last executing test programs: 4m27.679508735s ago: executing program 3 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20) 4m27.38387422s ago: executing program 3 (id=3766): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000000)={'wlan0\x00'}) 4m27.029124074s ago: executing program 3 (id=3772): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x1, 0x0, 0x20}) 4m26.709974444s ago: executing program 3 (id=3776): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m24.57171774s ago: executing program 3 (id=3802): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 4m23.381837837s ago: executing program 3 (id=3812): r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 4m22.719250775s ago: executing program 32 (id=3812): r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 11.174665473s ago: executing program 1 (id=6608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 10.734050065s ago: executing program 1 (id=6611): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0xa, 0x7, {0x0, r1}}, 0x18) 10.21544459s ago: executing program 1 (id=6613): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) 9.943509505s ago: executing program 1 (id=6614): r0 = epoll_create1(0x80000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)={0x1000000c}) 7.132178043s ago: executing program 1 (id=6626): syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f00000003c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0xff, 0x5aa5, &(0x7f0000006b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x4000) 6.250499637s ago: executing program 2 (id=6631): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x64f, 0x7fffffff, 0x0, 0x3, 0x1ff, 0x401, 0x9}, 0x1c) recvmmsg(r0, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}}], 0x1, 0x7fb10727dda9, 0x0) 5.28056883s ago: executing program 4 (id=6637): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0xd3c, [0xffff, 0x5d, 0x8, 0x6, 0x2, 0xc1, 0x3, 0x15f, 0x46, 0x401, 0xa, 0x200, 0xf26, 0x0, 0x240, 0x9, 0xf046, 0x0, 0x1, 0xf000, 0xfffb, 0xf, 0x5, 0x0, 0x1, 0x1000, 0x4efc, 0x8, 0x7f, 0x5, 0x2, 0x6, 0x2, 0x4, 0x1400, 0xf, 0x7, 0xc, 0xb673, 0x40, 0x10, 0x3, 0xf, 0x2, 0x734, 0xd, 0x7a7e, 0xfffc], 0x1c0}}) 5.0260617s ago: executing program 2 (id=6638): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="9d", 0xb99d}], 0x1) 4.851422464s ago: executing program 2 (id=6640): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x24}, 0x60) sendto(r0, 0x0, 0x0, 0x4000014, &(0x7f0000000140)=@hci={0x1f, 0x2, 0x3}, 0x80) 4.843107397s ago: executing program 4 (id=6641): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) 4.80981267s ago: executing program 2 (id=6642): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@errors_remount}, {@discard}, {@errors_remount}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@zero_size_dir}, {@errors_remount}, {@errors_continue}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x9}}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.250233385s ago: executing program 4 (id=6644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 4.118411811s ago: executing program 6 (id=6645): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000000)={0x40, 0xb, 0x12, "21bcc400f715222e00c6081c5779012f2d09"}, 0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)={0x18, 0x7a, 0x601, 0x4000000, 0x25dfdbfe, "", [@typed={0x7, 0x3ffc, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 3.972350447s ago: executing program 2 (id=6647): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x669e5dd1698c57d, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0x30, 0x7, {0x7, 0xb, "0170000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.870913712s ago: executing program 4 (id=6649): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xc40a, &(0x7f0000000580)={[{@noblock_validity}, {@init_itable}, {@nobh}, {@nobh}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@init_itable}], [], 0x2c}, 0x84, 0x467, &(0x7f0000000d80)="$eJzs3M9vFFUcAPDvTFuQX7Yi/kBQq2hsUFtaUDl40WjCxcRED3ispRCkUEJrIoRINQaPhr9APZr4F3jSi1FPGq96NcaEGC4iBzNmdmfq0u7WXXaXLd3PJ5nue7Nv973vzLz2zXvbDaBvjeY/kojtEfFLRAxHxMDKAqPVh+vXLs78fe3iTBJZ9safSf6y+OvaxZmyaFI8bisyY2lE+lESe+rUu3D+wqnpubnZc0V+YvH02YmF8xeePXl6+sTsidkzU4cPHzo4+cLzU891JM4deVsfen9+7+4jb115bebolbe//zJv7/bi+do4qkbarnM0RpePyUpPtv3u68uO4rFRvKxPeV8fjIihSv8fjoFKrmo4Xv2wp40DuirLsmzzqr3LI4ClDNjAkuh1C4DeKP/Q5/e/5XYbhx89d/Wl6g1QHvf1Yqs+MxhpUWao5v6200Yj4ujSjU/zLerOQwAAdNbX+fjnmXrjvzTuryl3d7E2NBIR90TEzoi4NyJ2RcR9EZWyD0TEgy3WP7oiv3r889OWWwqsSfn478Vibevm8V85+ouRgSK3oxL/UHL85NzsgeKYjMXQ5jw/uUYd37zy8yeNnqsd/+VbXn85Fiza8cfgigm6Y9OL0+3EXOvqB5U5wEur40+WVwKSiNgdEWdbfO8b5T3G/i/2Nirz//GvYbDFBtWRfR7xVPX8L8WK+EvJ2uuTE3fF3OyBifKqWO2HHy+/3qj+tuLvgPz8b617/S/HP5LUrtcutF7H5V8/bnhPc6vX/6bkzUp6U7HvvenFxXOTEZuSpZr9+3+r7J/677Vlviyfxz+2r37/3xnxz2fF6/ZERH4RPxwRj0TEo0XbH4uIxyNi3xrxf/fyE+/cevzdlcd/rKXz33pi4NS3XzWqv7nzf6iSGiv2NPP7r9kGtnPsAAAA4E6RVj4Dn6Tjy+k0HR+vfoZ/V2xN5+YXFp8+Pv/umWPVz8qPxFBaznQN18yHThZzw2V+akX+YGXeOMuybEslPz4zP9etNXWgOdsa9P/c7wO9bh3QdS2to/kPL9hQOrCODtyh9H/oX/o/9C/9H/pXvf5/KeJ6D5oC3Gb+/kP/0v+hf+n/0L9u7v9d/b4FYP1o5//610rsPNKtd95oiYH10YyWE5F2u4rNLXyPw9qJoeJqX96Tro9jWE3kcTZb+FLcrob1+BcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh/wbAAD//2pA8Ak=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f0000000280)) 3.493168709s ago: executing program 1 (id=6652): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000200)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x5}}, {@map_normal}, {@map_normal}, {@session={'session', 0x3d, 0xe}}, {@overriderock}, {@nocompress}, {@nocompress}, {@nocompress}, {@showassoc}, {@session={'session', 0x3d, 0x9}}, {@map_acorn}, {@mode={'mode', 0x3d, 0x86}}, {@sbsector={'sbsector', 0x3d, 0x1}}], [{@uid_eq}], 0x2c}, 0x41, 0x9ea, &(0x7f0000004100)="$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") 3.188318364s ago: executing program 6 (id=6654): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f00000002c0)=[{0x6, 0x10, 0x0, 0x0}, {0x3, 0x2001, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x3}) 3.15525477s ago: executing program 5 (id=6655): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9"}, 0x3c) 2.828102665s ago: executing program 4 (id=6657): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fcb602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70769c266299881e362049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f7c896c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4b", @ANYRES8, @ANYRES64, @ANYRES16, @ANYRES8], 0x1, 0x620f, &(0x7f000000cb40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.801549353s ago: executing program 5 (id=6658): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000300)=ANY=[], 0x8b, 0x2a0, &(0x7f0000000640)="$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") rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000000)='./bus\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x82) 2.36273959s ago: executing program 5 (id=6660): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121090, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x224) 1.953954719s ago: executing program 0 (id=6662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.792423086s ago: executing program 2 (id=6663): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5, 0x7e00}) 1.615713158s ago: executing program 5 (id=6664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) 1.61473865s ago: executing program 0 (id=6665): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$sock(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="05000000eeca06ad54c456350da0a5f21f55e46e", 0x14}, {&(0x7f0000000100)="26373bfbfe0bcd2f21b430a9d6cd4fd9a216e3daba6bff56f74ccf39b3eed7ef2f557f95", 0x24}], 0x2}}, {{&(0x7f0000000000)=@llc={0x1a, 0x30d, 0x2, 0xfb, 0x3, 0xf9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x2, 0x0) 1.327341447s ago: executing program 6 (id=6666): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nobarrier}, {@nobarrier}, {}, {}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-15'}}, {@creator={'creator', 0x3d, "deffffff"}}]}, 0x4a, 0x708, &(0x7f0000001f80)="$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") setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000002c0)=@sha1={0x1, "65751d8a5e26f5d41b895348b0100c7744c0c2ea"}, 0x15, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.25487963s ago: executing program 0 (id=6667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.192001712s ago: executing program 5 (id=6668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000024000780080002"], 0x38}}, 0x0) 947.796888ms ago: executing program 0 (id=6669): syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 755.374786ms ago: executing program 5 (id=6670): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 741.977439ms ago: executing program 6 (id=6671): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x800000000000, 0x2010000000001]}}) 602.957245ms ago: executing program 0 (id=6672): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x0, 0x1, {0xa, 0x4e23, 0x33e6, @empty, 0x5}}}, 0x32) 586.956749ms ago: executing program 4 (id=6673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 289.329639ms ago: executing program 6 (id=6674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 241.176174ms ago: executing program 0 (id=6675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 6 (id=6676): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) fcntl$addseals(r0, 0x409, 0x8) kernel console output (not intermixed with test programs): 1290][ T30] audit: type=1326 audit(1751392230.072:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.6.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 584.183127][T17882] sctp: [Deprecated]: syz.5.5167 (pid 17882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.183127][T17882] Use struct sctp_sack_info instead [ 584.225042][T17886] tc_dump_action: action bad kind [ 584.271309][ T30] audit: type=1326 audit(1751392230.082:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17874 comm="syz.6.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 585.106026][T17913] loop6: detected capacity change from 0 to 256 [ 585.298378][T17920] ip6gre1: entered allmulticast mode [ 585.484107][T17925] loop5: detected capacity change from 0 to 64 [ 586.053482][ T5834] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 586.107476][T17943] netlink: 'syz.5.5192': attribute type 10 has an invalid length. [ 586.297329][ T5834] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 586.331940][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 586.365101][ T5834] usb 2-1: Product: syz [ 586.369346][ T5834] usb 2-1: Manufacturer: syz [ 586.404995][ T5834] usb 2-1: SerialNumber: syz [ 586.444194][ T5834] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 586.611245][T14614] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 586.791453][T14614] usb 3-1: Using ep0 maxpacket: 8 [ 586.809290][T14614] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 586.842873][T14614] usb 3-1: config 0 has no interface number 0 [ 586.866327][T14614] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 586.886676][T14614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.891589][ T5834] vp7045: USB control message 'in' went wrong. [ 586.913192][T14614] usb 3-1: Product: syz [ 586.922511][T14614] usb 3-1: Manufacturer: syz [ 586.927206][T14614] usb 3-1: SerialNumber: syz [ 586.941360][ T5834] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 586.943337][T17966] cgroup: No subsys list or none specified [ 586.970971][T14614] usb 3-1: config 0 descriptor?? [ 586.976044][ T5834] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 586.982109][ T5834] usb 2-1: USB disconnect, device number 19 [ 587.259706][T14614] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 587.283544][T14614] usb 3-1: No valid video chain found. [ 587.345942][T14614] usb 3-1: USB disconnect, device number 17 [ 587.402792][ T30] audit: type=1326 audit(1751392233.552:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.6.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 587.528893][ T30] audit: type=1326 audit(1751392233.572:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.6.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 587.545848][T17975] loop4: detected capacity change from 0 to 4096 [ 587.610774][T17975] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 587.618329][T17983] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 17983 comm: syz.5.5208) [ 587.651566][ T30] audit: type=1326 audit(1751392233.622:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.6.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 587.787805][ T30] audit: type=1326 audit(1751392233.622:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.6.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 587.872145][T17975] ntfs3(loop4): ino=1a, mi_enum_attr [ 587.878586][T17975] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 587.934287][T17975] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 587.962766][ T30] audit: type=1326 audit(1751392233.622:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17976 comm="syz.6.5206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 588.132657][T17995] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 588.139654][T17995] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 588.700735][T18008] netlink: 'syz.5.5219': attribute type 3 has an invalid length. [ 588.748115][T18008] netlink: 'syz.5.5219': attribute type 1 has an invalid length. [ 588.791358][T18008] netlink: 216 bytes leftover after parsing attributes in process `syz.5.5219'. [ 588.825881][T18008] NCSI netlink: No device for ifindex 33022 [ 589.640650][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5231'. [ 589.931578][T17986] Bluetooth: hci2: command 0x0406 tx timeout [ 590.329474][T18056] loop1: detected capacity change from 0 to 64 [ 590.473464][T18059] netlink: 'syz.6.5239': attribute type 21 has an invalid length. [ 590.482251][T18056] Trying to free block not in datazone [ 590.517805][T18059] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5239'. [ 591.235992][T18070] loop6: detected capacity change from 0 to 4096 [ 591.302610][T18070] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 591.562294][T18043] loop2: detected capacity change from 0 to 32768 [ 591.584269][T18070] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 591.848035][T18047] loop5: detected capacity change from 0 to 32768 [ 591.876606][ T746] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 591.936619][T14661] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 591.954901][T14661] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 591.979246][T18047] jfs_strtoUCS: char2uni returned -22. [ 592.006007][T14661] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 592.018191][T18047] charset = cp932, char = 0xfc [ 592.044227][ T746] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 593.004382][T18107] loop5: detected capacity change from 0 to 256 [ 593.266389][T18107] FAT-fs (loop5): Directory bread(block 64) failed [ 593.296336][T18107] FAT-fs (loop5): Directory bread(block 65) failed [ 593.341562][T18107] FAT-fs (loop5): Directory bread(block 66) failed [ 593.348171][T18107] FAT-fs (loop5): Directory bread(block 67) failed [ 593.351104][T18111] loop1: detected capacity change from 0 to 2048 [ 593.356650][T18083] loop4: detected capacity change from 0 to 32768 [ 593.406816][T18107] FAT-fs (loop5): Directory bread(block 68) failed [ 593.411724][T18111] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 593.444471][T18107] FAT-fs (loop5): Directory bread(block 69) failed [ 593.451397][T18083] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5248 (18083) [ 593.474962][T18107] FAT-fs (loop5): Directory bread(block 70) failed [ 593.489837][T18111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.529821][T18107] FAT-fs (loop5): Directory bread(block 71) failed [ 593.538647][T18083] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 593.602058][T18107] FAT-fs (loop5): Directory bread(block 72) failed [ 593.611373][T18083] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 593.664066][T18107] FAT-fs (loop5): Directory bread(block 73) failed [ 593.674112][T18083] BTRFS info (device loop4): using free-space-tree [ 594.019133][T18083] BTRFS info (device loop4): rebuilding free space tree [ 594.026602][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 594.026624][ T30] audit: type=1800 audit(1751392240.152:182): pid=18107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5259" name="file2" dev="loop5" ino=1048676 res=0 errno=0 [ 594.205113][T18136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5264'. [ 594.512301][ T5832] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 595.491307][T18170] ipt_REJECT: TCP_RESET invalid for non-tcp [ 595.823702][T18180] loop1: detected capacity change from 0 to 16 [ 595.926492][T18180] erofs (device loop1): mounted with root inode @ nid 36. [ 595.971516][T18184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.978819][T18184] IPv6: NLM_F_CREATE should be set when creating new route [ 595.986123][T18184] IPv6: NLM_F_CREATE should be set when creating new route [ 596.799867][T18202] loop4: detected capacity change from 0 to 4096 [ 597.068099][T18202] ntfs3(loop4): ino=5, "/" The size of extended attributes must not exceed 64KiB [ 597.266091][T18223] ip6t_REJECT: ECHOREPLY is not supported [ 597.351460][T18215] loop2: detected capacity change from 0 to 4096 [ 597.411813][T18215] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 597.530734][T18215] ntfs3(loop2): ino=1a, mi_enum_attr [ 597.555392][T18215] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 597.581435][T18229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5310'. [ 597.641727][T18215] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 597.833841][T18234] loop5: detected capacity change from 0 to 1024 [ 598.093399][T18234] hfsplus: xattr searching failed [ 598.588008][T18255] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5321'. [ 599.319495][T18281] netlink: 'syz.2.5337': attribute type 28 has an invalid length. [ 599.599888][T18288] sctp: [Deprecated]: syz.0.5341 (pid 18288) Use of int in max_burst socket option deprecated. [ 599.599888][T18288] Use struct sctp_assoc_value instead [ 599.618539][T18291] netlink: 'syz.4.5338': attribute type 10 has an invalid length. [ 599.745227][T18291] team0: Port device dummy0 added [ 599.914361][T18297] netlink: 'syz.5.5344': attribute type 10 has an invalid length. [ 599.924140][T18299] usb usb8: usbfs: process 18299 (syz.1.5345) did not claim interface 2 before use [ 600.059795][T18297] batman_adv: batadv0: Adding interface: team0 [ 600.131244][T18297] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.207051][T18297] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 600.675593][T18319] xt_CONNSECMARK: invalid mode: 0 [ 601.309738][T18302] loop2: detected capacity change from 0 to 32768 [ 601.456406][T18302] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 601.512811][T18302] (syz.2.5346,18302,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 601.573032][T18302] (syz.2.5346,18302,1):ocfs2_get_suballoc_slot_bit:2811 ERROR: read block 124554051584 failed -12 [ 601.584460][T18302] (syz.2.5346,18302,1):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -12 [ 601.612411][T18307] loop6: detected capacity change from 0 to 32768 [ 601.621447][T18316] loop1: detected capacity change from 0 to 32768 [ 601.641539][T18302] (syz.2.5346,18302,1):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -12 [ 601.671432][T18316] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5353 (18316) [ 601.687426][T18302] (syz.2.5346,18302,1):ocfs2_test_inode_bit:2967 ERROR: status = -12 [ 601.739983][T18302] (syz.2.5346,18302,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 601.766032][T18316] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 601.817549][T18316] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 601.871806][T18316] BTRFS info (device loop1): using free-space-tree [ 601.961580][T14614] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 601.993343][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 602.154766][T14614] usb 1-1: unable to get BOS descriptor or descriptor too short [ 602.192610][T14614] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 602.225597][T14614] usb 1-1: config 7 has no interface number 0 [ 602.264714][T14614] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 602.330201][T14614] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 602.381597][T14614] usb 1-1: config 7 interface 252 has no altsetting 0 [ 602.401071][T14614] usb 1-1: string descriptor 0 read error: -22 [ 602.411327][T14614] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 602.450043][T14614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.515522][T14614] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 602.523041][ T5823] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 602.733043][ T118] usb 1-1: USB disconnect, device number 20 [ 603.008735][T18373] loop6: detected capacity change from 0 to 1764 [ 603.143245][T18379] loop4: detected capacity change from 0 to 8 [ 603.264218][T18379] SQUASHFS error: Failed to read block 0x2d7: -5 [ 603.270754][T18379] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 603.729494][T18389] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 604.007225][ T30] audit: type=1326 audit(1751392250.152:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 604.147016][ T30] audit: type=1326 audit(1751392250.152:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 604.271278][ T30] audit: type=1326 audit(1751392250.222:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 604.286687][T18409] netlink: 'syz.0.5389': attribute type 1 has an invalid length. [ 604.293691][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.411856][ T30] audit: type=1326 audit(1751392250.222:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 604.532778][ T30] audit: type=1326 audit(1751392250.222:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.6.5384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da978e929 code=0x7ffc0000 [ 604.716665][T18414] openvswitch: netlink: Missing key (keys=40, expected=100) [ 604.945734][T18426] netlink: 'syz.6.5398': attribute type 21 has an invalid length. [ 605.651477][T18451] netlink: 'syz.4.5410': attribute type 21 has an invalid length. [ 605.945057][T18459] loop6: detected capacity change from 0 to 64 [ 606.651099][T18481] netlink: 'syz.4.5426': attribute type 27 has an invalid length. [ 606.934305][T18487] geneve3: entered promiscuous mode [ 606.977527][T18487] geneve3: entered allmulticast mode [ 607.136399][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5431'. [ 607.271632][T18500] ipt_REJECT: ECHOREPLY no longer supported. [ 607.324978][T18503] xt_HMARK: proto mask must be zero with L3 mode [ 607.574554][T18512] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5441'. [ 607.862180][ T118] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 608.026634][ T118] usb 7-1: config 6 has an invalid interface number: 108 but max is 0 [ 608.055853][ T118] usb 7-1: config 6 has no interface number 0 [ 608.079844][ T118] usb 7-1: config 6 interface 108 has no altsetting 0 [ 608.097875][ T118] usb 7-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d [ 608.127097][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.167074][ T118] usb 7-1: Product: syz [ 608.172503][ T118] usb 7-1: Manufacturer: syz [ 608.177311][ T118] usb 7-1: SerialNumber: syz [ 608.467606][ T118] mos7840 7-1:6.108: missing endpoints [ 608.511689][ T118] usb 7-1: USB disconnect, device number 6 [ 608.610767][T18541] loop1: detected capacity change from 0 to 256 [ 608.669750][T18541] exfat: Deprecated parameter 'utf8' [ 608.711735][T18541] exfat: Deprecated parameter 'namecase' [ 608.717563][T18541] exfat: Deprecated parameter 'namecase' [ 608.767062][T18541] exfat: Deprecated parameter 'utf8' [ 608.845644][T18541] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 608.952106][T18541] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 609.364816][T18561] nftables ruleset with unbound chain [ 610.020096][T18584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.121264][T14614] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 611.227188][T18625] ubi31: attaching mtd0 [ 611.264751][T18625] ubi31: scanning is finished [ 611.291667][T14614] usb 6-1: Using ep0 maxpacket: 8 [ 611.301783][T18625] ubi31: empty MTD device detected [ 611.303548][T14614] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 611.349727][T14614] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.390108][T14614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.435510][T14614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.471566][T18633] hsr0 speed is unknown, defaulting to 1000 [ 611.488860][T14614] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.511421][T18633] hsr0 speed is unknown, defaulting to 1000 [ 611.526373][T18633] hsr0 speed is unknown, defaulting to 1000 [ 611.561306][T14614] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.596715][T14614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.613273][T18633] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 611.709498][T18633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 611.731311][T18625] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 611.779766][T18625] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 611.820990][T18625] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 611.861335][T18625] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 611.868885][T18625] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 611.918125][T18633] hsr0 speed is unknown, defaulting to 1000 [ 611.961808][T18633] hsr0 speed is unknown, defaulting to 1000 [ 611.973841][T18625] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 611.989719][T18633] hsr0 speed is unknown, defaulting to 1000 [ 612.028657][T18625] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 624283728 [ 612.064412][T18633] hsr0 speed is unknown, defaulting to 1000 [ 612.091828][T18625] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 612.128408][T18633] hsr0 speed is unknown, defaulting to 1000 [ 612.157050][T18633] hsr0 speed is unknown, defaulting to 1000 [ 612.179921][ T118] usb 6-1: USB disconnect, device number 14 [ 612.200007][T18640] ubi31: background thread "ubi_bgt31d" started, PID 18640 [ 612.665967][T18616] loop2: detected capacity change from 0 to 32768 [ 612.679666][T18649] loop1: detected capacity change from 0 to 4096 [ 612.846301][T18616] jfs_create: dtInsert returned -EIO [ 612.890975][T18616] ERROR: (device loop2): txAbort: [ 612.890975][T18616] [ 613.168989][T18663] xt_l2tp: v2 doesn't support IP mode [ 613.439758][T18667] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 613.508632][T18673] loop5: detected capacity change from 0 to 256 [ 613.989192][T18683] overlayfs: failed to resolve './file0': -2 [ 615.041357][T18719] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5537'. [ 615.050702][T18719] netlink: 196 bytes leftover after parsing attributes in process `syz.4.5537'. [ 615.169750][T18719] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5537'. [ 615.210472][T18726] loop6: detected capacity change from 0 to 64 [ 615.679281][ T975] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 615.751295][ T5897] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 615.831659][ T118] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 615.842317][ T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.861489][ T975] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 615.880849][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 615.907305][ T975] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 615.913558][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 615.917293][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.952995][ T5897] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 615.986597][ T975] usb 1-1: Product: syz [ 615.990866][ T975] usb 1-1: Manufacturer: syz [ 615.995904][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.031440][ T118] usb 7-1: Using ep0 maxpacket: 8 [ 616.038004][ T5897] usb 3-1: config 0 descriptor?? [ 616.041270][ T975] usb 1-1: SerialNumber: syz [ 616.054057][ T118] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 616.055642][T18733] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 616.070090][ T118] usb 7-1: config 0 has no interface number 0 [ 616.104150][ T118] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 616.116857][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.132242][ T975] usb 1-1: config 0 descriptor?? [ 616.147821][ T118] usb 7-1: Product: syz [ 616.160016][ T975] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 616.170821][ T118] usb 7-1: Manufacturer: syz [ 616.189483][ T118] usb 7-1: SerialNumber: syz [ 616.194509][ T975] usb 1-1: No valid video chain found. [ 616.220961][ T118] usb 7-1: config 0 descriptor?? [ 616.378506][T14614] usb 1-1: USB disconnect, device number 21 [ 616.386082][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 616.417885][T18753] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5554'. [ 616.439903][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 616.457134][ T118] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 616.485571][ T5897] usb 3-1: USB disconnect, device number 18 [ 616.491276][ T118] usb 7-1: Failed to initialize entity for entity 6 [ 616.521118][ T118] usb 7-1: Failed to register entities (-22). [ 616.674049][T14614] usb 7-1: USB disconnect, device number 7 [ 616.868022][T18743] loop1: detected capacity change from 0 to 32768 [ 616.933064][T18743] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 617.005726][T18743] (syz.1.5549,18743,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 617.044660][T18743] (syz.1.5549,18743,1):ocfs2_get_suballoc_slot_bit:2811 ERROR: read block 124554051584 failed -12 [ 617.055730][T18743] (syz.1.5549,18743,1):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -12 [ 617.064784][T18743] (syz.1.5549,18743,1):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -12 [ 617.087924][T18743] (syz.1.5549,18743,1):ocfs2_test_inode_bit:2967 ERROR: status = -12 [ 617.111280][T18743] (syz.1.5549,18743,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 617.328703][ T5823] ocfs2: Unmounting device (7,1) on (node local) [ 617.841587][T18757] loop5: detected capacity change from 0 to 32768 [ 617.875656][T18780] loop2: detected capacity change from 0 to 1024 [ 617.912819][T18780] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 617.931431][T18780] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 617.942555][T18757] ERROR: (device loop5): dbAllocAG: Corrupt dmapctl page [ 617.942555][T18757] [ 617.989042][T18757] ERROR: (device loop5): remounting filesystem as read-only [ 618.019039][T18757] jfs_mkdir: dtInsert returned -EIO [ 618.027126][T18780] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 618.042360][T18757] ERROR: (device loop5): txAbort: [ 618.042360][T18757] [ 618.052009][T18780] EXT4-fs (loop2): orphan cleanup on readonly fs [ 618.064303][T18784] netlink: 'syz.0.5570': attribute type 13 has an invalid length. [ 618.072493][T18784] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5570'. [ 618.082368][T18784] syz_tun: refused to change device tx_queue_len [ 618.088867][T18784] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 618.110922][T18780] EXT4-fs error (device loop2): ext4_read_inode_bitmap:166: comm syz.2.5567: Inode bitmap for bg 0 marked uninitialized [ 618.193942][T18780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.415824][T18780] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 618.613453][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.292494][T18814] bond0: (slave bond_slave_0): Releasing backup interface [ 619.760732][T18830] netlink: 'syz.4.5590': attribute type 1 has an invalid length. [ 619.788990][T18830] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5590'. [ 620.238311][T18843] loop6: detected capacity change from 0 to 512 [ 620.305130][T18843] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 620.395207][T18843] EXT4-fs (loop6): 1 truncate cleaned up [ 620.403346][T18843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.516000][T18843] EXT4-fs error (device loop6): ext4_find_extent:902: inode #15: comm syz.6.5597: inode has invalid extent depth: 25964 [ 620.565985][T18841] loop4: detected capacity change from 0 to 4096 [ 620.594638][T18843] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 620.635658][T18841] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 620.834280][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.188713][T18867] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5605'. [ 621.321369][ T5897] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 621.483840][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 621.509380][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 621.555983][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 621.582231][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 621.619566][ T5897] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 621.644749][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.653218][T18883] loop4: detected capacity change from 0 to 256 [ 621.676303][ T5897] usb 2-1: Product: syz [ 621.702661][ T5897] usb 2-1: Manufacturer: syz [ 621.726534][ T5897] usb 2-1: SerialNumber: syz [ 621.768301][ T5897] usb 2-1: config 0 descriptor?? [ 621.831518][ T5897] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 622.072312][T18893] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 622.139284][ T5897] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 622.195484][ T975] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 622.342082][ T5897] usb 2-1: USB disconnect, device number 20 [ 622.381449][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 622.401313][ T975] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 622.431835][ T975] usb 1-1: config 0 has no interface number 0 [ 622.472997][ T975] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 622.476773][T18903] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 622.520588][ T975] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 622.591232][ T975] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 622.599396][ T975] usb 1-1: Product: syz [ 622.653447][ T975] usb 1-1: SerialNumber: syz [ 622.683484][ T975] usb 1-1: config 0 descriptor?? [ 622.724388][ T975] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 622.749095][ T975] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input32 [ 622.843860][T18916] netlink: 'syz.6.5627': attribute type 7 has an invalid length. [ 623.236094][T18921] loop5: detected capacity change from 0 to 256 [ 623.246344][T18923] netlink: 'syz.1.5631': attribute type 2 has an invalid length. [ 623.273841][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 623.276457][T14614] usb 1-1: USB disconnect, device number 22 [ 623.280842][ C0] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 623.304314][T18921] FAT-fs (loop5): Directory bread(block 1285) failed [ 623.389359][T14614] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 623.421982][T18921] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 623.601761][ T5897] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 623.795620][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 623.836432][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 623.888593][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 623.938215][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 623.974544][ T5897] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 624.010600][ T5897] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 624.061062][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.112908][ T5897] usb 7-1: config 0 descriptor?? [ 624.143918][T18928] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 624.620890][ T5897] usb 7-1: USB disconnect, device number 8 [ 624.639880][ T5145] Bluetooth: hci6: Opcode 0x0c03 failed: -19 [ 625.154628][T18980] netlink: 'syz.0.5659': attribute type 5 has an invalid length. [ 626.124153][T19002] loop4: detected capacity change from 0 to 4096 [ 626.186610][T19002] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 626.266075][T19004] xt_CT: No such helper "snmp" [ 626.440654][T19002] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 626.504002][T19002] ntfs3(loop4): Failed to load $Extend (-22). [ 626.510159][T19002] ntfs3(loop4): Failed to initialize $Extend. [ 627.136312][T19035] loop4: detected capacity change from 0 to 64 [ 627.172428][T19026] loop2: detected capacity change from 0 to 4096 [ 627.266447][T19043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.476045][T19026] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 627.645813][T19049] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 627.719041][T19051] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 627.853144][ T5835] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 628.332918][ T30] audit: type=1326 audit(1751392274.482:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d038e929 code=0x7ffc0000 [ 628.337353][T19068] loop4: detected capacity change from 0 to 64 [ 628.441208][ T30] audit: type=1326 audit(1751392274.482:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d038e929 code=0x7ffc0000 [ 628.539723][ T30] audit: type=1326 audit(1751392274.522:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc8d038e929 code=0x7ffc0000 [ 628.721251][ T30] audit: type=1326 audit(1751392274.522:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d038e929 code=0x7ffc0000 [ 628.831305][ T30] audit: type=1326 audit(1751392274.522:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.0.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8d038e929 code=0x7ffc0000 [ 629.298963][T19093] netlink: 'syz.2.5715': attribute type 10 has an invalid length. [ 629.654580][T19106] syz.4.5721: attempt to access beyond end of device [ 629.654580][T19106] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 629.680213][T19099] loop6: detected capacity change from 0 to 4096 [ 629.710765][T19106] hpfs: hpfs_map_sector(): read error [ 629.720913][T19099] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 630.895738][T19103] loop1: detected capacity change from 0 to 32768 [ 631.041755][T19103] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 631.334547][ T5823] (syz-executor,5823,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 76 [ 631.441537][ T5823] ocfs2: Unmounting device (7,1) on (node local) [ 632.136248][T19177] netlink: 'syz.1.5755': attribute type 12 has an invalid length. [ 632.343884][T19181] loop6: detected capacity change from 0 to 64 [ 633.058623][T19196] loop5: detected capacity change from 0 to 4096 [ 633.096541][T19196] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 633.179688][T19196] ntfs3(loop5): ino=19, mi_enum_attr [ 633.285941][T19196] ntfs3(loop5): failed to convert "c46c" to iso8859-4 [ 633.346946][T19196] ntfs3(loop5): ino=20, mi_enum_attr [ 633.642008][T19222] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5778'. [ 633.957129][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.056308][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5784'. [ 635.160368][T19270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5801'. [ 635.466609][T19279] loop6: detected capacity change from 0 to 16 [ 635.521726][T19279] erofs (device loop6): mounted with root inode @ nid 36. [ 635.592826][ T5145] erofs (device loop6): failed to decompress 6887 in[4096, 0] out[9000] [ 635.624974][T19279] erofs (device loop6): failed to decompress 6887 in[4096, 0] out[9000] [ 635.656430][T19279] erofs (device loop6): read error -117 @ 0 of nid 89 [ 635.686909][ T30] audit: type=1800 audit(1751392281.832:193): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5805" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 636.129221][T19301] netlink: 'syz.1.5815': attribute type 2 has an invalid length. [ 636.166211][T19301] netlink: 'syz.1.5815': attribute type 1 has an invalid length. [ 636.404342][T19308] loop6: detected capacity change from 0 to 512 [ 636.452750][T19308] EXT4-fs: Ignoring removed nobh option [ 636.514006][T19308] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 636.542973][T19308] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 636.676020][T19308] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.5819: casefold flag without casefold feature [ 636.745307][T19308] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.5819: couldn't read orphan inode 13 (err -117) [ 636.791667][T19308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.906506][T19323] loop4: detected capacity change from 0 to 256 [ 636.913996][T19308] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 636.974098][T19323] FAT-fs (loop4): Directory bread(block 64) failed [ 637.021823][T19323] FAT-fs (loop4): Directory bread(block 65) failed [ 637.028549][T19323] FAT-fs (loop4): Directory bread(block 66) failed [ 637.095690][T19323] FAT-fs (loop4): Directory bread(block 67) failed [ 637.127533][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.148533][T19323] FAT-fs (loop4): Directory bread(block 68) failed [ 637.188664][T19323] FAT-fs (loop4): Directory bread(block 69) failed [ 637.215033][T19323] FAT-fs (loop4): Directory bread(block 70) failed [ 637.243451][T19323] FAT-fs (loop4): Directory bread(block 71) failed [ 637.267991][T19323] FAT-fs (loop4): Directory bread(block 72) failed [ 637.285547][T19323] FAT-fs (loop4): Directory bread(block 73) failed [ 637.371379][ T5897] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 637.460120][ T30] audit: type=1800 audit(1751392283.602:194): pid=19323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5824" name="file2" dev="loop4" ino=1048683 res=0 errno=0 [ 637.581638][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 637.596707][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.607165][ T5897] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 637.625199][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.661023][ T5897] usb 3-1: Product: syz [ 637.673305][ T5897] usb 3-1: Manufacturer: syz [ 637.677956][ T5897] usb 3-1: SerialNumber: syz [ 637.732751][ T5897] usb 3-1: config 0 descriptor?? [ 638.063883][T19348] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 638.110137][T19348] overlayfs: missing 'lowerdir' [ 638.203346][ T5897] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 638.210459][ T5897] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 638.291278][ T5897] usb 3-1: USB disconnect, device number 19 [ 638.925272][T19368] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5846'. [ 639.320980][T19385] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5853'. [ 640.356766][T19422] binder: 19419:19422 ioctl c0046209 0 returned -22 [ 641.330306][T19455] netlink: 'syz.4.5889': attribute type 1 has an invalid length. [ 641.544980][T19459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.871803][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5897'. [ 641.997503][T19478] loop1: detected capacity change from 0 to 2048 [ 642.091271][ T5897] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 642.094147][T19478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.295357][ T5897] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 642.321294][ T5897] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 642.367651][ T5897] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 642.398956][ T5897] usb 6-1: config 8 has no interface number 0 [ 642.430714][ T5897] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 642.509892][ T5897] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.572467][ T5897] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 642.600177][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.631393][T19489] veth0_macvtap: entered promiscuous mode [ 642.642007][ T5897] usb 6-1: Product: syz [ 642.661349][ T5897] usb 6-1: Manufacturer: syz [ 642.666079][ T5897] usb 6-1: SerialNumber: syz [ 642.951759][ T5897] usb 6-1: USB disconnect, device number 15 [ 643.338422][T19513] netlink: 'syz.2.5919': attribute type 2 has an invalid length. [ 643.351860][T19510] netlink: 'syz.1.5916': attribute type 1 has an invalid length. [ 643.380007][T19510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5916'. [ 643.401241][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5916'. [ 643.580651][T19517] openvswitch: netlink: IP tunnel dst address not specified [ 643.711506][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5921'. [ 643.810468][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5924'. [ 644.151713][ T975] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 644.208325][T19501] loop4: detected capacity change from 0 to 32768 [ 644.229199][T19501] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5913 (19501) [ 644.264906][T14614] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 644.301256][T19501] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 644.337751][T19501] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 644.356173][ T975] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 644.371370][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.389674][T19501] BTRFS info (device loop4): disk space caching is enabled [ 644.409889][ T975] usb 1-1: Product: syz [ 644.414759][T19540] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 644.429425][ T975] usb 1-1: Manufacturer: syz [ 644.436152][T19501] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 644.458435][T19540] /dev/nullb0: Can't open blockdev [ 644.464383][ T975] usb 1-1: SerialNumber: syz [ 644.485485][ T975] usb 1-1: config 0 descriptor?? [ 644.491094][T14614] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 644.520851][T14614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.549361][T14614] usb 3-1: Product: syz [ 644.566258][T14614] usb 3-1: Manufacturer: syz [ 644.591312][T14614] usb 3-1: SerialNumber: syz [ 644.623398][T14614] r8152-cfgselector 3-1: Unknown version 0x0000 [ 644.630007][T14614] r8152-cfgselector 3-1: config 0 descriptor?? [ 644.708148][T19501] BTRFS info (device loop4): rebuilding free space tree [ 644.761779][ T975] usb 1-1: f81604_read: reg: 105 failed: -EPIPE [ 644.782640][ T975] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 644.787125][T19501] BTRFS info (device loop4): disabling free space tree [ 644.790084][ T975] f81604 1-1:0.0: probe with driver f81604 failed with error -32 [ 644.885859][T19501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 644.902625][T19501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 644.907866][ T975] usb 1-1: USB disconnect, device number 23 [ 645.135903][ T5834] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 645.171560][T19501] BTRFS info (device loop4): balance: start -f -svrange=128..9223372036854775809,limit=46533..2147483649 [ 645.234184][T19501] BTRFS info (device loop4): balance: ended with status: 0 [ 645.475222][T19567] loop6: detected capacity change from 0 to 16 [ 645.501483][ T5832] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 645.510221][T19567] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 645.620718][T19537] loop5: detected capacity change from 0 to 32768 [ 645.770982][T19537] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 646.234298][T19537] XFS (loop5): Ending clean mount [ 646.250851][T19537] XFS (loop5): Quotacheck needed: Please wait. [ 646.381949][T19592] loop4: detected capacity change from 0 to 1024 [ 646.407194][T19537] XFS (loop5): Quotacheck: Done. [ 646.559103][T19592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.680932][T19601] loop6: detected capacity change from 0 to 512 [ 646.712462][T19603] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5949'. [ 646.763331][T19605] loop1: detected capacity change from 0 to 16 [ 646.769717][T19601] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 646.808707][ T5828] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 646.851346][T19601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 646.869673][T19605] erofs (device loop1): mounted with root inode @ nid 36. [ 646.878963][T19601] System zones: 1-12 [ 646.897506][T19605] process 'syz.1.5950' launched './file3' with NULL argv: empty string added [ 646.908318][T19605] syz.1.5950: attempt to access beyond end of device [ 646.908318][T19605] loop1: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 646.925410][T19605] syz.1.5950: attempt to access beyond end of device [ 646.925410][T19605] loop1: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 646.940127][T19601] EXT4-fs (loop6): 1 truncate cleaned up [ 646.940280][T19605] erofs (device loop1): read error -5 @ 0 of nid 89 [ 646.960922][T19601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.005791][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.438459][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.645923][T19614] loop1: detected capacity change from 0 to 4096 [ 647.707087][T19614] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 648.539553][T19640] fuse: Unknown parameter 'f' [ 648.595029][T19640] cgroup: Unexpected value for 'cpuset_v2_mode' [ 648.604844][T19641] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 648.611412][T19641] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 648.711503][T19641] vhci_hcd vhci_hcd.0: Device attached [ 648.771543][T19644] vhci_hcd vhci_hcd.0: port 0 already used [ 648.793663][T19642] vhci_hcd: connection closed [ 648.794020][ T3016] vhci_hcd: stop threads [ 648.820475][ T3016] vhci_hcd: release socket [ 648.833014][ T3016] vhci_hcd: disconnect device [ 649.234711][T19623] loop2: detected capacity change from 0 to 32768 [ 649.365775][T19623] JBD2: Ignoring recovery information on journal [ 649.516904][T19670] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 649.551242][T19623] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 649.601009][T19674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5980'. [ 649.731906][T19623] (syz.2.5959,19623,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 650.030263][ T5835] (syz-executor,5835,0):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 22 [ 650.135021][ T5835] ocfs2: Unmounting device (7,2) on (node local) [ 650.331768][T19685] loop4: detected capacity change from 0 to 128 [ 650.384862][T19685] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 650.865435][T19666] loop5: detected capacity change from 0 to 32768 [ 650.928252][T19666] [ 650.928252][T19666] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.928252][T19666] [ 651.071231][T19666] [ 651.071231][T19666] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 651.071231][T19666] [ 651.166882][T19666] [ 651.166882][T19666] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 651.166882][T19666] [ 651.487177][ T5828] [ 651.487177][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 651.487177][ T5828] [ 651.570964][ T5828] [ 651.570964][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 651.570964][ T5828] [ 652.619688][T19737] loop1: detected capacity change from 0 to 4096 [ 653.019613][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6014'. [ 653.049257][T19745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6015'. [ 653.089653][T19745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6015'. [ 653.170602][T19747] loop1: detected capacity change from 0 to 512 [ 653.269565][T19747] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 653.301508][T19747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 653.343074][T19747] System zones: 0-2, 18-18, 34-35 [ 653.393041][T19731] loop5: detected capacity change from 0 to 32768 [ 653.400840][T19731] btrfs: Deprecated parameter 'usebackuproot' [ 653.407497][T19731] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 653.412153][T19747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.418246][T19731] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6008 (19731) [ 653.531278][T19731] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 653.592539][T19731] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 653.650865][T19747] EXT4-fs (loop1): shut down requested (0) [ 653.669254][T19731] BTRFS info (device loop5): using free-space-tree [ 653.926331][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.974693][T19731] BTRFS info (device loop5): rebuilding free space tree [ 654.157379][T19735] loop2: detected capacity change from 0 to 32768 [ 654.305452][T19731] BTRFS info (device loop5 state M): max_inline set to 4096 [ 654.367506][T19735] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 654.539726][T19786] loop4: detected capacity change from 0 to 256 [ 654.563156][T19735] XFS (loop2): Ending clean mount [ 654.582760][ T5828] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 654.602212][T19786] FAT-fs (loop4): Directory bread(block 1285) failed [ 654.713697][T19786] FAT-fs (loop4): Directory bread(block 1285) failed [ 654.762930][T19786] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 654.960777][ T5835] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 655.633411][ T3397] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 655.821214][ T3397] usb 1-1: Using ep0 maxpacket: 32 [ 655.881397][ T3397] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 655.889644][ T3397] usb 1-1: config 0 has no interface number 0 [ 655.912040][ T3397] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 655.934435][ T3397] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 655.991220][ T3397] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 656.023119][ T3397] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024 [ 656.071202][ T3397] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 656.104547][ T3397] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 656.173821][ T3397] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 656.257696][ T3397] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 656.281295][ T3397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.310000][ T3397] usb 1-1: Product: syz [ 656.329345][ T3397] usb 1-1: Manufacturer: syz [ 656.363145][T19828] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6043'. [ 656.369312][ T3397] usb 1-1: SerialNumber: syz [ 656.401251][ T3397] usb 1-1: config 0 descriptor?? [ 656.404259][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6043'. [ 656.426433][T19806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.434218][T19806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.462370][T19828] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 656.481401][T19806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.534307][ T3397] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 656.898075][ T5834] usb 1-1: USB disconnect, device number 24 [ 657.334260][T19814] loop4: detected capacity change from 0 to 32768 [ 657.541865][T19852] netlink: 'syz.2.6054': attribute type 21 has an invalid length. [ 657.594477][T19852] IPv6: NLM_F_CREATE should be specified when creating new route [ 658.154138][T19869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6063'. [ 658.313668][T19872] loop5: detected capacity change from 0 to 512 [ 658.390369][T19872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 658.485820][T19872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 658.538579][T19877] loop6: detected capacity change from 0 to 256 [ 658.610551][T19872] EXT4-fs (loop5): 1 truncate cleaned up [ 658.701099][T19872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.871650][T19877] FAT-fs (loop6): Directory bread(block 64) failed [ 658.898193][T19877] FAT-fs (loop6): Directory bread(block 65) failed [ 658.960413][T19877] FAT-fs (loop6): Directory bread(block 66) failed [ 658.984328][T19887] loop2: detected capacity change from 0 to 1024 [ 658.991637][T19877] FAT-fs (loop6): Directory bread(block 67) failed [ 659.019658][T19877] FAT-fs (loop6): Directory bread(block 68) failed [ 659.050292][T19877] FAT-fs (loop6): Directory bread(block 69) failed [ 659.081731][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.091376][T19877] FAT-fs (loop6): Directory bread(block 70) failed [ 659.121184][T19877] FAT-fs (loop6): Directory bread(block 71) failed [ 659.140168][T19877] FAT-fs (loop6): Directory bread(block 72) failed [ 659.177059][T19877] FAT-fs (loop6): Directory bread(block 73) failed [ 659.362645][ T3016] hfsplus: b-tree write err: -5, ino 4 [ 659.400903][T19894] netlink: 'syz.4.6074': attribute type 2 has an invalid length. [ 659.447747][T19894] netlink: 'syz.4.6074': attribute type 1 has an invalid length. [ 659.465896][T19862] loop1: detected capacity change from 0 to 32768 [ 659.581374][T19862] JBD2: Ignoring recovery information on journal [ 659.750194][T19901] CIFS: iocharset name too long [ 659.761554][T19862] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 659.973443][T19862] (syz.1.6060,19862,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 660.206390][ T5823] (syz-executor,5823,0):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 22 [ 660.303510][ T5823] ocfs2: Unmounting device (7,1) on (node local) [ 661.242488][T19937] loop1: detected capacity change from 0 to 4096 [ 661.282959][T19937] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 661.966168][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6106'. [ 662.250308][T19970] loop1: detected capacity change from 0 to 512 [ 662.291452][T19970] EXT4-fs: Ignoring removed bh option [ 662.353129][T19970] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 662.479798][T19970] EXT4-fs (loop1): 1 truncate cleaned up [ 662.582235][T19970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.666142][ T30] audit: type=1800 audit(1751392308.812:195): pid=19970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6110" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 662.720582][T19986] loop6: detected capacity change from 0 to 64 [ 662.927349][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.821263][T20016] netem: change failed [ 664.253497][T20032] loop6: detected capacity change from 0 to 24 [ 664.287608][T20032] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 664.316970][T20032] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 664.463458][T20028] loop5: detected capacity change from 0 to 8192 [ 664.488608][T20034] loop1: detected capacity change from 0 to 64 [ 664.491074][T20028] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 665.092007][T20008] loop4: detected capacity change from 0 to 32768 [ 665.224917][T20008] jfs_lookup: iget failed on inum 32 [ 665.355927][T20047] loop5: detected capacity change from 0 to 64 [ 665.926936][ T30] audit: type=1326 audit(1751392312.072:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.6152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe1d58e929 code=0x0 [ 666.499291][T20074] netlink: 'syz.1.6160': attribute type 3 has an invalid length. [ 666.563751][T20074] netlink: 'syz.1.6160': attribute type 1 has an invalid length. [ 666.603466][T20074] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6160'. [ 666.831851][T20084] Bluetooth: MGMT ver 1.23 [ 667.002753][T20092] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6167'. [ 667.070432][T20092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6167'. [ 667.293377][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6172'. [ 667.307522][T20090] loop2: detected capacity change from 0 to 8192 [ 667.323378][T20101] loop5: detected capacity change from 0 to 256 [ 667.389426][T20090] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 667.436141][T20101] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 667.526209][T20107] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6175'. [ 667.772705][T20105] loop4: detected capacity change from 0 to 4096 [ 667.861236][T20105] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 668.537523][T20129] netlink: 'syz.2.6187': attribute type 5 has an invalid length. [ 669.035679][ T30] audit: type=1326 audit(1751392315.182:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.1.6193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f755f1858e7 code=0x0 [ 669.240690][T20149] loop2: detected capacity change from 0 to 1024 [ 669.555975][ T3016] hfsplus: b-tree write err: -5, ino 4 [ 669.632533][ T3397] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 669.814553][ T3397] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.855212][ T3397] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 669.880239][ T3397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.924657][ T3397] usb 1-1: config 0 descriptor?? [ 670.023703][ T5834] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 670.211602][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 670.229261][ T5834] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.281377][ T5834] usb 3-1: config 120 has an invalid interface number: 86 but max is 0 [ 670.313091][ T5834] usb 3-1: config 120 has no interface number 0 [ 670.354687][ T5834] usb 3-1: New USB device found, idVendor=12d1, idProduct=9c20, bcdDevice=e5.af [ 670.374035][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.408971][ T5834] usb 3-1: Product: syz [ 670.443267][ T5834] usb 3-1: Manufacturer: syz [ 670.469743][ T5834] usb 3-1: SerialNumber: syz [ 670.635887][ T3397] usb 1-1: USB disconnect, device number 25 [ 670.767849][ T5834] huawei_cdc_ncm 3-1:120.86: CDC Union missing and no IAD found [ 670.806734][ T5834] huawei_cdc_ncm 3-1:120.86: bind() failure [ 670.882058][ T5834] usb 3-1: USB disconnect, device number 21 [ 670.893238][T20191] loop6: detected capacity change from 0 to 256 [ 670.900643][T20191] exfat: Deprecated parameter 'utf8' [ 670.930513][T20191] exfat: Deprecated parameter 'namecase' [ 670.958905][T20191] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 671.487222][T20208] bond0: option mode: unable to set because the bond device has slaves [ 671.631678][T20210] atomic_op ffff888028d9e998 conn xmit_atomic 0000000000000000 [ 671.776002][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6226'. [ 672.107509][T20226] loop5: detected capacity change from 0 to 256 [ 672.281526][T20226] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 672.387034][T20234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6234'. [ 672.422322][T20234] 8021q: VLANs not supported on gre0 [ 672.500338][T20233] loop1: detected capacity change from 0 to 2048 [ 672.574670][T20233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 673.610059][T20225] loop6: detected capacity change from 0 to 32768 [ 673.617303][T20260] sg_write: process 2019 (syz.5.6247) changed security contexts after opening file descriptor, this is not allowed. [ 674.065235][T20274] netlink: 'syz.4.6254': attribute type 50 has an invalid length. [ 675.204981][T20265] loop2: detected capacity change from 0 to 40427 [ 675.263316][T20265] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 675.269729][T20265] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 675.344086][T20265] F2FS-fs (loop2): invalid crc value [ 675.851971][ T975] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 675.967083][T20265] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 676.004229][T20265] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 676.055075][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 676.111223][ T975] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 676.145018][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.190349][ T975] usb 6-1: config 0 descriptor?? [ 676.198587][T20289] loop4: detected capacity change from 0 to 32768 [ 676.208376][T20310] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.521211][ T975] rc_core: IR keymap rc-xbox-dvd not found [ 676.533237][ T975] Registered IR keymap rc-empty [ 676.549528][ T975] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 676.571392][ T975] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 676.603511][ T975] usb 6-1: USB disconnect, device number 16 [ 676.609540][ C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 676.737989][T20289] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc [ 676.738044][T20289] allowing incompatible features above 0.0: (unknown version) [ 676.738067][T20289] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 676.936642][T20289] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 676.970885][T20289] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 677.001532][T20289] bcachefs (loop4): Version upgrade required: [ 677.001532][T20289] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 677.001532][T20289] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 677.001532][T20289] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 677.129538][T20289] bcachefs (loop4): dropping and reconstructing all alloc info [ 677.220596][T20289] bcachefs (loop4): accounting_read... done [ 677.265270][T20289] bcachefs (loop4): alloc_read... done [ 677.281739][T20289] bcachefs (loop4): snapshots_read... done [ 677.308238][T20289] bcachefs (loop4): check_allocations... [ 677.364307][T20316] loop1: detected capacity change from 0 to 32768 [ 677.423631][T20316] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6272 (20316) [ 677.431927][T20289] done [ 677.480547][T20289] bcachefs (loop4): going read-write [ 677.491261][T20316] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 677.536086][T20316] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 677.569746][T20316] BTRFS info (device loop1): using free-space-tree [ 677.596443][T20289] bcachefs (loop4): done starting filesystem [ 677.614633][T13504] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 677.614709][T13504] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 677.739336][T13504] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 677.739367][T13504] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 677.818799][T13504] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 677.818875][T13504] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 677.839018][ T5832] bcachefs (loop4): shutting down [ 677.839063][ T5832] bcachefs (loop4): going read-only [ 677.839403][ T5832] bcachefs (loop4): finished waiting for writes to stop [ 677.892031][T20316] BTRFS info (device loop1): rebuilding free space tree [ 677.907260][ T5832] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 678.004421][T13504] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 678.004452][T13504] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 678.132793][ T59] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 678.132822][ T59] u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing [ 678.265823][ T5832] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 678.327720][ T5832] bcachefs (loop4): unclean shutdown complete, journal seq 12 [ 678.382939][ T5832] bcachefs (loop4): done going read-only, filesystem not clean [ 678.403051][ T5823] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 678.527021][ T5832] bcachefs (loop4): shutdown complete [ 678.635565][T20370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6286'. [ 678.909110][ T30] audit: type=1326 audit(1751392325.052:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 678.934147][T20374] loop6: detected capacity change from 0 to 16 [ 678.949989][T20374] erofs (device loop6): mounted with root inode @ nid 36. [ 678.957909][ T30] audit: type=1326 audit(1751392325.052:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.031284][ T30] audit: type=1326 audit(1751392325.052:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.162150][ T30] audit: type=1326 audit(1751392325.052:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.239467][ T30] audit: type=1326 audit(1751392325.052:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.355267][ T30] audit: type=1326 audit(1751392325.052:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.483776][ T30] audit: type=1326 audit(1751392325.052:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.601239][ T30] audit: type=1326 audit(1751392325.052:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.660216][ T30] audit: type=1326 audit(1751392325.052:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.711537][ T5834] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 679.731212][ T30] audit: type=1326 audit(1751392325.052:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.5.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1d58e929 code=0x7fc00000 [ 679.929045][T20395] loop5: detected capacity change from 0 to 1764 [ 679.931748][T20396] loop6: detected capacity change from 0 to 4096 [ 679.951602][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.964757][ T5834] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 680.026185][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.060926][T20399] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.087158][ T5834] usb 3-1: config 0 descriptor?? [ 680.556942][ T5834] nzxt-smart2 0003:1E71:200F.0004: unknown main item tag 0x0 [ 680.652221][ T5834] nzxt-smart2 0003:1E71:200F.0004: hidraw0: USB HID vff.fd Device [HID 1e71:200f] on usb-dummy_hcd.2-1/input0 [ 680.706893][T20409] loop6: detected capacity change from 0 to 512 [ 680.783925][T20409] EXT4-fs error (device loop6): ext4_validate_block_bitmap:431: comm syz.6.6303: bg 0: block 5: invalid block bitmap [ 680.791530][ T5834] usb 3-1: USB disconnect, device number 22 [ 680.872613][T20410] fido_id[20410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 680.962765][T20409] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 681.011205][T20409] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.6303: invalid indirect mapped block 4294967295 (level 1) [ 681.081676][T20409] EXT4-fs (loop6): 1 orphan inode deleted [ 681.105957][T20409] EXT4-fs (loop6): 1 truncate cleaned up [ 681.150814][T20409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.384549][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.426968][T20425] loop1: detected capacity change from 0 to 4096 [ 681.451742][T20425] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 681.461761][ T5834] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 681.511408][T20425] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 681.603727][T20430] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.626455][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 681.643688][ T5834] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.673756][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.700229][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 681.724625][ T5834] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 681.754821][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.864262][ T5834] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 681.902081][ T5834] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 681.910168][ T5834] usb 6-1: Manufacturer: syz [ 681.993892][ T5834] usb 6-1: config 0 descriptor?? [ 682.461192][ T5834] rc_core: IR keymap rc-hauppauge not found [ 682.467167][ T5834] Registered IR keymap rc-empty [ 682.514921][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.571499][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.602513][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 682.625982][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 682.656220][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.683734][T20450] loop4: detected capacity change from 0 to 512 [ 682.691411][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.721509][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.771381][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.778983][T20450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 682.831436][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.854611][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.871287][T20450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ce018, mo2=0002] [ 682.893938][T20450] System zones: 1-12 [ 682.905454][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 682.919890][T20450] EXT4-fs (loop4): 1 truncate cleaned up [ 682.953843][ T5961] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 682.969778][T20450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.983168][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 683.005372][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 683.058329][ T5834] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 683.095003][ T5834] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 683.118449][ T5834] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 683.153567][ T5834] usb 6-1: USB disconnect, device number 17 [ 683.163594][ T5961] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.187152][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.221257][ T5961] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.242155][ T5961] usb 7-1: config 0 interface 0 has no altsetting 0 [ 683.248850][ T5961] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 683.329235][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.397528][ T5961] usb 7-1: config 0 descriptor?? [ 683.913969][ T5961] topre 0003:0853:0148.0005: item fetching failed at offset 0/3 [ 683.943071][ T5961] topre 0003:0853:0148.0005: probe with driver topre failed with error -22 [ 684.177058][ T3397] usb 7-1: USB disconnect, device number 9 [ 684.628831][T20493] loop5: detected capacity change from 0 to 256 [ 684.858237][T20493] FAT-fs (loop5): Directory bread(block 64) failed [ 684.878937][T20493] FAT-fs (loop5): Directory bread(block 65) failed [ 684.901519][T20474] loop4: detected capacity change from 0 to 32768 [ 684.924822][T20493] FAT-fs (loop5): Directory bread(block 66) failed [ 684.952838][T20493] FAT-fs (loop5): Directory bread(block 67) failed [ 684.959535][T20493] FAT-fs (loop5): Directory bread(block 68) failed [ 685.023157][T20493] FAT-fs (loop5): Directory bread(block 69) failed [ 685.040097][T20499] loop1: detected capacity change from 0 to 256 [ 685.056722][T20474] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 685.069431][T20493] FAT-fs (loop5): Directory bread(block 70) failed [ 685.084343][T20499] exfat: Deprecated parameter 'utf8' [ 685.108626][T20504] loop6: detected capacity change from 0 to 1024 [ 685.119257][T20493] FAT-fs (loop5): Directory bread(block 71) failed [ 685.126711][T20493] FAT-fs (loop5): Directory bread(block 72) failed [ 685.134631][T20493] FAT-fs (loop5): Directory bread(block 73) failed [ 685.161985][T20507] loop2: detected capacity change from 0 to 128 [ 685.170106][T20499] exfat: Deprecated parameter 'namecase' [ 685.216998][T20507] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 685.224129][T20499] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 685.301383][T20507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.315949][T20504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.505461][ T5832] ocfs2: Unmounting device (7,4) on (node local) [ 685.707682][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.474108][ T5834] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 686.691265][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 686.712739][ T5834] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 686.732462][ T5834] usb 2-1: config 0 has no interface number 0 [ 686.758592][ T5834] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 686.791244][ T5834] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 686.829725][ T5834] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 686.885559][ T5834] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.922847][ T5834] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 686.961407][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.008750][ T5834] usb 2-1: config 0 descriptor?? [ 687.051380][ T975] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 687.068917][ T5834] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 687.243182][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 687.254561][ T975] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 687.275140][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.311584][ T975] usb 3-1: config 0 descriptor?? [ 687.580344][T14614] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 687.751998][T14614] usb 5-1: Using ep0 maxpacket: 16 [ 687.788268][ T3397] IPVS: starting estimator thread 0... [ 687.793294][ T975] prodikeys 0003:041E:2801.0006: item fetching failed at offset 4/5 [ 687.795772][T14614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 687.813186][ T975] prodikeys 0003:041E:2801.0006: hid parse failed [ 687.820388][ T975] prodikeys 0003:041E:2801.0006: probe with driver prodikeys failed with error -22 [ 687.875647][T14614] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 687.895082][T14614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.911390][T20555] IPVS: using max 22 ests per chain, 52800 per kthread [ 687.927829][T14614] usb 5-1: config 0 descriptor?? [ 688.057101][ T975] usb 3-1: USB disconnect, device number 23 [ 688.129770][T20560] program syz.6.6368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.252750][T20562] program syz.6.6368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.262946][T20562] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 688.555182][T20570] loop6: detected capacity change from 0 to 256 [ 688.571289][ T975] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 688.625643][T20570] FAT-fs (loop6): Directory bread(block 64) failed [ 688.647494][T20570] FAT-fs (loop6): Directory bread(block 65) failed [ 688.656960][T20570] FAT-fs (loop6): Directory bread(block 66) failed [ 688.665478][T20570] FAT-fs (loop6): Directory bread(block 67) failed [ 688.673065][T20570] FAT-fs (loop6): Directory bread(block 68) failed [ 688.679766][T20570] FAT-fs (loop6): Directory bread(block 69) failed [ 688.691551][ T5897] usb 5-1: USB disconnect, device number 19 [ 688.696501][T20570] FAT-fs (loop6): Directory bread(block 70) failed [ 688.710407][T20570] FAT-fs (loop6): Directory bread(block 71) failed [ 688.731448][T20570] FAT-fs (loop6): Directory bread(block 72) failed [ 688.761854][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 688.781000][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.784764][T20570] FAT-fs (loop6): Directory bread(block 73) failed [ 688.832442][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.881292][ T975] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 688.921358][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.954208][ T975] usb 6-1: config 0 descriptor?? [ 689.218909][ T5961] usb 2-1: USB disconnect, device number 21 [ 689.250824][ T5961] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 689.448120][ T975] hid-multitouch 0003:1FD2:6007.0008: report_id 1023902090 is invalid [ 689.480636][ T975] hid-multitouch 0003:1FD2:6007.0008: item 0 4 1 8 parsing failed [ 689.499648][ T975] hid-multitouch 0003:1FD2:6007.0008: probe with driver hid-multitouch failed with error -22 [ 689.597075][T20580] loop1: detected capacity change from 0 to 1024 [ 689.688221][T20580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.727738][T14614] usb 6-1: USB disconnect, device number 18 [ 689.748501][T20580] EXT4-fs error (device loop1): __ext4_new_inode:1072: comm syz.1.6376: reserved inode found cleared - inode=1 [ 689.934031][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.020948][T20572] loop2: detected capacity change from 0 to 32768 [ 690.053345][T20572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6373 (20572) [ 690.142846][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6380'. [ 690.163697][T20572] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 690.187854][T20592] loop1: detected capacity change from 0 to 64 [ 690.191721][T20590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6380'. [ 690.214067][T20572] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 690.241094][T20572] BTRFS info (device loop2): using free-space-tree [ 691.004431][ T5835] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 691.304223][T20629] loop1: detected capacity change from 0 to 1024 [ 691.488952][T20629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.521368][T20629] ext4 filesystem being mounted at /1093/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.571542][T20638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6393'. [ 691.963188][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.299980][T20658] loop1: detected capacity change from 0 to 256 [ 692.374433][T20658] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 692.587496][T20661] loop2: detected capacity change from 0 to 64 [ 692.737807][T20669] mkiss: ax0: crc mode is auto. [ 693.120179][T20680] loop2: detected capacity change from 0 to 256 [ 693.191504][ T5961] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 693.401509][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 693.422211][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.449119][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.476767][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 693.534940][ T5961] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 693.574082][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.632285][ T5961] usb 1-1: config 0 descriptor?? [ 693.718396][T20693] loop2: detected capacity change from 0 to 1024 [ 693.816057][T20693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.832001][T20693] ext4 filesystem being mounted at /1047/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.967897][T20693] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 693.985093][T20702] loop1: detected capacity change from 0 to 64 [ 694.006592][T20701] sp0: Synchronizing with TNC [ 694.011600][T20702] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 694.051917][T20699] [U] [ 694.056690][T20693] EXT4-fs (loop2): Remounting filesystem read-only [ 694.160829][ T5961] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 694.310478][ T5961] usb 1-1: USB disconnect, device number 26 [ 694.324327][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.399919][T20703] fido_id[20703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 694.556447][T20682] loop5: detected capacity change from 0 to 32768 [ 694.573820][T20705] loop1: detected capacity change from 0 to 512 [ 694.591775][T20705] EXT4-fs: Ignoring removed mblk_io_submit option [ 694.611910][T20682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6414 (20682) [ 694.675398][T20705] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 694.761576][T20682] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 694.788705][T20705] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.6423: attempt to clear invalid blocks 2 len 1 [ 694.851240][T20682] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 694.873133][T20705] EXT4-fs (loop1): Remounting filesystem read-only [ 694.880396][T20705] EXT4-fs (loop1): 1 truncate cleaned up [ 694.896552][T20682] BTRFS info (device loop5): using free-space-tree [ 694.933352][ T5897] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 694.973913][T20705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.154182][ T5897] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 695.201247][ T5897] usb 7-1: config 0 has no interface number 0 [ 695.254081][ T5897] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 695.265733][ T5823] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.311253][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.319331][ T5897] usb 7-1: Product: syz [ 695.350660][ T5897] usb 7-1: Manufacturer: syz [ 695.376856][ T5897] usb 7-1: SerialNumber: syz [ 695.378033][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.399965][ T5897] usb 7-1: config 0 descriptor?? [ 695.569894][T20682] syz.5.6414 (20682) used greatest stack depth: 20888 bytes left [ 695.704693][ T5897] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 695.722117][T20745] loop2: detected capacity change from 0 to 16 [ 695.753598][ T5897] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 695.791636][T20745] erofs (device loop2): mounted with root inode @ nid 36. [ 695.805852][ T5897] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 695.850524][ T5828] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 695.855551][ T5897] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 695.935630][ T5897] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 696.227575][ T5897] usb 7-1: USB disconnect, device number 10 [ 696.289012][ T5897] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 696.343909][ T5897] keyspan 7-1:0.133: device disconnected [ 696.586916][T20760] loop4: detected capacity change from 0 to 64 [ 696.611295][ T5961] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 696.781247][ T5961] usb 6-1: Using ep0 maxpacket: 32 [ 696.799197][ T5961] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 696.819233][ T5961] usb 6-1: config 0 has no interface number 0 [ 696.878814][ T5961] usb 6-1: config 0 interface 184 has no altsetting 0 [ 696.913281][ T5961] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 696.968195][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.012103][ T5961] usb 6-1: Product: syz [ 697.016357][ T5961] usb 6-1: Manufacturer: syz [ 697.068133][ T5961] usb 6-1: SerialNumber: syz [ 697.114850][ T5961] usb 6-1: config 0 descriptor?? [ 697.163957][ T5961] smsc75xx v1.0.0 [ 697.344099][T20773] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6447'. [ 697.798331][ T975] IPVS: starting estimator thread 0... [ 697.951344][T20784] IPVS: using max 22 ests per chain, 52800 per kthread [ 698.070537][T20790] loop6: detected capacity change from 0 to 1024 [ 698.169289][T20790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.201315][T20790] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.363516][T14661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.020880][T20809] loop2: detected capacity change from 0 to 4096 [ 699.044528][T20809] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 699.125759][T20809] ntfs3(loop2): ino=1a, mi_enum_attr [ 699.145652][T20809] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 699.166360][T20809] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 699.259114][T20809] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 699.489548][ T5961] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 699.564091][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6465'. [ 699.572949][ T5961] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 699.618340][ T5961] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 699.675034][ T5961] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 699.752098][ T5961] usb 6-1: USB disconnect, device number 19 [ 699.945714][T20796] loop1: detected capacity change from 0 to 32768 [ 700.050658][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 700.050688][ T30] audit: type=1400 audit(1751392346.182:231): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#" pid=20828 comm=6C25868E36DB0CCF197CC94F7FCE8F [ 700.137672][T20796] read_mapping_page failed! [ 700.316886][ T111] read_mapping_page failed! [ 700.439105][T20841] loop4: detected capacity change from 0 to 1764 [ 700.476010][ T5195] udevd[5195]: worker [5994] terminated by signal 33 (Unknown signal 33) [ 700.489043][T20841] ISOFS: unable to read i-node block [ 700.502914][T20843] netlink: 'syz.2.6477': attribute type 10 has an invalid length. [ 700.506507][ T5195] udevd[5195]: worker [5994] failed while handling '/devices/virtual/block/loop2' [ 700.524202][T20841] isofs_fill_super: get root inode failed [ 700.854602][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 700.901821][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6480'. [ 700.910777][T20851] netlink: 'syz.6.6480': attribute type 14 has an invalid length. [ 701.645165][T20873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6490'. [ 702.058867][T20877] loop4: detected capacity change from 0 to 256 [ 702.187299][T20877] FAT-fs (loop4): Directory bread(block 64) failed [ 702.211216][T20877] FAT-fs (loop4): Directory bread(block 65) failed [ 702.230001][ T30] audit: type=1326 audit(1751392348.372:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20878 comm="syz.6.6494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1da978e929 code=0x0 [ 702.272781][T20877] FAT-fs (loop4): Directory bread(block 66) failed [ 702.279384][T20877] FAT-fs (loop4): Directory bread(block 67) failed [ 702.312750][T20877] FAT-fs (loop4): Directory bread(block 68) failed [ 702.319356][T20877] FAT-fs (loop4): Directory bread(block 69) failed [ 702.333255][T20860] loop5: detected capacity change from 0 to 32768 [ 702.410260][T20877] FAT-fs (loop4): Directory bread(block 70) failed [ 702.442688][T20860] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 702.451305][T20877] FAT-fs (loop4): Directory bread(block 71) failed [ 702.451449][T20877] FAT-fs (loop4): Directory bread(block 72) failed [ 702.472340][T20877] FAT-fs (loop4): Directory bread(block 73) failed [ 702.560511][T20869] loop1: detected capacity change from 0 to 32768 [ 702.651595][T20869] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6488 (20869) [ 702.756526][T20869] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 702.818362][T20869] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 702.858331][T20869] BTRFS info (device loop1): disk space caching is enabled [ 702.869953][T20860] XFS (loop5): Ending clean mount [ 702.892204][T20869] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 702.923281][T20860] XFS (loop5): Quotacheck needed: Please wait. [ 703.131487][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 703.146343][T20860] XFS (loop5): Quotacheck: Done. [ 703.220238][T20920] loop4: detected capacity change from 0 to 256 [ 703.256627][T20869] BTRFS info (device loop1): rebuilding free space tree [ 703.284444][T20920] exfat: Deprecated parameter 'namecase' [ 703.341680][T20869] BTRFS info (device loop1): disabling free space tree [ 703.402164][T20920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6cf1861, utbl_chksum : 0xe619d30d) [ 703.411387][T20927] netlink: 'syz.6.6503': attribute type 1 has an invalid length. [ 703.422887][T20869] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 703.460169][ T5828] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 703.461408][T20869] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 703.488293][T20927] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6503'. [ 703.528808][T20927] netlink: 'syz.6.6503': attribute type 1 has an invalid length. [ 703.802131][T20869] BTRFS info (device loop1): balance: start -d -m [ 703.824809][T20869] BTRFS info (device loop1): balance: paused [ 704.061829][ T5823] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 704.811501][T20951] libceph: resolve '4..' (ret=-3): failed [ 704.927274][T20958] 9pnet_rdma: rdma_create_trans (20958): problem binding to privport: 13 [ 705.025553][T20963] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6519'. [ 705.441436][T14614] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 705.487684][T20973] loop5: detected capacity change from 0 to 256 [ 705.531819][T20973] exfat: Deprecated parameter 'utf8' [ 705.571629][T20973] exfat: Deprecated parameter 'utf8' [ 705.616321][T14614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 705.630508][T20973] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 705.658585][T14614] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.706125][T14614] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 705.747208][T14614] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.792575][T14614] usb 7-1: config 0 descriptor?? [ 705.929493][T20981] loop1: detected capacity change from 0 to 64 [ 706.062355][T20981] hfs: small file entry [ 706.078740][T20942] loop4: detected capacity change from 0 to 32768 [ 706.142602][T20979] loop2: detected capacity change from 0 to 4096 [ 706.254243][T14614] isku 0003:1E7D:319C.000A: unknown main item tag 0x0 [ 706.304531][T14614] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 706.340952][T20985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6530'. [ 706.541760][T14614] usb 7-1: USB disconnect, device number 11 [ 706.762251][T20987] fido_id[20987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 707.562574][T21017] sch_tbf: peakrate 64 is lower than or equals to rate 2147483649 ! [ 707.743066][T21014] loop4: detected capacity change from 0 to 4096 [ 708.831190][ T5961] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 708.991424][ T5961] usb 7-1: Using ep0 maxpacket: 16 [ 709.016697][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.071413][ T5961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.101616][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 709.132164][ T5961] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.140406][T21064] tipc: Enabling of bearer rejected, media not registered [ 709.154076][ T5961] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.165318][ T5961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.210172][ T5961] usb 7-1: config 0 descriptor?? [ 709.291546][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 709.299239][ T5834] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 709.311204][ T5834] usb 2-1: config 0 has no interface number 0 [ 709.329298][ T5834] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.361238][ T5834] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.381212][ T5834] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 709.390409][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.544852][ T5834] usb 2-1: config 0 descriptor?? [ 709.837838][ T5961] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000B/input/input36 [ 709.948715][T21079] blktrace: Concurrent blktraces are not allowed on sg0 [ 710.003473][ T5961] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 710.131160][ T5961] usb 7-1: USB disconnect, device number 12 [ 710.181390][T21081] loop2: detected capacity change from 0 to 128 [ 710.281797][ T118] usb 2-1: USB disconnect, device number 22 [ 710.497309][T21082] fido_id[21082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 710.552408][T21086] loop5: detected capacity change from 0 to 4096 [ 710.617929][T21086] ntfs3(loop5): ino=3, Correct links count -> 2. [ 710.948736][T21086] ntfs3(loop5): failed to convert "0080" to macgreek [ 711.082617][T21094] loop2: detected capacity change from 0 to 1024 [ 711.112287][T21094] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 711.246880][T21094] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.6582: Invalid block bitmap block 0 in block_group 0 [ 711.284554][T21094] EXT4-fs (loop2): Remounting filesystem read-only [ 711.325217][T21094] Quota error (device loop2): write_blk: dquota write failed [ 711.341269][T21094] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 711.417984][T21094] EXT4-fs (loop2): 1 orphan inode deleted [ 711.467705][T21094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.776900][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.821209][T14614] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 712.011194][T14614] usb 5-1: Using ep0 maxpacket: 16 [ 712.050700][T14614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.086499][ T30] audit: type=1326 audit(1751392358.222:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.111298][T14614] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 712.120415][T14614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.136934][T21115] loop6: detected capacity change from 0 to 4096 [ 712.188128][T14614] usb 5-1: config 0 descriptor?? [ 712.193100][ T30] audit: type=1326 audit(1751392358.222:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.193215][ T30] audit: type=1326 audit(1751392358.222:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.490951][ T30] audit: type=1326 audit(1751392358.222:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.631365][ T30] audit: type=1326 audit(1751392358.262:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.764899][ T30] audit: type=1326 audit(1751392358.262:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.768757][T14614] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 712.889434][ T30] audit: type=1326 audit(1751392358.262:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21119 comm="syz.2.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5f8e929 code=0x7ffc0000 [ 712.932748][T14614] hkems 0003:2006:0118.000D: item fetching failed at offset 5/7 [ 712.961316][T14614] hkems 0003:2006:0118.000D: parse failed [ 712.983933][T14614] hkems 0003:2006:0118.000D: probe with driver hkems failed with error -22 [ 713.063886][T14614] usb 5-1: USB disconnect, device number 20 [ 713.222622][T21144] loop5: detected capacity change from 0 to 1024 [ 713.305335][T21144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.382292][T21144] ext4 filesystem being mounted at /1056/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.434796][T21148] loop1: detected capacity change from 0 to 164 [ 713.477477][T21148] rock: directory entry would overflow storage [ 713.503096][T21148] rock: sig=0x66, size=4, remaining=3 [ 713.747356][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.879434][T21152] loop4: detected capacity change from 0 to 1024 [ 714.003262][T21152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.198305][T21135] loop2: detected capacity change from 0 to 32768 [ 714.276166][T21135] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 714.321282][ T5834] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 714.353246][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.499658][ T5834] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 714.521608][ T5834] usb 6-1: config 0 has no interface number 0 [ 714.527805][ T5834] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 714.562465][T21135] XFS (loop2): Ending clean mount [ 714.621241][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.645434][T21135] XFS (loop2): Quotacheck needed: Please wait. [ 714.691558][ T5834] usb 6-1: config 0 descriptor?? [ 714.711043][ T5834] usb 6-1: selecting invalid altsetting 1 [ 714.742164][ T5834] dvb_ttusb_budget: ttusb_init_controller: error [ 714.766466][ T5834] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 714.851081][T21135] XFS (loop2): Quotacheck: Done. [ 715.110175][ T5834] DVB: Unable to find symbol cx22700_attach() [ 715.196138][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 715.243905][ T5834] DVB: Unable to find symbol tda10046_attach() [ 715.250141][ T5834] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 715.332615][ T5834] usb 6-1: USB disconnect, device number 20 [ 715.666218][T21160] loop6: detected capacity change from 0 to 32768 [ 715.721480][T21160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6610 (21160) [ 715.797409][T21160] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 715.859859][T21160] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 715.915850][T21160] BTRFS info (device loop6): using free-space-tree [ 715.999920][T21178] syz.1.6614: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 716.025948][T21178] CPU: 0 UID: 0 PID: 21178 Comm: syz.1.6614 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 716.026006][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.026031][T21178] Call Trace: [ 716.026042][T21178] [ 716.026056][T21178] dump_stack_lvl+0x16c/0x1f0 [ 716.026125][T21178] warn_alloc+0x248/0x3a0 [ 716.026172][T21178] ? __pfx_warn_alloc+0x10/0x10 [ 716.026236][T21178] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 716.026278][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.026327][T21178] ? __vmalloc_node_noprof+0xad/0xf0 [ 716.026409][T21178] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 716.026487][T21178] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 716.026546][T21178] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 716.026627][T21178] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 716.026671][T21178] vmalloc_user_noprof+0x9e/0xe0 [ 716.026736][T21178] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 716.026780][T21178] vb2_vmalloc_alloc+0x135/0x3f0 [ 716.026824][T21178] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 716.026867][T21178] __vb2_queue_alloc+0x8c9/0x1280 [ 716.026932][T21178] vb2_core_reqbufs+0xa90/0xfe0 [ 716.026983][T21178] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 716.027043][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.027099][T21178] __vb2_init_fileio+0x3f1/0x1100 [ 716.027142][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.027189][T21178] ? lockdep_hardirqs_on+0x7c/0x110 [ 716.027249][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.027296][T21178] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 716.027376][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.027430][T21178] vb2_core_poll+0x486/0x700 [ 716.027475][T21178] vb2_poll+0x33/0x150 [ 716.027538][T21178] vb2_fop_poll+0x10f/0x2c0 [ 716.027608][T21178] ? __pfx_vb2_fop_poll+0x10/0x10 [ 716.027670][T21178] v4l2_poll+0x163/0x320 [ 716.027722][T21178] ? __pfx_v4l2_poll+0x10/0x10 [ 716.027774][T21178] ep_item_poll+0x141/0x1f0 [ 716.027817][T21178] do_epoll_ctl+0x1dd0/0x35b0 [ 716.027881][T21178] ? __pfx_do_epoll_ctl+0x10/0x10 [ 716.027921][T21178] ? find_held_lock+0x2b/0x80 [ 716.027969][T21178] ? __might_fault+0xe3/0x190 [ 716.028011][T21178] ? __might_fault+0xe3/0x190 [ 716.028054][T21178] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 716.028112][T21178] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 716.028155][T21178] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 716.028204][T21178] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 716.028255][T21178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 716.028314][T21178] do_syscall_64+0xcd/0x4c0 [ 716.028391][T21178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.028431][T21178] RIP: 0033:0x7f755f18e929 [ 716.028462][T21178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.028501][T21178] RSP: 002b:00007f7560078038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 716.028538][T21178] RAX: ffffffffffffffda RBX: 00007f755f3b5fa0 RCX: 00007f755f18e929 [ 716.028565][T21178] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 716.028593][T21178] RBP: 00007f755f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 716.028619][T21178] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 716.028643][T21178] R13: 0000000000000000 R14: 00007f755f3b5fa0 R15: 00007ffca6329988 [ 716.028695][T21178] [ 716.028710][T21178] Mem-Info: [ 716.131327][T14614] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 716.373979][T21178] active_anon:15689 inactive_anon:0 isolated_anon:0 [ 716.373979][T21178] active_file:13362 inactive_file:40311 isolated_file:0 [ 716.373979][T21178] unevictable:768 dirty:731 writeback:0 [ 716.373979][T21178] slab_reclaimable:11362 slab_unreclaimable:109520 [ 716.373979][T21178] mapped:35789 shmem:9572 pagetables:1562 [ 716.373979][T21178] sec_pagetables:0 bounce:0 [ 716.373979][T21178] kernel_misc_reclaimable:0 [ 716.373979][T21178] free:1263643 free_pcp:16944 free_cma:0 [ 716.451333][T21178] Node 0 active_anon:62756kB inactive_anon:0kB active_file:53448kB inactive_file:161044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143256kB dirty:2924kB writeback:0kB shmem:36752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13604kB pagetables:6092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 716.591325][T21178] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 716.633434][T21178] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.687760][T21178] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 716.694643][T21178] Node 0 DMA32 free:1135864kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63612kB inactive_anon:0kB active_file:53448kB inactive_file:159728kB unevictable:1536kB writepending:2924kB present:3129332kB managed:2540756kB mlocked:0kB bounce:0kB free_pcp:46324kB local_pcp:24924kB free_cma:0kB [ 716.736112][T21178] lowmem_reserve[]: 0 0 1 1 1 [ 716.740934][T21178] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 716.813179][T14614] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 716.831207][T14614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.844056][T21178] lowmem_reserve[]: 0 0 0 0 0 [ 716.848888][T21178] Node 1 Normal free:3902984kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19844kB local_pcp:9312kB free_cma:0kB [ 716.862766][T14661] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 716.895285][T14614] usb 1-1: config 0 descriptor?? [ 716.930236][T21213] loop4: detected capacity change from 0 to 512 [ 716.941161][T21178] lowmem_reserve[]: 0 0 0 0 0 [ 716.946077][T21178] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 717.024538][T21178] Node 0 DMA32: 1*4kB (E) 0*8kB 2*16kB (UE) 29*32kB (UME) 101*64kB (UME) 52*128kB (UME) 101*256kB (UME) 59*512kB (UME) 18*1024kB (UME) 9*2048kB (UM) 250*4096kB (UME) = 1131012kB [ 717.075776][T21213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.093549][T21178] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 717.106382][T21178] Node 1 Normal: 168*4kB (UE) 57*8kB (UME) 40*16kB (UME) 91*32kB (UME) 41*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 949*4096kB (M) = 3902984kB [ 717.125121][T21178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.135492][T21178] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 717.160742][T21178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.177209][T14614] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 717.181019][T21213] ext4 filesystem being mounted at /1127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.207678][T21178] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 717.218420][T21178] 65491 total pagecache pages [ 717.223232][T21178] 0 pages in swap cache [ 717.227434][T21178] Free swap = 124996kB [ 717.231743][T21178] Total swap = 124996kB [ 717.235954][T21178] 2097051 pages RAM [ 717.239804][T21178] 0 pages HighMem/MovableOnly [ 717.244918][T21178] 429884 pages reserved [ 717.249150][T21178] 0 pages cma reserved [ 717.578383][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.587802][T14614] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 717.621675][T14614] asix 1-1:0.0: probe with driver asix failed with error -71 [ 717.683450][T14614] usb 1-1: USB disconnect, device number 27 [ 717.861681][T21201] loop5: detected capacity change from 0 to 32768 [ 717.881675][T21198] loop2: detected capacity change from 0 to 32768 [ 717.910724][T21201] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6621 (21201) [ 717.978128][T21201] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 718.001510][T21201] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 718.056137][T21198] [ 718.056137][T21198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 718.056137][T21198] [ 718.066375][T21201] BTRFS info (device loop5): using free-space-tree [ 718.151844][T21198] ERROR: (device loop2): diWrite: ixpxd invalid [ 718.151844][T21198] [ 718.234740][T21198] ERROR: (device loop2): txAbort: [ 718.234740][T21198] [ 718.270415][T21237] jfs_create: dtSearch returned -17 [ 718.618681][ T5835] [ 718.618681][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 718.618681][ T5835] [ 718.621368][T14614] IPVS: starting estimator thread 0... [ 718.670775][ T5835] [ 718.670775][ T5835] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 718.670775][ T5835] [ 718.792885][T21248] IPVS: using max 21 ests per chain, 50400 per kthread [ 718.979472][ T5828] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 719.729356][T21221] loop1: detected capacity change from 0 to 32768 [ 720.324385][T21221] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 720.324430][T21221] allowing incompatible features above 0.0: (unknown version) [ 720.324454][T21221] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 720.416051][T21221] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 720.423547][T21281] loop2: detected capacity change from 0 to 256 [ 720.455078][T21221] bcachefs (loop1): initializing new filesystem [ 720.488109][T21221] bcachefs (loop1): going read-write [ 720.533740][T21244] loop6: detected capacity change from 0 to 32768 [ 720.534031][T21281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 720.625373][T21221] bcachefs (loop1): marking superblocks [ 720.852821][T21221] bcachefs (loop1): initializing freespace [ 720.953395][T21221] bcachefs (loop1): done initializing freespace [ 720.977088][T21221] bcachefs (loop1): reading snapshots table [ 721.047512][T21221] bcachefs (loop1): reading snapshots done [ 721.191629][T21221] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 721.228087][T21221] bcachefs (loop1): done starting filesystem [ 721.258615][T21298] loop4: detected capacity change from 0 to 512 [ 721.291658][ T118] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 721.320511][T21298] EXT4-fs: Ignoring removed nobh option [ 721.348382][T21298] EXT4-fs: Ignoring removed nobh option [ 721.354471][T21221] syz.1.6626 (21221) used greatest stack depth: 18200 bytes left [ 721.397570][ T5823] bcachefs (loop1): shutting down [ 721.418433][ T5823] bcachefs (loop1): going read-only [ 721.426685][ T5823] bcachefs (loop1): finished waiting for writes to stop [ 721.443601][ T5823] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 721.470184][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 721.503089][T21298] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 721.539645][ T118] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 721.544749][T21298] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.6649: invalid indirect mapped block 4294967295 (level 2) [ 721.559245][ T118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.608498][ T118] usb 3-1: config 0 descriptor?? [ 721.632607][T21294] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 721.642064][T21298] EXT4-fs (loop4): 1 truncate cleaned up [ 721.692893][T21298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.727075][ T5823] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 721.748143][ T5823] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 721.767059][ T5823] bcachefs (loop1): marking filesystem clean [ 721.978600][ T5823] bcachefs (loop1): shutdown complete [ 722.047587][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.094319][ T118] uclogic 0003:5543:0005.000E: unknown main item tag 0x0 [ 722.131352][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 722.151251][ T118] uclogic 0003:5543:0005.000E: unknown main item tag 0x0 [ 722.201782][ T118] uclogic 0003:5543:0005.000E: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0 [ 722.243700][T21317] loop5: detected capacity change from 0 to 64 [ 722.332934][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 722.379595][ T5904] usb 3-1: USB disconnect, device number 24 [ 722.392915][ T5897] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 722.400965][ T5897] usb 7-1: config 0 has no interface number 0 [ 722.447435][ T5897] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 722.474014][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.498937][ T5897] usb 7-1: Product: syz [ 722.511210][ T5897] usb 7-1: Manufacturer: syz [ 722.520416][ T5897] usb 7-1: SerialNumber: syz [ 722.553537][ T5897] usb 7-1: config 0 descriptor?? [ 722.572438][T21318] fido_id[21318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 722.590379][ T5897] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 722.616152][ T5897] usb 7-1: selecting invalid altsetting 1 [ 722.671246][ T5897] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 722.706845][ T5897] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 722.756571][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 722.793079][ T5897] usb 7-1: media controller created [ 722.815909][T21325] loop5: detected capacity change from 0 to 1024 [ 722.858133][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.873179][T21325] EXT4-fs: Ignoring removed nobh option [ 722.893543][T21325] EXT4-fs: Ignoring removed bh option [ 723.001667][ T5897] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 723.009426][ T5897] zl10353_read_register: readreg error (reg=127, ret==-71) [ 723.027753][ T5897] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 723.037789][T21325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.251865][ T5897] usb 7-1: USB disconnect, device number 13 [ 723.317438][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.533219][T21320] loop4: detected capacity change from 0 to 32768 [ 723.624171][T21320] [ 723.624171][T21320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.624171][T21320] [ 723.696284][T21320] [ 723.696284][T21320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.696284][T21320] [ 723.738787][T21320] [ 723.738787][T21320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.738787][T21320] [ 723.768958][T21340] loop6: detected capacity change from 0 to 1024 [ 723.810404][T21320] [ 723.810404][T21320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.810404][T21320] [ 723.856203][T21345] [ 723.856203][T21345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.856203][T21345] [ 723.878681][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6668'. [ 723.940346][T21320] [ 723.940346][T21320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.940346][T21320] [ 723.998490][ T110] [ 723.998490][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 723.998490][ T110] [ 724.027835][T21345] [ 724.027835][T21345] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 724.027835][T21345] [ 724.138288][ T3016] hfsplus: b-tree write err: -5, ino 4 [ 724.257714][T21349] loop5: detected capacity change from 0 to 512 [ 724.283001][ T5832] [ 724.283001][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 724.283001][ T5832] [ 724.297305][T21349] EXT4-fs: Ignoring removed i_version option [ 724.315168][ T5832] [ 724.315168][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 724.315168][ T5832] [ 724.354092][T21349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 724.481428][T21333] loop2: detected capacity change from 0 to 32768 [ 724.488136][T21349] EXT4-fs (loop5): 1 truncate cleaned up [ 724.501400][T21333] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6663 (21333) [ 724.516396][T21349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.574116][T21333] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 724.681867][T21333] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 724.925825][T21333] BTRFS info (device loop2): rebuilding free space tree [ 725.039398][ T5828] EXT4-fs warning (device loop5): ext4_xattr_inode_create:1468: refuse to create EA inode when umounting [ 725.055627][T21333] BTRFS info (device loop2): disabling free space tree [ 725.083492][T21333] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 725.102213][ T5828] ------------[ cut here ]------------ [ 725.107786][ T5828] WARNING: CPU: 1 PID: 5828 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.118795][ T5828] Modules linked in: [ 725.123526][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 725.135944][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.146146][ T5828] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.153335][ T5828] Code: 48 95 97 ff e9 4e f6 ff ff e8 fe ae 31 ff 48 c7 c1 00 fc c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 c0 03 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 d3 ae 31 ff 48 8b 95 08 ff ff ff [ 725.173097][ T5828] RSP: 0018:ffffc900047df468 EFLAGS: 00010286 [ 725.179212][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00e9 [ 725.187359][ T5828] RDX: ffff888031e10000 RSI: ffffffff82884f81 RDI: 0000000000000005 [ 725.195472][ T5828] RBP: ffffc900047df5c8 R08: 0000000000000005 R09: 0000000000000000 [ 725.201198][T21333] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 725.203752][ T5828] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888029ba8000 [ 725.221969][ T5828] R13: ffff88804a4392a4 R14: ffff888077179f48 R15: ffff888077179f48 [ 725.229987][ T5828] FS: 00005555829e4500(0000) GS:ffff888124859000(0000) knlGS:0000000000000000 [ 725.239090][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.245769][ T5828] CR2: 00007ff0137212c0 CR3: 0000000059d40000 CR4: 0000000000350ef0 [ 725.253867][ T5828] Call Trace: [ 725.257180][ T5828] [ 725.260171][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.265966][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.271725][ T5828] ? find_held_lock+0x2b/0x80 [ 725.276467][ T5828] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 725.283310][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.289021][ T5828] ? const_folio_flags+0x5b/0x100 [ 725.294194][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.299888][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.305714][ T5828] ? __lock_acquire+0xb8a/0x1c90 [ 725.310733][ T5828] ext4_xattr_block_set+0x818/0x3650 [ 725.316158][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.321940][ T5828] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 725.327758][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.333566][ T5828] ? check_xattrs+0x10a/0xba0 [ 725.338354][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.344110][ T5828] ? xattr_find_entry+0x2c9/0x3a0 [ 725.349218][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.355001][ T5828] ? ext4_xattr_block_find+0x59/0x430 [ 725.360455][ T5828] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 725.366482][ T5828] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 725.372893][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.378588][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.384337][ T5828] ? dquot_initialize_needed+0x183/0x2a0 [ 725.390067][ T5828] __ext4_expand_extra_isize+0x346/0x480 [ 725.396217][ T5828] __ext4_mark_inode_dirty+0x544/0x870 [ 725.401818][ T5828] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 725.407907][ T5828] ? __pfx___might_resched+0x10/0x10 [ 725.413333][ T5828] ? ext4_journal_check_start+0x22b/0x340 [ 725.419121][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.424918][ T5828] ? __ext4_journal_start_sb+0x19e/0x690 [ 725.430616][ T5828] ? ext4_dirty_inode+0xa1/0x130 [ 725.435733][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.441498][ T5828] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 725.446939][ T5828] ext4_dirty_inode+0xd9/0x130 [ 725.452248][ T5828] ? rcu_is_watching+0x12/0xc0 [ 725.457113][ T5828] __mark_inode_dirty+0x1ee/0xe50 [ 725.462294][ T5828] iput+0xb7/0x880 [ 725.466093][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.471939][ T5828] dentry_unlink_inode+0x29c/0x480 [ 725.477119][ T5828] __dentry_kill+0x1d0/0x600 [ 725.481880][ T5828] ? shrink_dentry_list+0x11a/0x5d0 [ 725.487185][ T5828] shrink_dentry_list+0x140/0x5d0 [ 725.492388][ T5828] ? shrink_dcache_parent+0x22/0x530 [ 725.497754][ T5828] shrink_dcache_parent+0xe1/0x530 [ 725.503047][ T5828] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 725.508859][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.514651][ T5828] shrink_dcache_for_umount+0xa5/0x3e0 [ 725.520204][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 725.525534][ T5828] generic_shutdown_super+0x6c/0x390 [ 725.530895][ T5828] kill_block_super+0x3b/0x90 [ 725.535836][ T5828] ext4_kill_sb+0x6a/0xb0 [ 725.540296][ T5828] deactivate_locked_super+0xc1/0x1a0 [ 725.545879][ T5828] deactivate_super+0xde/0x100 [ 725.550700][ T5828] cleanup_mnt+0x225/0x450 [ 725.555467][ T5828] task_work_run+0x150/0x240 [ 725.560148][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 725.565365][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.571084][ T5828] ? __pfx___x64_sys_umount+0x10/0x10 [ 725.576647][ T5828] exit_to_user_mode_loop+0xeb/0x110 [ 725.582060][ T5828] do_syscall_64+0x3f6/0x4c0 [ 725.586759][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.592762][ T5828] RIP: 0033:0x7fbe1d58fc57 [ 725.597220][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 725.617161][ T5828] RSP: 002b:00007ffcfb7f8c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 725.625727][ T5828] RAX: 0000000000000000 RBX: 00007fbe1d610925 RCX: 00007fbe1d58fc57 [ 725.633829][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfb7f8d10 [ 725.641928][ T5828] RBP: 00007ffcfb7f8d10 R08: 0000000000000000 R09: 0000000000000000 [ 725.649932][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcfb7f9da0 [ 725.658018][ T5828] R13: 00007fbe1d610925 R14: 00000000000b0f4e R15: 00007ffcfb7f9de0 [ 725.666117][ T5828] [ 725.669163][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 725.676466][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 725.688671][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 725.698756][ T5828] Call Trace: [ 725.702054][ T5828] [ 725.704998][ T5828] dump_stack_lvl+0x3d/0x1f0 [ 725.709639][ T5828] panic+0x71c/0x800 [ 725.713587][ T5828] ? __pfx_panic+0x10/0x10 [ 725.718052][ T5828] ? show_trace_log_lvl+0x29b/0x3e0 [ 725.723312][ T5828] ? check_panic_on_warn+0x1f/0xb0 [ 725.728481][ T5828] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.734950][ T5828] check_panic_on_warn+0xab/0xb0 [ 725.739940][ T5828] __warn+0xf6/0x3c0 [ 725.743884][ T5828] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.750351][ T5828] report_bug+0x3c3/0x580 [ 725.754733][ T5828] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.761203][ T5828] handle_bug+0x184/0x210 [ 725.765564][ T5828] exc_invalid_op+0x17/0x50 [ 725.770096][ T5828] asm_exc_invalid_op+0x1a/0x20 [ 725.774975][ T5828] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 725.782054][ T5828] Code: 48 95 97 ff e9 4e f6 ff ff e8 fe ae 31 ff 48 c7 c1 00 fc c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 c0 03 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 d3 ae 31 ff 48 8b 95 08 ff ff ff [ 725.801749][ T5828] RSP: 0018:ffffc900047df468 EFLAGS: 00010286 [ 725.807857][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00e9 [ 725.815850][ T5828] RDX: ffff888031e10000 RSI: ffffffff82884f81 RDI: 0000000000000005 [ 725.823847][ T5828] RBP: ffffc900047df5c8 R08: 0000000000000005 R09: 0000000000000000 [ 725.831864][ T5828] R10: 0000000080000000 R11: 0000000000000001 R12: ffff888029ba8000 [ 725.839890][ T5828] R13: ffff88804a4392a4 R14: ffff888077179f48 R15: ffff888077179f48 [ 725.847908][ T5828] ? __wake_up_klogd.part.0+0x99/0xf0 [ 725.853323][ T5828] ? __ext4_warning+0x1a1/0x210 [ 725.858230][ T5828] ? ext4_xattr_inode_lookup_create+0x118d/0x1950 [ 725.864707][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.870479][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.876154][ T5828] ? find_held_lock+0x2b/0x80 [ 725.880888][ T5828] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 725.887549][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.893226][ T5828] ? const_folio_flags+0x5b/0x100 [ 725.898287][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.903986][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.909661][ T5828] ? __lock_acquire+0xb8a/0x1c90 [ 725.914658][ T5828] ext4_xattr_block_set+0x818/0x3650 [ 725.920001][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.925691][ T5828] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 725.931469][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.937136][ T5828] ? check_xattrs+0x10a/0xba0 [ 725.941863][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.947622][ T5828] ? xattr_find_entry+0x2c9/0x3a0 [ 725.952699][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.958363][ T5828] ? ext4_xattr_block_find+0x59/0x430 [ 725.963790][ T5828] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 725.969746][ T5828] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 725.976034][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.981701][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.987364][ T5828] ? dquot_initialize_needed+0x183/0x2a0 [ 725.993040][ T5828] __ext4_expand_extra_isize+0x346/0x480 [ 725.998742][ T5828] __ext4_mark_inode_dirty+0x544/0x870 [ 726.004252][ T5828] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 726.010305][ T5828] ? __pfx___might_resched+0x10/0x10 [ 726.015662][ T5828] ? ext4_journal_check_start+0x22b/0x340 [ 726.021424][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.027091][ T5828] ? __ext4_journal_start_sb+0x19e/0x690 [ 726.032762][ T5828] ? ext4_dirty_inode+0xa1/0x130 [ 726.037743][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.043416][ T5828] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 726.048827][ T5828] ext4_dirty_inode+0xd9/0x130 [ 726.053629][ T5828] ? rcu_is_watching+0x12/0xc0 [ 726.058431][ T5828] __mark_inode_dirty+0x1ee/0xe50 [ 726.063510][ T5828] iput+0xb7/0x880 [ 726.067281][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.072952][ T5828] dentry_unlink_inode+0x29c/0x480 [ 726.078106][ T5828] __dentry_kill+0x1d0/0x600 [ 726.082739][ T5828] ? shrink_dentry_list+0x11a/0x5d0 [ 726.087989][ T5828] shrink_dentry_list+0x140/0x5d0 [ 726.093099][ T5828] ? shrink_dcache_parent+0x22/0x530 [ 726.098432][ T5828] shrink_dcache_parent+0xe1/0x530 [ 726.103602][ T5828] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 726.109419][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.115094][ T5828] shrink_dcache_for_umount+0xa5/0x3e0 [ 726.120578][ T5828] ? lockdep_hardirqs_on+0x7c/0x110 [ 726.125834][ T5828] generic_shutdown_super+0x6c/0x390 [ 726.131204][ T5828] kill_block_super+0x3b/0x90 [ 726.135933][ T5828] ext4_kill_sb+0x6a/0xb0 [ 726.140291][ T5828] deactivate_locked_super+0xc1/0x1a0 [ 726.145694][ T5828] deactivate_super+0xde/0x100 [ 726.150486][ T5828] cleanup_mnt+0x225/0x450 [ 726.154939][ T5828] task_work_run+0x150/0x240 [ 726.159573][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 726.164715][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.170384][ T5828] ? __pfx___x64_sys_umount+0x10/0x10 [ 726.175807][ T5828] exit_to_user_mode_loop+0xeb/0x110 [ 726.181135][ T5828] do_syscall_64+0x3f6/0x4c0 [ 726.185785][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.191704][ T5828] RIP: 0033:0x7fbe1d58fc57 [ 726.196139][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 726.215786][ T5828] RSP: 002b:00007ffcfb7f8c58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.224240][ T5828] RAX: 0000000000000000 RBX: 00007fbe1d610925 RCX: 00007fbe1d58fc57 [ 726.232234][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcfb7f8d10 [ 726.240223][ T5828] RBP: 00007ffcfb7f8d10 R08: 0000000000000000 R09: 0000000000000000 [ 726.248215][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcfb7f9da0 [ 726.256209][ T5828] R13: 00007fbe1d610925 R14: 00000000000b0f4e R15: 00007ffcfb7f9de0 [ 726.264222][ T5828] [ 726.267522][ T5828] Kernel Offset: disabled [ 726.271859][ T5828] Rebooting in 86400 seconds..