bread(block 69) failed [ 490.302255][T20832] FAT-fs (loop3): Directory bread(block 70) failed [ 490.308831][T20832] FAT-fs (loop3): Directory bread(block 71) failed [ 490.343300][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.360547][T20832] FAT-fs (loop3): Directory bread(block 72) failed [ 490.398265][T20832] FAT-fs (loop3): Directory bread(block 73) failed [ 490.440263][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 490.448997][ T22] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 490.490191][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.498258][ T22] usb 1-1: Product: syz [ 490.530061][ T22] usb 1-1: Manufacturer: syz [ 490.560296][ T22] usb 1-1: SerialNumber: syz [ 490.573594][T20846] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7369'. [ 490.581201][ T22] usb 1-1: config 0 descriptor?? [ 490.605251][ T22] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 490.698554][T20850] loop4: detected capacity change from 0 to 512 [ 490.808767][T20858] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 490.835405][T20850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 490.856782][T20850] ext4 filesystem being mounted at /1439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.981334][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.987977][T20867] xt_TCPMSS: Only works on TCP SYN packets [ 491.012433][ T22] gspca_sonixj: reg_r err -71 [ 491.017193][ T22] sonixj: probe of 1-1:0.0 failed with error -71 [ 491.044380][ T22] usb 1-1: USB disconnect, device number 39 [ 491.097500][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 491.206145][T20871] loop3: detected capacity change from 0 to 8 [ 491.297613][T20875] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7382'. [ 491.823407][ T7169] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 492.022653][ T7169] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 492.040793][ T7169] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 492.054683][ T7169] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 492.085414][ T7169] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 492.097970][ T7169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 492.108913][ T7169] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 492.129509][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7401'. [ 492.155064][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7401'. [ 492.180902][ T7169] usb 4-1: string descriptor 0 read error: -22 [ 492.187180][ T7169] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 492.218842][ T7169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.239028][ T7169] usb 4-1: config 0 descriptor?? [ 492.280954][T20885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 492.300751][ T7169] hub 4-1:0.0: bad descriptor, ignoring hub [ 492.306707][ T7169] hub: probe of 4-1:0.0 failed with error -5 [ 492.337582][ T7169] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30 [ 492.364426][T20924] loop4: detected capacity change from 0 to 512 [ 492.402679][T20924] EXT4-fs: Ignoring removed bh option [ 492.408131][T20924] EXT4-fs: Ignoring removed oldalloc option [ 492.457286][T20924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 492.594093][T20924] EXT4-fs (loop4): 1 truncate cleaned up [ 492.599851][T20924] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 492.633006][ C0] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1 [ 492.691384][ T7161] usb 4-1: USB disconnect, device number 33 [ 492.734076][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 492.968308][T20946] loop2: detected capacity change from 0 to 512 [ 492.998434][T20946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.073739][T20946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 493.090187][T20946] ext4 filesystem being mounted at /1475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 493.125006][T20946] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 493.162939][T20946] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 493.194074][T20946] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.7416: Failed to acquire dquot type 1 [ 493.290074][ T22] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 493.429041][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 493.464099][T20962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7423'. [ 493.480209][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 493.506989][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.542925][ T22] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 493.572587][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.581562][ T26] audit: type=1326 audit(2000000032.331:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 493.599995][ T22] usb 1-1: Product: syz [ 493.628796][ T22] usb 1-1: Manufacturer: syz [ 493.638908][ T22] usb 1-1: SerialNumber: syz [ 493.646479][T20952] loop6: detected capacity change from 0 to 32768 [ 493.652152][ T26] audit: type=1326 audit(2000000032.341:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 493.676444][ T22] usb 1-1: config 0 descriptor?? [ 493.692593][ T22] cdc_phonet 1-1:0.0: skipping garbage [ 493.707627][ T22] cdc_phonet: probe of 1-1:0.0 failed with error -22 [ 493.737033][T20973] netlink: 'syz.2.7426': attribute type 21 has an invalid length. [ 493.745424][T20973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7426'. [ 493.754846][T20973] netlink: 'syz.2.7426': attribute type 4 has an invalid length. [ 493.763692][T20973] netlink: 'syz.2.7426': attribute type 5 has an invalid length. [ 493.768260][T20952] XFS (loop6): Mounting V5 Filesystem [ 493.771735][T20973] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7426'. [ 493.850275][ T26] audit: type=1326 audit(2000000032.341:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 493.903815][T20952] XFS (loop6): Ending clean mount [ 493.929801][T20978] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7427'. [ 493.938857][ T22] usb 1-1: USB disconnect, device number 40 [ 493.984125][T20958] loop3: detected capacity change from 0 to 40427 [ 494.005425][ T26] audit: type=1326 audit(2000000032.341:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 494.052887][T20958] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64) [ 494.099756][T20958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 494.120172][ T26] audit: type=1326 audit(2000000032.341:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 494.120792][T20958] F2FS-fs (loop3): invalid crc value [ 494.163349][T17923] XFS (loop6): Unmounting Filesystem [ 494.184867][T20958] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 494.242500][ T26] audit: type=1326 audit(2000000032.341:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 494.292904][ T26] audit: type=1326 audit(2000000032.341:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 494.376778][T20958] F2FS-fs (loop3): recover fsync data on readonly fs [ 494.387181][ T26] audit: type=1326 audit(2000000032.341:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20963 comm="syz.2.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 494.433863][T20958] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 494.451364][T20958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 494.816109][T21000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7439'. [ 495.159024][T21014] loop0: detected capacity change from 0 to 256 [ 495.192806][T21014] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 495.882135][ T7169] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 495.931781][T21052] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7464'. [ 496.083036][ T7169] usb 5-1: Using ep0 maxpacket: 32 [ 496.089764][ T7169] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 496.100936][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.132117][ T7169] usb 5-1: config 0 has no interface number 0 [ 496.150277][ T7169] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 496.177166][ T7169] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 496.192678][ T7169] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 496.206847][ T7169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.227519][ T7169] usb 5-1: Product: syz [ 496.234215][ T7169] usb 5-1: Manufacturer: syz [ 496.238898][ T7169] usb 5-1: SerialNumber: syz [ 496.282049][ T7169] usb 5-1: config 0 descriptor?? [ 496.376825][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7475'. [ 496.495216][ T7169] radio-si470x 5-1:0.35: this is not a si470x device. [ 496.703331][ T7169] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 496.730892][ T7169] usb 5-1: USB disconnect, device number 30 [ 496.740530][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.799848][T10492] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 496.999815][T10492] usb 1-1: Using ep0 maxpacket: 8 [ 497.006638][T10492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 497.026627][T10492] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 497.062294][T10492] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 497.079573][T21081] loop3: detected capacity change from 0 to 40427 [ 497.089819][T10492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.098001][T21081] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff [ 497.101396][T21086] loop6: detected capacity change from 0 to 32768 [ 497.112802][T10492] usb 1-1: Product: syz [ 497.116979][T10492] usb 1-1: Manufacturer: syz [ 497.118748][T21081] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x724 [ 497.129777][T10492] usb 1-1: SerialNumber: syz [ 497.136316][T10492] usb 1-1: config 0 descriptor?? [ 497.158768][T21081] F2FS-fs (loop3): invalid crc value [ 497.187490][T21086] XFS (loop6): Mounting V5 Filesystem [ 497.205055][T21081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 497.275392][T21081] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20 [ 497.293453][T21086] XFS (loop6): Ending clean mount [ 497.325980][T21086] XFS (loop6): Quotacheck needed: Please wait. [ 497.405078][T21081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 497.421313][T21086] XFS (loop6): Quotacheck: Done. [ 497.482021][T21081] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 497.555776][T17923] XFS (loop6): Unmounting Filesystem [ 497.564561][T10492] usb 1-1: USB disconnect, device number 41 [ 497.635480][T21115] loop4: detected capacity change from 0 to 16 [ 497.739285][T21115] erofs: (device loop4): mounted with root inode @ nid 36. [ 498.039763][ T7169] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 498.241399][ T7169] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 498.276034][ T7169] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 498.296383][ T7169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.323100][ T7169] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.377657][ T7169] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 498.393781][ T7169] usb 3-1: Product: syz [ 498.404390][ T7169] usb 3-1: Manufacturer: syz [ 498.424609][ T7169] usb 3-1: SerialNumber: syz [ 498.447390][ T7169] usb 3-1: config 0 descriptor?? [ 498.477261][ T7169] hub 3-1:0.0: bad descriptor, ignoring hub [ 498.509891][ T7169] hub: probe of 3-1:0.0 failed with error -5 [ 498.533348][ T7169] usb 3-1: selecting invalid altsetting 0 [ 498.580309][T21146] netlink: 'syz.3.7505': attribute type 5 has an invalid length. [ 498.695746][T21151] loop6: detected capacity change from 0 to 128 [ 498.890100][ T4313] usb 3-1: USB disconnect, device number 30 [ 499.010844][T10492] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 499.204510][T10492] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.225586][T10492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.255929][T10492] usb 4-1: Product: syz [ 499.260735][T10492] usb 4-1: Manufacturer: syz [ 499.265355][T10492] usb 4-1: SerialNumber: syz [ 499.319490][T10492] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.384190][T10492] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.411798][T21175] netlink: 'syz.0.7519': attribute type 2 has an invalid length. [ 499.424698][T21157] loop4: detected capacity change from 0 to 32768 [ 499.447074][T21157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7511 (21157) [ 499.470177][T21157] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.509122][T21157] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 499.527379][T21157] BTRFS info (device loop4): using free space tree [ 499.642161][T21185] loop6: detected capacity change from 0 to 512 [ 499.706708][T21185] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 499.762208][T21185] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.849554][T21157] BTRFS info (device loop4): enabling ssd optimizations [ 499.868669][ T22] usb 4-1: USB disconnect, device number 34 [ 499.920987][ T4271] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.322432][T17923] EXT4-fs (loop6): unmounting filesystem. [ 500.328595][T21218] loop2: detected capacity change from 0 to 4096 [ 500.399306][T21221] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 500.478101][T21218] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 500.499886][T10492] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 500.506901][T10492] ath9k_htc: Failed to initialize the device [ 500.540153][ T22] usb 4-1: ath9k_htc: USB layer deinitialized [ 500.551754][T21229] loop3: detected capacity change from 0 to 256 [ 500.583998][T21218] Remounting filesystem read-only [ 500.695426][T21227] loop4: detected capacity change from 0 to 4096 [ 500.713180][ T4267] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 500.810176][T21227] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 501.098673][T21243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7542'. [ 501.144644][T21243] Zero length message leads to an empty skb [ 501.222014][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.230042][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.723829][T21277] loop6: detected capacity change from 0 to 24 [ 501.770317][T21277] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 501.797772][T21277] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 501.893889][T21279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 501.922865][T21279] ext4 filesystem being mounted at /1509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.970186][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 502.058895][T21291] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 502.113084][T21291] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 502.200869][T21291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 502.250778][T21291] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.7565: Inode bitmap for bg 0 marked uninitialized [ 502.263912][T21299] set_capacity_and_notify: 2 callbacks suppressed [ 502.263926][T21299] loop6: detected capacity change from 0 to 764 [ 502.282301][T21299] rock: directory entry would overflow storage [ 502.294934][T21299] rock: sig=0x5850, size=36, remaining=22 [ 502.315203][T21301] autofs4:pid:21301:autofs_fill_super: called with bogus options [ 502.325095][T21291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 502.375325][T21291] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.7565: Block bitmap for bg 0 marked uninitialized [ 502.429818][ T7159] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 502.494223][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 502.510096][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.574541][T21305] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 502.597077][T21305] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 502.641110][ T7159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.689570][ T7159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.699377][ T7159] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 502.768540][ T7159] usb 3-1: New USB device found, idVendor=056e, idProduct=f0fb, bcdDevice= 0.00 [ 502.777689][ T7159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.804000][ T7159] usb 3-1: config 0 descriptor?? [ 503.008072][T21303] loop4: detected capacity change from 0 to 32768 [ 503.038532][T21303] ialloc: diAlloc returned -5! [ 503.089592][T21321] loop3: detected capacity change from 0 to 16 [ 503.097717][T21321] erofs: (device loop3): mounted with root inode @ nid 36. [ 503.126884][T21322] ALSA: mixer_oss: invalid index 100000 [ 503.184702][T21321] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 503.217305][T21324] netlink: 'syz.4.7579': attribute type 15 has an invalid length. [ 503.232831][ T7159] hid (null): unknown global tag 0xe [ 503.246931][ T7159] hid-generic 0003:056E:F0FB.0001: unexpected long global item [ 503.259647][T21324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7579'. [ 503.272717][ T7159] hid-generic: probe of 0003:056E:F0FB.0001 failed with error -22 [ 503.460095][ T22] usb 3-1: USB disconnect, device number 31 [ 503.592814][T21338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7585'. [ 503.693651][T21341] loop6: detected capacity change from 0 to 2048 [ 503.733631][T21341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.857578][T21331] loop4: detected capacity change from 0 to 32768 [ 503.909289][T21331] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 503.972523][T21331] (syz.4.7582,21331,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 504.057416][T21331] (syz.4.7582,21331,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 504.099843][T21331] (syz.4.7582,21331,1):ocfs2_mknod:298 ERROR: status = -2 [ 504.106983][T21331] (syz.4.7582,21331,1):ocfs2_mknod:502 ERROR: status = -2 [ 504.121190][T21331] (syz.4.7582,21331,1):ocfs2_mkdir:659 ERROR: status = -2 [ 504.197173][ T4271] ocfs2: Unmounting device (7,4) on (node local) [ 504.239468][ T7169] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 504.443566][ T7169] usb 7-1: Using ep0 maxpacket: 32 [ 504.462527][ T7169] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 504.475527][T21363] loop4: detected capacity change from 0 to 256 [ 504.499071][ T7169] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.515231][ T7169] usb 7-1: Product: syz [ 504.520655][ T7169] usb 7-1: Manufacturer: syz [ 504.533353][T21367] loop0: detected capacity change from 0 to 1024 [ 504.534763][ T7169] usb 7-1: SerialNumber: syz [ 504.561080][T21367] EXT4-fs: Ignoring removed orlov option [ 504.576174][ T7169] usb 7-1: config 0 descriptor?? [ 504.602296][T21367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 504.687300][T21375] loop3: detected capacity change from 0 to 256 [ 504.694697][T21375] exfat: Deprecated parameter 'namecase' [ 504.732680][T21375] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 504.745844][T21367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 504.872433][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 504.882847][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 504.890419][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.900493][ T4283] Workqueue: hci2 hci_rx_work [ 504.905219][ T4283] Call Trace: [ 504.908533][ T4283] [ 504.911484][ T4283] dump_stack_lvl+0x188/0x24e [ 504.916202][ T4283] ? show_regs_print_info+0x12/0x12 [ 504.921437][ T4283] ? load_image+0x400/0x400 [ 504.925972][ T4283] sysfs_create_dir_ns+0x26a/0x290 [ 504.931096][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 504.935777][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 504.940978][ T4283] kobject_add_internal+0x61c/0xcc0 [ 504.946178][ T4283] kobject_add+0x160/0x230 [ 504.950593][ T4283] ? kobject_init+0x1d0/0x1d0 [ 504.955267][ T4283] ? klist_children_get+0x50/0x50 [ 504.960375][ T4283] ? get_device_parent+0x121/0x3f0 [ 504.965483][ T4283] device_add+0x483/0xfb0 [ 504.969809][ T4283] ? kmem_cache_free+0xf7/0x290 [ 504.974663][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 504.979604][ T4283] le_conn_complete_evt+0x1062/0x1670 [ 504.984981][ T4283] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 504.991221][ T4283] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 504.996855][ T4283] ? skb_pull_data+0xf7/0x200 [ 505.001533][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 505.007079][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 505.013149][ T4283] hci_event_packet+0x7b9/0x1280 [ 505.018091][ T4283] ? bis_list+0x280/0x280 [ 505.022423][ T4283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 505.028315][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 505.033426][ T4283] ? sync_thread_master+0x620/0x10b0 [ 505.038714][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 505.043914][ T4283] hci_rx_work+0x3eb/0xd40 [ 505.048328][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 505.053179][ T4283] ? process_one_work+0x7b0/0x1160 [ 505.058284][ T4283] process_one_work+0x8a2/0x1160 [ 505.063229][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 505.069121][ T4283] ? _raw_spin_lock_irq+0xb7/0xf0 [ 505.074140][ T4283] ? _raw_spin_lock_irqsave+0x100/0x100 [ 505.079678][ T4283] ? kthread_data+0x4b/0xc0 [ 505.084187][ T4283] worker_thread+0xaa2/0x1270 [ 505.088881][ T4283] kthread+0x29d/0x330 [ 505.092941][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 505.097964][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 505.102549][ T4283] ret_from_fork+0x1f/0x30 [ 505.106975][ T4283] [ 505.112408][ T4283] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 505.125693][ T4283] Bluetooth: hci2: failed to register connection device [ 505.127774][ T7169] airspy 7-1:0.0: Board ID: 00 [ 505.178988][ T7169] airspy 7-1:0.0: Firmware version: [ 505.190135][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 505.347174][ T7169] airspy 7-1:0.0: usb_control_msg() failed -71 request 11 [ 505.377828][ T7169] airspy 7-1:0.0: Registered as swradio24 [ 505.390757][ T7169] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 505.404661][ T7169] usb 7-1: USB disconnect, device number 4 [ 505.662718][T21398] loop0: detected capacity change from 0 to 256 [ 505.708723][T21398] FAT-fs (loop0): Directory bread(block 64) failed [ 505.732820][T21398] FAT-fs (loop0): Directory bread(block 65) failed [ 505.747745][T21398] FAT-fs (loop0): Directory bread(block 66) failed [ 505.766024][T21398] FAT-fs (loop0): Directory bread(block 67) failed [ 505.784631][T21398] FAT-fs (loop0): Directory bread(block 68) failed [ 505.805742][T21398] FAT-fs (loop0): Directory bread(block 69) failed [ 505.821613][T21398] FAT-fs (loop0): Directory bread(block 70) failed [ 505.842609][T21398] FAT-fs (loop0): Directory bread(block 71) failed [ 505.853957][T21398] FAT-fs (loop0): Directory bread(block 72) failed [ 505.865519][T21398] FAT-fs (loop0): Directory bread(block 73) failed [ 506.055920][T21409] loop3: detected capacity change from 0 to 128 [ 506.058111][T21407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7614'. [ 506.215308][T21409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 506.261730][T21409] ext4 filesystem being mounted at /1531/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 506.509509][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 506.749292][T21422] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 506.981746][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 507.010120][T21413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7613 (21413) [ 507.121263][T21413] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 507.173042][T21413] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 507.233155][T21413] BTRFS info (device loop0): using free space tree [ 507.533048][T21413] BTRFS info (device loop0): enabling ssd optimizations [ 507.649262][T10492] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 507.680916][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 507.753594][T21476] set_capacity_and_notify: 3 callbacks suppressed [ 507.753611][T21476] loop6: detected capacity change from 0 to 2048 [ 507.850736][T10492] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 507.887873][T21479] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.899208][T10492] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 507.935406][T21476] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 507.950451][T10492] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.976168][T10492] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.023293][T10492] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 508.045479][T21476] Remounting filesystem read-only [ 508.046285][T10492] usb 5-1: Product: syz [ 508.062644][T10492] usb 5-1: Manufacturer: syz [ 508.082411][T10492] usb 5-1: SerialNumber: syz [ 508.114737][T10492] usb 5-1: config 0 descriptor?? [ 508.134142][T10492] hub 5-1:0.0: bad descriptor, ignoring hub [ 508.159156][T10492] hub: probe of 5-1:0.0 failed with error -5 [ 508.173784][T10492] usb 5-1: selecting invalid altsetting 0 [ 508.211768][T17923] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 508.259935][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.509589][T10492] usb 5-1: USB disconnect, device number 31 [ 508.616383][T21500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 508.736779][T21503] loop0: detected capacity change from 0 to 4096 [ 508.758840][T21503] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 509.174459][T21495] loop6: detected capacity change from 0 to 32768 [ 509.240966][T21495] JBD2: Ignoring recovery information on journal [ 509.388954][T21506] loop2: detected capacity change from 0 to 32768 [ 509.458021][T21495] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 509.484938][T21525] loop3: detected capacity change from 0 to 4096 [ 509.507941][T21506] XFS (loop2): Mounting V5 Filesystem [ 509.576583][T21525] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 509.591768][T21525] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 509.606999][T21525] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 509.627037][ T26] audit: type=1800 audit(2000000048.372:276): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7644" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 509.656585][T21525] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 509.684045][T21525] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 509.690965][T21538] loop4: detected capacity change from 0 to 24 [ 509.709177][T21525] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 509.735498][T21506] XFS (loop2): Ending clean mount [ 509.740477][T21525] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 509.799823][T21538] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 509.848656][T21538] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 509.887970][T17923] ocfs2: Unmounting device (7,6) on (node local) [ 509.971778][T21522] could not allocate digest TFM handle sha3-224-ce [ 509.984247][ T4267] XFS (loop2): Unmounting Filesystem [ 510.412970][T21551] loop6: detected capacity change from 0 to 4096 [ 510.507077][T21556] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 510.790607][T21566] loop4: detected capacity change from 0 to 256 [ 510.841919][T21566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 510.999563][T21576] CIFS mount error: No usable UNC path provided in device string! [ 510.999563][T21576] [ 511.069304][T21576] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.179209][T10492] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 511.232836][T21586] loop4: detected capacity change from 0 to 256 [ 511.255855][T21586] exfat: Deprecated parameter 'namecase' [ 511.291748][T21586] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 511.359141][T10492] usb 4-1: Using ep0 maxpacket: 32 [ 511.367514][T10492] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.383576][T10492] usb 4-1: config 0 has no interface number 0 [ 511.429536][T10492] usb 4-1: config 0 interface 184 has no altsetting 0 [ 511.453474][T10492] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 511.467723][T10492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.476012][T10492] usb 4-1: Product: syz [ 511.480434][T10492] usb 4-1: Manufacturer: syz [ 511.489160][T10492] usb 4-1: SerialNumber: syz [ 511.506950][T10492] usb 4-1: config 0 descriptor?? [ 511.519118][T10492] smsc75xx v1.0.0 [ 511.761842][T21580] loop2: detected capacity change from 0 to 32768 [ 511.835507][T21580] JBD2: Ignoring recovery information on journal [ 511.994419][T21580] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 512.102732][T21580] (syz.2.7678,21580,1):ocfs2_verify_group_and_input:422 ERROR: input chain exceeds the limit. [ 512.125222][T21580] (syz.2.7678,21580,1):ocfs2_group_add:503 ERROR: status = -22 [ 512.140248][ T47] hfsplus: b-tree write err: -5, ino 25 [ 512.148316][T10492] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 512.170885][ T47] hfsplus: b-tree write err: -5, ino 4 [ 512.176484][ T47] hfsplus: b-tree write err: -5, ino 2 [ 512.188928][T10492] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 512.219093][ T47] hfsplus: b-tree write err: -5, ino 26 [ 512.224827][T10492] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 512.257495][T10492] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 512.296878][T10492] usb 4-1: USB disconnect, device number 35 [ 512.306077][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 512.398367][T21621] tipc: Started in network mode [ 512.398399][T21621] tipc: Node identity ac1414aa, cluster identity 4711 [ 512.412790][T21621] tipc: Enabled bearer , priority 10 [ 512.440166][T21622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 512.555055][T21622] EXT4-fs (loop0): 1 truncate cleaned up [ 512.580294][T21622] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 512.741855][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.879573][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 513.531249][ T7169] tipc: Node number set to 2886997162 [ 513.560999][ T4314] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 513.662067][T21664] set_capacity_and_notify: 2 callbacks suppressed [ 513.662082][T21664] loop2: detected capacity change from 0 to 1024 [ 513.689696][T21664] EXT4-fs: inline encryption not supported [ 513.708932][T21664] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 513.714993][T21639] loop3: detected capacity change from 0 to 40427 [ 513.749093][ T4314] usb 7-1: Using ep0 maxpacket: 16 [ 513.762127][ T4314] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 513.769012][T21639] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 513.783220][T21664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 513.789447][T21639] F2FS-fs (loop3): invalid crc value [ 513.792526][ T4314] usb 7-1: config 1 has no interface number 0 [ 513.803706][ T4314] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 513.813852][ T4314] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 513.824062][ T4314] usb 7-1: config 1 interface 105 has no altsetting 0 [ 513.833100][ T4314] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 513.842804][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 513.850974][ T4314] usb 7-1: Product: syz [ 513.855282][ T4314] usb 7-1: Manufacturer: syz [ 513.860321][ T4314] usb 7-1: SerialNumber: syz [ 513.867474][T21656] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 513.874902][T21656] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 513.924332][T21639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 514.011712][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 514.019295][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.021762][T21650] loop0: detected capacity change from 0 to 40427 [ 514.085477][T21650] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 514.102628][T21639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 514.129239][T21650] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 514.143591][T21650] F2FS-fs (loop0): invalid crc value [ 514.192874][T21639] F2FS-fs (loop3): access invalid blkaddr:2816 [ 514.200276][T21650] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 514.227512][T21639] CPU: 1 PID: 21639 Comm: syz.3.7704 Not tainted syzkaller #0 [ 514.235016][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.245084][T21639] Call Trace: [ 514.248370][T21639] [ 514.251309][T21639] dump_stack_lvl+0x188/0x24e [ 514.256011][T21639] ? show_regs_print_info+0x12/0x12 [ 514.261231][T21639] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 514.267070][T21639] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 514.272465][T21639] f2fs_map_blocks+0xd3a/0x3480 [ 514.277370][T21639] ? f2fs_get_block+0x140/0x140 [ 514.282242][T21639] ? __might_sleep+0xd0/0xd0 [ 514.286847][T21639] ? rwsem_write_trylock+0x135/0x1c0 [ 514.290137][T21660] loop4: detected capacity change from 0 to 32768 [ 514.292143][T21639] ? fiemap_prep+0x1a8/0x240 [ 514.303150][T21639] f2fs_fiemap+0x964/0x19e0 [ 514.307678][T21639] ? do_syscall_64+0x4c/0xa0 [ 514.312311][T21639] ? f2fs_overwrite_io+0x200/0x200 [ 514.317452][T21639] ? __lock_acquire+0x7d10/0x7d10 [ 514.322510][T21639] ? __might_fault+0xc2/0x120 [ 514.327206][T21639] ? __might_fault+0xa6/0x120 [ 514.331909][T21639] do_vfs_ioctl+0x1418/0x1d40 [ 514.336614][T21639] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 514.342278][T21639] ? tomoyo_path_number_perm+0x205/0x650 [ 514.347937][T21639] ? __lock_acquire+0x7d10/0x7d10 [ 514.352980][T21639] ? slab_free_freelist_hook+0x131/0x1a0 [ 514.358622][T21639] ? tomoyo_path_number_perm+0x4fb/0x650 [ 514.364263][T21639] ? __kmem_cache_free+0xb6/0x1f0 [ 514.369289][T21639] ? tomoyo_path_number_perm+0x205/0x650 [ 514.374924][T21639] ? tomoyo_path_number_perm+0x5a4/0x650 [ 514.380558][T21639] ? tomoyo_path_number_perm+0x205/0x650 [ 514.386191][T21639] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 514.391678][T21639] ? __fget_files+0x28/0x4b0 [ 514.396269][T21639] ? __fget_files+0x28/0x4b0 [ 514.400873][T21639] ? bpf_lsm_file_ioctl+0x5/0x10 [ 514.405813][T21639] ? security_file_ioctl+0x7c/0xa0 [ 514.410936][T21639] __se_sys_ioctl+0x83/0x170 [ 514.415534][T21639] do_syscall_64+0x4c/0xa0 [ 514.419957][T21639] ? clear_bhb_loop+0x60/0xb0 [ 514.424634][T21639] ? clear_bhb_loop+0x60/0xb0 [ 514.429312][T21639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.435205][T21639] RIP: 0033:0x7f9a8af9c799 [ 514.439623][T21639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.459226][T21639] RSP: 002b:00007f9a8bd89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.467635][T21639] RAX: ffffffffffffffda RBX: 00007f9a8b215fa0 RCX: 00007f9a8af9c799 [ 514.475603][T21639] RDX: 00002000000005c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 514.483566][T21639] RBP: 00007f9a8b032c99 R08: 0000000000000000 R09: 0000000000000000 [ 514.491530][T21639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.499495][T21639] R13: 00007f9a8b216038 R14: 00007f9a8b215fa0 R15: 00007ffde0486498 [ 514.507471][T21639] [ 514.513665][T21675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 514.539539][T21650] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 514.563486][T21675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 514.571324][T21650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 514.587528][T21660] XFS (loop4): Mounting V5 Filesystem [ 514.682311][ T26] audit: type=1800 audit(2000000053.432:277): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7710" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 514.690006][T21660] XFS (loop4): Ending clean mount [ 514.712955][T21660] XFS (loop4): Quotacheck needed: Please wait. [ 514.779026][T21650] syz.0.7710: attempt to access beyond end of device [ 514.779026][T21650] loop0: rw=34817, sector=77824, nr_sectors = 2056 limit=40427 [ 514.798304][ T4314] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 514.818957][ T4314] aqc111: probe of 7-1:1.105 failed with error -71 [ 514.852734][ T4314] usb 7-1: USB disconnect, device number 5 [ 514.892139][T21660] XFS (loop4): Quotacheck: Done. [ 514.945891][ T26] audit: type=1800 audit(2000000053.693:278): pid=21660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7715" name="bus" dev="loop4" ino=4428 res=0 errno=0 [ 514.967147][ T4268] syz-executor: attempt to access beyond end of device [ 514.967147][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 515.096648][ T4271] XFS (loop4): Unmounting Filesystem [ 515.181154][T21688] loop3: detected capacity change from 0 to 4096 [ 515.360353][ T4269] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 515.366842][ T4269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 515.437294][T21671] loop2: detected capacity change from 0 to 40427 [ 515.488458][T21671] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 515.520177][T21671] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 515.550940][T21671] F2FS-fs (loop2): invalid crc value [ 515.579714][T21671] F2FS-fs (loop2): Found nat_bits in checkpoint [ 515.625985][T21696] netlink: 'syz.0.7721': attribute type 10 has an invalid length. [ 515.695730][T21696] netlink: 'syz.0.7721': attribute type 10 has an invalid length. [ 515.732574][T21696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7721'. [ 515.776342][T21671] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 515.806440][T21671] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 515.877114][T21701] loop4: detected capacity change from 0 to 1024 [ 515.935286][T21701] EXT4-fs: inline encryption not supported [ 515.941787][ T4267] syz-executor: attempt to access beyond end of device [ 515.941787][ T4267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 516.066327][T21701] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.7722: lblock 2 mapped to illegal pblock 2 (length 1) [ 516.107799][T21711] loop6: detected capacity change from 0 to 128 [ 516.117567][T21711] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 516.117799][T21701] EXT4-fs (loop4): Remounting filesystem read-only [ 516.135861][T21701] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 516.145083][T21701] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.7722: lblock 0 mapped to illegal pblock 48 (length 1) [ 516.161163][T21701] EXT4-fs (loop4): Remounting filesystem read-only [ 516.167809][T21701] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 516.186994][T21701] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.7722: Failed to acquire dquot type 0 [ 516.198562][T21701] EXT4-fs (loop4): Remounting filesystem read-only [ 516.208070][T21711] hpfs: filesystem error: improperly stopped [ 516.214470][T21711] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 516.228491][T21711] hpfs: You really don't want any checks? You are crazy... [ 516.235860][T21701] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 516.247940][T21711] hpfs: hpfs_map_sector(): read error [ 516.253540][T21711] hpfs: code page support is disabled [ 516.261335][T21701] EXT4-fs (loop4): Remounting filesystem read-only [ 516.267881][T21701] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.7722: mark_inode_dirty error [ 516.286130][T21711] hpfs: hpfs_map_4sectors(): unaligned read [ 516.292370][T21711] hpfs: hpfs_map_4sectors(): unaligned read [ 516.301104][T21711] hpfs: filesystem error: unable to find root dir [ 516.308378][T21701] EXT4-fs (loop4): Remounting filesystem read-only [ 516.315694][T21701] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 516.346564][T21701] EXT4-fs (loop4): 1 orphan inode deleted [ 516.360854][ T75] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.382947][T21711] hpfs: hpfs_map_4sectors(): unaligned read [ 516.390118][T21701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 516.401691][ T75] EXT4-fs (loop4): Remounting filesystem read-only [ 516.408222][ T75] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 516.461475][ T75] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 516.464140][T21715] tipc: Started in network mode [ 516.499515][T21715] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 516.500442][ T75] EXT4-fs (loop4): Remounting filesystem read-only [ 516.528441][T21715] tipc: Enabling of bearer rejected, failed to enable media [ 516.558020][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 516.582086][ T4271] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 516.615410][ T4271] EXT4-fs (loop4): Remounting filesystem read-only [ 516.622023][ T4271] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 516.660910][ T4271] EXT4-fs (loop4): Remounting filesystem read-only [ 516.667449][ T4271] EXT4-fs error (device loop4): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 516.688929][ T4271] EXT4-fs (loop4): Remounting filesystem read-only [ 516.698846][T21717] loop6: detected capacity change from 0 to 4096 [ 516.771275][T21721] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.816160][T21717] NILFS (loop6): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 516.849833][T21717] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 516.874389][T21717] Remounting filesystem read-only [ 517.032906][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7738'. [ 517.234340][T21740] loop6: detected capacity change from 0 to 1024 [ 517.302033][T21740] EXT4-fs: Ignoring removed orlov option [ 517.371638][T21740] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 517.497159][T21750] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7747'. [ 517.537657][T21750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7747'. [ 517.590054][T17923] EXT4-fs (loop6): unmounting filesystem. [ 517.732826][T21760] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7754'. [ 517.818722][T10492] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 517.863962][ T75] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.891488][T21766] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 517.967907][ T4268] sysv_free_block: trying to free block not in datazone [ 517.987620][ T4268] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 518.019891][ T4283] Bluetooth: hci4: command 0x0411 tx timeout [ 518.026003][T10492] usb 3-1: Using ep0 maxpacket: 16 [ 518.033109][T10492] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 518.043551][T10492] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 518.058628][T10492] usb 3-1: New USB device found, idVendor=0489, idProduct=e003, bcdDevice=dd.d1 [ 518.067783][T10492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.075896][T10492] usb 3-1: Product: syz [ 518.080247][T10492] usb 3-1: Manufacturer: syz [ 518.084931][T10492] usb 3-1: SerialNumber: syz [ 518.225342][T21763] JBD2: Ignoring recovery information on journal [ 518.323299][ T7169] usb 3-1: USB disconnect, device number 32 [ 518.339887][T21763] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 518.355716][T21763] (syz.6.7751,21763,0):ocfs2_reflink_ioctl:4433 ERROR: status = -14 [ 518.397320][T21778] netlink: 'syz.0.7760': attribute type 1 has an invalid length. [ 518.405219][T21778] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7760'. [ 518.461374][T17923] ocfs2: Unmounting device (7,6) on (node local) [ 518.739301][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7763'. [ 518.861454][T21774] set_capacity_and_notify: 3 callbacks suppressed [ 518.861469][T21774] loop3: detected capacity change from 0 to 32768 [ 518.907849][T21774] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.7759 (21774) [ 518.966706][T21774] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 519.018603][T21774] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 519.028061][T21774] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 519.070381][T21774] BTRFS info (device loop3): use zstd compression, level 3 [ 519.077645][T21774] BTRFS info (device loop3): using free space tree [ 519.159529][T21796] netlink: 'syz.4.7769': attribute type 9 has an invalid length. [ 519.396449][T21774] BTRFS info (device loop3): enabling ssd optimizations [ 519.556338][ T4269] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 519.779197][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.190915][T21833] loop4: detected capacity change from 0 to 40427 [ 520.217900][T21833] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 520.236937][T21833] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 520.272867][T21833] F2FS-fs (loop4): invalid crc value [ 520.314429][T21833] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 520.462185][T21862] loop3: detected capacity change from 0 to 1024 [ 520.503133][T21833] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 520.508487][ T7492] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 520.534397][T21865] mkiss: ax0: crc mode is auto. [ 520.541237][T21833] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 520.559700][T21862] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.7790: lblock 2 mapped to illegal pblock 2 (length 1) [ 520.574203][T21862] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 520.582605][T21862] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.7790: lblock 0 mapped to illegal pblock 48 (length 1) [ 520.620636][T21862] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 520.632055][T21862] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.7790: Failed to acquire dquot type 0 [ 520.638659][ T26] audit: type=1800 audit(2000000059.383:279): pid=21833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7777" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 520.674075][T21862] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 520.696400][T21862] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.7790: mark_inode_dirty error [ 520.697993][T21833] syz.4.7777: attempt to access beyond end of device [ 520.697993][T21833] loop4: rw=34817, sector=77824, nr_sectors = 2056 limit=40427 [ 520.708563][ T7492] usb 1-1: Using ep0 maxpacket: 16 [ 520.749431][T21862] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 520.771948][ T7492] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 520.814727][ T7492] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 520.829041][T21862] EXT4-fs (loop3): 1 orphan inode deleted [ 520.845076][T21862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 520.853739][ T4296] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 520.853999][ T7492] usb 1-1: Product: syz [ 520.897098][T21872] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7793'. [ 520.909225][ T7492] usb 1-1: Manufacturer: syz [ 520.913920][ T7492] usb 1-1: SerialNumber: syz [ 520.916968][ T4296] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 520.921155][ T7492] usb 1-1: config 0 descriptor?? [ 520.937191][ T4296] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:5: Failed to release dquot type 0 [ 521.026765][ T4271] syz-executor: attempt to access beyond end of device [ 521.026765][ T4271] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 521.069705][ T75] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 521.085186][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 521.094321][ T75] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 521.106313][ T75] EXT4-fs error (device loop3): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 521.120383][ T4269] EXT4-fs error (device loop3): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 521.140866][ T4269] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 521.150880][ T4269] EXT4-fs error (device loop3): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 521.201486][ T4317] usb 1-1: USB disconnect, device number 42 [ 521.467521][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7801'. [ 521.488459][ T7169] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 521.690235][ T7169] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 521.727075][ T7169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.754831][ T7169] usb 3-1: config 0 descriptor?? [ 521.769718][ T7169] cp210x 3-1:0.0: cp210x converter detected [ 522.131015][T21913] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=4 [ 522.199275][ T7169] usb 3-1: cp210x converter now attached to ttyUSB0 [ 522.251310][T21901] loop3: detected capacity change from 0 to 32768 [ 522.252748][T21915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7813'. [ 522.385168][ T7169] usb 3-1: USB disconnect, device number 33 [ 522.425511][ T7169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.508824][ T7169] cp210x 3-1:0.0: device disconnected [ 522.662938][T21925] loop4: detected capacity change from 0 to 512 [ 522.719727][T21925] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 522.722009][T21928] loop0: detected capacity change from 0 to 512 [ 522.776086][T21925] EXT4-fs (loop4): 1 truncate cleaned up [ 522.781904][T21925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 522.792231][T21909] loop6: detected capacity change from 0 to 40427 [ 522.805140][T21909] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 522.811697][T21909] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 522.832921][T21909] F2FS-fs (loop6): invalid crc value [ 522.843758][T21925] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.7820: Logical block already allocated [ 522.890284][T21909] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 522.937467][T21925] EXT4-fs (loop4): Remounting filesystem read-only [ 522.979130][ T47] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.101760][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 523.130728][T21909] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 523.151994][T21909] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 523.260404][ T26] audit: type=1800 audit(2000000062.013:280): pid=21909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7809" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 523.352197][T21909] syz.6.7809: attempt to access beyond end of device [ 523.352197][T21909] loop6: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 523.441631][T21946] netem: change failed [ 523.494780][T21950] loop3: detected capacity change from 0 to 256 [ 523.572792][T21950] FAT-fs (loop3): Directory bread(block 64) failed [ 523.598529][T21950] FAT-fs (loop3): Directory bread(block 65) failed [ 523.620292][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7830'. [ 523.625134][T21950] FAT-fs (loop3): Directory bread(block 66) failed [ 523.639624][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7830'. [ 523.651626][T17923] syz-executor: attempt to access beyond end of device [ 523.651626][T17923] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 523.666564][T21950] FAT-fs (loop3): Directory bread(block 67) failed [ 523.675448][T21950] FAT-fs (loop3): Directory bread(block 68) failed [ 523.687833][T21950] FAT-fs (loop3): Directory bread(block 69) failed [ 523.696816][T21950] FAT-fs (loop3): Directory bread(block 70) failed [ 523.733682][T21950] FAT-fs (loop3): Directory bread(block 71) failed [ 523.741310][T21950] FAT-fs (loop3): Directory bread(block 72) failed [ 523.768706][T21950] FAT-fs (loop3): Directory bread(block 73) failed [ 523.878353][T21958] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 523.884921][T21958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 523.897875][T21962] loop4: detected capacity change from 0 to 256 [ 523.952608][T21958] vhci_hcd vhci_hcd.0: Device attached [ 524.067436][T21967] loop3: detected capacity change from 0 to 1024 [ 524.152966][T21967] hfsplus: bad catalog entry type [ 524.228450][ T7161] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 524.268296][ T4317] usb 34-1: SetAddress Request (2) to port 0 [ 524.282974][ T4317] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 524.333119][ T47] hfsplus: b-tree write err: -5, ino 25 [ 524.341486][ T47] hfsplus: b-tree write err: -5, ino 4 [ 524.347039][ T47] hfsplus: b-tree write err: -5, ino 2 [ 524.351650][T21975] loop2: detected capacity change from 0 to 4096 [ 524.392628][T21975] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 524.425450][T21960] vhci_hcd: cannot find a urb of seqnum 8 max seqnum 1 [ 524.444467][ T47] vhci_hcd: stop threads [ 524.449163][ T7161] usb 1-1: unable to get BOS descriptor or descriptor too short [ 524.454887][T21981] loop3: detected capacity change from 0 to 512 [ 524.459380][ T47] vhci_hcd: release socket [ 524.469258][T18320] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 524.487958][ T7161] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 524.489127][T21981] EXT4-fs: Ignoring removed i_version option [ 524.510482][T21981] EXT4-fs: Ignoring removed oldalloc option [ 524.510725][ T47] vhci_hcd: disconnect device [ 524.528826][ T7161] usb 1-1: can't read configurations, error -71 [ 524.540260][T21981] EXT4-fs (loop3): Test dummy encryption mode enabled [ 524.567146][T21975] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 524.587320][T21981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0103] [ 524.597239][T21981] EXT4-fs (loop3): orphan cleanup on readonly fs [ 524.605059][T21981] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.7842: invalid indirect mapped block 234881024 (level 0) [ 524.620395][T21981] EXT4-fs (loop3): 1 truncate cleaned up [ 524.626074][T21981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 524.669807][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 524.689215][T18320] usb 5-1: Using ep0 maxpacket: 8 [ 524.697653][T18320] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 524.743868][T18320] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 524.770219][T18320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.790674][T18320] usb 5-1: Product: syz [ 524.798673][T18320] usb 5-1: Manufacturer: syz [ 524.815780][T18320] usb 5-1: SerialNumber: syz [ 524.834238][T18320] usb 5-1: config 0 descriptor?? [ 524.857576][T18320] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 524.876281][T18320] usb 5-1: setting power ON [ 524.886906][T18320] dvb-usb: bulk message failed: -22 (2/0) [ 524.910127][T18320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.929481][T18320] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 524.956443][T18320] usb 5-1: media controller created [ 524.995265][T18320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.059879][T21971] dvb-usb: bulk message failed: -22 (3/0) [ 525.074533][T18320] usb 5-1: selecting invalid altsetting 6 [ 525.088788][T18320] usb 5-1: digital interface selection failed (-22) [ 525.111722][T18320] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 525.129877][T21994] loop0: detected capacity change from 0 to 1024 [ 525.138965][T18320] usb 5-1: setting power OFF [ 525.144365][T18320] dvb-usb: bulk message failed: -22 (2/0) [ 525.165602][T18320] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 525.193789][T18320] (NULL device *): no alternate interface [ 525.259608][T18320] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 525.298289][ T4316] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 525.309225][T18320] usb 5-1: USB disconnect, device number 32 [ 525.455555][T21986] loop3: detected capacity change from 0 to 40427 [ 525.479302][T21986] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 525.489074][T21986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 525.508215][ T4316] usb 7-1: Using ep0 maxpacket: 32 [ 525.521416][T21986] F2FS-fs (loop3): invalid crc value [ 525.527619][ T4316] usb 7-1: config 0 has an invalid interface number: 71 but max is 0 [ 525.538775][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.546197][ T4316] usb 7-1: config 0 has no interface number 0 [ 525.572370][ T4316] usb 7-1: config 0 interface 71 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.588765][T21986] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 525.610218][ T4316] usb 7-1: config 0 interface 71 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.649320][ T4316] usb 7-1: config 0 interface 71 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.693218][ T4316] usb 7-1: config 0 interface 71 has no altsetting 0 [ 525.713453][ T4316] usb 7-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 525.742302][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.764041][ T4316] usb 7-1: config 0 descriptor?? [ 525.789701][T21986] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 525.807334][T22010] loop2: detected capacity change from 0 to 4096 [ 525.809934][T22013] sp0: Synchronizing with TNC [ 525.824813][T22010] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 525.829860][T21986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 525.860933][T22011] [U] è [ 525.971908][ T26] audit: type=1800 audit(2000000064.723:281): pid=21986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7844" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 526.033479][T21986] syz.3.7844: attempt to access beyond end of device [ 526.033479][T21986] loop3: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 526.137549][T22020] loop4: detected capacity change from 0 to 256 [ 526.188284][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7859'. [ 526.198866][T22020] exfat: Deprecated parameter 'utf8' [ 526.204022][ T4316] uclogic 0003:28BD:0933.0002: interface is invalid, ignoring [ 526.271651][T22020] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d) [ 526.338252][ T4269] syz-executor: attempt to access beyond end of device [ 526.338252][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 526.413436][ T4316] usb 7-1: USB disconnect, device number 6 [ 526.679319][T22029] program syz.4.7864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.003071][T22041] loop0: detected capacity change from 0 to 256 [ 527.077484][T22041] FAT-fs (loop0): Directory bread(block 64) failed [ 527.110240][T22041] FAT-fs (loop0): Directory bread(block 65) failed [ 527.147299][T22041] FAT-fs (loop0): Directory bread(block 66) failed [ 527.162260][T22041] FAT-fs (loop0): Directory bread(block 67) failed [ 527.186604][T22041] FAT-fs (loop0): Directory bread(block 68) failed [ 527.196270][T22041] FAT-fs (loop0): Directory bread(block 69) failed [ 527.215893][T22041] FAT-fs (loop0): Directory bread(block 70) failed [ 527.225471][T22041] FAT-fs (loop0): Directory bread(block 71) failed [ 527.237405][T22025] loop2: detected capacity change from 0 to 40427 [ 527.244479][T22041] FAT-fs (loop0): Directory bread(block 72) failed [ 527.253426][T22041] FAT-fs (loop0): Directory bread(block 73) failed [ 527.261554][T22025] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 527.282307][T22025] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 527.313445][T22025] F2FS-fs (loop2): invalid crc value [ 527.345040][T22025] F2FS-fs (loop2): Found nat_bits in checkpoint [ 527.407761][T22025] F2FS-fs (loop2): Start checkpoint disabled! [ 527.415551][T22025] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 527.427288][T22025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 527.651830][ T9] kworker/u4:0: attempt to access beyond end of device [ 527.651830][ T9] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 527.753330][ T9] kworker/u4:0: attempt to access beyond end of device [ 527.753330][ T9] loop2: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 527.789361][T22060] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.847864][T22058] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 527.881421][T22058] Remounting filesystem read-only [ 528.011967][ T4268] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 528.034190][ T4947] hfsplus: b-tree write err: -5, ino 25 [ 528.050647][ T4947] hfsplus: b-tree write err: -5, ino 4 [ 528.056201][ T4947] hfsplus: b-tree write err: -5, ino 2 [ 528.345165][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7882'. [ 528.383877][T22076] device gretap0 entered promiscuous mode [ 528.738585][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.901398][T22099] set_capacity_and_notify: 4 callbacks suppressed [ 528.901415][T22099] loop3: detected capacity change from 0 to 24 [ 528.927053][T22102] loop6: detected capacity change from 0 to 736 [ 528.938832][T22099] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 528.956028][T22099] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 529.125408][T22104] loop4: detected capacity change from 0 to 512 [ 529.239396][T22104] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.7897: couldn't read orphan inode 26 (err -116) [ 529.324890][T22104] EXT4-fs (loop4): Remounting filesystem read-only [ 529.373148][T22104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 529.378421][ T4317] usb 34-1: device descriptor read/8, error -110 [ 529.398750][T22104] ext4 filesystem being mounted at /1548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.496959][T22080] loop2: detected capacity change from 0 to 40427 [ 529.552715][T22080] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 529.581753][T22080] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 529.589745][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 529.625627][T22080] F2FS-fs (loop2): invalid crc value [ 529.690650][T22080] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 529.723161][T22128] loop0: detected capacity change from 0 to 64 [ 529.851544][ T4317] usb usb34-port1: attempt power cycle [ 529.930385][T22080] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 529.943594][T22080] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 530.070367][ T26] audit: type=1800 audit(2000000068.823:282): pid=22080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7873" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 530.208913][T22080] syz.2.7873: attempt to access beyond end of device [ 530.208913][T22080] loop2: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 530.498746][ T4317] usb usb34-port1: unable to enumerate USB device [ 530.529134][ T4267] syz-executor: attempt to access beyond end of device [ 530.529134][ T4267] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 530.928078][ T4317] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 531.132103][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 531.140807][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 531.171839][ T4317] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 531.202031][T22165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7915'. [ 531.216900][ T4317] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 531.248791][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.289981][ T4317] usb 1-1: Product: syz [ 531.296797][ T4317] usb 1-1: Manufacturer: syz [ 531.302270][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.327239][ T4317] usb 1-1: SerialNumber: syz [ 531.342967][T22129] loop6: detected capacity change from 0 to 32768 [ 531.454673][T22129] JBD2: Ignoring recovery information on journal [ 531.557352][ T4317] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 531.574700][ T4317] usb 1-1: unit 2 not found! [ 531.625082][ T4317] usb 1-1: USB disconnect, device number 45 [ 531.810575][T22129] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 531.861202][T22184] loop2: detected capacity change from 0 to 128 [ 531.889390][T13503] udevd[13503]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.906757][T22184] EXT4-fs (loop2): Test dummy encryption mode enabled [ 531.950578][T22184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 532.050146][T22184] ext4 filesystem being mounted at /1570/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 532.221650][T17923] ocfs2: Unmounting device (7,6) on (node local) [ 532.289846][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 532.847800][ T4317] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 532.977172][T22186] loop3: detected capacity change from 0 to 40427 [ 533.027078][T22186] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 533.036428][T22186] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 533.057935][ T4317] usb 5-1: Using ep0 maxpacket: 8 [ 533.068488][ T4317] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 533.077575][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.101957][T22186] F2FS-fs (loop3): invalid crc value [ 533.120437][ T4317] usb 5-1: Product: syz [ 533.124632][ T4317] usb 5-1: Manufacturer: syz [ 533.139500][ T4317] usb 5-1: SerialNumber: syz [ 533.145203][T22186] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 533.171683][ T4317] usb 5-1: config 0 descriptor?? [ 533.214317][ T4317] gspca_main: se401-2.14.0 probing 047d:5003 [ 533.353918][T22186] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 533.367789][T22186] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 533.503596][ T26] audit: type=1800 audit(2000000072.254:283): pid=22186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7922" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 533.572845][T22186] syz.3.7922: attempt to access beyond end of device [ 533.572845][T22186] loop3: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 533.577251][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7933'. [ 533.596638][ T4317] gspca_se401: Wrong descriptor type [ 533.740027][ T4269] syz-executor: attempt to access beyond end of device [ 533.740027][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 533.805489][ T38] usb 5-1: USB disconnect, device number 33 [ 533.858748][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.231243][T22240] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7937'. [ 534.242100][T22240] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7937'. [ 534.273270][T22215] loop6: detected capacity change from 0 to 32768 [ 534.427870][T22215] XFS (loop6): Mounting V5 Filesystem [ 534.463237][T22236] loop0: detected capacity change from 0 to 32768 [ 534.494026][T22236] XFS (loop0): Mounting V5 Filesystem [ 534.683393][T22236] XFS (loop0): Ending clean mount [ 534.740951][T22236] XFS (loop0): Quotacheck needed: Please wait. [ 534.833334][T22236] XFS (loop0): Quotacheck: Done. [ 534.857392][T22215] XFS (loop6): Ending clean mount [ 535.030956][ T4268] XFS (loop0): Unmounting Filesystem [ 535.168340][T17923] XFS (loop6): Unmounting Filesystem [ 535.660915][T22270] loop3: detected capacity change from 0 to 40427 [ 535.685362][T22270] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 535.707682][T22270] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 535.768810][T22270] F2FS-fs (loop3): invalid crc value [ 535.807478][T22270] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 536.000402][T22270] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 536.007486][T22270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 536.040152][T22286] loop4: detected capacity change from 0 to 2048 [ 536.078612][T22286] EXT4-fs: Ignoring removed bh option [ 536.100883][T22286] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.139319][ T26] audit: type=1800 audit(2000000074.894:284): pid=22270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7948" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 536.187138][T22270] syz.3.7948: attempt to access beyond end of device [ 536.187138][T22270] loop3: rw=34817, sector=77824, nr_sectors = 2064 limit=40427 [ 536.271745][T22286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 536.311136][T22301] nbd: socks must be embedded in a SOCK_ITEM attr [ 536.330715][T22286] ext4 filesystem being mounted at /1563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.433464][T22286] fs-verity: sha512 using implementation "sha512-avx2" [ 536.536250][ T4269] syz-executor: attempt to access beyond end of device [ 536.536250][ T4269] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 536.563443][ T26] audit: type=1326 audit(2000000075.314:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 536.628663][ T26] audit: type=1326 audit(2000000075.354:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 536.654955][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 536.747374][ T26] audit: type=1326 audit(2000000075.354:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 536.843635][ T26] audit: type=1326 audit(2000000075.354:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 536.865976][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.942849][ T26] audit: type=1326 audit(2000000075.354:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 536.965204][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.037599][ T26] audit: type=1326 audit(2000000075.434:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 537.061257][ T4331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.128192][T22321] loop4: detected capacity change from 0 to 2048 [ 537.135609][ T26] audit: type=1326 audit(2000000075.434:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22307 comm="syz.2.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661979c799 code=0x7ffc0000 [ 537.198277][T22326] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.236192][T22328] loop3: detected capacity change from 0 to 1024 [ 537.236351][T22321] NILFS (loop4): error -2 truncating bmap (ino=16) [ 537.282646][T22328] EXT4-fs: Ignoring removed orlov option [ 537.351006][T22328] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 537.361692][T22326] NILFS (loop4): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 537.386375][T22326] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16) [ 537.411510][T22326] Remounting filesystem read-only [ 537.427830][ T4271] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 537.433094][T22335] loop2: detected capacity change from 0 to 256 [ 537.525564][T22335] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 537.541165][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 537.773840][T22341] loop0: detected capacity change from 0 to 128 [ 538.214345][T22357] loop3: detected capacity change from 0 to 2048 [ 538.255391][T22357] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 538.291885][T22357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.364833][T22357] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 538.428404][T22365] loop2: detected capacity change from 0 to 128 [ 538.526786][T22337] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 538.555997][T22337] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 538.598918][T22337] F2FS-fs (loop4): invalid crc value [ 538.674863][T22337] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 538.678779][T22363] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 538.796766][T22363] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 538.870596][T22337] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 538.902308][T22337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 539.099295][ T26] audit: type=1800 audit(2000000077.854:292): pid=22337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7975" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 539.198670][T22337] syz.4.7975: attempt to access beyond end of device [ 539.198670][T22337] loop4: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 539.310816][T22361] set_capacity_and_notify: 2 callbacks suppressed [ 539.310831][T22361] loop0: detected capacity change from 0 to 32768 [ 539.383583][T22361] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 539.383583][T22361] [ 539.410202][ T4271] syz-executor: attempt to access beyond end of device [ 539.410202][ T4271] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 539.445484][T22361] ERROR: (device loop0): remounting filesystem as read-only [ 539.472266][T22361] ERROR: (device loop0): diWrite: ixpxd invalid [ 539.472266][T22361] [ 539.515034][T22361] ERROR: (device loop0): txCommit: [ 539.515034][T22361] [ 539.547546][ T4317] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 539.628681][ T4296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.757415][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 539.769875][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.805869][ T4317] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 539.845611][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.897048][ T4317] usb 4-1: config 0 descriptor?? [ 540.104926][T22396] loop6: detected capacity change from 0 to 1024 [ 540.130850][T22396] EXT4-fs: Ignoring removed mblk_io_submit option [ 540.157569][ T4317] rc_core: IR keymap rc-xbox-dvd not found [ 540.161787][T22396] EXT4-fs: Ignoring removed bh option [ 540.163417][ T4317] Registered IR keymap rc-empty [ 540.177882][T22398] loop2: detected capacity change from 0 to 764 [ 540.179910][ T4317] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 540.214217][T22398] rock: directory entry would overflow storage [ 540.231893][ T4317] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 540.237171][T22402] loop0: detected capacity change from 0 to 2048 [ 540.254467][T22398] rock: sig=0x4654, size=5, remaining=4 [ 540.265162][T22396] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 540.286706][ T4317] usb 4-1: USB disconnect, device number 36 [ 540.292699][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 540.317497][T22396] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.486686][T22402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 540.570701][T17923] EXT4-fs (loop6): unmounting filesystem. [ 540.645574][T22414] loop4: detected capacity change from 0 to 256 [ 540.726645][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 540.937884][T22422] loop0: detected capacity change from 0 to 256 [ 540.952033][T22421] [U]  [ 540.987134][T22422] FAT-fs (loop0): bogus logical sector size 128 [ 541.017332][T22422] FAT-fs (loop0): Can't find a valid FAT filesystem [ 541.053058][ T4316] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 541.247358][ T4316] usb 7-1: Using ep0 maxpacket: 32 [ 541.254165][ T4316] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 541.283774][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.323131][ T4316] usb 7-1: config 0 descriptor?? [ 541.346157][ T4316] as10x_usb: device has been detected [ 541.357617][ T4316] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 541.384925][T22432] loop0: detected capacity change from 0 to 8192 [ 541.386363][ T4316] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 541.476482][ T4316] as10x_usb: error during firmware upload part1 [ 541.510996][ T4316] Registered device nBox DVB-T Dongle [ 541.592343][ T4316] usb 7-1: USB disconnect, device number 7 [ 541.653342][ T4316] Unregistered device nBox DVB-T Dongle [ 541.654544][ T4316] as10x_usb: device has been disconnected [ 541.978990][T22450] loop3: detected capacity change from 0 to 2048 [ 542.016758][T22454] loop2: detected capacity change from 0 to 64 [ 542.032846][T22450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.060326][T22454] hfs: unable to locate alternate MDB [ 542.079552][T22454] hfs: continuing without an alternate MDB [ 542.146796][ T26] audit: type=1800 audit(2000000080.894:293): pid=22454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8026" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 542.185447][T22456] loop0: detected capacity change from 0 to 64 [ 542.308892][ T4331] [ 542.311255][ T4331] ====================================================== [ 542.318271][ T4331] WARNING: possible circular locking dependency detected [ 542.325298][ T4331] syzkaller #0 Not tainted [ 542.329714][ T4331] ------------------------------------------------------ [ 542.336733][ T4331] kworker/u4:6/4331 is trying to acquire lock: [ 542.342886][ T4331] ffff88805904c1f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 542.353702][ T4331] [ 542.353702][ T4331] but task is already holding lock: [ 542.361064][ T4331] ffff88807dd8a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 542.370577][ T4331] [ 542.370577][ T4331] which lock already depends on the new lock. [ 542.370577][ T4331] [ 542.380979][ T4331] [ 542.380979][ T4331] the existing dependency chain (in reverse order) is: [ 542.389998][ T4331] [ 542.389998][ T4331] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 542.398112][ T4331] __mutex_lock+0x12d/0xaf0 [ 542.403155][ T4331] hfs_find_init+0x15b/0x1d0 [ 542.408280][ T4331] hfs_extend_file+0x35d/0x13f0 [ 542.413665][ T4331] hfs_bmap_reserve+0x103/0x420 [ 542.419051][ T4331] hfs_cat_create+0x204/0x8e0 [ 542.424258][ T4331] hfs_create+0x62/0xd0 [ 542.428945][ T4331] path_openat+0x1181/0x2ee0 [ 542.434064][ T4331] do_filp_open+0x1f1/0x430 [ 542.439094][ T4331] do_sys_openat2+0x150/0x4b0 [ 542.444304][ T4331] __x64_sys_openat+0x135/0x160 [ 542.449696][ T4331] do_syscall_64+0x4c/0xa0 [ 542.454648][ T4331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.461071][ T4331] [ 542.461071][ T4331] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 542.470289][ T4331] __lock_acquire+0x2d07/0x7d10 [ 542.475677][ T4331] lock_acquire+0x1bb/0x4a0 [ 542.480713][ T4331] __mutex_lock+0x12d/0xaf0 [ 542.485751][ T4331] hfs_extend_file+0xfb/0x13f0 [ 542.491050][ T4331] hfs_bmap_reserve+0x103/0x420 [ 542.496435][ T4331] __hfs_ext_write_extent+0x1fa/0x470 [ 542.502339][ T4331] hfs_ext_write_extent+0x17b/0x200 [ 542.508066][ T4331] hfs_write_inode+0xd8/0xa20 [ 542.513266][ T4331] __writeback_single_inode+0x75b/0x1160 [ 542.519437][ T4331] writeback_sb_inodes+0xb30/0x1850 [ 542.525165][ T4331] wb_writeback+0x482/0xd50 [ 542.530198][ T4331] wb_workfn+0x423/0xee0 [ 542.534970][ T4331] process_one_work+0x8a2/0x1160 [ 542.540438][ T4331] worker_thread+0xaa2/0x1270 [ 542.545647][ T4331] kthread+0x29d/0x330 [ 542.550236][ T4331] ret_from_fork+0x1f/0x30 [ 542.555181][ T4331] [ 542.555181][ T4331] other info that might help us debug this: [ 542.555181][ T4331] [ 542.565408][ T4331] Possible unsafe locking scenario: [ 542.565408][ T4331] [ 542.572862][ T4331] CPU0 CPU1 [ 542.578227][ T4331] ---- ---- [ 542.583591][ T4331] lock(&tree->tree_lock#2/1); [ 542.588463][ T4331] lock(&HFS_I(tree->inode)->extents_lock); [ 542.596968][ T4331] lock(&tree->tree_lock#2/1); [ 542.604355][ T4331] lock(&HFS_I(tree->inode)->extents_lock); [ 542.610340][ T4331] [ 542.610340][ T4331] *** DEADLOCK *** [ 542.610340][ T4331] [ 542.618485][ T4331] 3 locks held by kworker/u4:6/4331: [ 542.623774][ T4331] #0: ffff88801964d938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 542.634406][ T4331] #1: ffffc90004807d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 542.646258][ T4331] #2: ffff88807dd8a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 542.656210][ T4331] [ 542.656210][ T4331] stack backtrace: [ 542.662098][ T4331] CPU: 1 PID: 4331 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 542.669643][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.679704][ T4331] Workqueue: writeback wb_workfn (flush-7:2) [ 542.685701][ T4331] Call Trace: [ 542.688982][ T4331] [ 542.691919][ T4331] dump_stack_lvl+0x188/0x24e [ 542.696608][ T4331] ? load_image+0x400/0x400 [ 542.701117][ T4331] ? show_regs_print_info+0x12/0x12 [ 542.706329][ T4331] ? print_circular_bug+0x12b/0x1a0 [ 542.711540][ T4331] check_noncircular+0x296/0x330 [ 542.716491][ T4331] ? look_up_lock_class+0x75/0x140 [ 542.721617][ T4331] ? add_chain_block+0x940/0x940 [ 542.726575][ T4331] ? lockdep_lock+0xf1/0x1f0 [ 542.731181][ T4331] ? unwind_next_frame+0x1880/0x20b0 [ 542.736481][ T4331] ? _find_first_zero_bit+0xcf/0x100 [ 542.741779][ T4331] __lock_acquire+0x2d07/0x7d10 [ 542.746644][ T4331] ? ret_from_fork+0x1f/0x30 [ 542.751254][ T4331] ? ret_from_fork+0x1f/0x30 [ 542.755860][ T4331] ? verify_lock_unused+0x140/0x140 [ 542.761073][ T4331] ? stack_trace_save+0xa6/0xf0 [ 542.765938][ T4331] ? stack_trace_snprint+0xf0/0xf0 [ 542.771064][ T4331] ? check_noncircular+0x189/0x330 [ 542.776190][ T4331] ? add_chain_block+0x940/0x940 [ 542.781142][ T4331] lock_acquire+0x1bb/0x4a0 [ 542.785653][ T4331] ? hfs_extend_file+0xfb/0x13f0 [ 542.790610][ T4331] ? __might_sleep+0xd0/0xd0 [ 542.795212][ T4331] ? read_lock_is_recursive+0x10/0x10 [ 542.800600][ T4331] __mutex_lock+0x12d/0xaf0 [ 542.805117][ T4331] ? hfs_extend_file+0xfb/0x13f0 [ 542.810068][ T4331] ? verify_lock_unused+0x140/0x140 [ 542.815275][ T4331] ? hfs_extend_file+0xfb/0x13f0 [ 542.820222][ T4331] ? mutex_lock_nested+0x10/0x10 [ 542.825174][ T4331] ? __stack_depot_save+0x421/0x460 [ 542.830400][ T4331] hfs_extend_file+0xfb/0x13f0 [ 542.835188][ T4331] ? hfs_ext_write_extent+0x14e/0x200 [ 542.840576][ T4331] ? hfs_write_inode+0xd8/0xa20 [ 542.845434][ T4331] ? hfs_get_block+0xc50/0xc50 [ 542.850206][ T4331] ? trace_raw_output_contention_end+0xd0/0xd0 [ 542.856377][ T4331] ? rcu_is_watching+0x11/0xa0 [ 542.861151][ T4331] ? trace_contention_end+0x5f/0x170 [ 542.866448][ T4331] ? memset+0x1e/0x40 [ 542.870437][ T4331] ? hfs_brec_find+0x197/0x500 [ 542.875215][ T4331] hfs_bmap_reserve+0x103/0x420 [ 542.880084][ T4331] __hfs_ext_write_extent+0x1fa/0x470 [ 542.885475][ T4331] hfs_ext_write_extent+0x17b/0x200 [ 542.890686][ T4331] ? verify_lock_unused+0x140/0x140 [ 542.895896][ T4331] ? hfs_ext_keycmp+0x310/0x310 [ 542.900760][ T4331] ? writeback_sb_inodes+0x46b/0x1850 [ 542.906142][ T4331] hfs_write_inode+0xd8/0xa20 [ 542.910824][ T4331] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 542.916209][ T4331] ? __writeback_single_inode+0x4ae/0x1160 [ 542.922029][ T4331] ? __lock_acquire+0x7d10/0x7d10 [ 542.927066][ T4331] ? do_raw_spin_lock+0x128/0x2f0 [ 542.932099][ T4331] ? __rwlock_init+0x140/0x140 [ 542.936876][ T4331] __writeback_single_inode+0x75b/0x1160 [ 542.942530][ T4331] writeback_sb_inodes+0xb30/0x1850 [ 542.947753][ T4331] ? queue_io+0x5a0/0x5a0 [ 542.952101][ T4331] ? rcu_is_watching+0x11/0xa0 [ 542.956881][ T4331] wb_writeback+0x482/0xd50 [ 542.961415][ T4331] ? percpu_ref_tryget+0x250/0x250 [ 542.966541][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 542.969031][T22468] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 542.972525][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 542.972553][ T4331] wb_workfn+0x423/0xee0 [ 542.990896][ T4331] ? inode_wait_for_writeback+0x220/0x220 [ 542.996633][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.002625][ T4331] ? read_lock_is_recursive+0x10/0x10 [ 543.008007][ T4331] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 543.013899][ T4331] ? _raw_spin_unlock+0x40/0x40 [ 543.018747][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 543.023938][ T4331] ? process_one_work+0x7b0/0x1160 [ 543.029038][ T4331] process_one_work+0x8a2/0x1160 [ 543.033968][ T4331] ? worker_detach_from_pool+0x240/0x240 [ 543.039595][ T4331] ? _raw_spin_lock_irq+0xb7/0xf0 [ 543.044615][ T4331] ? _raw_spin_lock_irqsave+0x100/0x100 [ 543.050151][ T4331] ? kthread_data+0x4b/0xc0 [ 543.054651][ T4331] worker_thread+0xaa2/0x1270 [ 543.059324][ T4331] ? __kthread_parkme+0x162/0x1c0 [ 543.064348][ T4331] kthread+0x29d/0x330 [ 543.068414][ T4331] ? worker_clr_flags+0x1a0/0x1a0 [ 543.073430][ T4331] ? kthread_blkcg+0xd0/0xd0 [ 543.078008][ T4331] ret_from_fork+0x1f/0x30 [ 543.082424][ T4331] [ 543.087923][ T4947] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.141075][ T4331] hfs: new node 0 already hashed? [ 543.146331][ T4331] ------------[ cut here ]------------ [ 543.151831][ T4331] WARNING: CPU: 1 PID: 4331 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 543.160825][ T4331] Modules linked in: [ 543.164729][ T4331] CPU: 1 PID: 4331 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 543.172316][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.182570][ T4331] Workqueue: writeback wb_workfn (flush-7:2) [ 543.188608][ T4331] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 543.194257][ T4331] Code: ab a2 8a 89 ee e8 c6 47 d7 07 e9 ab fd ff ff e8 9c 2e 37 ff 48 89 df e8 14 97 ec 07 48 c7 c7 c0 ab a2 8a 89 ee e8 a6 47 d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 543.213901][ T4331] RSP: 0018:ffffc90004806e80 EFLAGS: 00010246 [ 543.220000][ T4331] RAX: 000000000000001f RBX: ffff88807dd8a0e0 RCX: 304a9d907a158100 [ 543.228004][ T4331] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 543.235980][ T4331] RBP: 0000000000000000 R08: ffffc90004806b87 R09: 1ffff92000900d70 [ 543.243985][ T4331] R10: dffffc0000000000 R11: fffff52000900d71 R12: 0000000000000000 [ 543.251984][ T4331] R13: ffff88807dd8a000 R14: ffff88804692cc00 R15: dffffc0000000000 [ 543.259985][ T4331] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 543.268957][ T4331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.275549][ T4331] CR2: 00007f9bb8a08000 CR3: 0000000023dc6000 CR4: 00000000003506e0 [ 543.283565][ T4331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.291565][ T4331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.299575][ T4331] Call Trace: [ 543.302856][ T4331] [ 543.305794][ T4331] hfs_bmap_alloc+0x53d/0x5d0 [ 543.310525][ T4331] ? hfs_bmap_reserve+0x420/0x420 [ 543.315564][ T4331] ? rcu_is_watching+0x11/0xa0 [ 543.320381][ T4331] hfs_btree_inc_height+0xfd/0xac0 [ 543.325504][ T4331] ? hfs_brec_insert+0x6f6/0xbd0 [ 543.330498][ T4331] ? hfs_brec_insert+0xbd0/0xbd0 [ 543.335447][ T4331] ? do_raw_spin_unlock+0x11d/0x230 [ 543.340684][ T4331] hfs_brec_insert+0x744/0xbd0 [ 543.345468][ T4331] ? hfs_brec_keylen+0x350/0x350 [ 543.350462][ T4331] __hfs_ext_write_extent+0x2a1/0x470 [ 543.355854][ T4331] hfs_ext_write_extent+0x17b/0x200 [ 543.361093][ T4331] ? verify_lock_unused+0x140/0x140 [ 543.366304][ T4331] ? hfs_ext_keycmp+0x310/0x310 [ 543.371193][ T4331] ? writeback_sb_inodes+0x46b/0x1850 [ 543.376580][ T4331] hfs_write_inode+0xd8/0xa20 [ 543.381289][ T4331] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 543.386682][ T4331] ? __writeback_single_inode+0x4ae/0x1160 [ 543.392545][ T4331] ? __lock_acquire+0x7d10/0x7d10 [ 543.397607][ T4331] ? do_raw_spin_lock+0x128/0x2f0 [ 543.402642][ T4331] ? __rwlock_init+0x140/0x140 [ 543.407436][ T4331] __writeback_single_inode+0x75b/0x1160 [ 543.413084][ T4331] writeback_sb_inodes+0xb30/0x1850 [ 543.418328][ T4331] ? queue_io+0x5a0/0x5a0 [ 543.422683][ T4331] ? rcu_is_watching+0x11/0xa0 [ 543.427084][T22471] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.8031 (22471) [ 543.439707][ T4331] wb_writeback+0x482/0xd50 [ 543.439740][ T4331] ? percpu_ref_tryget+0x250/0x250 [ 543.439762][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.439790][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 543.439810][ T4331] wb_workfn+0x423/0xee0 [ 543.439836][ T4331] ? inode_wait_for_writeback+0x220/0x220 [ 543.439861][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.439882][ T4331] ? read_lock_is_recursive+0x10/0x10 [ 543.466387][T22471] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 543.470595][ T4331] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 543.470622][ T4331] ? _raw_spin_unlock+0x40/0x40 [ 543.470639][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 543.470657][ T4331] ? process_one_work+0x7b0/0x1160 [ 543.470677][ T4331] process_one_work+0x8a2/0x1160 [ 543.470701][ T4331] ? worker_detach_from_pool+0x240/0x240 [ 543.470721][ T4331] ? _raw_spin_lock_irq+0xb7/0xf0 [ 543.470737][ T4331] ? _raw_spin_lock_irqsave+0x100/0x100 [ 543.491311][T22471] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 543.492131][ T4331] ? kthread_data+0x4b/0xc0 [ 543.520302][T22471] BTRFS info (device loop0): using free space tree [ 543.523660][ T4331] worker_thread+0xaa2/0x1270 [ 543.523691][ T4331] ? __kthread_parkme+0x162/0x1c0 [ 543.564362][ T4331] kthread+0x29d/0x330 [ 543.568479][ T4331] ? worker_clr_flags+0x1a0/0x1a0 [ 543.573517][ T4331] ? kthread_blkcg+0xd0/0xd0 [ 543.578138][ T4331] ret_from_fork+0x1f/0x30 [ 543.582575][ T4331] [ 543.585602][ T4331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 543.592878][ T4331] CPU: 1 PID: 4331 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 543.600422][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.610480][ T4331] Workqueue: writeback wb_workfn (flush-7:2) [ 543.616483][ T4331] Call Trace: [ 543.619765][ T4331] [ 543.622697][ T4331] dump_stack_lvl+0x188/0x24e [ 543.627389][ T4331] ? memcpy+0x3c/0x60 [ 543.631378][ T4331] ? show_regs_print_info+0x12/0x12 [ 543.636586][ T4331] ? load_image+0x400/0x400 [ 543.641099][ T4331] panic+0x2e5/0x730 [ 543.644987][ T4331] ? bpf_jit_dump+0xd0/0xd0 [ 543.649480][ T4331] ? ret_from_fork+0x1f/0x30 [ 543.654059][ T4331] __warn+0x2f8/0x4f0 [ 543.658024][ T4331] ? hfs_bnode_create+0x37a/0x400 [ 543.663039][ T4331] ? hfs_bnode_create+0x37a/0x400 [ 543.668053][ T4331] report_bug+0x2ba/0x4f0 [ 543.672371][ T4331] ? hfs_bnode_create+0x37a/0x400 [ 543.677385][ T4331] handle_bug+0x3a/0x70 [ 543.681532][ T4331] exc_invalid_op+0x16/0x40 [ 543.686026][ T4331] asm_exc_invalid_op+0x16/0x20 [ 543.690865][ T4331] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 543.696489][ T4331] Code: ab a2 8a 89 ee e8 c6 47 d7 07 e9 ab fd ff ff e8 9c 2e 37 ff 48 89 df e8 14 97 ec 07 48 c7 c7 c0 ab a2 8a 89 ee e8 a6 47 d7 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 543.716082][ T4331] RSP: 0018:ffffc90004806e80 EFLAGS: 00010246 [ 543.722138][ T4331] RAX: 000000000000001f RBX: ffff88807dd8a0e0 RCX: 304a9d907a158100 [ 543.730097][ T4331] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 543.738054][ T4331] RBP: 0000000000000000 R08: ffffc90004806b87 R09: 1ffff92000900d70 [ 543.746013][ T4331] R10: dffffc0000000000 R11: fffff52000900d71 R12: 0000000000000000 [ 543.753972][ T4331] R13: ffff88807dd8a000 R14: ffff88804692cc00 R15: dffffc0000000000 [ 543.761939][ T4331] hfs_bmap_alloc+0x53d/0x5d0 [ 543.766610][ T4331] ? hfs_bmap_reserve+0x420/0x420 [ 543.771628][ T4331] ? rcu_is_watching+0x11/0xa0 [ 543.776383][ T4331] hfs_btree_inc_height+0xfd/0xac0 [ 543.781489][ T4331] ? hfs_brec_insert+0x6f6/0xbd0 [ 543.786420][ T4331] ? hfs_brec_insert+0xbd0/0xbd0 [ 543.791348][ T4331] ? do_raw_spin_unlock+0x11d/0x230 [ 543.796532][ T4331] hfs_brec_insert+0x744/0xbd0 [ 543.801291][ T4331] ? hfs_brec_keylen+0x350/0x350 [ 543.806231][ T4331] __hfs_ext_write_extent+0x2a1/0x470 [ 543.811593][ T4331] hfs_ext_write_extent+0x17b/0x200 [ 543.816781][ T4331] ? verify_lock_unused+0x140/0x140 [ 543.821969][ T4331] ? hfs_ext_keycmp+0x310/0x310 [ 543.826810][ T4331] ? writeback_sb_inodes+0x46b/0x1850 [ 543.832176][ T4331] hfs_write_inode+0xd8/0xa20 [ 543.836836][ T4331] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 543.842194][ T4331] ? __writeback_single_inode+0x4ae/0x1160 [ 543.848000][ T4331] ? __lock_acquire+0x7d10/0x7d10 [ 543.853015][ T4331] ? do_raw_spin_lock+0x128/0x2f0 [ 543.858024][ T4331] ? __rwlock_init+0x140/0x140 [ 543.862773][ T4331] __writeback_single_inode+0x75b/0x1160 [ 543.868396][ T4331] writeback_sb_inodes+0xb30/0x1850 [ 543.873591][ T4331] ? queue_io+0x5a0/0x5a0 [ 543.877912][ T4331] ? rcu_is_watching+0x11/0xa0 [ 543.882669][ T4331] wb_writeback+0x482/0xd50 [ 543.887167][ T4331] ? percpu_ref_tryget+0x250/0x250 [ 543.892268][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.898242][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 543.903426][ T4331] wb_workfn+0x423/0xee0 [ 543.907663][ T4331] ? inode_wait_for_writeback+0x220/0x220 [ 543.913372][ T4331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 543.919342][ T4331] ? read_lock_is_recursive+0x10/0x10 [ 543.924702][ T4331] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 543.930580][ T4331] ? _raw_spin_unlock+0x40/0x40 [ 543.935416][ T4331] ? _raw_spin_unlock_irq+0x1f/0x40 [ 543.940601][ T4331] ? process_one_work+0x7b0/0x1160 [ 543.945699][ T4331] process_one_work+0x8a2/0x1160 [ 543.950625][ T4331] ? worker_detach_from_pool+0x240/0x240 [ 543.956244][ T4331] ? _raw_spin_lock_irq+0xb7/0xf0 [ 543.961251][ T4331] ? _raw_spin_lock_irqsave+0x100/0x100 [ 543.966790][ T4331] ? kthread_data+0x4b/0xc0 [ 543.971283][ T4331] worker_thread+0xaa2/0x1270 [ 543.975956][ T4331] ? __kthread_parkme+0x162/0x1c0 [ 543.980971][ T4331] kthread+0x29d/0x330 [ 543.985023][ T4331] ? worker_clr_flags+0x1a0/0x1a0 [ 543.990035][ T4331] ? kthread_blkcg+0xd0/0xd0 [ 543.994608][ T4331] ret_from_fork+0x1f/0x30 [ 543.999015][ T4331] [ 544.002314][ T4331] Kernel Offset: disabled [ 544.006619][ T4331] Rebooting in 86400 seconds..