last executing test programs: 1m52.080929434s ago: executing program 4 (id=56): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f00000010c0)=""/4111, 0x100f}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xb, 0x0, 0x0, 0xb00}, 0x40d40b70}], 0x1, 0x0, 0x0) 1m51.691167708s ago: executing program 4 (id=59): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 1m51.261470648s ago: executing program 4 (id=60): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getpriority(0x2, 0xffffffffffffffff) 1m50.95633809s ago: executing program 4 (id=62): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m50.238379983s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 1m49.400794518s ago: executing program 4 (id=73): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc8, &(0x7f0000000440)={[{}, {0xbd, 0x4e00, "9d38e6393818d30302c87efcfde3493edacd69e582c3b9c19d6dd5a62aaa0bd5890f96f98fddb77510ce533f415d6a59d3f10f9296544db0ab379a82b67744dad0468cf58339c7c520ecfd4b3f6d91f7df06f2f1c951ec97e8e03cdbd4887fd9994f41ae4854f29662b67ce05f57d195fe6c3bf16be1cf95505ac1a555abb7390844f3b1b83dedb3c4961153d4bff735fa37f5ed5be8ce3a8762e51f16bad2634c1db38714f2c020aaed3275c2b0ed7cf19567ce3b76435647d69f1456"}]}) 1m48.969814615s ago: executing program 32 (id=73): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc8, &(0x7f0000000440)={[{}, {0xbd, 0x4e00, "9d38e6393818d30302c87efcfde3493edacd69e582c3b9c19d6dd5a62aaa0bd5890f96f98fddb77510ce533f415d6a59d3f10f9296544db0ab379a82b67744dad0468cf58339c7c520ecfd4b3f6d91f7df06f2f1c951ec97e8e03cdbd4887fd9994f41ae4854f29662b67ce05f57d195fe6c3bf16be1cf95505ac1a555abb7390844f3b1b83dedb3c4961153d4bff735fa37f5ed5be8ce3a8762e51f16bad2634c1db38714f2c020aaed3275c2b0ed7cf19567ce3b76435647d69f1456"}]}) 1m5.02304463s ago: executing program 0 (id=314): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x80000000}) 1m4.829570868s ago: executing program 0 (id=315): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) 1m2.39271551s ago: executing program 0 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 1m2.045437849s ago: executing program 0 (id=323): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$eJzs3c1rXNfdB/DvHcmyxgZHeWI7fkogIoa0VNTWC0qrbuqWUlQIJaSLroUtY+Gxk0pKUUJp1De67SJ/QLrQrqtCN4WCIV23u2y1DBS6yUpdTbl37oxGtjwdxZJGTj8fc+ecM+fec3/nN/dlZoyYAP+zlmcy/qhoZ3nmza2yvbuz0NrdWXjQrSc5n6SRjHeKFA+T4pPkVjpL/r98sh6ueNp+PlpbevvTz3c/67TG66VavzFou+Fs10umk4zV5XGNd/uZxyt6MywTdr2bOBi1c0naB/z06n7PYBee+bwFzoKic9/saddn9lR1mmeyfh/QuSt27tnPte1RBwAAAACn4IW97GUrl0YdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxP6t//r371f7L3VIrpFN3f/5/o9ie5OMJQB5sYbrVHjZMOBAAAAAAAAABO3qt72ctWLnXb7SKNJK9VjcvV48W8l42sZj03spWVbGYz65lLMtU30MTWyubm+twQW84fuuX8kAE3n33OAAAAAAAAAPAl9Kss7///PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAVFMtYpquVytz6VxniSySQT5XrbyT+69efZo1EHAAAAAKfghb3sZSuXuu12UX3mv1p97p/Me3mYzaxlM62s5k71XUDnU39jd2ehtbuz8KBcnhz3u/86UhjViOl893D4nq9VazRzN2vVMzdyO++klTtpVFuWrnXjOTyuX5YxFd+pDRnZnbosZ/77ujx5Y0OsM1Vl5FwvI7N1bGU2XhyciYOvzvZR9zSXRu+bn8snkPMLdVkkF394ajkfRp2JV1NnYr7v6Ls6OBPJV//8x5/caz28f+/uxszZmdIRnG+3293648fEQl8mXv7SZ6LfbJWJK732cn6QH2cm03kr61nLz7KSzaxmOt+vaiv18Vw+Tg3O1K0Drbeqx+bTI5moX5fO1eNoMb1WbXspa/lR3smdrOaN6t985vLNLGYxS32v8JUhzvrG0c7661+rK+UEfzd4oqeszOuLdV4/TA5cc6eqvv5n9rOUIsd9bRz/Sl0p9/HrujwbHs/EXF8mXhp8vPyhuqxstB7eX7+38u6Q+3u9Lsvz6Ldn6i5RHi//V75YVevg0VH2vXRo31zVd7nX13ii70qv77+dqRP1e7gnR5qv+l4+tG+h6rvW13fY+y0AzrwLX78w0fxn8+/Nj5u/ad5rvjn5vfPfOv/KRM797dy3x2fHXm+8UvwpH+cX+5//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL27j/Q/ur7Raq+uPVdrt9odP6fqilbEcZau//uU49979PaJjnM7xViaPsnL7bMR8lMq/2+32sQy4PeCgPbZKu3YmUjeiyogvTMCJu7n54N2bG+9/8I217i1ycXFpdmnxjYWbd9daq7OdxxEHCZyI/Zv+qCMBAAAAAAAAAAAAhnUaf04w6jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7flmYw/SpG52RuzZXt3Z6FVLt36/prjSRpJip8nxSfJrXSWTPUNVzxtPx+tLb396ee7n+2PNd5dvzFou+Fs10umk4zV5XGNd/uZxyt6MywTdr2bOBi1/wQAAP//xjcQsA==") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002180), &(0x7f0000002080)='./file1\x00', 0x80b4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) 1m1.539695664s ago: executing program 0 (id=328): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 1m1.000806249s ago: executing program 0 (id=331): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) 1m0.492240405s ago: executing program 33 (id=331): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) 51.066237139s ago: executing program 2 (id=394): r0 = socket$igmp6(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) 50.84505772s ago: executing program 2 (id=396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 50.718174013s ago: executing program 2 (id=397): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 50.287910576s ago: executing program 2 (id=401): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x189000, 0x1) 49.890927179s ago: executing program 2 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x18ccf0, 0x0) 49.055795629s ago: executing program 2 (id=409): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 48.175190642s ago: executing program 34 (id=409): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 3.836256352s ago: executing program 3 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 3.562715727s ago: executing program 3 (id=718): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008018, &(0x7f0000001a00)=ANY=[], 0x5, 0x1f5, &(0x7f0000001000)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x1802, 0x0) 2.774357408s ago: executing program 3 (id=722): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.773711904s ago: executing program 1 (id=723): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x4, 0x966a, 0x2000, 0x4, 0x0, 0xa, 0x2401}) 2.594869959s ago: executing program 6 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0) 2.560858739s ago: executing program 3 (id=725): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x20200) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 2.305909565s ago: executing program 1 (id=726): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r0, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r0, 0x0, 0x0) 2.287299524s ago: executing program 6 (id=727): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) 2.21263181s ago: executing program 3 (id=728): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}, {@inode64}, {@nogrpid}, {@inode32}, {@nouuid}, {@swalloc}, {@pqnoenforce}, {@pqnoenforce}]}, 0x1, 0x9718, &(0x7f0000009800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) 1.968912804s ago: executing program 6 (id=730): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) 1.839752457s ago: executing program 1 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.644758035s ago: executing program 1 (id=733): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r1, 0xe}}, 0x10) 1.439896411s ago: executing program 5 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.345769654s ago: executing program 1 (id=736): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) ioctl$SNAPSHOT_FREE(r0, 0x3305) 1.298878137s ago: executing program 6 (id=737): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x64000080) 1.214341524s ago: executing program 7 (id=738): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) 1.124536377s ago: executing program 5 (id=739): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000280), 0xf9ba, 0x342c00) tee(r0, r0, 0x9, 0xb) 984.975148ms ago: executing program 7 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getnexthop={0x1c, 0x6a, 0x101, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 888.975072ms ago: executing program 7 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 818.80811ms ago: executing program 6 (id=742): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) 795.927372ms ago: executing program 5 (id=743): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2, 0x6f3}}, 0x1}, 0x90) 749.307137ms ago: executing program 1 (id=744): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 564.810558ms ago: executing program 5 (id=745): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 564.628213ms ago: executing program 7 (id=746): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/bus/input/devices\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f0000001980)=""/4096, 0x1000) lseek(r0, 0x10000400000009, 0x0) 391.729555ms ago: executing program 3 (id=747): syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$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") lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 370.005704ms ago: executing program 5 (id=748): unshare(0x22020400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x8, 0x401, 0x3) 316.730812ms ago: executing program 6 (id=749): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000001400), 0x4) 179.087695ms ago: executing program 7 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000c0002"], 0x34}}, 0x0) 3.1134ms ago: executing program 7 (id=751): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) write$binfmt_aout(r0, &(0x7f0000000e40)={{0x108, 0x1, 0xa, 0xf9, 0x248, 0x6, 0x30d, 0x2}}, 0x20) 0s ago: executing program 5 (id=752): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.1.124'. [ 125.890227][ T6434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.333131][ T6418] loop0: detected capacity change from 0 to 32768 [ 126.496379][ T1210] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.748047][ T1210] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.779353][ T1210] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.798457][ T1210] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.808861][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.826089][ T1210] usb 2-1: Product: syz [ 126.830384][ T1210] usb 2-1: Manufacturer: syz [ 126.835013][ T1210] usb 2-1: SerialNumber: syz [ 126.848847][ T1210] usb 2-1: config 0 descriptor?? [ 126.864759][ T1210] usb 2-1: selecting invalid altsetting 0 [ 126.941491][ T6468] loop2: detected capacity change from 0 to 512 [ 126.944641][ T6225] veth0_vlan: entered promiscuous mode [ 126.971057][ T6418] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 126.971083][ T6418] allowing incompatible features above 0.0: (unknown version) [ 126.971096][ T6418] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 127.009238][ T6225] veth1_vlan: entered promiscuous mode [ 127.044292][ T6468] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.130: iget: bad i_size value: 38620345925642 [ 127.060127][ T6468] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.130: couldn't read orphan inode 15 (err -117) [ 127.105593][ T6468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.109989][ T1210] usb 2-1: USB disconnect, device number 2 [ 127.140082][ T6225] veth0_macvtap: entered promiscuous mode [ 127.143952][ T6225] veth1_macvtap: entered promiscuous mode [ 127.198544][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.244677][ T6468] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.130: bg 0: block 5: invalid block bitmap [ 127.278688][ T6418] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 127.340383][ T6468] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 55 with error 28 [ 127.359249][ T6220] udevd[6220]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.360776][ T6418] bcachefs (loop0): initializing new filesystem [ 127.389361][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.406094][ T6468] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.406094][ T6468] [ 127.442629][ T1108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.446228][ T6468] EXT4-fs (loop2): Total free blocks count 0 [ 127.465650][ T6418] bcachefs (loop0): going read-write [ 127.486097][ T6468] EXT4-fs (loop2): Free/Dirty block details [ 127.488493][ T1108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.502354][ T6468] EXT4-fs (loop2): free_blocks=0 [ 127.502405][ T6468] EXT4-fs (loop2): dirty_blocks=55 [ 127.502421][ T6468] EXT4-fs (loop2): Block reservation details [ 127.502435][ T6468] EXT4-fs (loop2): i_reserved_data_blocks=55 [ 127.574520][ T1108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.590006][ T6418] bcachefs (loop0): marking superblocks [ 127.618946][ T6418] bcachefs (loop0): initializing freespace [ 127.629724][ T1108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.650858][ T6418] bcachefs (loop0): done initializing freespace [ 127.671785][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.688243][ T6418] bcachefs (loop0): reading snapshots table [ 127.716070][ T6418] bcachefs (loop0): reading snapshots done [ 127.828809][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.857393][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.970275][ T6418] bcachefs (loop0): loop0: Superblock write was silently dropped! (seq 0 expected 42) [ 128.001248][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.049089][ T6418] bcachefs (loop0): done starting filesystem [ 128.085905][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.459525][ T5839] bcachefs (loop0): shutting down [ 128.464611][ T5839] bcachefs (loop0): going read-only [ 128.525275][ T5839] bcachefs (loop0): finished waiting for writes to stop [ 128.626097][ T5839] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 128.797332][ T5839] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 128.836647][ T5839] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 128.862262][ T6508] loop2: detected capacity change from 0 to 1024 [ 128.886754][ T5839] bcachefs (loop0): marking filesystem clean [ 129.012653][ T6508] hfsplus: bad catalog entry type [ 129.057499][ T5839] bcachefs (loop0): shutdown complete [ 129.136193][ T5842] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 129.178414][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 129.310824][ T6485] loop3: detected capacity change from 0 to 40427 [ 129.326679][ T5842] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 129.363584][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.388566][ T6485] F2FS-fs (loop3): invalid crc value [ 129.399328][ T5842] usb 2-1: Product: syz [ 129.426080][ T5842] usb 2-1: Manufacturer: syz [ 129.430725][ T5842] usb 2-1: SerialNumber: syz [ 129.448461][ T5842] usb 2-1: config 0 descriptor?? [ 129.754378][ T6485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 129.826986][ T6505] loop5: detected capacity change from 0 to 40427 [ 129.866112][ T6505] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 129.866437][ T5842] airspy 2-1:0.0: Board ID: 00 [ 129.885937][ T6505] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 129.904737][ T5842] airspy 2-1:0.0: Firmware version: [ 130.067398][ T5840] syz-executor: attempt to access beyond end of device [ 130.067398][ T5840] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.088208][ T5842] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 130.122902][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 130.122930][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.122942][ T5840] Call Trace: [ 130.122950][ T5840] [ 130.122958][ T5840] dump_stack_lvl+0x189/0x250 [ 130.122996][ T5840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.123024][ T5840] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 130.123053][ T5840] ? __pfx_queue_work_on+0x10/0x10 [ 130.123082][ T5840] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.123110][ T5840] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.123140][ T5840] ? f2fs_hw_is_readonly+0x39b/0x470 [ 130.123170][ T5840] f2fs_handle_critical_error+0x37c/0x540 [ 130.123202][ T5840] f2fs_write_end_io+0x495/0x810 [ 130.123229][ T5840] ? blkg_put+0x22/0x240 [ 130.123268][ T5840] __submit_merged_bio+0x27a/0x6a0 [ 130.123301][ T5840] __submit_merged_write_cond+0x255/0x530 [ 130.123333][ T5840] f2fs_write_data_pages+0x261d/0x3000 [ 130.123359][ T5840] ? __lock_acquire+0xab9/0xd20 [ 130.123437][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.123512][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.123554][ T5840] ? folios_put_refs+0x560/0x640 [ 130.123593][ T5840] ? __lock_acquire+0xab9/0xd20 [ 130.123637][ T5840] ? do_raw_spin_lock+0x121/0x290 [ 130.123682][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 130.123721][ T5840] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.123751][ T5840] do_writepages+0x32e/0x550 [ 130.123793][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 130.123818][ T5840] filemap_fdatawrite+0x199/0x240 [ 130.123848][ T5840] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 130.123925][ T5840] ? do_raw_spin_unlock+0x122/0x240 [ 130.123950][ T5840] f2fs_sync_dirty_inodes+0x31f/0x830 [ 130.123999][ T5840] f2fs_write_checkpoint+0x95a/0x1df0 [ 130.124055][ T5840] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 130.124125][ T5840] ? try_to_wake_up+0x7e5/0x1290 [ 130.124153][ T5840] ? kill_f2fs_super+0x298/0x6c0 [ 130.124189][ T5840] kill_f2fs_super+0x2c3/0x6c0 [ 130.124226][ T5840] ? __pfx_kill_f2fs_super+0x10/0x10 [ 130.124253][ T5840] ? radix_tree_delete_item+0x2b6/0x400 [ 130.124290][ T5840] ? shrinker_free+0x2ce/0x3e0 [ 130.124317][ T5840] deactivate_locked_super+0xbc/0x130 [ 130.124346][ T5840] cleanup_mnt+0x425/0x4c0 [ 130.124371][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.124405][ T5840] task_work_run+0x1d1/0x260 [ 130.124430][ T5840] ? __pfx_task_work_run+0x10/0x10 [ 130.124449][ T5840] ? __x64_sys_umount+0x122/0x160 [ 130.124484][ T5840] ? exit_to_user_mode_loop+0x40/0x110 [ 130.124514][ T5840] exit_to_user_mode_loop+0xec/0x110 [ 130.124540][ T5840] do_syscall_64+0x2bd/0x3b0 [ 130.124558][ T5840] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.124588][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.124609][ T5840] ? clear_bhb_loop+0x60/0xb0 [ 130.124642][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.124661][ T5840] RIP: 0033:0x7f3a6518fc57 [ 130.124681][ T5840] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 130.124697][ T5840] RSP: 002b:00007ffde436d8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 130.124718][ T5840] RAX: 0000000000000000 RBX: 00007f3a65210925 RCX: 00007f3a6518fc57 [ 130.124732][ T5840] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde436d960 [ 130.124744][ T5840] RBP: 00007ffde436d960 R08: 0000000000000000 R09: 0000000000000000 [ 130.124756][ T5840] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde436e9f0 [ 130.124769][ T5840] R13: 00007f3a65210925 R14: 000000000001fb6b R15: 00007ffde436ea30 [ 130.124802][ T5840] [ 130.124811][ T5840] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 130.337380][ T6505] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 130.341554][ T5842] airspy 2-1:0.0: Registered as swradio24 [ 130.358514][ T6505] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.361407][ T5842] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 130.476158][ T6513] loop2: detected capacity change from 0 to 32768 [ 130.483170][ T5842] usb 2-1: USB disconnect, device number 3 [ 130.667365][ T6225] syz-executor: attempt to access beyond end of device [ 130.667365][ T6225] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.715477][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 130.715507][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.715520][ T6225] Call Trace: [ 130.715528][ T6225] [ 130.715537][ T6225] dump_stack_lvl+0x189/0x250 [ 130.715586][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.715614][ T6225] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 130.715644][ T6225] ? __pfx_queue_work_on+0x10/0x10 [ 130.715675][ T6225] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.715704][ T6225] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.715734][ T6225] ? f2fs_hw_is_readonly+0x39b/0x470 [ 130.715766][ T6225] f2fs_handle_critical_error+0x37c/0x540 [ 130.715803][ T6225] f2fs_write_end_io+0x495/0x810 [ 130.715831][ T6225] ? blkg_put+0x22/0x240 [ 130.715872][ T6225] __submit_merged_bio+0x27a/0x6a0 [ 130.715905][ T6225] __submit_merged_write_cond+0x255/0x530 [ 130.715939][ T6225] f2fs_write_data_pages+0x261d/0x3000 [ 130.716004][ T6225] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.716046][ T6225] ? arch_stack_walk+0xfc/0x150 [ 130.716106][ T6225] ? __mod_zone_page_state+0xd7/0x140 [ 130.716148][ T6225] ? folios_put_refs+0x560/0x640 [ 130.716183][ T6225] ? __pfx_folios_put_refs+0x10/0x10 [ 130.716206][ T6225] ? rcu_is_watching+0x15/0xb0 [ 130.716244][ T6225] ? __lock_acquire+0xab9/0xd20 [ 130.716286][ T6225] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 130.716317][ T6225] do_writepages+0x32e/0x550 [ 130.716359][ T6225] ? do_raw_spin_unlock+0x122/0x240 [ 130.716385][ T6225] filemap_fdatawrite+0x199/0x240 [ 130.716415][ T6225] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 130.716496][ T6225] ? do_raw_spin_unlock+0x122/0x240 [ 130.716522][ T6225] f2fs_sync_dirty_inodes+0x31f/0x830 [ 130.716575][ T6225] f2fs_write_checkpoint+0x95a/0x1df0 [ 130.716633][ T6225] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 130.716709][ T6225] ? call_rcu+0x6ff/0x9c0 [ 130.716737][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.716767][ T6225] ? kill_f2fs_super+0x298/0x6c0 [ 130.716803][ T6225] kill_f2fs_super+0x2c3/0x6c0 [ 130.716841][ T6225] ? __pfx_kill_f2fs_super+0x10/0x10 [ 130.716869][ T6225] ? radix_tree_delete_item+0x2b6/0x400 [ 130.716907][ T6225] ? shrinker_free+0x2ce/0x3e0 [ 130.716934][ T6225] deactivate_locked_super+0xbc/0x130 [ 130.716964][ T6225] cleanup_mnt+0x425/0x4c0 [ 130.716990][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.717023][ T6225] task_work_run+0x1d1/0x260 [ 130.717049][ T6225] ? __pfx_task_work_run+0x10/0x10 [ 130.717068][ T6225] ? __x64_sys_umount+0x122/0x160 [ 130.717104][ T6225] ? exit_to_user_mode_loop+0x40/0x110 [ 130.717133][ T6225] exit_to_user_mode_loop+0xec/0x110 [ 130.717158][ T6225] do_syscall_64+0x2bd/0x3b0 [ 130.717176][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.717206][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.717226][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 130.717261][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.717276][ T6225] RIP: 0033:0x7faa2298fc57 [ 130.717291][ T6225] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 130.717304][ T6225] RSP: 002b:00007ffdcc6845d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 130.717321][ T6225] RAX: 0000000000000000 RBX: 00007faa22a10925 RCX: 00007faa2298fc57 [ 130.717332][ T6225] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcc684690 [ 130.717341][ T6225] RBP: 00007ffdcc684690 R08: 0000000000000000 R09: 0000000000000000 [ 130.717351][ T6225] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdcc685720 [ 130.717361][ T6225] R13: 00007faa22a10925 R14: 000000000001fe11 R15: 00007ffdcc685760 [ 130.717386][ T6225] [ 131.088843][ T6513] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.154869][ T6225] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 131.387193][ T6513] XFS (loop2): Ending clean mount [ 131.449838][ T6545] loop1: detected capacity change from 0 to 64 [ 131.673383][ T5836] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.654418][ T6571] loop5: detected capacity change from 0 to 512 [ 132.716954][ T6571] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 132.736142][ T6570] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 132.869616][ T6571] EXT4-fs (loop5): 1 truncate cleaned up [ 132.937556][ T6571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.017778][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.024431][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.187846][ T5842] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.227288][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.261174][ T6585] loop1: detected capacity change from 0 to 4096 [ 133.367344][ T6592] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.369114][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 133.480695][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 133.510305][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 133.530428][ T6597] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 133.579729][ T5842] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 133.609920][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.638976][ T6597] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 133.667349][ T5842] usb 4-1: Product: syz [ 133.688798][ T6597] Remounting filesystem read-only [ 133.692749][ T5842] usb 4-1: Manufacturer: syz [ 133.704107][ T6597] NILFS (loop1): error -5 truncating bmap (ino=12) [ 133.719768][ T5842] usb 4-1: SerialNumber: syz [ 133.757294][ T5842] usb 4-1: config 0 descriptor?? [ 133.763578][ T6580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.792832][ T6580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.826799][ T5842] usb 4-1: ucan: probing device on interface #0 [ 133.863441][ T5846] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 134.318295][ T6613] loop2: detected capacity change from 0 to 64 [ 134.377302][ T6588] loop0: detected capacity change from 0 to 32768 [ 134.471213][ T5842] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 134.497936][ T6588] read_mapping_page failed! [ 134.502654][ T6588] ERROR: (device loop0): txCommit: [ 134.502654][ T6588] [ 134.539657][ T30] audit: type=1800 audit(2000000000.410:10): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.161" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 134.547679][ T5842] usb 4-1: USB disconnect, device number 5 [ 134.635959][ T6588] ERROR: (device loop0): remounting filesystem as read-only [ 134.851376][ T6595] loop5: detected capacity change from 0 to 32768 [ 134.904417][ T6595] JBD2: Ignoring recovery information on journal [ 134.915171][ T6621] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.040630][ T6595] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 135.176607][ T6595] (syz.5.156,6595,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 135.235919][ T6595] (syz.5.156,6595,0):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 17179869184 from the device. [ 135.378053][ T6225] ocfs2: Unmounting device (7,5) on (node local) [ 135.548533][ T6637] loop3: detected capacity change from 0 to 512 [ 135.588704][ T6637] EXT4-fs: Ignoring removed bh option [ 135.602151][ T6637] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 135.658562][ T6639] netlink: 'syz.5.170': attribute type 2 has an invalid length. [ 135.701058][ T6637] EXT4-fs (loop3): 1 truncate cleaned up [ 135.710371][ T6642] Bluetooth: MGMT ver 1.23 [ 135.752923][ T6637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.071150][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.281562][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.0.180'. [ 136.501034][ T6669] loop2: detected capacity change from 0 to 512 [ 136.575213][ T6672] loop3: detected capacity change from 0 to 128 [ 136.588872][ T6669] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.633188][ T6669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 136.670290][ T6672] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 136.694080][ T6669] EXT4-fs error (device loop2): ext4_iget_extra_inode:5034: inode #15: comm syz.2.182: corrupted in-inode xattr: e_value size too large [ 136.711932][ T6669] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.182: couldn't read orphan inode 15 (err -117) [ 136.764080][ T6669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.776504][ T6672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.970190][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.154410][ T6685] loop3: detected capacity change from 0 to 256 [ 137.283218][ T6685] FAT-fs (loop3): Directory bread(block 64) failed [ 137.308514][ T6692] loop0: detected capacity change from 0 to 1024 [ 137.345107][ T6685] FAT-fs (loop3): Directory bread(block 65) failed [ 137.388871][ T6685] FAT-fs (loop3): Directory bread(block 66) failed [ 137.393707][ T6692] hfsplus: found bad thread record in catalog [ 137.395437][ T6685] FAT-fs (loop3): Directory bread(block 67) failed [ 137.418555][ T6685] FAT-fs (loop3): Directory bread(block 68) failed [ 137.449142][ T6685] FAT-fs (loop3): Directory bread(block 69) failed [ 137.469355][ T6655] loop1: detected capacity change from 0 to 32768 [ 137.483939][ T6685] FAT-fs (loop3): Directory bread(block 70) failed [ 137.526345][ T6685] FAT-fs (loop3): Directory bread(block 71) failed [ 137.547401][ T6685] FAT-fs (loop3): Directory bread(block 72) failed [ 137.553989][ T6685] FAT-fs (loop3): Directory bread(block 73) failed [ 137.589812][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 138.154338][ T6714] tipc: Started in network mode [ 138.166248][ T6714] tipc: Node identity , cluster identity 4711 [ 138.700575][ T6721] loop3: detected capacity change from 0 to 4096 [ 138.790414][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.205'. [ 138.825215][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.205'. [ 138.915952][ T6721] ntfs3(loop3): ino=b, mi_enum_attr [ 138.921538][ T6721] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 138.971138][ T6721] ntfs3(loop3): Failed to load $Extend (-22). [ 139.005991][ T6721] ntfs3(loop3): Failed to initialize $Extend. [ 139.075360][ T6721] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 139.743724][ T6725] loop0: detected capacity change from 0 to 32768 [ 139.764603][ T6702] loop2: detected capacity change from 0 to 32768 [ 139.821163][ T6725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.202 (6725) [ 139.889126][ T6702] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 139.909451][ T6702] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 139.931550][ T6725] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.965275][ T6735] loop1: detected capacity change from 0 to 32768 [ 140.004811][ T6725] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 140.032323][ T6735] BTRFS info: device /dev/loop1 (7:1) using temp-fsid bf80c086-8849-4f10-af68-88d93dcb9324 [ 140.054099][ T6725] BTRFS info (device loop0): using free-space-tree [ 140.076229][ T6735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.206 (6735) [ 140.154232][ T6702] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 140.189676][ T6764] loop5: detected capacity change from 0 to 64 [ 140.209412][ T6735] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.246223][ T5842] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 140.253188][ T5842] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 140.273981][ T6735] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 140.374933][ T6735] BTRFS info (device loop1): using free-space-tree [ 140.439310][ T5842] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 186ms [ 140.524613][ T5842] gfs2: fsid=syz:syz.0: jid=0: Done [ 140.605571][ T6702] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 140.876713][ T6735] fs-verity: sha256 using implementation "sha256-x86_64" [ 140.912546][ T5839] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.972129][ T6735] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 141.403865][ T5846] BTRFS info (device loop1): last unmount of filesystem bf80c086-8849-4f10-af68-88d93dcb9324 [ 141.739874][ T6828] loop3: detected capacity change from 0 to 16 [ 141.792405][ T6828] erofs (device loop3): mounted with root inode @ nid 36. [ 141.987519][ T6832] loop2: detected capacity change from 0 to 256 [ 142.046617][ T6836] netlink: 56 bytes leftover after parsing attributes in process `syz.5.225'. [ 142.098176][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.225'. [ 142.184756][ T6832] FAT-fs (loop2): Directory bread(block 64) failed [ 142.234932][ T6832] FAT-fs (loop2): Directory bread(block 65) failed [ 142.279345][ T6832] FAT-fs (loop2): Directory bread(block 66) failed [ 142.319199][ T6832] FAT-fs (loop2): Directory bread(block 67) failed [ 142.355639][ T6832] FAT-fs (loop2): Directory bread(block 68) failed [ 142.426466][ T6832] FAT-fs (loop2): Directory bread(block 69) failed [ 142.461138][ T6828] erofs (device loop3): invalid de[0].nameoff 0 @ nid 36 [ 142.506462][ T6832] FAT-fs (loop2): Directory bread(block 70) failed [ 142.554001][ T6832] FAT-fs (loop2): Directory bread(block 71) failed [ 142.617293][ T6832] FAT-fs (loop2): Directory bread(block 72) failed [ 142.675962][ T6832] FAT-fs (loop2): Directory bread(block 73) failed [ 143.469188][ T6829] loop1: detected capacity change from 0 to 32768 [ 144.024187][ T6829] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 144.024214][ T6829] allowing incompatible features above 0.0: (unknown version) [ 144.024227][ T6829] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 144.208041][ T6829] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 144.232228][ T6829] bcachefs (loop1): initializing new filesystem [ 144.292007][ T6829] bcachefs (loop1): going read-write [ 144.295189][ T6847] loop3: detected capacity change from 0 to 32768 [ 144.381003][ T6829] bcachefs (loop1): marking superblocks [ 144.439159][ T6829] bcachefs (loop1): initializing freespace [ 144.496846][ T6829] bcachefs (loop1): done initializing freespace [ 144.565289][ T6829] bcachefs (loop1): reading snapshots table [ 144.615667][ T6829] bcachefs (loop1): reading snapshots done [ 144.709087][ T6908] loop0: detected capacity change from 0 to 4096 [ 144.775746][ T6829] bcachefs (loop1): done starting filesystem [ 144.838693][ T6915] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.906998][ T6918] loop2: detected capacity change from 0 to 64 [ 145.040362][ T5846] bcachefs (loop1): shutting down [ 145.054309][ T5846] bcachefs (loop1): going read-only [ 145.070886][ T5846] bcachefs (loop1): finished waiting for writes to stop [ 145.164287][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 145.345227][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 145.452792][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 145.474732][ T5846] bcachefs (loop1): marking filesystem clean [ 145.635262][ T5846] bcachefs (loop1): shutdown complete [ 145.725907][ T5824] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.905913][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 145.927358][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.970987][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.015859][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 146.055993][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.102551][ T5824] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 146.115563][ T6951] loop0: detected capacity change from 0 to 1024 [ 146.128323][ T5824] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.145871][ T5824] usb 3-1: Manufacturer: syz [ 146.180486][ T5824] usb 3-1: config 0 descriptor?? [ 146.240895][ T6956] loop3: detected capacity change from 0 to 512 [ 146.331321][ T1108] hfsplus: b-tree write err: -5, ino 4 [ 146.419248][ T6956] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.261: corrupted xattr block 95: invalid header [ 146.453787][ T6956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.261: bg 0: block 7: invalid block bitmap [ 146.532892][ T6956] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 146.615960][ T6956] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.261: corrupted xattr block 95: invalid header [ 146.666925][ T5824] rc_core: IR keymap rc-hauppauge not found [ 146.674917][ T6956] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 146.708495][ T5824] Registered IR keymap rc-empty [ 146.714414][ T6956] EXT4-fs (loop3): 1 orphan inode deleted [ 146.728271][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 146.747106][ T6956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.778389][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 146.826324][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.866468][ T6956] EXT4-fs: journaled quota format not specified [ 146.883609][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 146.960075][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.005190][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.064050][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.066924][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.122815][ T6970] loop2: detected capacity change from 0 to 8 [ 147.144381][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.198158][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.255892][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.299793][ T6970] SQUASHFS error: Unable to read directory block [629:46] [ 147.326880][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.395054][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.464868][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.507563][ T5824] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 147.574102][ T6963] loop0: detected capacity change from 0 to 32768 [ 147.601639][ T5824] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 147.631607][ T5824] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 147.649783][ T6963] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.652933][ T5824] usb 3-1: USB disconnect, device number 2 [ 147.757506][ T6992] netlink: 216 bytes leftover after parsing attributes in process `syz.3.268'. [ 147.766706][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.3.268'. [ 147.778883][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 147.840906][ T6963] XFS (loop0): Ending clean mount [ 148.136281][ T5839] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.285879][ T5824] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.488115][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.545902][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.615999][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.707862][ T5824] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.766669][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.811297][ T5824] usb 3-1: config 0 descriptor?? [ 148.874898][ T7013] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 148.901380][ T6978] loop5: detected capacity change from 0 to 32768 [ 148.913417][ T5202] udevd[5202]: worker [5857] terminated by signal 33 (Unknown signal 33) [ 148.936216][ T6978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.266 (6978) [ 148.940412][ T5202] udevd[5202]: worker [5857] failed while handling '/devices/virtual/block/loop0' [ 149.019926][ T6978] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.036191][ T5952] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.053286][ T6978] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 149.105738][ T6978] BTRFS info (device loop5): using free-space-tree [ 149.227047][ T5952] usb 4-1: Using ep0 maxpacket: 16 [ 149.255051][ T5952] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 149.295003][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.352401][ T5824] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 149.373318][ T5824] plantronics 0003:047F:FFFF.0002: parse failed [ 149.385185][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.385958][ T5824] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 149.431263][ T6978] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 149.457042][ T5952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 149.511601][ T5952] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 149.533437][ T7037] loop1: detected capacity change from 0 to 2048 [ 149.558419][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.611353][ T5952] usb 4-1: config 0 descriptor?? [ 149.640195][ T24] usb 3-1: USB disconnect, device number 3 [ 149.671024][ T7042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.685169][ T6225] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.831339][ T7037] overlayfs: upper fs does not support tmpfile. [ 149.896891][ T7037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.936435][ T7037] overlayfs: failed to set xattr on upper [ 149.942213][ T7037] overlayfs: ...falling back to redirect_dir=nofollow. [ 149.990370][ T7037] overlayfs: ...falling back to index=off. [ 150.004308][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.279'. [ 150.021783][ T7037] overlayfs: ...falling back to uuid=null. [ 150.032448][ T7044] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 150.061836][ T5952] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 150.091657][ T5952] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 150.099392][ T5952] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 150.110286][ T5952] samsung 0003:0419:0001.0003: unknown main item tag 0x0 [ 150.139059][ T5952] samsung 0003:0419:0001.0003: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 150.233957][ T7042] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 150.303683][ T5952] usb 4-1: USB disconnect, device number 6 [ 150.307673][ T7042] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 150.341688][ T7046] loop0: detected capacity change from 0 to 4096 [ 150.372483][ T7042] Remounting filesystem read-only [ 150.421016][ T7047] fido_id[7047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.450818][ T5846] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 150.468857][ T7046] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 150.512185][ T5846] NILFS error (device loop1): nilfs_readdir: bad page in #18 [ 150.516254][ T7046] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 150.543185][ T5846] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 150.617565][ T7046] ntfs3(loop0): ino=1e, "file1" attr_set_size [ 150.812011][ T7054] loop1: detected capacity change from 0 to 64 [ 151.125943][ T1210] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.227269][ T7064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.335982][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 151.349575][ T1210] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.352702][ T7049] loop5: detected capacity change from 0 to 32768 [ 151.359238][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.375952][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.409434][ T1210] usb 3-1: Product: syz [ 151.413650][ T1210] usb 3-1: Manufacturer: syz [ 151.456065][ T1210] usb 3-1: SerialNumber: syz [ 151.463415][ T7049] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 151.559086][ T7049] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 151.596133][ T1210] r8152-cfgselector 3-1: Unknown version 0x0000 [ 151.624218][ T1210] r8152-cfgselector 3-1: config 0 descriptor?? [ 151.645446][ T7049] CIFS mount error: No usable UNC path provided in device string! [ 151.645446][ T7049] [ 151.674228][ T7049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 151.775065][ T6225] ocfs2: Unmounting device (7,5) on (node local) [ 151.907659][ T1210] r8152-cfgselector 3-1: Needed 1 retries to read version [ 151.938307][ T1210] r8152-cfgselector 3-1: Unknown version 0x0000 [ 151.952085][ T7079] loop3: detected capacity change from 0 to 164 [ 151.986618][ T1210] r8152-cfgselector 3-1: bad CDC descriptors [ 152.074293][ T7079] Unable to read rock-ridge attributes [ 152.117735][ T7079] Unable to read rock-ridge attributes [ 152.145484][ T5952] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 152.419337][ T7068] loop0: detected capacity change from 0 to 40427 [ 152.470906][ T7068] F2FS-fs (loop0): build fault injection rate: 690 [ 152.498166][ T7068] F2FS-fs (loop0): Image doesn't support compression [ 152.522899][ T7068] F2FS-fs (loop0): Image doesn't support compression [ 152.572365][ T7068] F2FS-fs (loop0): invalid crc value [ 152.851859][ T7104] loop3: detected capacity change from 0 to 64 [ 152.856205][ T5952] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.946307][ T7068] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.056243][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 153.065777][ T5952] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 153.102314][ T5952] usb 2-1: config 0 has no interface number 0 [ 153.122921][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.185873][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 153.241843][ T5952] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 153.274667][ T5839] syz-executor: attempt to access beyond end of device [ 153.274667][ T5839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.289368][ T5952] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 153.306167][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 153.306194][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.306205][ T5839] Call Trace: [ 153.306213][ T5839] [ 153.306221][ T5839] dump_stack_lvl+0x189/0x250 [ 153.306259][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.306287][ T5839] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 153.306316][ T5839] ? __pfx_queue_work_on+0x10/0x10 [ 153.306348][ T5839] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 153.306376][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.306407][ T5839] ? f2fs_hw_is_readonly+0x39b/0x470 [ 153.306439][ T5839] f2fs_handle_critical_error+0x37c/0x540 [ 153.306473][ T5839] f2fs_write_end_io+0x495/0x810 [ 153.306501][ T5839] ? blkg_put+0x22/0x240 [ 153.306544][ T5839] __submit_merged_bio+0x27a/0x6a0 [ 153.306577][ T5839] __submit_merged_write_cond+0x255/0x530 [ 153.306611][ T5839] f2fs_write_data_pages+0x261d/0x3000 [ 153.306638][ T5839] ? __lock_acquire+0xab9/0xd20 [ 153.306699][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 153.306782][ T5839] ? __mod_zone_page_state+0xd7/0x140 [ 153.306824][ T5839] ? folios_put_refs+0x560/0x640 [ 153.306863][ T5839] ? __lock_acquire+0xab9/0xd20 [ 153.306895][ T5839] ? do_raw_spin_lock+0x121/0x290 [ 153.306927][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 153.306946][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 153.306976][ T5839] do_writepages+0x32e/0x550 [ 153.307018][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 153.307044][ T5839] filemap_fdatawrite+0x199/0x240 [ 153.307076][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 153.307158][ T5839] ? do_raw_spin_unlock+0x122/0x240 [ 153.307183][ T5839] f2fs_sync_dirty_inodes+0x31f/0x830 [ 153.307231][ T5839] f2fs_write_checkpoint+0x95a/0x1df0 [ 153.307300][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 153.307369][ T5839] ? try_to_wake_up+0x7e5/0x1290 [ 153.307395][ T5839] ? kill_f2fs_super+0x298/0x6c0 [ 153.307430][ T5839] kill_f2fs_super+0x2c3/0x6c0 [ 153.307467][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 153.307494][ T5839] ? radix_tree_delete_item+0x2b6/0x400 [ 153.307532][ T5839] ? shrinker_free+0x2ce/0x3e0 [ 153.307558][ T5839] deactivate_locked_super+0xbc/0x130 [ 153.307587][ T5839] cleanup_mnt+0x425/0x4c0 [ 153.307612][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.307646][ T5839] task_work_run+0x1d1/0x260 [ 153.307671][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 153.307690][ T5839] ? __x64_sys_umount+0x122/0x160 [ 153.307725][ T5839] ? exit_to_user_mode_loop+0x40/0x110 [ 153.307754][ T5839] exit_to_user_mode_loop+0xec/0x110 [ 153.307787][ T5839] do_syscall_64+0x2bd/0x3b0 [ 153.307804][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.307833][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.307853][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 153.307878][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.307897][ T5839] RIP: 0033:0x7fe9d738fc57 [ 153.307915][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 153.307931][ T5839] RSP: 002b:00007ffc44e6f208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.307952][ T5839] RAX: 0000000000000000 RBX: 00007fe9d7410925 RCX: 00007fe9d738fc57 [ 153.307966][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc44e6f2c0 [ 153.307978][ T5839] RBP: 00007ffc44e6f2c0 R08: 0000000000000000 R09: 0000000000000000 [ 153.307989][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc44e70350 [ 153.308002][ T5839] R13: 00007fe9d7410925 R14: 0000000000025613 R15: 00007ffc44e70390 [ 153.308033][ T5839] [ 153.308041][ T5839] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 153.682321][ T5952] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 153.692573][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.708480][ T5952] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 153.718274][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.726330][ T5952] usb 2-1: Product: syz [ 153.730526][ T5952] usb 2-1: Manufacturer: syz [ 153.735151][ T5952] usb 2-1: SerialNumber: syz [ 153.746451][ T5952] usb 2-1: config 0 descriptor?? [ 153.754873][ T7100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.762382][ T7100] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.995605][ T5952] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 154.211537][ T5952] etas_es58x 2-1:0.219: could not parse product info: '424242424242' [ 154.455047][ T5952] usb 2-1: USB disconnect, device number 4 [ 154.483559][ T5952] etas_es58x 2-1:0.219: Disconnecting syz syz [ 154.680883][ T7113] loop2: detected capacity change from 0 to 40427 [ 154.822112][ T7118] loop5: detected capacity change from 0 to 40427 [ 154.895557][ T7118] F2FS-fs (loop5): heap/no_heap options were deprecated [ 154.931431][ T7118] F2FS-fs (loop5): build fault injection rate: 19 [ 154.977806][ T7118] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 155.042815][ T7118] F2FS-fs (loop5): invalid crc value [ 155.110275][ T7118] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 155.136743][ T7143] syz.3.309 uses obsolete (PF_INET,SOCK_PACKET) [ 155.164438][ T7113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 155.454975][ T5836] syz-executor: attempt to access beyond end of device [ 155.454975][ T5836] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.463483][ T7118] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 155.510706][ T7118] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.529069][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 155.529101][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.529115][ T5836] Call Trace: [ 155.529124][ T5836] [ 155.529133][ T5836] dump_stack_lvl+0x189/0x250 [ 155.529175][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.529204][ T5836] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 155.529235][ T5836] ? __pfx_queue_work_on+0x10/0x10 [ 155.529266][ T5836] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 155.529295][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 155.529345][ T5836] ? f2fs_hw_is_readonly+0x39b/0x470 [ 155.529379][ T5836] f2fs_handle_critical_error+0x37c/0x540 [ 155.529415][ T5836] f2fs_write_end_io+0x495/0x810 [ 155.529443][ T5836] ? blkg_put+0x22/0x240 [ 155.529489][ T5836] __submit_merged_bio+0x27a/0x6a0 [ 155.529524][ T5836] __submit_merged_write_cond+0x255/0x530 [ 155.529560][ T5836] f2fs_write_data_pages+0x261d/0x3000 [ 155.529592][ T5836] ? __lock_acquire+0xab9/0xd20 [ 155.529662][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.529749][ T5836] ? __mod_zone_page_state+0xd7/0x140 [ 155.529793][ T5836] ? folios_put_refs+0x560/0x640 [ 155.529835][ T5836] ? __lock_acquire+0xab9/0xd20 [ 155.529872][ T5836] ? do_raw_spin_lock+0x121/0x290 [ 155.529909][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 155.529930][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 155.529961][ T5836] do_writepages+0x32e/0x550 [ 155.530006][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 155.530033][ T5836] filemap_fdatawrite+0x199/0x240 [ 155.530064][ T5836] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 155.530158][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 155.530185][ T5836] f2fs_sync_dirty_inodes+0x31f/0x830 [ 155.530238][ T5836] f2fs_write_checkpoint+0x95a/0x1df0 [ 155.530301][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 155.530383][ T5836] ? try_to_wake_up+0x7e5/0x1290 [ 155.530414][ T5836] ? kill_f2fs_super+0x298/0x6c0 [ 155.530452][ T5836] kill_f2fs_super+0x2c3/0x6c0 [ 155.530490][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 155.530518][ T5836] ? radix_tree_delete_item+0x2b6/0x400 [ 155.530558][ T5836] ? shrinker_free+0x2ce/0x3e0 [ 155.530593][ T5836] deactivate_locked_super+0xbc/0x130 [ 155.530624][ T5836] cleanup_mnt+0x425/0x4c0 [ 155.530650][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.530684][ T5836] task_work_run+0x1d1/0x260 [ 155.530710][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 155.530730][ T5836] ? __x64_sys_umount+0x122/0x160 [ 155.530768][ T5836] ? exit_to_user_mode_loop+0x40/0x110 [ 155.530800][ T5836] exit_to_user_mode_loop+0xec/0x110 [ 155.530827][ T5836] do_syscall_64+0x2bd/0x3b0 [ 155.530845][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.530875][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.530900][ T5836] ? clear_bhb_loop+0x60/0xb0 [ 155.530927][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.530947][ T5836] RIP: 0033:0x7fbad5f8fc57 [ 155.530967][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 155.530984][ T5836] RSP: 002b:00007ffc61f7d818 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 155.531006][ T5836] RAX: 0000000000000000 RBX: 00007fbad6010925 RCX: 00007fbad5f8fc57 [ 155.531020][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc61f7d8d0 [ 155.531032][ T5836] RBP: 00007ffc61f7d8d0 R08: 0000000000000000 R09: 0000000000000000 [ 155.531044][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc61f7e960 [ 155.531058][ T5836] R13: 00007fbad6010925 R14: 0000000000025ea4 R15: 00007ffc61f7e9a0 [ 155.531095][ T5836] [ 155.597746][ T5836] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 155.773074][ T7118] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 156.018723][ T7158] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40 [ 156.160334][ T6225] syz-executor: attempt to access beyond end of device [ 156.160334][ T6225] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.221830][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 156.221861][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.221874][ T6225] Call Trace: [ 156.221882][ T6225] [ 156.221891][ T6225] dump_stack_lvl+0x189/0x250 [ 156.221930][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.221959][ T6225] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 156.221988][ T6225] ? __pfx_queue_work_on+0x10/0x10 [ 156.222020][ T6225] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 156.222048][ T6225] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 156.222078][ T6225] ? f2fs_hw_is_readonly+0x39b/0x470 [ 156.222107][ T6225] f2fs_handle_critical_error+0x37c/0x540 [ 156.222139][ T6225] f2fs_write_end_io+0x495/0x810 [ 156.222165][ T6225] ? blkg_put+0x22/0x240 [ 156.222205][ T6225] __submit_merged_bio+0x27a/0x6a0 [ 156.222238][ T6225] __submit_merged_write_cond+0x255/0x530 [ 156.222270][ T6225] f2fs_write_data_pages+0x261d/0x3000 [ 156.222335][ T6225] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.222417][ T6225] ? __mod_zone_page_state+0xd7/0x140 [ 156.222459][ T6225] ? folios_put_refs+0x560/0x640 [ 156.222498][ T6225] ? __lock_acquire+0xab9/0xd20 [ 156.222534][ T6225] ? do_raw_spin_lock+0x121/0x290 [ 156.222567][ T6225] ? do_raw_spin_unlock+0x122/0x240 [ 156.222588][ T6225] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 156.222619][ T6225] do_writepages+0x32e/0x550 [ 156.222660][ T6225] ? do_raw_spin_unlock+0x122/0x240 [ 156.222686][ T6225] filemap_fdatawrite+0x199/0x240 [ 156.222717][ T6225] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 156.222799][ T6225] ? do_raw_spin_unlock+0x122/0x240 [ 156.222824][ T6225] f2fs_sync_dirty_inodes+0x31f/0x830 [ 156.222872][ T6225] f2fs_write_checkpoint+0x95a/0x1df0 [ 156.222929][ T6225] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 156.223001][ T6225] ? try_to_wake_up+0x81b/0x1290 [ 156.223030][ T6225] ? kill_f2fs_super+0x298/0x6c0 [ 156.223066][ T6225] kill_f2fs_super+0x2c3/0x6c0 [ 156.223104][ T6225] ? __pfx_kill_f2fs_super+0x10/0x10 [ 156.223132][ T6225] ? radix_tree_delete_item+0x2b6/0x400 [ 156.223171][ T6225] ? shrinker_free+0x2ce/0x3e0 [ 156.223199][ T6225] deactivate_locked_super+0xbc/0x130 [ 156.223229][ T6225] cleanup_mnt+0x425/0x4c0 [ 156.223254][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.223288][ T6225] task_work_run+0x1d1/0x260 [ 156.223313][ T6225] ? __pfx_task_work_run+0x10/0x10 [ 156.223333][ T6225] ? __x64_sys_umount+0x122/0x160 [ 156.223375][ T6225] ? exit_to_user_mode_loop+0x40/0x110 [ 156.223406][ T6225] exit_to_user_mode_loop+0xec/0x110 [ 156.223432][ T6225] do_syscall_64+0x2bd/0x3b0 [ 156.223450][ T6225] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.223480][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.223501][ T6225] ? clear_bhb_loop+0x60/0xb0 [ 156.223526][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.223547][ T6225] RIP: 0033:0x7faa2298fc57 [ 156.223566][ T6225] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 156.223583][ T6225] RSP: 002b:00007ffdcc6845d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 156.223605][ T6225] RAX: 0000000000000000 RBX: 00007faa22a10925 RCX: 00007faa2298fc57 [ 156.223619][ T6225] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcc684690 [ 156.223631][ T6225] RBP: 00007ffdcc684690 R08: 0000000000000000 R09: 0000000000000000 [ 156.223643][ T6225] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdcc685720 [ 156.223656][ T6225] R13: 00007faa22a10925 R14: 00000000000261ba R15: 00007ffdcc685760 [ 156.223688][ T6225] [ 156.223697][ T6225] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 156.226275][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 156.443529][ T7146] loop1: detected capacity change from 0 to 32768 [ 156.801777][ T7162] loop3: detected capacity change from 0 to 32768 [ 156.849491][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.866502][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 156.877931][ T7162] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.886945][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.902416][ T24] usb 1-1: config 0 descriptor?? [ 156.958045][ T7162] XFS (loop3): Ending clean mount [ 157.270463][ T7146] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 157.270489][ T7146] allowing incompatible features above 0.0: (unknown version) [ 157.270502][ T7146] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 157.321601][ T5840] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 157.409637][ T24] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0004/input/input6 [ 157.553030][ T24] uclogic 0003:28BD:0933.0004: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 157.646656][ T24] usb 1-1: USB disconnect, device number 3 [ 157.666679][ T7146] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 157.674921][ T7146] bcachefs (loop1): initializing new filesystem [ 157.715695][ T7146] bcachefs (loop1): going read-write [ 157.804252][ T7146] bcachefs (loop1): marking superblocks [ 157.902740][ T7146] bcachefs (loop1): initializing freespace [ 157.915524][ T7191] fido_id[7191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 157.967354][ T7146] bcachefs (loop1): done initializing freespace [ 158.006924][ T7146] bcachefs (loop1): reading snapshots table [ 158.012918][ T7146] bcachefs (loop1): reading snapshots done [ 158.250854][ T7146] bcachefs (loop1): done starting filesystem [ 158.375145][ T5846] bcachefs (loop1): shutting down [ 158.382728][ T5846] bcachefs (loop1): going read-only [ 158.396147][ T5846] bcachefs (loop1): finished waiting for writes to stop [ 158.417322][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 158.433078][ T7209] tipc: Started in network mode [ 158.452374][ T7209] tipc: Node identity ac14142a, cluster identity 4711 [ 158.464905][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 158.465547][ T7209] tipc: Enabled bearer , priority 10 [ 158.487665][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 158.496854][ T5846] bcachefs (loop1): marking filesystem clean [ 158.682760][ T5846] bcachefs (loop1): shutdown complete [ 158.764151][ T7215] loop0: detected capacity change from 0 to 1024 [ 158.817986][ T7215] hfsplus: Filesystem is marked locked, mounting read-only. [ 158.947199][ T7215] hfsplus: filesystem is marked locked, leaving read-only. [ 159.283147][ T7206] loop3: detected capacity change from 0 to 32768 [ 159.457559][ T1210] tipc: Node number set to 2886997034 [ 159.525340][ T7236] Invalid ELF header magic: != ELF [ 159.682133][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.925244][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.062298][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.322984][ T7206] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 160.323017][ T7206] allowing incompatible features above 0.0: (unknown version) [ 160.323031][ T7206] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 160.413686][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.634695][ T7206] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 160.682052][ T7206] bcachefs (loop3): initializing new filesystem [ 160.757496][ T7206] bcachefs (loop3): going read-write [ 160.799708][ T7206] bcachefs (loop3): marking superblocks [ 160.869396][ T7206] bcachefs (loop3): initializing freespace [ 160.927045][ T7206] bcachefs (loop3): done initializing freespace [ 161.005138][ T7206] bcachefs (loop3): reading snapshots table [ 161.036180][ T13] bridge_slave_1: left allmulticast mode [ 161.045980][ T13] bridge_slave_1: left promiscuous mode [ 161.052103][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.061770][ T7206] bcachefs (loop3): reading snapshots done [ 161.133132][ T13] bridge_slave_0: left allmulticast mode [ 161.143895][ T13] bridge_slave_0: left promiscuous mode [ 161.153080][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.170198][ T7206] bcachefs (loop3): done starting filesystem [ 161.174388][ T7277] loop1: detected capacity change from 0 to 512 [ 161.206534][ T7277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.304014][ T7277] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.322: invalid indirect mapped block 4294967295 (level 1) [ 161.356150][ T7277] EXT4-fs (loop1): Remounting filesystem read-only [ 161.392116][ T7277] EXT4-fs (loop1): 2 truncates cleaned up [ 161.445195][ T5840] bcachefs (loop3): shutting down [ 161.467782][ T7277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.485901][ T5840] bcachefs (loop3): going read-only [ 161.491655][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.500371][ T5840] bcachefs (loop3): finished waiting for writes to stop [ 161.508098][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.524528][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.536726][ T7277] EXT4-fs warning (device loop1): empty_inline_dir:1793: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 161.555126][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.573878][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.604550][ T5840] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 161.649778][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.824598][ T5840] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 161.844348][ T5840] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 161.850936][ T7294] loop1: detected capacity change from 0 to 512 [ 161.861496][ T7294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.880481][ T5840] bcachefs (loop3): marking filesystem clean [ 161.927016][ T7294] EXT4-fs (loop1): 1 truncate cleaned up [ 161.972288][ T7294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.012043][ T5840] bcachefs (loop3): shutdown complete [ 162.041725][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.441059][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.460305][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.473656][ T13] bond0 (unregistering): Released all slaves [ 162.880630][ T7297] loop1: detected capacity change from 0 to 32768 [ 162.999493][ T7297] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.204693][ T7297] XFS (loop1): Ending clean mount [ 163.289899][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 163.332274][ T5846] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.536764][ T5824] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.596016][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0 [ 163.605966][ T5824] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 163.616945][ T1210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.636742][ T5849] Bluetooth: hci2: command tx timeout [ 163.673989][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 163.700628][ T5824] usb 6-1: Product: syz [ 163.706242][ T5824] usb 6-1: Manufacturer: syz [ 163.710876][ T5824] usb 6-1: SerialNumber: syz [ 163.739858][ T5824] usb 6-1: config 0 descriptor?? [ 163.816928][ T5824] usb 6-1: selecting invalid altsetting 0 [ 163.844523][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 163.868916][ T1210] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 163.888597][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.933062][ T13] hsr_slave_0: left promiscuous mode [ 163.958308][ T13] hsr_slave_1: left promiscuous mode [ 163.959953][ T1210] usb 3-1: config 0 descriptor?? [ 163.970911][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.041248][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.065118][ T10] usb 6-1: USB disconnect, device number 2 [ 164.074900][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.083268][ T7336] loop1: detected capacity change from 0 to 2048 [ 164.089347][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.179579][ T7337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.210040][ T13] veth1_macvtap: left promiscuous mode [ 164.215671][ T13] veth0_macvtap: left promiscuous mode [ 164.238029][ T13] veth1_vlan: left promiscuous mode [ 164.252655][ T13] veth0_vlan: left promiscuous mode [ 164.512871][ T1210] aquacomputer_d5next 0003:0C70:F011.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0 [ 164.599776][ T7339] loop1: detected capacity change from 0 to 2048 [ 164.689463][ T7339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.818546][ T1210] usb 3-1: USB disconnect, device number 5 [ 165.675871][ T7344] loop5: detected capacity change from 0 to 32768 [ 165.706865][ T5849] Bluetooth: hci2: command tx timeout [ 165.713386][ T7344] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.909415][ T7368] loop1: detected capacity change from 0 to 4096 [ 165.951468][ T7344] XFS (loop5): Ending clean mount [ 165.975570][ T7344] XFS (loop5): Quotacheck needed: Please wait. [ 165.991841][ T7368] NILFS (loop1): invalid segment: Checksum error in segment payload [ 166.066889][ T7368] NILFS (loop1): trying rollback from an earlier position [ 166.098159][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.106189][ T7344] XFS (loop5): Quotacheck: Done. [ 166.116279][ T7368] NILFS (loop1): recovery complete [ 166.258658][ T6225] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.288696][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 166.294443][ T13] team0 (unregistering): Port device team_slave_1 removed [ 166.320306][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.361494][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.377066][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 166.397401][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.467437][ T10] usb 3-1: config 0 descriptor?? [ 166.467657][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.943001][ T10] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 166.975911][ T10] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 166.983110][ T10] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 167.019957][ T10] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 167.041335][ T10] redragon 0003:0C45:760B.0006: unknown main item tag 0x0 [ 167.094170][ T10] redragon 0003:0C45:760B.0006: hidraw0: USB HID v0.02 Device [HID 0c45:760b] on usb-dummy_hcd.2-1/input0 [ 167.154955][ T10] usb 3-1: USB disconnect, device number 6 [ 167.351695][ T7394] fido_id[7394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 167.493975][ T7402] loop1: detected capacity change from 0 to 128 [ 167.524571][ T7402] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.574101][ T7402] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.805937][ T5849] Bluetooth: hci2: command tx timeout [ 167.937002][ T7391] loop3: detected capacity change from 0 to 32768 [ 167.985289][ T7391] read_mapping_page failed! [ 167.990768][ T7391] ERROR: (device loop3): txCommit: [ 167.990768][ T7391] [ 168.026952][ T7391] ERROR: (device loop3): remounting filesystem as read-only [ 168.183471][ T7414] loop2: detected capacity change from 0 to 2048 [ 168.235743][ T7414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.496217][ T5950] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.566052][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 168.659779][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.697840][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.748584][ T5950] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 168.798995][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.832642][ T5950] usb 4-1: config 0 descriptor?? [ 169.117295][ T7439] netlink: 'syz.2.389': attribute type 5 has an invalid length. [ 169.220760][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.245991][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.253359][ T7283] bridge_slave_0: entered allmulticast mode [ 169.298295][ T7283] bridge_slave_0: entered promiscuous mode [ 169.387588][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.394919][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.426139][ T7283] bridge_slave_1: entered allmulticast mode [ 169.472578][ T7283] bridge_slave_1: entered promiscuous mode [ 169.530075][ T5950] hid-led 0003:0FC5:B080.0007: probe with driver hid-led failed with error -71 [ 169.577529][ T5950] usb 4-1: USB disconnect, device number 7 [ 169.746086][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.785745][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.867987][ T5849] Bluetooth: hci2: command tx timeout [ 169.945633][ T7283] team0: Port device team_slave_0 added [ 169.961162][ T7283] team0: Port device team_slave_1 added [ 170.230045][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.258637][ T7472] loop3: detected capacity change from 0 to 64 [ 170.275938][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.275989][ T7474] loop5: detected capacity change from 0 to 128 [ 170.365973][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.404025][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.420006][ T7474] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.435373][ T7478] loop2: detected capacity change from 0 to 16 [ 170.465683][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.515155][ T7478] erofs (device loop2): mounted with root inode @ nid 36. [ 170.518938][ T7474] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.544218][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.744633][ T7448] loop1: detected capacity change from 0 to 32768 [ 170.758845][ T6225] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.780988][ T5836] syz-executor: attempt to access beyond end of device [ 170.780988][ T5836] loop2: rw=0, sector=103079215096, nr_sectors = 8 limit=16 [ 170.865544][ T5836] erofs (device loop2): failed to readdir of logical block 0 of nid 46 [ 170.885940][ T7448] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.928004][ T5836] erofs (device loop2): bogus i_mode (0) @ nid 281474976710655 [ 170.960208][ T7481] loop3: detected capacity change from 0 to 4096 [ 170.971819][ T7283] hsr_slave_0: entered promiscuous mode [ 170.997636][ T7481] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 171.011318][ T5836] erofs (device loop2): bogus i_mode (0) @ nid 281474976710655 [ 171.049561][ T7283] hsr_slave_1: entered promiscuous mode [ 171.052697][ T7481] ntfs3(loop3): ino=19, mi_enum_attr [ 171.096773][ T7283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.116557][ T7283] Cannot create hsr debugfs directory [ 171.158817][ T7448] XFS (loop1): Ending clean mount [ 171.206918][ T7448] XFS (loop1): Quotacheck needed: Please wait. [ 171.311347][ T7448] XFS (loop1): Quotacheck: Done. [ 171.493531][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.616246][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 171.658208][ T7507] loop5: detected capacity change from 0 to 2048 [ 171.744233][ T7507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 171.791490][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 171.824094][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.847857][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.904539][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.941618][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.971013][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 171.998829][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.049183][ T24] usb 4-1: config 0 descriptor?? [ 172.101560][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.319852][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.459449][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.473863][ T24] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 172.498091][ T24] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 172.536390][ T24] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 172.572562][ T24] microsoft 0003:045E:07DA.0008: no inputs found [ 172.572588][ T24] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 172.670290][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.678264][ T10] usb 4-1: USB disconnect, device number 8 [ 172.771671][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 173.217860][ T1108] bridge_slave_1: left allmulticast mode [ 173.229259][ T1108] bridge_slave_1: left promiscuous mode [ 173.246705][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.270721][ T1108] bridge_slave_0: left allmulticast mode [ 173.283387][ T1108] bridge_slave_0: left promiscuous mode [ 173.296289][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.417815][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.441921][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.457221][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.471531][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.480230][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.344123][ T7566] loop3: detected capacity change from 0 to 512 [ 174.357544][ T7566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.403611][ T7566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 174.425681][ T7566] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.522139][ T7566] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 174.559411][ T7566] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 174.576179][ T7566] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.425: Failed to acquire dquot type 0 [ 174.618560][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.640540][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.664616][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 174.664884][ T1108] bond0 (unregistering): Released all slaves [ 174.692792][ T7562] loop1: detected capacity change from 0 to 32768 [ 174.746624][ T7562] (syz.1.423,7562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.834396][ T7562] (syz.1.423,7562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 174.938737][ T7562] (syz.1.423,7562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 174.974040][ T7283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.032963][ T7562] JBD2: Ignoring recovery information on journal [ 175.047405][ T7283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.204767][ T7562] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.272329][ T7283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.319912][ T7283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.411200][ T7570] loop3: detected capacity change from 0 to 32768 [ 175.421090][ T7582] loop5: detected capacity change from 0 to 256 [ 175.442791][ T7562] (syz.1.423,7562,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC. [ 175.451654][ T7570] JBD2: Ignoring recovery information on journal [ 175.501878][ T7562] (syz.1.423,7562,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126 [ 175.514228][ T7570] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.516049][ T7562] (syz.1.423,7562,0):ocfs2_trim_mainbm:7630 ERROR: status = -5 [ 175.545962][ T5845] Bluetooth: hci0: command tx timeout [ 175.554987][ T7582] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 175.601492][ T5846] ocfs2: Unmounting device (7,1) on (node local) [ 175.678125][ T7570] (syz.3.426,7570,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 175.751660][ T7570] (syz.3.426,7570,0):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 17179869184 from the device. [ 175.958353][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 176.134646][ T7598] loop5: detected capacity change from 0 to 256 [ 176.227957][ T1108] hsr_slave_0: left promiscuous mode [ 176.228412][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'. [ 176.275071][ T1108] hsr_slave_1: left promiscuous mode [ 176.285179][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.303910][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.361589][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.384509][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.462645][ T1108] veth1_macvtap: left promiscuous mode [ 176.487902][ T1108] veth0_macvtap: left promiscuous mode [ 176.524571][ T1108] veth1_vlan: left promiscuous mode [ 176.547642][ T1108] veth0_vlan: left promiscuous mode [ 177.632220][ T5845] Bluetooth: hci0: command tx timeout [ 177.850669][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 177.897571][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 178.928646][ T7649] loop3: detected capacity change from 0 to 512 [ 179.036890][ T7649] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 3: comm syz.3.450: lblock 0 mapped to illegal pblock 3 (length 1) [ 179.062314][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.083253][ T7649] EXT4-fs (loop3): Remounting filesystem read-only [ 179.105056][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.150304][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.157569][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.176670][ T7649] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.450: error -117 reading directory block [ 179.241431][ T7649] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 179.247893][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.256847][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.330413][ T7649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.487967][ T7649] EXT4-fs: group quota file already specified [ 179.494520][ T7538] chnl_net:caif_netlink_parms(): no params data found [ 179.604372][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.707347][ T5845] Bluetooth: hci0: command tx timeout [ 180.174980][ T7697] netlink: 56 bytes leftover after parsing attributes in process `syz.3.462'. [ 180.298588][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.326428][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.334424][ T7538] bridge_slave_0: entered allmulticast mode [ 180.363944][ T7538] bridge_slave_0: entered promiscuous mode [ 180.460345][ T7538] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.477178][ T7703] loop3: detected capacity change from 0 to 1024 [ 180.479642][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.492578][ T7703] EXT4-fs: Ignoring removed nobh option [ 180.516224][ T7538] bridge_slave_1: entered allmulticast mode [ 180.524159][ T7538] bridge_slave_1: entered promiscuous mode [ 180.526974][ T7705] loop5: detected capacity change from 0 to 512 [ 180.545963][ T7703] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.570478][ T7705] EXT4-fs: Ignoring removed bh option [ 180.578736][ T7703] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.465: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.596806][ T7705] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.611157][ T7703] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.465: couldn't read orphan inode 11 (err -117) [ 180.645136][ T7703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.681396][ T7703] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.465: Invalid block bitmap block 0 in block_group 0 [ 180.713365][ T7703] Quota error (device loop3): write_blk: dquota write failed [ 180.719539][ T7705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.721928][ T7703] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 180.747635][ T7703] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.465: Failed to acquire dquot type 0 [ 180.778440][ T7705] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.864446][ T7705] EXT4-fs error (device loop5): ext4_get_first_dir_block:3533: inode #12: block 32: comm syz.5.466: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 180.897387][ T49] EXT4-fs error (device loop3): __ext4_get_inode_loc:4791: comm kworker/u8:3: Invalid inode table block 8589934593 in block_group 0 [ 180.905157][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.922651][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.928683][ T7538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.933927][ T7713] Illegal XDP return value 4294967274 on prog (id 32) dev N/A, expect packet loss! [ 180.951383][ T7705] EXT4-fs error (device loop5): ext4_get_first_dir_block:3536: inode #12: comm syz.5.466: directory missing '.' [ 180.969443][ T7538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.077710][ T7716] loop3: detected capacity change from 0 to 256 [ 181.126708][ T7716] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.156003][ T7716] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 181.170772][ T7716] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdf21e5da, utbl_chksum : 0xe619d30d) [ 181.755602][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.785922][ T5845] Bluetooth: hci0: command tx timeout [ 181.840260][ T7719] netlink: 'syz.1.472': attribute type 2 has an invalid length. [ 181.882167][ T7538] team0: Port device team_slave_0 added [ 181.921188][ T7538] team0: Port device team_slave_1 added [ 182.127947][ T30] audit: type=1326 audit(2000000048.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7565b8e929 code=0x7ffc0000 [ 182.202850][ T7730] loop1: detected capacity change from 0 to 512 [ 182.209463][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.209484][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.209521][ T7538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.211519][ T7538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.220061][ T30] audit: type=1326 audit(2000000048.030:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7565b8e929 code=0x7ffc0000 [ 182.302111][ T7538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.332562][ T30] audit: type=1326 audit(2000000048.050:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7565b8e929 code=0x7ffc0000 [ 182.376240][ T30] audit: type=1326 audit(2000000048.050:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7565b8e963 code=0x7ffc0000 [ 182.415884][ T30] audit: type=1326 audit(2000000048.050:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7565b8d3df code=0x7ffc0000 [ 182.455898][ T30] audit: type=1326 audit(2000000048.050:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7565b8e9b7 code=0x7ffc0000 [ 182.462687][ T7730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 182.491509][ T7538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.502205][ T7730] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.522038][ T7732] tipc: Started in network mode [ 182.537156][ T7732] tipc: Node identity 665ae31545d1, cluster identity 4711 [ 182.545238][ T7732] tipc: Enabled bearer , priority 10 [ 182.564567][ T30] audit: type=1326 audit(2000000048.050:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7565b8d290 code=0x7ffc0000 [ 182.587396][ T30] audit: type=1326 audit(2000000048.070:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7565b8e52b code=0x7ffc0000 [ 182.684058][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.901913][ T7538] hsr_slave_0: entered promiscuous mode [ 182.917933][ T7538] hsr_slave_1: entered promiscuous mode [ 183.165579][ T7283] veth0_vlan: entered promiscuous mode [ 183.361757][ T7283] veth1_vlan: entered promiscuous mode [ 183.372067][ T7734] loop5: detected capacity change from 0 to 32768 [ 183.474065][ T7734] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 183.507128][ T7734] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.608064][ T7734] XFS (loop5): Ending clean mount [ 183.655960][ T5952] tipc: Node number set to 596370197 [ 183.670698][ T7734] XFS (loop5): Quotacheck needed: Please wait. [ 183.759890][ T7734] XFS (loop5): Quotacheck: Done. [ 183.801916][ T7283] veth0_macvtap: entered promiscuous mode [ 183.838169][ T7538] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.880611][ T7283] veth1_macvtap: entered promiscuous mode [ 183.899829][ T7538] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.942186][ T6225] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.974349][ T7538] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.055085][ T7538] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.147608][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.243511][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.371391][ T1108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.408389][ T1108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.448176][ T1108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.467924][ T1108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.501814][ T7761] loop3: detected capacity change from 0 to 32768 [ 184.885716][ T7761] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 184.885741][ T7761] allowing incompatible features above 0.0: (unknown version) [ 184.885750][ T7761] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 184.891079][ T7538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.937257][ T7771] loop1: detected capacity change from 0 to 32768 [ 185.018888][ T7538] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.047055][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.047173][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.089700][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.094756][ T7771] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 185.108273][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.176582][ T7761] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 185.184816][ T7761] bcachefs (loop3): initializing new filesystem [ 185.201855][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.244406][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.293144][ T7761] bcachefs (loop3): going read-write [ 185.364631][ T7761] bcachefs (loop3): marking superblocks [ 185.412580][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.437432][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.464817][ T7761] bcachefs (loop3): initializing freespace [ 185.488540][ T7538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.517668][ T5846] ocfs2: Unmounting device (7,1) on (node local) [ 185.540029][ T7761] bcachefs (loop3): done initializing freespace [ 185.592702][ T7761] bcachefs (loop3): reading snapshots table [ 185.644004][ T7761] bcachefs (loop3): reading snapshots done [ 185.762740][ T7761] bcachefs (loop3): done starting filesystem [ 185.837874][ T7819] veth0_to_bond: entered promiscuous mode [ 185.843976][ T7819] macvlan2: entered promiscuous mode [ 185.906328][ T7819] macvlan2: entered allmulticast mode [ 185.924717][ T7819] veth0_to_bond: entered allmulticast mode [ 186.289692][ T5840] bcachefs (loop3): shutting down [ 186.298915][ T7538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.305499][ T5840] bcachefs (loop3): going read-only [ 186.336977][ T5840] bcachefs (loop3): finished waiting for writes to stop [ 186.416581][ T5840] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 186.526618][ T5840] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 186.565466][ T5840] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 186.573668][ T5840] bcachefs (loop3): marking filesystem clean [ 186.650571][ T7839] loop5: detected capacity change from 0 to 256 [ 186.757687][ T5840] bcachefs (loop3): shutdown complete [ 186.845549][ T7846] loop6: detected capacity change from 0 to 2048 [ 186.942569][ T7846] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.015267][ T7846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.069063][ T7853] netlink: 148 bytes leftover after parsing attributes in process `syz.1.498'. [ 187.400432][ T7538] veth0_vlan: entered promiscuous mode [ 187.489921][ T7538] veth1_vlan: entered promiscuous mode [ 187.610848][ T7538] veth0_macvtap: entered promiscuous mode [ 187.668416][ T7538] veth1_macvtap: entered promiscuous mode [ 187.720843][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.771779][ T7538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.786355][ T7873] netlink: 240 bytes leftover after parsing attributes in process `syz.6.504'. [ 187.806183][ T7873] NCSI netlink: No device for ifindex 0 [ 187.833565][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.894987][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.964086][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.020620][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.203447][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.269076][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.411667][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.421700][ T7861] loop5: detected capacity change from 0 to 32768 [ 188.437901][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.454015][ T7861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.500 (7861) [ 188.565109][ T7861] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.616021][ T7861] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 188.624624][ T7861] BTRFS info (device loop5): using free-space-tree [ 188.933139][ T7878] loop6: detected capacity change from 0 to 32768 [ 189.139373][ T7878] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 189.253762][ T6225] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.316093][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 189.316114][ T30] audit: type=1800 audit(2000000055.160:31): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.506" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 189.593722][ T7283] (syz-executor,7283,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 189.744085][ T7283] ocfs2: Unmounting device (7,6) on (node local) [ 189.846861][ T7929] netlink: 20 bytes leftover after parsing attributes in process `syz.7.514'. [ 189.897706][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.514'. [ 189.940359][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.514'. [ 190.017690][ T7936] loop1: detected capacity change from 0 to 64 [ 190.567663][ T7946] loop3: detected capacity change from 0 to 64 [ 190.574475][ T7951] syz.7.520 (7951): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.692465][ T7946] hfs: keylen 94 too large [ 190.900086][ T7952] loop1: detected capacity change from 0 to 4096 [ 190.953914][ T7952] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 191.177376][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.3.523'. [ 191.450114][ T30] audit: type=1326 audit(2000000057.310:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.6.526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f558218e929 code=0x0 [ 191.701444][ T1315] IPVS: starting estimator thread 0... [ 191.763416][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.846002][ T7979] IPVS: using max 26 ests per chain, 62400 per kthread [ 192.107937][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.155073][ T7994] loop5: detected capacity change from 0 to 1024 [ 192.179925][ T7994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.221518][ T7994] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.278213][ T7994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.542582][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.893902][ T7986] loop3: detected capacity change from 0 to 32768 [ 192.982549][ T7986] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.165023][ T7986] XFS (loop3): Ending clean mount [ 193.248679][ T7986] XFS (loop3): Quotacheck needed: Please wait. [ 193.397386][ T8025] loop1: detected capacity change from 0 to 4096 [ 193.444225][ T7990] loop7: detected capacity change from 0 to 32768 [ 193.466704][ T7986] XFS (loop3): Quotacheck: Done. [ 193.525544][ T8025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.587103][ T8010] loop5: detected capacity change from 0 to 32768 [ 193.609364][ T8010] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.538 (8010) [ 193.634929][ T5840] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.732445][ T8010] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.819082][ T8025] EXT4-fs error (device loop1): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.1.542: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 193.846685][ T8010] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 193.899719][ T7990] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 193.899752][ T7990] allowing incompatible features above 0.0: (unknown version) [ 193.899765][ T7990] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 193.924211][ T8025] EXT4-fs error (device loop1): ext4_get_first_dir_block:3547: inode #12: comm syz.1.542: directory missing '..' [ 194.096611][ T7990] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 194.105319][ T7990] bcachefs (loop7): initializing new filesystem [ 194.108809][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.229476][ T7990] bcachefs (loop7): going read-write [ 194.361327][ T7990] bcachefs (loop7): marking superblocks [ 194.372342][ T8010] BTRFS info (device loop5): rebuilding free space tree [ 194.434997][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.441471][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.479990][ T8010] BTRFS info (device loop5): disabling free space tree [ 194.481312][ T7990] bcachefs (loop7): initializing freespace [ 194.516769][ T8010] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.554691][ T7990] bcachefs (loop7): done initializing freespace [ 194.567402][ T8010] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 194.626640][ T7990] bcachefs (loop7): reading snapshots table [ 194.646568][ T7990] bcachefs (loop7): reading snapshots done [ 194.671470][ T8067] loop1: detected capacity change from 0 to 256 [ 194.737253][ T30] audit: type=1800 audit(2000000060.610:33): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.538" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 194.747950][ T7990] bcachefs (loop7): done starting filesystem [ 194.778104][ T8067] exfat: Deprecated parameter 'utf8' [ 194.783503][ T8067] exfat: Deprecated parameter 'utf8' [ 194.873635][ T8067] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 195.124762][ T7538] bcachefs (loop7): shutting down [ 195.127887][ T6225] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 195.143789][ T7538] bcachefs (loop7): going read-only [ 195.186330][ T7538] bcachefs (loop7): finished waiting for writes to stop [ 195.247034][ T7538] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 195.503879][ T7538] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3 [ 195.529535][ T7538] bcachefs (loop7): clean shutdown complete, journal seq 4 [ 195.551874][ T8053] loop6: detected capacity change from 0 to 32768 [ 195.572812][ T8053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.546 (8053) [ 195.579501][ T7538] bcachefs (loop7): marking filesystem clean [ 195.598737][ T8053] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.610784][ T8053] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 195.619923][ T8053] BTRFS info (device loop6): using free-space-tree [ 195.953609][ T7538] bcachefs (loop7): shutdown complete [ 196.033649][ T8053] BTRFS warning (device loop6): get dev_stats failed, device not found [ 196.104872][ T8103] loop1: detected capacity change from 0 to 128 [ 196.122832][ T8072] loop3: detected capacity change from 0 to 32768 [ 196.175318][ T8103] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 196.328604][ T8103] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 196.368477][ T7283] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.540323][ T3469] read_mapping_page failed! [ 196.554139][ T3469] ERROR: (device loop3): txCommit: [ 196.554139][ T3469] [ 196.580424][ T3469] ERROR: (device loop3): remounting filesystem as read-only [ 196.656495][ T3469] jfs_write_inode: jfs_commit_inode failed! [ 196.901197][ T8114] loop5: detected capacity change from 0 to 512 [ 197.060916][ T8114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.061035][ T8114] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.311237][ T6225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.599926][ T5824] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 197.788739][ T5824] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 197.826404][ T5824] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.837757][ T8139] netlink: 3 bytes leftover after parsing attributes in process `syz.1.563'. [ 197.868301][ T5824] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.885920][ T5824] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 197.895017][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.022662][ T5824] usb 4-1: config 0 descriptor?? [ 198.362453][ T24] IPVS: starting estimator thread 0... [ 198.376631][ T8152] tipc: Enabling of bearer rejected, failed to enable media [ 198.477615][ T5824] holtek_mouse 0003:04D9:A067.0009: bogus close delimiter [ 198.506894][ T8153] IPVS: using max 32 ests per chain, 76800 per kthread [ 198.515857][ T5824] holtek_mouse 0003:04D9:A067.0009: item 0 2 2 10 parsing failed [ 198.524356][ T5824] holtek_mouse 0003:04D9:A067.0009: hid parse failed: -22 [ 198.587426][ T5824] holtek_mouse 0003:04D9:A067.0009: probe with driver holtek_mouse failed with error -22 [ 198.619497][ T8124] loop6: detected capacity change from 0 to 32768 [ 198.675605][ T24] usb 4-1: USB disconnect, device number 9 [ 198.692963][ T8124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.559 (8124) [ 198.768910][ T8124] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.813781][ T8124] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 198.878638][ T8124] BTRFS info (device loop6): using free-space-tree [ 199.163963][ T8180] netlink: 56 bytes leftover after parsing attributes in process `syz.5.574'. [ 199.216625][ T8124] BTRFS info (device loop6): rebuilding free space tree [ 199.242639][ T8180] netlink: 'syz.5.574': attribute type 5 has an invalid length. [ 199.555979][ T1210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.673356][ T8193] loop5: detected capacity change from 0 to 64 [ 199.682012][ T7283] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.829046][ T8195] loop7: detected capacity change from 0 to 1024 [ 199.829868][ T8193] hfs: keylen 1794 too large [ 200.078112][ T8201] 9pnet_rdma: rdma_create_trans (8201): problem binding to privport: 13 [ 200.096346][ T6225] hfs: node 4:3 still has 1 user(s)! [ 200.115907][ T30] audit: type=1800 audit(2000000065.980:34): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.549" name="file2" dev="loop7" ino=22 res=0 errno=0 [ 200.334673][ T65] hfsplus: b-tree write err: -5, ino 4 [ 200.963259][ T8185] loop1: detected capacity change from 0 to 32768 [ 201.087213][ T8185] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.292141][ T8185] XFS (loop1): Ending clean mount [ 201.348547][ T8185] XFS (loop1): Quotacheck needed: Please wait. [ 201.522283][ T8185] XFS (loop1): Quotacheck: Done. [ 201.781638][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 201.825968][ T1210] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 202.032435][ T1210] usb 8-1: Using ep0 maxpacket: 8 [ 202.063113][ T1210] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 202.100082][ T1210] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.117636][ T8223] loop6: detected capacity change from 0 to 32768 [ 202.180565][ T1210] usb 8-1: config 0 descriptor?? [ 202.229282][ T8223] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.435546][ T8223] XFS (loop6): Ending clean mount [ 202.484737][ T8223] XFS (loop6): Quotacheck needed: Please wait. [ 202.596539][ T8223] XFS (loop6): Quotacheck: Done. [ 202.656369][ T1210] nti 0003:0757:0A00.000A: reserved main item tag 0xd [ 202.680156][ T1210] nti 0003:0757:0A00.000A: unexpected long global item [ 202.704746][ T1210] nti 0003:0757:0A00.000A: probe with driver nti failed with error -22 [ 202.814418][ T7283] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.886463][ T5952] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.900685][ T1210] usb 8-1: USB disconnect, device number 2 [ 202.943828][ T8250] loop3: detected capacity change from 0 to 32768 [ 202.972644][ T8250] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.076780][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 203.098745][ T5952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.109266][ T8250] XFS (loop3): Ending clean mount [ 203.164935][ T5952] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 203.195716][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.226925][ T5952] usb 2-1: Product: syz [ 203.231138][ T5952] usb 2-1: Manufacturer: syz [ 203.235747][ T5952] usb 2-1: SerialNumber: syz [ 203.367897][ T5952] usb 2-1: config 0 descriptor?? [ 203.654652][ T8293] loop7: detected capacity change from 0 to 128 [ 203.804586][ T5952] gs_usb 2-1:0.0: Configuring for 38 interfaces [ 203.819893][ T5952] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 203.837507][ T5952] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 204.028947][ T1146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.061872][ T8250] XFS (loop3): Quotacheck needed: Please wait. [ 204.183003][ T8285] loop5: detected capacity change from 0 to 131072 [ 204.192203][ T1210] usb 2-1: USB disconnect, device number 5 [ 204.219404][ T8285] F2FS-fs (loop5): Test dummy encryption mode enabled [ 204.241952][ T8285] F2FS-fs (loop5): invalid crc value [ 204.316613][ T8250] XFS (loop3): Quotacheck: Done. [ 204.336012][ T8285] F2FS-fs (loop5): Inconsistent error blkaddr:15873, sit bitmap:0 [ 204.343892][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.5.598 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 204.343921][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.343934][ T8285] Call Trace: [ 204.343943][ T8285] [ 204.343951][ T8285] dump_stack_lvl+0x189/0x250 [ 204.344002][ T8285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.344034][ T8285] ? __pfx___get_meta_folio+0x10/0x10 [ 204.344077][ T8285] __f2fs_is_valid_blkaddr+0xd84/0x14f0 [ 204.344115][ T8285] f2fs_get_node_info+0x39c/0xff0 [ 204.344155][ T8285] read_node_folio+0x20a/0x3f0 [ 204.344180][ T8285] ? __pfx_read_node_folio+0x10/0x10 [ 204.344216][ T8285] ? __filemap_get_folio+0x79f/0xaf0 [ 204.344248][ T8285] __get_node_folio+0x22a/0x1410 [ 204.344277][ T8285] ? do_raw_spin_lock+0x121/0x290 [ 204.344302][ T8285] ? __pfx___get_node_folio+0x10/0x10 [ 204.344331][ T8285] ? do_raw_spin_unlock+0x122/0x240 [ 204.344356][ T8285] ? _raw_spin_unlock+0x28/0x50 [ 204.344384][ T8285] ? iget_locked+0x522/0x570 [ 204.344413][ T8285] f2fs_iget+0x77c/0x5550 [ 204.344443][ T8285] ? do_raw_spin_lock+0x121/0x290 [ 204.344483][ T8285] ? f2fs_build_stats+0xb2f/0x1220 [ 204.344505][ T8285] ? f2fs_fill_super+0x49e7/0x6ed0 [ 204.344541][ T8285] f2fs_fill_super+0x4ad9/0x6ed0 [ 204.344626][ T8285] mount_bdev+0x20e/0x2c0 [ 204.344655][ T8285] ? __pfx_f2fs_fill_super+0x10/0x10 [ 204.344687][ T8285] ? __pfx_mount_bdev+0x10/0x10 [ 204.344719][ T8285] ? rcu_is_watching+0x15/0xb0 [ 204.344754][ T8285] legacy_get_tree+0xfd/0x1a0 [ 204.344775][ T8285] ? __pfx_f2fs_mount+0x10/0x10 [ 204.344807][ T8285] vfs_get_tree+0x8f/0x2b0 [ 204.344841][ T8285] do_new_mount+0x24a/0xa40 [ 204.344870][ T8285] __se_sys_mount+0x317/0x410 [ 204.344898][ T8285] ? __pfx___se_sys_mount+0x10/0x10 [ 204.344947][ T8285] ? do_syscall_64+0xbe/0x3b0 [ 204.344973][ T8285] ? __x64_sys_mount+0x20/0xc0 [ 204.344997][ T8285] do_syscall_64+0xfa/0x3b0 [ 204.345015][ T8285] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.345046][ T8285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.345067][ T8285] ? clear_bhb_loop+0x60/0xb0 [ 204.345091][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.345111][ T8285] RIP: 0033:0x7faa229900ca [ 204.345130][ T8285] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.345149][ T8285] RSP: 002b:00007faa238cae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.345173][ T8285] RAX: ffffffffffffffda RBX: 00007faa238caef0 RCX: 00007faa229900ca [ 204.345189][ T8285] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007faa238caeb0 [ 204.345204][ T8285] RBP: 0000200000000100 R08: 00007faa238caef0 R09: 0000000000000010 [ 204.345218][ T8285] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600 [ 204.345232][ T8285] R13: 00007faa238caeb0 R14: 000000000001059a R15: 0000200000000180 [ 204.345266][ T8285] [ 204.642723][ T8285] F2FS-fs (loop5): f2fs_get_node_info of read_node_folio+0x20a/0x3f0: inconsistent nat entry, ino:3, nid:3, blkaddr:15873, ver:0, flag:0 [ 204.693231][ T8285] F2FS-fs (loop5): Failed to read root inode [ 205.016860][ T5840] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 205.064284][ T8309] loop6: detected capacity change from 0 to 4096 [ 205.317039][ T8321] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.331305][ T8316] loop1: detected capacity change from 0 to 1024 [ 205.490577][ T8315] xt_CT: No such helper "snmp" [ 205.741207][ T1146] hfsplus: b-tree write err: -5, ino 4 [ 206.349371][ T8342] loop5: detected capacity change from 0 to 64 [ 206.408658][ T8342] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 206.990768][ T8357] loop1: detected capacity change from 0 to 256 [ 207.037483][ T8357] exfat: Deprecated parameter 'namecase' [ 207.113079][ T8357] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 207.316577][ T8329] loop7: detected capacity change from 0 to 32768 [ 207.351253][ T8329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.608 (8329) [ 207.429872][ T8329] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.474091][ T8327] loop6: detected capacity change from 0 to 32768 [ 207.491053][ T8329] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm [ 207.571871][ T8329] BTRFS info (device loop7): using free-space-tree [ 208.046118][ T8329] BTRFS info (device loop7): rebuilding free space tree [ 208.436514][ T8406] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·FGr‚¥òqðςû~QV7¶·"qHá—Éd0ú†øˆ¹‰ý%NnyµƒÝD (pid: 8406 comm: syz.5.629) [ 208.537264][ T30] audit: type=1800 audit(2000000074.400:35): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.629" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=16081 res=0 errno=0 [ 208.572750][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.745958][ T30] audit: type=1804 audit(2000000074.460:36): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.629" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=16081 res=1 errno=0 [ 208.781362][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.855690][ T5952] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 208.881907][ T7538] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.955543][ T5952] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.327015][ T8424] fido_id[8424]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.423589][ T8435] netlink: 'syz.6.639': attribute type 1 has an invalid length. [ 209.684380][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.642'. [ 209.721264][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.642'. [ 209.781283][ T8446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.791403][ T3469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.804658][ T8442] netlink: 'syz.7.642': attribute type 18 has an invalid length. [ 210.192666][ T8459] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 210.712451][ T8473] loop1: detected capacity change from 0 to 64 [ 210.894736][ T8478] loop6: detected capacity change from 0 to 512 [ 210.939483][ T8478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.087586][ T8478] EXT4-fs (loop6): 1 orphan inode deleted [ 211.087622][ T8478] EXT4-fs (loop6): 1 truncate cleaned up [ 211.127257][ T8478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.175377][ T8449] loop5: detected capacity change from 0 to 32768 [ 211.257630][ T8449] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.310801][ T7283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.350809][ T8449] XFS (loop5): Ending clean mount [ 211.393630][ T8449] XFS (loop5): Quotacheck needed: Please wait. [ 211.616892][ T8498] ucma_write: process 71 (syz.6.660) changed security contexts after opening file descriptor, this is not allowed. [ 211.646825][ T8449] XFS (loop5): Quotacheck: Done. [ 211.989830][ T6225] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.055010][ T8513] loop7: detected capacity change from 0 to 256 [ 212.246391][ T5952] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.279746][ T1315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 212.407670][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 212.439844][ T5950] kernel write not supported for file /audio (pid: 5950 comm: kworker/1:5) [ 212.451542][ T1315] usb 2-1: Using ep0 maxpacket: 32 [ 212.459057][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 212.491643][ T1315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 212.506441][ T5952] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 212.529367][ T1315] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 212.546690][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.554947][ T1315] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 212.574006][ T5952] usb 4-1: config 0 descriptor?? [ 212.586945][ T1315] usb 2-1: Product: syz [ 212.591503][ T1315] usb 2-1: Manufacturer: syz [ 212.631292][ T1315] usb 2-1: SerialNumber: syz [ 212.668054][ T1315] usb 2-1: config 0 descriptor?? [ 212.697372][ T8510] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 212.716944][ T1315] hub 2-1:0.0: bad descriptor, ignoring hub [ 212.750855][ T1315] hub 2-1:0.0: probe with driver hub failed with error -5 [ 212.778335][ T5202] udevd[5202]: worker [5860] terminated by signal 33 (Unknown signal 33) [ 212.810259][ T5952] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 212.834823][ T5202] udevd[5202]: worker [5860] failed while handling '/devices/virtual/block/loop6' [ 213.037155][ T1315] usb 4-1: USB disconnect, device number 10 [ 213.068439][ T5952] usb 2-1: USB disconnect, device number 6 [ 213.202934][ T8539] pimreg: entered allmulticast mode [ 213.246518][ T8542] pimreg: left allmulticast mode [ 213.362353][ T8547] loop6: detected capacity change from 0 to 256 [ 213.394324][ T8547] exfat: Deprecated parameter 'utf8' [ 213.427098][ T8547] exfat: Deprecated parameter 'namecase' [ 213.450544][ T8547] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 213.605304][ T8553] loop5: detected capacity change from 0 to 2048 [ 213.708488][ T8553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.743791][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 213.873216][ T8561] loop6: detected capacity change from 0 to 512 [ 213.957829][ T8561] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 214.067754][ T8561] EXT4-fs (loop6): 1 truncate cleaned up [ 214.075295][ T8561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.138210][ T8573] loop5: detected capacity change from 0 to 16 [ 214.209285][ T8573] erofs (device loop5): mounted with root inode @ nid 36. [ 214.438260][ T7283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.913665][ T5923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.170087][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 215.203419][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 215.277543][ T8607] @: renamed from vlan0 (while UP) [ 215.548628][ T1093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.595131][ T8567] loop1: detected capacity change from 0 to 32768 [ 216.376414][ T5824] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.586867][ T5824] usb 7-1: Using ep0 maxpacket: 8 [ 216.611793][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.646554][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.660694][ T8641] loop1: detected capacity change from 0 to 1024 [ 216.671887][ T5824] usb 7-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 216.704392][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.747934][ T8641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.780537][ T5824] usb 7-1: config 0 descriptor?? [ 216.812368][ T8641] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 216.871028][ T8641] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 216.906239][ T8641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 216.914709][ T8641] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.712: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.944960][ T8641] EXT4-fs (loop1): Remounting filesystem read-only [ 216.970441][ T8641] EXT4-fs (loop1): 1 orphan inode deleted [ 216.979141][ T8641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.988802][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 217.004710][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 217.103618][ T8658] loop3: detected capacity change from 0 to 16 [ 217.112646][ T8658] erofs (device loop3): mounted with root inode @ nid 36. [ 217.220929][ T5824] wacom 0003:056A:0002.000C: unknown main item tag 0x0 [ 217.443724][ T5950] usb 7-1: USB disconnect, device number 2 [ 217.532144][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.803379][ T8658] erofs (device loop3): corrupted dir block 72 @ nid 36 [ 217.935943][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.030889][ T8673] loop1: detected capacity change from 0 to 2048 [ 218.101504][ T8673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.134931][ T5923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.137522][ T8673] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.152792][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.168758][ T5923] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 218.188755][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 218.204298][ T5923] usb 6-1: SerialNumber: syz [ 218.210241][ T8648] loop7: detected capacity change from 0 to 32768 [ 218.367855][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.433496][ T5923] usb 6-1: 0:2 : does not exist [ 218.604326][ T5923] usb 6-1: USB disconnect, device number 3 [ 218.771665][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.840351][ T8690] loop6: detected capacity change from 0 to 512 [ 218.908182][ T8690] EXT4-fs: Ignoring removed oldalloc option [ 219.019615][ T8690] EXT4-fs (loop6): 1 truncate cleaned up [ 219.037245][ T8690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.355378][ T8702] netlink: 'syz.5.735': attribute type 3 has an invalid length. [ 219.388249][ T7283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.464192][ T8706] random: crng reseeded on system resumption [ 219.510097][ T8684] loop3: detected capacity change from 0 to 32768 [ 219.611389][ T8684] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 219.626494][ T8706] Restarting kernel threads ... [ 219.671762][ T8706] Done restarting kernel threads. [ 219.779504][ T8684] XFS (loop3): Ending clean mount [ 219.885348][ T8684] XFS (loop3): Quotacheck needed: Please wait. [ 219.980544][ T8684] XFS (loop3): Quotacheck: Done. [ 220.234762][ T5840] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 220.667788][ T5952] ------------[ cut here ]------------ [ 220.668093][ T3469] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.673555][ T5952] WARNING: net/ipv6/ip6mr.c:2376 at ip6_mr_output+0xe0b/0x1040, CPU#1: kworker/1:6/5952 [ 220.693909][ T5952] Modules linked in: [ 220.698253][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 220.709868][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.720010][ T5952] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 220.726167][ T5952] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 220.731658][ T5952] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 80 16 1b ff e9 a7 fd ff ff e8 16 9e 8c f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 08 9e 8c f7 90 0f 0b 90 43 80 3c 2e 00 [ 220.751364][ T5952] RSP: 0018:ffffc900046c74e0 EFLAGS: 00010293 [ 220.757504][ T5952] RAX: ffffffff8a332d7a RBX: 0000000000000000 RCX: ffff88801e311e00 [ 220.765515][ T5952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.773570][ T5952] RBP: ffffc900046c7758 R08: ffffc900046c76c7 R09: 0000000000000000 [ 220.781625][ T5952] R10: ffffc900046c7670 R11: fffff520008d8ed9 R12: 1ffff920008d8eac [ 220.789676][ T5952] R13: dffffc0000000000 R14: ffffc900046c7670 R15: ffff8880291988c0 [ 220.797723][ T5952] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 220.806721][ T5952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.813330][ T5952] CR2: 00007faa236e56c0 CR3: 00000000495fe000 CR4: 00000000003526f0 [ 220.821392][ T5952] Call Trace: [ 220.824691][ T5952] [ 220.827714][ T5952] ? __pfx_ip6t_do_table+0x10/0x10 [ 220.832968][ T5952] ? __pfx_ip6_mr_output+0x10/0x10 [ 220.838156][ T5952] ? __ip6_local_out+0x609/0x870 [ 220.843144][ T5952] ? __ip6_local_out+0x82c/0x870 [ 220.848165][ T5952] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 220.853573][ T5952] ? __ip6_local_out+0x609/0x870 [ 220.858605][ T5952] ? __lock_acquire+0xab9/0xd20 [ 220.863493][ T5952] ? udp6_set_csum+0x995/0xee0 [ 220.868332][ T5952] ? skb_dst+0x4f/0xd0 [ 220.872470][ T5952] ? dst_output+0x177/0x1c0 [ 220.877060][ T5952] udp_tunnel6_xmit_skb+0x640/0xad0 [ 220.882319][ T5952] send6+0x5ac/0x8d0 [ 220.886304][ T5952] ? send6+0x220/0x8d0 [ 220.890416][ T5952] ? __pfx_send6+0x10/0x10 [ 220.894874][ T5952] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 220.900789][ T5952] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 220.906583][ T5952] wg_packet_tx_worker+0x1c8/0x7c0 [ 220.911743][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.917039][ T5952] ? process_scheduled_works+0x9ef/0x17b0 [ 220.922811][ T5952] process_scheduled_works+0xae1/0x17b0 [ 220.928510][ T5952] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.934546][ T5952] worker_thread+0x8a0/0xda0 [ 220.939245][ T5952] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.945635][ T5952] ? __kthread_parkme+0x7b/0x200 [ 220.950715][ T5952] kthread+0x70e/0x8a0 [ 220.954819][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 220.960007][ T5952] ? __pfx_kthread+0x10/0x10 [ 220.964640][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.969946][ T5952] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.975188][ T5952] ? __pfx_kthread+0x10/0x10 [ 220.979891][ T5952] ret_from_fork+0x3fc/0x770 [ 220.984525][ T5952] ? __pfx_ret_from_fork+0x10/0x10 [ 220.989760][ T5952] ? __switch_to_asm+0x39/0x70 [ 220.994602][ T5952] ? __switch_to_asm+0x33/0x70 [ 220.999445][ T5952] ? __pfx_kthread+0x10/0x10 [ 221.004069][ T5952] ret_from_fork_asm+0x1a/0x30 [ 221.008930][ T5952] [ 221.011985][ T5952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 221.019285][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: kworker/1:6 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 221.030946][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.041032][ T5952] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 221.047133][ T5952] Call Trace: [ 221.050419][ T5952] [ 221.053358][ T5952] dump_stack_lvl+0x99/0x250 [ 221.057970][ T5952] ? __asan_memcpy+0x40/0x70 [ 221.062574][ T5952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.067788][ T5952] ? __pfx__printk+0x10/0x10 [ 221.072404][ T5952] panic+0x2db/0x790 [ 221.076322][ T5952] ? __pfx_panic+0x10/0x10 [ 221.080769][ T5952] ? ret_from_fork_asm+0x1a/0x30 [ 221.085725][ T5952] __warn+0x334/0x4c0 [ 221.089724][ T5952] ? ip6_mr_output+0xe0b/0x1040 [ 221.094585][ T5952] ? ip6_mr_output+0xe0b/0x1040 [ 221.099448][ T5952] report_bug+0x2be/0x4f0 [ 221.103791][ T5952] ? ip6_mr_output+0xe0b/0x1040 [ 221.108647][ T5952] ? ip6_mr_output+0xe0b/0x1040 [ 221.113512][ T5952] ? ip6_mr_output+0xe0d/0x1040 [ 221.118369][ T5952] handle_bug+0x84/0x160 [ 221.122626][ T5952] exc_invalid_op+0x1a/0x50 [ 221.127141][ T5952] asm_exc_invalid_op+0x1a/0x20 [ 221.132002][ T5952] RIP: 0010:ip6_mr_output+0xe0b/0x1040 [ 221.137474][ T5952] Code: f7 49 bd 00 00 00 00 00 fc ff df 48 8b 74 24 38 45 31 f6 31 ff ba 02 00 00 00 e8 80 16 1b ff e9 a7 fd ff ff e8 16 9e 8c f7 90 <0f> 0b 90 e9 c7 f3 ff ff e8 08 9e 8c f7 90 0f 0b 90 43 80 3c 2e 00 [ 221.157089][ T5952] RSP: 0018:ffffc900046c74e0 EFLAGS: 00010293 [ 221.163166][ T5952] RAX: ffffffff8a332d7a RBX: 0000000000000000 RCX: ffff88801e311e00 [ 221.171150][ T5952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.179130][ T5952] RBP: ffffc900046c7758 R08: ffffc900046c76c7 R09: 0000000000000000 [ 221.187109][ T5952] R10: ffffc900046c7670 R11: fffff520008d8ed9 R12: 1ffff920008d8eac [ 221.195087][ T5952] R13: dffffc0000000000 R14: ffffc900046c7670 R15: ffff8880291988c0 [ 221.203077][ T5952] ? ip6_mr_output+0xe0a/0x1040 [ 221.207952][ T5952] ? __pfx_ip6t_do_table+0x10/0x10 [ 221.213079][ T5952] ? __pfx_ip6_mr_output+0x10/0x10 [ 221.218203][ T5952] ? __ip6_local_out+0x609/0x870 [ 221.223166][ T5952] ? __ip6_local_out+0x82c/0x870 [ 221.228124][ T5952] ? ip6_dst_lookup_tail+0x2ca/0x1510 [ 221.233510][ T5952] ? __ip6_local_out+0x609/0x870 [ 221.238470][ T5952] ? __lock_acquire+0xab9/0xd20 [ 221.243333][ T5952] ? udp6_set_csum+0x995/0xee0 [ 221.248110][ T5952] ? skb_dst+0x4f/0xd0 [ 221.252192][ T5952] ? dst_output+0x177/0x1c0 [ 221.256708][ T5952] udp_tunnel6_xmit_skb+0x640/0xad0 [ 221.261923][ T5952] send6+0x5ac/0x8d0 [ 221.265836][ T5952] ? send6+0x220/0x8d0 [ 221.269933][ T5952] ? __pfx_send6+0x10/0x10 [ 221.274358][ T5952] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 221.280193][ T5952] wg_socket_send_skb_to_peer+0x111/0x1d0 [ 221.285926][ T5952] wg_packet_tx_worker+0x1c8/0x7c0 [ 221.291063][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.296303][ T5952] ? process_scheduled_works+0x9ef/0x17b0 [ 221.302048][ T5952] process_scheduled_works+0xae1/0x17b0 [ 221.307634][ T5952] ? __pfx_process_scheduled_works+0x10/0x10 [ 221.313650][ T5952] worker_thread+0x8a0/0xda0 [ 221.318261][ T5952] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.324705][ T5952] ? __kthread_parkme+0x7b/0x200 [ 221.329672][ T5952] kthread+0x70e/0x8a0 [ 221.333758][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 221.338882][ T5952] ? __pfx_kthread+0x10/0x10 [ 221.343478][ T5952] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.348782][ T5952] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.353998][ T5952] ? __pfx_kthread+0x10/0x10 [ 221.358596][ T5952] ret_from_fork+0x3fc/0x770 [ 221.363201][ T5952] ? __pfx_ret_from_fork+0x10/0x10 [ 221.368329][ T5952] ? __switch_to_asm+0x39/0x70 [ 221.373102][ T5952] ? __switch_to_asm+0x33/0x70 [ 221.377869][ T5952] ? __pfx_kthread+0x10/0x10 [ 221.382463][ T5952] ret_from_fork_asm+0x1a/0x30 [ 221.387247][ T5952] [ 221.390565][ T5952] Kernel Offset: disabled [ 221.394888][ T5952] Rebooting in 86400 seconds..