last executing test programs: 1m16.528718094s ago: executing program 1 (id=676): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1m15.825775922s ago: executing program 1 (id=681): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x24020400) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) 1m15.110560336s ago: executing program 1 (id=685): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1m14.373369523s ago: executing program 1 (id=690): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$eJzs282O0lAYxvGnlMI4jo6fG1cmLnQj6OjGnXMB3oC7yVAJsagRNxAT46V4J9yJNwCJ7lxZ00MhLZZyLJZC+P+SGd5wePq2hEPPWSAAB+uG+e/IkWeqMAy/3Jf0+pWkesUnB6BUoX6HAA6V+6PqMwBQjem5a9YBY0f6/vPz5ST+8yzXD9Pz2qw4kpTIN2zzXx3zeK8uTRL5ZnzIteuXb7P8Q6XzV/6x//FS/nhNzlnkZ9f/6EE6f1XSiaRrkq5LOpUUvdM3Jd3K6N9Z6n/X8vyBTUSfvtYGG32TbxXvH82eN73Af5I16K7Pe3H+afZw4itknPmCRpw/szzfVflnBfPNON+6fB90MsZrBY8L2KiZ+V/cpvPflX6Fy/P/pX2+nj//AeQYDEdvL4LA/ziIbramWDyzqvBM0YyPkPfi6O6YeEY5LaLNiFV3ivKLo4whL/VpKbtobOdKo9vXLrzhlsV81pbf6zSo7CsJwJa0P/U/tAfD0eNe/6Lrd/13Z89fzLfdZl/eXrk7B7Dn0otzAAAAAAAAAAAAAACwj25LulMkaPsDPwAAAAA74//+eMiT9PdQTvuTLV4qAAAAAAAAAAAAAAAAAAAAsPf+BAAA//8xiEDA") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1000, 0x0) getdents(r0, 0x0, 0x0) 1m13.547757246s ago: executing program 1 (id=691): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f0000000200)={[{@fat=@codepage={'codepage', 0x3d, '874'}}, {@nodots}, {@fat=@gid}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@fat=@check_strict}, {@fat=@check_strict}, {@fat=@tz_utc}, {@nodots}, {}, {@fat=@sys_immutable}, {@nodots}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@nodots}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000940)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m12.548445785s ago: executing program 1 (id=696): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 1m9.274333056s ago: executing program 32 (id=696): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 11.57391456s ago: executing program 2 (id=899): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xc9e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) 11.115638796s ago: executing program 2 (id=903): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) 10.643554554s ago: executing program 2 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="cb190a25f8797b1842dd9b780a315f33ade7ea4740d042271298b0d69f6916a67a9207ae1d8a8d4703577a8853d6e689023df4bb8def", @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYBLOB="001d99745f834b8056be239a7d835a0bfb39de7c6a048dc6cca6919d7927aad862aeeed8e9583e7fe162d5638e7737ce9b3233e97e1804ae7bee3132e912e97dae39daf50ac1923fb85d272827347af8e5c7a77927aeaeb7a56c444e8d198ce1dd530631341e2e6bad0858bc4dead37fcf2e3cfe776486b240c264d698ff7a4e182ee14fca", @ANYRESDEC, @ANYRES16], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x9, 0x3, 0x800078, 0x2, 0x6, 0x10001, 0x1000, 0xf67, 0x16}) 8.705878162s ago: executing program 2 (id=915): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) 7.385960736s ago: executing program 4 (id=921): r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 5.74710456s ago: executing program 3 (id=927): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d43"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 5.163056123s ago: executing program 3 (id=930): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x2}, 0x20) 4.767931259s ago: executing program 4 (id=933): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) 4.605794855s ago: executing program 3 (id=934): openat$vicodec0(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$caif_seqpacket(0x25, 0x5, 0x5) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0), 0x40c0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.501878588s ago: executing program 5 (id=935): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.275764094s ago: executing program 4 (id=936): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "92a60e10352fbb80", "3230483b9803afd113c26c3687b9564d", "472e17a6", "37d26cbba4466aab"}, 0x28) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780"], 0x90}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 4.095805058s ago: executing program 2 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@gqnoenforce}, {@uquota}, {@sysvgroups}, {@inode64}, {@gqnoenforce}]}, 0x1, 0xb919, &(0x7f0000001440)="$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") getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'inode64'}, 0x0, 0x0) 3.993180751s ago: executing program 5 (id=938): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7d) 3.852453136s ago: executing program 0 (id=939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000024c0)=""/4117, 0x1, 0x1015}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 3.807940229s ago: executing program 4 (id=940): r0 = open(&(0x7f0000000280)='./bus\x00', 0x14507e, 0x0) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.087715513s ago: executing program 5 (id=941): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file2\x00', 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2.866109515s ago: executing program 0 (id=942): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000010}) 2.854276297s ago: executing program 3 (id=943): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="c8f6f5ca86e197f79fabe9ddeadd30da3e8ce79147b218f0c5d70a2ea2f271e610fdf612c07818f3a95428f4e847def4ce472141079176e806d3fa263056bef314dbdecd3545f34bdb0037a6d4bde2cd860344473a736969c4f59309f07e870617dc24792ae54aac4c794d73e9815fa3c653abe1561b641da57453c9208f799b6525ec7bcf69d4ef1ad6015524e9c451e6707efd3e624d71bd513c22408611b36de65e43eeb077ca"], 0x4, 0x2e0, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) syz_clone3(&(0x7f0000000380)={0x40800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.255539356s ago: executing program 4 (id=944): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 2.0808235s ago: executing program 0 (id=945): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.865918553s ago: executing program 5 (id=946): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.66946886s ago: executing program 0 (id=947): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pread64(r1, &(0x7f0000000140)=""/29, 0x1d, 0x2) 1.663662636s ago: executing program 2 (id=948): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000240)={[{@utf8no}, {@utf8no}, {@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@numtail}, {@shortname_mixed}, {@fat=@check_strict}, {@uni_xlateno}, {@numtail}, {@rodir}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}]}, 0x25, 0x358, &(0x7f0000000480)="$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") r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1.382443077s ago: executing program 4 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5928, &(0x7f0000009d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99) 1.254260035s ago: executing program 3 (id=950): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2) 1.188875335s ago: executing program 5 (id=951): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0xc) r1 = dup(r0) connect$inet6(r1, 0x0, 0x0) 1.128891584s ago: executing program 0 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}]}, 0x34}}, 0x0) 230.499986ms ago: executing program 5 (id=953): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0xe, 0x0, 0x0) 203.117921ms ago: executing program 0 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 0s ago: executing program 3 (id=955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 807] veth0_macvtap: entered promiscuous mode [ 265.728950][ T5807] veth1_macvtap: entered promiscuous mode [ 265.946481][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.993933][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.057529][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.154058][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.163376][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.172643][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.181895][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.268453][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.380734][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.750282][ T5810] veth0_vlan: entered promiscuous mode [ 266.862656][ T5811] veth0_vlan: entered promiscuous mode [ 266.892580][ T5810] veth1_vlan: entered promiscuous mode [ 267.011273][ T5815] veth0_vlan: entered promiscuous mode [ 267.059624][ T5811] veth1_vlan: entered promiscuous mode [ 267.153268][ T5815] veth1_vlan: entered promiscuous mode [ 267.340114][ T5810] veth0_macvtap: entered promiscuous mode [ 267.451992][ T5811] veth0_macvtap: entered promiscuous mode [ 267.474466][ T5810] veth1_macvtap: entered promiscuous mode [ 267.558725][ T5811] veth1_macvtap: entered promiscuous mode [ 267.638266][ T5815] veth0_macvtap: entered promiscuous mode [ 267.697863][ T5815] veth1_macvtap: entered promiscuous mode [ 267.751415][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.831663][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.876748][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.933264][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.964088][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.010780][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.020027][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.029266][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.038533][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.068213][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.097851][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.107098][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.116364][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.125556][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.202713][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.212020][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.222731][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.233437][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.672766][ T5808] veth0_vlan: entered promiscuous mode [ 268.762425][ T5808] veth1_vlan: entered promiscuous mode [ 269.152048][ T5808] veth0_macvtap: entered promiscuous mode [ 269.288213][ T5808] veth1_macvtap: entered promiscuous mode [ 269.477001][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.561026][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.709902][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.719219][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.730605][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.740719][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.858627][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.866928][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.130962][ T4736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.141993][ T4736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.596325][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 274.902075][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.910310][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.220097][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.229060][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.512732][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.521110][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.030517][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.038746][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.063882][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.072229][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.380723][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.389264][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.291984][ T6005] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 277.412006][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.420643][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.501636][ T6011] loop0: detected capacity change from 0 to 64 [ 277.621557][ T6011] ======================================================= [ 277.621557][ T6011] WARNING: The mand mount option has been deprecated and [ 277.621557][ T6011] and is ignored by this kernel. Remove the mand [ 277.621557][ T6011] option from the mount to silence this warning. [ 277.621557][ T6011] ======================================================= [ 277.756510][ T3798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.764934][ T3798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.906980][ T6014] loop2: detected capacity change from 0 to 32768 [ 278.942096][ T6014] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11 (6014) [ 279.016141][ T6014] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 279.027056][ T6014] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 279.042406][ T6014] BTRFS info (device loop2): using free-space-tree [ 279.592780][ T5811] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 281.445702][ T6062] capability: warning: `syz.2.26' uses deprecated v2 capabilities in a way that may be insecure [ 283.326340][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 284.645812][ T6100] loop3: detected capacity change from 0 to 64 [ 284.731823][ T6100] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 285.373260][ T6109] loop4: detected capacity change from 0 to 1024 [ 285.617800][ T6109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.635859][ T6109] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.845255][ T6109] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.45: bg 0: block 400: padding at end of block bitmap is not set [ 285.911204][ T6109] EXT4-fs (loop4): Remounting filesystem read-only [ 285.996874][ T3737] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 286.324655][ T6109] syz.4.45 (6109) used greatest stack depth: 3888 bytes left [ 286.396511][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.025133][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 287.071561][ T5867] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 287.122799][ T6130] process 'syz.4.50' launched '/dev/fd/3' with NULL argv: empty string added [ 287.284518][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 287.298755][ T5867] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.307741][ T5867] usb 3-1: config 0 has no interface number 0 [ 287.314766][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 287.347146][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.356781][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.385756][ T5867] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 287.395546][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.403858][ T5867] usb 3-1: Product: syz [ 287.408433][ T5867] usb 3-1: Manufacturer: syz [ 287.413301][ T5867] usb 3-1: SerialNumber: syz [ 287.451319][ T5867] usb 3-1: config 0 descriptor?? [ 287.500616][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 287.508197][ T9] pvrusb2: ********** [ 287.512394][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 287.522910][ T9] pvrusb2: Important functionality might not be entirely working. [ 287.531193][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 287.543353][ T9] pvrusb2: ********** [ 287.553044][ T5867] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 287.802297][ T2326] pvrusb2: Invalid write control endpoint [ 287.991484][ T6127] pvrusb2: Invalid write control endpoint [ 288.022639][ T6135] loop4: detected capacity change from 0 to 64 [ 288.047042][ T9] usb 2-1: USB disconnect, device number 2 [ 288.079284][ T6135] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 288.408152][ T5867] gspca_spca1528: reg_w err -71 [ 288.425265][ T2326] pvrusb2: Invalid write control endpoint [ 288.431238][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 288.435582][ T5867] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 288.441087][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 288.466263][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 288.479750][ T2326] pvrusb2: Device being rendered inoperable [ 288.487658][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 288.500456][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 288.512001][ T2326] pvrusb2: Attached sub-driver cx25840 [ 288.517851][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 288.528955][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 288.625981][ T5867] usb 3-1: USB disconnect, device number 2 [ 289.554534][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 290.571071][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 290.623350][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.634979][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.649503][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 290.660430][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.669260][ T6150] loop2: detected capacity change from 0 to 32768 [ 290.683362][ T6150] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.60 (6150) [ 290.706855][ T6150] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 290.717624][ T6150] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 290.727571][ T6150] BTRFS info (device loop2): using free-space-tree [ 290.773552][ T9] usb 2-1: config 0 descriptor?? [ 290.931660][ T6150] BTRFS info (device loop2): rebuilding free space tree [ 291.061558][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.068976][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.224793][ T6150] BTRFS info (device loop2): balance: start -susage=34359738372,vrange=18446744073709551614..0,limit=25769803776,limit=0..6 [ 291.240530][ T6150] BTRFS info (device loop2): balance: ended with status: 0 [ 291.317537][ T9] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 291.473851][ T9] playstation 0003:054C:05C4.0001: Invalid byte count transferred, expected 16 got 0 [ 291.483971][ T9] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -22 [ 291.488237][ T5811] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 291.493890][ T9] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 291.513254][ T9] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 291.727181][ T9] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -22 [ 291.802796][ T9] usb 2-1: USB disconnect, device number 3 [ 293.275714][ T6183] fido_id[6183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 293.840806][ T6198] mmap: syz.0.75 (6198) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 293.943358][ T6200] loop1: detected capacity change from 0 to 256 [ 294.027338][ T6200] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 294.040410][ T6200] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 294.249072][ T6200] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 295.748700][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 296.652917][ T6214] syz.1.82 (6214): drop_caches: 2 [ 297.287967][ T6225] loop0: detected capacity change from 0 to 512 [ 297.370344][ T6225] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 297.488020][ T6225] EXT4-fs (loop0): invalid journal inode [ 297.494034][ T6225] EXT4-fs (loop0): can't get journal size [ 297.632104][ T6225] EXT4-fs (loop0): 1 truncate cleaned up [ 297.673304][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.110470][ T6236] loop8: detected capacity change from 0 to 1 [ 298.140075][ T6236] Dev loop8: unable to read RDB block 1 [ 298.146283][ T6236] loop8: unable to read partition table [ 298.181434][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.215074][ T6236] loop8: partition table beyond EOD, truncated [ 298.226476][ T6236] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 298.915665][ T6233] infiniband syz1: set active [ 298.920694][ T6233] infiniband syz1: added syz_tun [ 299.037689][ T6233] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 299.074423][ T6233] infiniband syz1: Couldn't open port 1 [ 299.274959][ T5867] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 299.325208][ T6233] RDS/IB: syz1: added [ 299.329521][ T6233] smc: adding ib device syz1 with port count 1 [ 299.341184][ T6233] smc: ib device syz1 port 1 has pnetid [ 299.703319][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 299.748561][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.764843][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.778075][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.788355][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 299.797861][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.971249][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 300.101789][ T5867] usb 4-1: config 0 descriptor?? [ 300.131339][ T5867] hub 4-1:0.0: USB hub found [ 300.164996][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 300.203326][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.215309][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 300.224887][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.255609][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 300.392553][ T5867] hub 4-1:0.0: 2 ports detected [ 300.514124][ T9] usb 1-1: config 0 descriptor?? [ 300.564936][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 300.594886][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 300.603881][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 300.614166][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 300.653388][ T5867] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 300.660319][ T5867] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 300.691117][ T42] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 300.700685][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.827430][ T42] pvrusb2: Hardware description: Terratec Grabster AV400 [ 300.834895][ T42] pvrusb2: ********** [ 300.839100][ T42] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 300.849717][ T42] pvrusb2: Important functionality might not be entirely working. [ 300.857847][ T42] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 300.869517][ T42] pvrusb2: ********** [ 301.128229][ T2326] pvrusb2: Invalid write control endpoint [ 301.187801][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 301.200848][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.301973][ T5867] usb 4-1: USB disconnect, device number 2 [ 301.376806][ T11] usb 2-1: USB disconnect, device number 4 [ 301.413304][ T9] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 301.757324][ T9] usb 1-1: USB disconnect, device number 2 [ 301.778178][ T2326] pvrusb2: Invalid write control endpoint [ 301.784407][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 301.794026][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 301.802005][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 301.818394][ T2326] pvrusb2: Device being rendered inoperable [ 301.826433][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 301.833761][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 301.843757][ T2326] pvrusb2: Attached sub-driver cx25840 [ 301.849697][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 301.860125][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 302.300209][ T6253] loop4: detected capacity change from 0 to 4096 [ 303.378462][ T6258] loop1: detected capacity change from 0 to 32768 [ 303.443549][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 303.467946][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 303.484079][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 303.528776][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 303.599311][ T6258] JBD2: Ignoring recovery information on journal [ 303.728989][ T6258] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 303.826861][ T3798] (kworker/u8:15,3798,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 303.937313][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 303.998372][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x2e880d5e. Applying ECC. [ 304.012280][ T6258] (syz.1.102,6258,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x960d5e93 [ 304.025365][ T6258] (syz.1.102,6258,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 304.034023][ T6258] (syz.1.102,6258,0):ocfs2_quota_read:201 ERROR: status = -5 [ 304.041936][ T6258] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 304.051856][ T6258] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 304.066448][ T6258] (syz.1.102,6258,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 304.076251][ T6258] (syz.1.102,6258,0):ocfs2_mknod:314 ERROR: status = -5 [ 304.083570][ T6258] (syz.1.102,6258,0):ocfs2_mknod:502 ERROR: status = -5 [ 304.091097][ T6258] (syz.1.102,6258,0):ocfs2_create:675 ERROR: status = -5 [ 304.297522][ T5810] ocfs2: Unmounting device (7,1) on (node local) [ 305.126923][ T6274] netlink: 'syz.3.110': attribute type 7 has an invalid length. [ 305.776276][ T6276] capability: warning: `syz.0.111' uses 32-bit capabilities (legacy support in use) [ 305.786707][ T6270] loop4: detected capacity change from 0 to 4096 [ 306.638479][ T6279] loop3: detected capacity change from 0 to 32768 [ 306.665190][ T6279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.112 (6279) [ 306.837662][ T6279] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 306.850399][ T6279] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 306.862030][ T6279] BTRFS info (device loop3): using free-space-tree [ 306.911296][ T6281] loop1: detected capacity change from 0 to 256 [ 307.264125][ T6294] loop0: detected capacity change from 0 to 2048 [ 307.463828][ T6279] BTRFS info (device loop3): rebuilding free space tree [ 307.537194][ T6300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.771044][ T5815] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.920071][ T6300] NILFS (loop0): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 307.932222][ T6300] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=2) [ 308.061373][ T6300] Remounting filesystem read-only [ 308.595397][ T5807] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 309.851442][ T30] audit: type=1326 audit(1752505988.322:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.122" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e9b8e929 code=0x0 [ 309.873349][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.909824][ T6318] loop1: detected capacity change from 0 to 1024 [ 310.807773][ T6312] loop2: detected capacity change from 0 to 8192 [ 311.117761][ T30] audit: type=1800 audit(1752505989.602:3): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.119" name="file2" dev="loop2" ino=1048601 res=0 errno=0 [ 311.175379][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.183682][ T6312] FAT-fs (loop2): Filesystem has been set read-only [ 311.190930][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.199238][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.207590][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.215931][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.224108][ T6312] syz.2.119: attempt to access beyond end of device [ 311.224108][ T6312] loop2: rw=0, sector=65368, nr_sectors = 1 limit=8192 [ 311.245312][ T6312] Buffer I/O error on dev loop2, logical block 65368, async page read [ 311.255699][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.263944][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.272338][ T6312] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000ff12) [ 311.409676][ T6333] xt_hashlimit: size too large, truncated to 1048576 [ 313.560525][ T6353] loop3: detected capacity change from 0 to 128 [ 313.850657][ T30] audit: type=1800 audit(1752505992.332:4): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.136" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 313.906968][ T35] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 313.916068][ T35] FAT-fs (loop3): Filesystem has been set read-only [ 313.923058][ T35] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 314.697339][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.141'. [ 314.707564][ T6363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.141'. [ 315.199246][ T6370] loop1: detected capacity change from 0 to 16 [ 315.213045][ T6370] erofs (device loop1): mounted with root inode @ nid 36. [ 315.251966][ T50] erofs (device loop1): failed to decompress -11 in[4096, 0] out[9000] [ 315.290345][ T6370] erofs (device loop1): failed to decompress -11 in[4096, 0] out[9000] [ 315.299453][ T6370] erofs (device loop1): read error -117 @ 0 of nid 89 [ 315.349508][ T30] audit: type=1800 audit(1752505993.812:5): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.144" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 316.487493][ T6376] loop3: detected capacity change from 0 to 4096 [ 316.515123][ T6387] input: syz0 as /devices/virtual/input/input5 [ 316.571052][ T6376] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 317.211016][ T6376] ntfs3(loop3): ino=19, mi_enum_attr [ 317.217705][ T6376] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 317.408446][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 317.413829][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 317.619685][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 317.708136][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 317.765518][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 317.775064][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 317.787974][ T9] usb 1-1: Product: syz [ 317.792428][ T9] usb 1-1: Manufacturer: syz [ 317.800671][ T9] usb 1-1: SerialNumber: syz [ 318.176089][ T9] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 318.184984][ T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 318.200047][ T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 318.210446][ T9] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 318.373859][ T9] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 318.383988][ T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 318.541047][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 318.613468][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 318.740882][ T9] usb 1-1: USB disconnect, device number 3 [ 318.847189][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 318.919824][ T6412] loop3: detected capacity change from 0 to 256 [ 318.967016][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 318.982915][ T9] visor 1-1:1.0: device disconnected [ 319.381903][ T6412] FAT-fs (loop3): Directory bread(block 64) failed [ 319.389010][ T6412] FAT-fs (loop3): Directory bread(block 65) failed [ 319.396852][ T6412] FAT-fs (loop3): Directory bread(block 66) failed [ 319.403668][ T6412] FAT-fs (loop3): Directory bread(block 67) failed [ 319.410837][ T6412] FAT-fs (loop3): Directory bread(block 68) failed [ 319.417816][ T6412] FAT-fs (loop3): Directory bread(block 69) failed [ 319.429910][ T6412] FAT-fs (loop3): Directory bread(block 70) failed [ 319.438485][ T6412] FAT-fs (loop3): Directory bread(block 71) failed [ 319.445778][ T6412] FAT-fs (loop3): Directory bread(block 72) failed [ 319.452573][ T6412] FAT-fs (loop3): Directory bread(block 73) failed [ 320.228677][ T6415] loop1: detected capacity change from 0 to 32768 [ 320.437492][ T6417] loop4: detected capacity change from 0 to 32768 [ 320.802685][ T6415] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 320.802847][ T6415] allowing incompatible features above 0.0: (unknown version) [ 320.802942][ T6415] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 320.848592][ T6415] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 320.863637][ T6415] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 320.873563][ T6415] bcachefs (loop1): Version upgrade required: [ 320.873563][ T6415] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 320.873563][ T6415] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 320.873563][ T6415] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 320.949296][ T6415] bcachefs (loop1): dropping and reconstructing all alloc info [ 321.117094][ T6415] bcachefs (loop1): accounting_read... done [ 321.126505][ T6415] bcachefs (loop1): alloc_read... done [ 321.135592][ T6415] bcachefs (loop1): snapshots_read... done [ 321.148791][ T6415] bcachefs (loop1): done starting filesystem [ 321.222715][ T6415] overlay: case-insensitive capable filesystem on ./file0 not supported [ 321.315644][ T5810] bcachefs (loop1): shutting down [ 321.523819][ T5810] bcachefs (loop1): shutdown complete [ 322.477412][ T6431] loop3: detected capacity change from 0 to 32768 [ 322.646519][ T6431] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 323.551192][ T6431] XFS (loop3): Ending clean mount [ 323.597689][ T6431] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 323.609655][ T6431] XFS (loop3): Unmount and run xfs_repair [ 323.615928][ T6431] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 323.629350][ T6431] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 323.640354][ T6431] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 323.649630][ T6431] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 323.665600][ T6431] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 323.682196][ T6431] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 323.694096][ T6431] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 323.703426][ T6431] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.712773][ T6431] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 323.727448][ T6431] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 323.835219][ T5815] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 323.891764][ T5815] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 325.318568][ T9] IPVS: starting estimator thread 0... [ 325.424942][ T6464] IPVS: using max 240 ests per chain, 12000 per kthread [ 326.022385][ T6468] loop2: detected capacity change from 0 to 64 [ 327.318341][ T6470] loop0: detected capacity change from 0 to 4096 [ 327.402546][ T6470] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 328.413495][ T6486] loop3: detected capacity change from 0 to 512 [ 328.605442][ T6486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.619052][ T6486] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.715353][ T6498] Zero length message leads to an empty skb [ 328.816183][ T6490] loop4: detected capacity change from 0 to 512 [ 328.831882][ T6486] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.186: corrupted inode contents [ 328.924692][ T6490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.935266][ T6486] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.186: mark_inode_dirty error [ 328.991717][ T6486] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.186: corrupted inode contents [ 329.052401][ T6490] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.187: invalid block [ 329.078313][ T6486] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.186: mark_inode_dirty error [ 329.136175][ T6490] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.187: invalid indirect mapped block 4294967295 (level 1) [ 329.195278][ T6504] EXT4-fs error (device loop3): ext4_lookup:1784: inode #18: comm syz.3.186: 'file0' linked to parent dir [ 329.267322][ T6490] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.187: invalid indirect mapped block 4294967295 (level 1) [ 329.366019][ T6490] EXT4-fs (loop4): 2 truncates cleaned up [ 329.375897][ T6490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.502753][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.734915][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.162656][ T6514] loop2: detected capacity change from 0 to 128 [ 330.883849][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 330.898143][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 330.908851][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.200'. [ 330.918685][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.200'. [ 330.928066][ T6523] netlink: 'syz.3.200': attribute type 6 has an invalid length. [ 332.563449][ T6527] loop1: detected capacity change from 0 to 32768 [ 332.573803][ T6527] XFS: noikeep mount option is deprecated. [ 332.726824][ T6527] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.770284][ T6531] loop4: detected capacity change from 0 to 2048 [ 332.909569][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.228532][ T6527] XFS (loop1): Ending clean mount [ 333.257720][ T6527] XFS (loop1): Quotacheck needed: Please wait. [ 333.375608][ T6527] XFS (loop1): Quotacheck: Done. [ 333.618268][ T5810] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 333.789326][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.816072][ T6553] loop2: detected capacity change from 0 to 65 [ 333.884122][ T6556] netlink: 144 bytes leftover after parsing attributes in process `syz.0.208'. [ 333.893599][ T6556] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 333.923247][ T6553] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 335.719509][ T6571] netlink: 152 bytes leftover after parsing attributes in process `syz.0.216'. [ 336.406779][ T5867] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 336.459065][ T6579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 336.615116][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 336.651201][ T5867] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.663101][ T5867] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.673509][ T5867] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.687042][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 336.693979][ T5867] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 336.703606][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.926217][ T5867] usb 2-1: config 0 descriptor?? [ 337.395429][ T5867] mcp2200 0003:04D8:00DF.0003: item 0 4 0 9 parsing failed [ 337.438998][ T5867] mcp2200 0003:04D8:00DF.0003: can't parse reports [ 337.452817][ T5867] mcp2200 0003:04D8:00DF.0003: probe with driver mcp2200 failed with error -22 [ 337.631657][ T5867] usb 2-1: USB disconnect, device number 5 [ 337.821904][ T6588] netlink: 'syz.3.224': attribute type 9 has an invalid length. [ 337.847449][ T6588] bond_slave_0: entered promiscuous mode [ 337.853535][ T6588] bond_slave_1: entered promiscuous mode [ 337.864662][ T6588] macvlan2: entered promiscuous mode [ 337.870241][ T6588] bond0: entered promiscuous mode [ 337.884488][ T6588] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.359050][ T5867] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 338.588552][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.599168][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 338.610758][ T5867] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 338.737972][ T5867] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 338.747591][ T5867] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 338.756091][ T5867] usb 1-1: Manufacturer: syz [ 338.822001][ T5867] usb 1-1: config 0 descriptor?? [ 339.499922][ T6608] exFAT-fs (nullb0): invalid boot record signature [ 339.507339][ T6608] exFAT-fs (nullb0): failed to read boot sector [ 339.513885][ T6608] exFAT-fs (nullb0): failed to recognize exfat type [ 341.316920][ T5867] usb 1-1: USB disconnect, device number 4 [ 341.968148][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 342.662310][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 342.999179][ T6642] loop0: detected capacity change from 0 to 512 [ 343.166587][ T6642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 343.185040][ T6642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 343.357240][ T6642] EXT4-fs (loop0): 1 truncate cleaned up [ 343.365903][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.527209][ T6642] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes [ 344.092131][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.830750][ T6673] loop1: detected capacity change from 0 to 256 [ 347.206230][ T6683] loop0: detected capacity change from 0 to 4096 [ 347.605799][ T6697] o2cb: This node has not been configured. [ 347.605876][ T6683] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 347.611873][ T6697] o2cb: Cluster check failed. Fix errors before retrying. [ 347.626886][ T6697] (syz.1.269,6697,1):user_dlm_register:674 ERROR: status = -22 [ 347.634904][ T6697] (syz.1.269,6697,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 347.926130][ T6683] ntfs3(loop0): Failed to load $Extend (-22). [ 347.932546][ T6683] ntfs3(loop0): Failed to initialize $Extend. [ 348.305777][ T6704] netlink: 4172 bytes leftover after parsing attributes in process `syz.4.272'. [ 349.410521][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 349.644875][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 349.678178][ T6723] loop0: detected capacity change from 0 to 256 [ 349.679960][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 349.694358][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.783965][ T9] usb 5-1: config 0 descriptor?? [ 349.920511][ T5163] udevd[5163]: worker [6593] terminated by signal 33 (Unknown signal 33) [ 349.976009][ T5163] udevd[5163]: worker [6593] failed while handling '/devices/virtual/block/loop0' [ 350.076570][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 350.102253][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.154782][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 350.162526][ T9] usb 5-1: media controller created [ 350.279306][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.782371][ T9] az6027: usb out operation failed. (-71) [ 350.806848][ T9] az6027: usb out operation failed. (-71) [ 350.813544][ T9] stb0899_attach: Driver disabled by Kconfig [ 350.820470][ T9] az6027: no front-end attached [ 350.820470][ T9] [ 350.918674][ T9] az6027: usb out operation failed. (-71) [ 350.925280][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 350.936620][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 351.122267][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 351.135937][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 351.222790][ T9] usb 5-1: USB disconnect, device number 2 [ 351.255675][ T6738] loop3: detected capacity change from 0 to 256 [ 351.414930][ T6738] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.425988][ T6738] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 351.555901][ T6738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 351.715349][ T30] audit: type=1800 audit(1752506030.192:6): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="file1" dev="loop3" ino=1048605 res=0 errno=0 [ 351.788088][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 352.351043][ T6748] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.433259][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.441609][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.449982][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.479378][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 352.487211][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 352.507465][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.514329][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.229268][ T6762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.035400][ T6772] netlink: 'syz.1.302': attribute type 83 has an invalid length. [ 354.922358][ T6781] loop1: detected capacity change from 0 to 1024 [ 358.135513][ T5867] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 358.384687][ T5867] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 358.394637][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.488596][ T5867] usb 1-1: config 0 descriptor?? [ 358.517144][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 358.754866][ T5867] gp8psk: usb in 128 operation failed. [ 358.963893][ T5867] gp8psk: usb in 146 operation failed. [ 358.969756][ T5867] gp8psk: failed to get FW version [ 359.015035][ T5867] gp8psk: usb in 149 operation failed. [ 359.020775][ T5867] gp8psk: failed to get FPGA version [ 359.069539][ T5867] gp8psk: usb in 138 operation failed. [ 359.075462][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 359.086330][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 359.146221][ T5867] usb 1-1: USB disconnect, device number 5 [ 359.205142][ T6827] loop1: detected capacity change from 0 to 256 [ 359.393672][ T6827] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 359.505632][ T6827] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 359.733458][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 360.448162][ T6840] loop1: detected capacity change from 0 to 16 [ 360.504979][ T6840] erofs (device loop1): mounted with root inode @ nid 36. [ 360.946918][ T6842] loop4: detected capacity change from 0 to 64 [ 361.273133][ T6842] hfs: keylen 94 too large [ 361.343451][ T6838] loop0: detected capacity change from 0 to 4096 [ 361.407826][ T6838] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 361.881314][ T6847] loop1: detected capacity change from 0 to 4096 [ 361.945075][ T6848] loop2: detected capacity change from 0 to 256 [ 362.055254][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.098650][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.106282][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.113540][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.121019][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.128423][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.135974][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.143285][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.150744][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.158160][ T6852] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 362.247547][ T6847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.357115][ T6838] ntfs3(loop0): ino=19, mi_enum_attr [ 362.362857][ T6838] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 362.370952][ T6838] ntfs3(loop0): ino=3, ntfs_set_state failed, -22. [ 362.579556][ T6838] ntfs3(loop0): ino=18, mi_enum_attr [ 362.662035][ T6838] ntfs3(loop0): Failed to load root (-22). [ 362.700274][ T6838] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22. [ 362.776560][ T5810] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.647099][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 363.855015][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 364.291323][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.304054][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.316278][ T5867] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 364.327360][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.509198][ T5867] usb 5-1: config 0 descriptor?? [ 364.652442][ T6865] loop3: detected capacity change from 0 to 2048 [ 365.019394][ T6865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.078605][ T5867] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 365.419767][ T5867] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 365.427822][ T5867] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 365.529013][ T5867] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 365.679733][ T5867] usb 5-1: USB disconnect, device number 3 [ 366.052890][ T6874] loop2: detected capacity change from 0 to 2048 [ 366.227497][ T6874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.256686][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'. [ 366.260566][ T6873] fido_id[6873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 366.577886][ T6874] EXT4-fs: Ignoring removed bh option [ 366.615016][ T6874] EXT4-fs (loop2): can't disable delalloc during remount [ 366.834830][ T6881] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 367.018234][ T6888] loop1: detected capacity change from 0 to 24 [ 367.081875][ T6888] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 367.288984][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.213425][ T6902] loop0: detected capacity change from 0 to 512 [ 369.432182][ T6908] loop1: detected capacity change from 0 to 764 [ 369.579047][ T6902] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.358: bg 0: block 5: invalid block bitmap [ 369.611341][ T6912] syz.3.362: attempt to access beyond end of device [ 369.611341][ T6912] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 369.625398][ T6912] syz.3.362: attempt to access beyond end of device [ 369.625398][ T6912] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 369.638777][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.648998][ T6912] syz.3.362: attempt to access beyond end of device [ 369.648998][ T6912] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 369.662781][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.706753][ T6912] syz.3.362: attempt to access beyond end of device [ 369.706753][ T6912] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 369.720566][ T6912] syz.3.362: attempt to access beyond end of device [ 369.720566][ T6912] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 369.733894][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.744994][ T6912] syz.3.362: attempt to access beyond end of device [ 369.744994][ T6912] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 369.758421][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.848173][ T6902] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 369.879664][ T6902] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.358: invalid indirect mapped block 3 (level 2) [ 369.926890][ T6902] EXT4-fs (loop0): 2 truncates cleaned up [ 369.936729][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.946024][ T6912] syz.3.362: attempt to access beyond end of device [ 369.946024][ T6912] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 369.962828][ T6912] syz.3.362: attempt to access beyond end of device [ 369.962828][ T6912] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 369.976240][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.986836][ T6912] syz.3.362: attempt to access beyond end of device [ 369.986836][ T6912] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 370.000324][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 370.085665][ T6912] syz.3.362: attempt to access beyond end of device [ 370.085665][ T6912] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 370.099400][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 370.115851][ T6912] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 370.125803][ T6912] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 371.192254][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.621619][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 371.631840][ T50] CPU: 0 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 371.632003][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.632136][ T50] Workqueue: hci0 hci_rx_work [ 371.632332][ T50] Call Trace: [ 371.632392][ T50] [ 371.632451][ T50] __dump_stack+0x26/0x30 [ 371.632634][ T50] dump_stack_lvl+0x1df/0x270 [ 371.632825][ T50] dump_stack+0x1e/0x25 [ 371.633013][ T50] sysfs_create_dir_ns+0x46c/0x540 [ 371.633282][ T50] kobject_add_internal+0xeed/0x1840 [ 371.633494][ T50] kobject_add+0x2c1/0x410 [ 371.633685][ T50] ? kmsan_get_metadata+0xfb/0x160 [ 371.633897][ T50] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 371.634119][ T50] device_add+0xa70/0x1c10 [ 371.634338][ T50] hci_conn_add_sysfs+0x15f/0x2f0 [ 371.634532][ T50] le_conn_complete_evt+0x1b35/0x21b0 [ 371.634801][ T50] hci_le_enh_conn_complete_evt+0x158/0x260 [ 371.635045][ T50] hci_le_meta_evt+0x6e8/0x960 [ 371.635271][ T50] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 371.635529][ T50] hci_event_packet+0xce2/0x1e40 [ 371.635715][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 371.635973][ T50] hci_rx_work+0x9a8/0x12b0 [ 371.636193][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 371.636413][ T50] process_scheduled_works+0xb91/0x1d80 [ 371.636681][ T50] worker_thread+0xedf/0x1590 [ 371.636925][ T50] kthread+0xd59/0xf00 [ 371.637071][ T50] ? __pfx_worker_thread+0x10/0x10 [ 371.637295][ T50] ? __pfx_kthread+0x10/0x10 [ 371.637475][ T50] ret_from_fork+0x1e0/0x310 [ 371.637632][ T50] ? __pfx_kthread+0x10/0x10 [ 371.637792][ T50] ret_from_fork_asm+0x1a/0x30 [ 371.638032][ T50] [ 371.809717][ T50] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 371.825452][ T50] Bluetooth: hci0: failed to register connection device [ 373.345711][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 373.355768][ T6951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.377'. [ 373.966459][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 374.228221][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.236798][ T9] usb 3-1: config 0 has no interface number 0 [ 374.297156][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.383'. [ 374.310859][ T6962] loop1: detected capacity change from 0 to 256 [ 374.314600][ T6962] exfat: Deprecated parameter 'utf8' [ 374.323416][ T6962] exfat: Deprecated parameter 'namecase' [ 374.329692][ T6962] exfat: Deprecated parameter 'utf8' [ 374.338746][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.348407][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.357034][ T9] usb 3-1: Product: syz [ 374.361476][ T9] usb 3-1: Manufacturer: syz [ 374.366508][ T9] usb 3-1: SerialNumber: syz [ 374.493683][ T9] usb 3-1: config 0 descriptor?? [ 374.584808][ T6962] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 374.788641][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 374.828434][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.840012][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 374.848530][ T9] usb 3-1: media controller created [ 374.975209][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.033383][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 375.040105][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 375.046400][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 375.046522][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 375.046629][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 375.137823][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 375.556749][ T9] usb 3-1: USB disconnect, device number 3 [ 375.634044][ T6974] ------------[ cut here ]------------ [ 375.644429][ T6974] WARNING: CPU: 1 PID: 6974 at fs/exec.c:119 path_noexec+0x2ac/0x310 [ 375.652898][ T6974] Modules linked in: [ 375.658641][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.3.390 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 375.669277][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.679787][ T6974] RIP: 0010:path_noexec+0x2ac/0x310 [ 375.685586][ T6974] Code: 49 89 ff 8b 7d d4 e8 03 b1 e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 f3 b0 e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 15 bb 3e ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 b5 a5 e1 ff 48 8b 00 48 89 45 c8 [ 375.706642][ T6974] RSP: 0018:ffff888103773bc0 EFLAGS: 00010283 [ 375.713047][ T6974] RAX: ffffffff82b596db RBX: ffff888021852c18 RCX: 0000000000080000 [ 375.721431][ T6974] RDX: ffffc90009404000 RSI: 000000000000006c RDI: 000000000000006d [ 375.729812][ T6974] RBP: ffff888103773c00 R08: ffffea000000000f R09: 0000000000000003 [ 375.742765][ T6974] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 375.752253][ T6974] R13: 0000000000000000 R14: ffff888140932620 R15: 0000000000000000 [ 375.760720][ T6974] FS: 00007f1c922806c0(0000) GS:ffff8881aa95a000(0000) knlGS:0000000000000000 [ 375.770104][ T6974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.777076][ T6974] CR2: 0000001b2ef1dff8 CR3: 000000013dee6000 CR4: 00000000003526f0 [ 375.785595][ T6974] Call Trace: [ 375.789159][ T6974] [ 375.792360][ T6974] do_mmap+0x1570/0x1d70 [ 375.797311][ T6974] vm_mmap_pgoff+0x48e/0x770 [ 375.802281][ T6974] ksys_mmap_pgoff+0x51b/0x7c0 [ 375.807551][ T6974] __x64_sys_mmap+0x19c/0x260 [ 375.812572][ T6974] x64_sys_call+0x1a6e/0x3db0 [ 375.817756][ T6974] do_syscall_64+0xd9/0x210 [ 375.822639][ T6974] ? irqentry_exit+0x16/0x60 [ 375.827762][ T6974] ? clear_bhb_loop+0x40/0x90 [ 375.832774][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.839167][ T6974] RIP: 0033:0x7f1c9138e929 [ 375.848879][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.870310][ T6974] RSP: 002b:00007f1c92280038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 375.879252][ T6974] RAX: ffffffffffffffda RBX: 00007f1c915b5fa0 RCX: 00007f1c9138e929 [ 375.887668][ T6974] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 375.896275][ T6974] RBP: 00007f1c91410b39 R08: 0000000000000004 R09: 0000000000002000 [ 375.904729][ T6974] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 375.912985][ T6974] R13: 0000000000000000 R14: 00007f1c915b5fa0 R15: 00007fff7f599198 [ 375.921431][ T6974] [ 375.924820][ T6974] ---[ end trace 0000000000000000 ]--- [ 376.476628][ T6972] loop0: detected capacity change from 0 to 32768 [ 376.486978][ T6972] XFS: ikeep mount option is deprecated. [ 376.554983][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 376.698466][ T6972] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 376.844574][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 376.922179][ T11] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 376.931924][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.053691][ T11] usb 5-1: config 0 descriptor?? [ 377.089253][ T11] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 377.629296][ T6972] XFS (loop0): Ending clean mount [ 377.871141][ T5807] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.006117][ T11] gspca_nw80x: reg_r err -71 [ 378.011286][ T11] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 378.092814][ T11] usb 5-1: USB disconnect, device number 4 [ 378.226710][ T6992] loop2: detected capacity change from 0 to 4096 [ 378.274457][ T6992] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 378.556201][ T6992] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 378.596330][ T6992] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 378.603564][ T6992] ntfs3(loop2): ino=5, mi_enum_attr [ 378.615505][ T6992] ntfs3(loop2): Failed to load root (-22). [ 380.397652][ T7006] loop1: detected capacity change from 0 to 64 [ 380.523302][ T7004] loop0: detected capacity change from 0 to 32768 [ 380.622402][ T7004] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 380.631258][ T7004] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 380.660788][ T7004] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 380.947433][ T7004] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 383.028785][ T7031] loop0: detected capacity change from 0 to 2048 [ 383.134896][ T11] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 383.137854][ T7029] loop1: detected capacity change from 0 to 4096 [ 383.165628][ T7031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.252669][ T7029] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 383.441629][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.452761][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.535214][ T5813] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 383.535388][ T5813] Bluetooth: hci1: adv larger than maximum supported [ 383.538337][ T11] usb 5-1: unable to get BOS descriptor or descriptor too short [ 383.542909][ T5813] Bluetooth: hci1: Malformed LE Event: 0x0d [ 383.722179][ T11] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 383.733944][ T11] usb 5-1: can't read configurations, error -71 [ 385.158235][ T7043] loop2: detected capacity change from 0 to 32768 [ 385.331865][ T7043] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 385.350899][ T7043] (syz.2.416,7043,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 385.429850][ T7043] ocfs2: Unmounting device (7,2) on (node local) [ 386.281250][ T7051] loop3: detected capacity change from 0 to 2048 [ 386.809865][ T7051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.147741][ T7097] loop0: detected capacity change from 0 to 256 [ 390.350117][ T7097] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 390.919525][ T7099] loop1: detected capacity change from 0 to 32768 [ 391.294569][ T7099] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 391.294735][ T7099] allowing incompatible features above 0.0: (unknown version) [ 391.294841][ T7099] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 391.346902][ T7099] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 391.355787][ T7099] bcachefs (loop1): initializing new filesystem [ 391.377200][ T7099] bcachefs (loop1): going read-write [ 391.391970][ T7099] bcachefs (loop1): marking superblocks [ 391.454031][ T7099] bcachefs (loop1): initializing freespace [ 391.483051][ T7099] bcachefs (loop1): done initializing freespace [ 391.504003][ T7099] bcachefs (loop1): reading snapshots table [ 391.514760][ T7099] bcachefs (loop1): reading snapshots done [ 391.609849][ T7099] bcachefs (loop1): done starting filesystem [ 391.906216][ T7099] syz.1.441 (7099) used greatest stack depth: 1216 bytes left [ 391.963522][ T5810] bcachefs (loop1): shutting down [ 391.969096][ T5810] bcachefs (loop1): going read-only [ 391.974998][ T5810] bcachefs (loop1): finished waiting for writes to stop [ 391.996729][ T5810] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9 [ 392.296060][ T5810] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 13 [ 392.360652][ T5810] bcachefs (loop1): clean shutdown complete, journal seq 14 [ 392.395886][ T5810] bcachefs (loop1): marking filesystem clean [ 392.619361][ T5810] bcachefs (loop1): shutdown complete [ 393.330399][ T7130] Bluetooth: MGMT ver 1.23 [ 394.290307][ T7142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 394.957098][ T7148] Context (ID=0x1) not attached to queue pair (handle=0x4d9:0xd) [ 396.477912][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 396.634579][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 396.704667][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 396.794784][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.806357][ T11] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 396.816155][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.880153][ T7169] loop0: detected capacity change from 0 to 1024 [ 396.897831][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.909312][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.919776][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 396.933859][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 396.946876][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.995367][ T11] usb 4-1: config 0 descriptor?? [ 397.229021][ T9] usb 5-1: config 0 descriptor?? [ 397.256487][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.265089][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.272888][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.280686][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.288730][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.296661][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.304769][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.312296][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.320138][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.327883][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.335723][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.343235][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.356659][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.366101][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.373898][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.381631][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.389524][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.397347][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.405169][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.412707][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.420614][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.428379][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.436319][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.443826][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.457000][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.466029][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.473752][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.481460][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.489379][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.497067][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.609039][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.617066][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.625306][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.633039][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.641830][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.650041][ T7169] hfsplus: request for non-existent node 16777216 in B*Tree [ 397.690907][ T30] audit: type=1800 audit(397.636:7): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.469" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 397.871389][ T11] holtek 0003:1241:5015.0006: unknown main item tag 0x5 [ 397.925415][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0005/input/input7 [ 398.020161][ T11] holtek 0003:1241:5015.0006: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 398.031998][ T11] holtek 0003:1241:5015.0006: no inputs found [ 398.172831][ T9] sony 0003:054C:03D5.0005: input,hidraw1: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 398.361481][ T5867] usb 4-1: USB disconnect, device number 3 [ 398.366193][ T9] usb 5-1: USB disconnect, device number 7 [ 398.940230][ T7178] fido_id[7178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 399.091882][ T7186] veth1_macvtap: left promiscuous mode [ 399.650005][ T7193] loop4: detected capacity change from 0 to 16 [ 399.735122][ T7193] erofs (device loop4): mounted with root inode @ nid 36. [ 399.815612][ T7193] erofs (device loop4): corrupted dir block 0 @ nid 46 [ 399.918965][ T7188] fido_id[7188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 400.510173][ T7199] loop1: detected capacity change from 0 to 764 [ 400.675642][ T7201] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 407.698012][ T7195] net_ratelimit: 311 callbacks suppressed [ 407.698097][ T7195] Set syz1 is full, maxelem 65536 reached [ 408.075137][ T7232] loop2: detected capacity change from 0 to 1024 [ 408.159058][ T7232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.235278][ T7232] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 408.441220][ T7232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.971299][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.504662][ T7247] loop4: detected capacity change from 0 to 128 [ 409.577814][ T7247] EXT4-fs: Ignoring removed nobh option [ 409.673058][ T7247] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.699884][ T7250] loop3: detected capacity change from 0 to 64 [ 409.721276][ T7250] hfs: unable to locate alternate MDB [ 409.727159][ T7250] hfs: continuing without an alternate MDB [ 409.771897][ T7252] loop0: detected capacity change from 0 to 65 [ 409.853805][ T7252] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 410.336035][ T7252] BFS-fs: bfs_readdir(): Bad f_pos=0000801c for loop0:00000002 [ 410.369010][ T5808] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.029679][ T7258] loop4: detected capacity change from 0 to 16 [ 412.246494][ T7274] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.506'. [ 413.926147][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.932883][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.330278][ T7309] loop2: detected capacity change from 0 to 2048 [ 415.557768][ T7309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.976242][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.164374][ T5867] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 416.283843][ T7326] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 416.404882][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 416.451208][ T5867] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 416.460006][ T5867] usb 1-1: config 0 has no interface number 0 [ 416.526992][ T5867] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 416.536636][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.545224][ T5867] usb 1-1: Product: syz [ 416.549642][ T5867] usb 1-1: Manufacturer: syz [ 416.554580][ T5867] usb 1-1: SerialNumber: syz [ 416.569017][ T5867] usb 1-1: config 0 descriptor?? [ 416.622132][ T5867] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 416.734828][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 416.744440][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 416.866687][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 416.950434][ T5867] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 417.254621][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 417.277601][ T5867] usb 1-1: USB disconnect, device number 6 [ 417.916754][ T7338] loop2: detected capacity change from 0 to 256 [ 418.158019][ T7335] loop1: detected capacity change from 0 to 32768 [ 418.176737][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 418.228862][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 418.248300][ T5867] quatech2 1-1:0.51: device disconnected [ 418.321020][ T7335] JBD2: Ignoring recovery information on journal [ 418.505776][ T7335] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 418.507707][ T7341] loop4: detected capacity change from 0 to 512 [ 418.584407][ T7341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.726533][ T7341] EXT4-fs error (device loop4): __ext4_iget:5379: inode #11: block 16777237: comm syz.4.538: invalid block [ 418.767823][ T7341] EXT4-fs (loop4): Remounting filesystem read-only [ 418.777088][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.791164][ T5810] ocfs2: Unmounting device (7,1) on (node local) [ 419.074986][ T7349] loop3: detected capacity change from 0 to 512 [ 419.146654][ T7349] EXT4-fs: Ignoring removed bh option [ 419.215509][ T7349] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 419.409437][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.445732][ T7349] EXT4-fs (loop3): 1 truncate cleaned up [ 419.454009][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.943595][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.464610][ T7355] loop0: detected capacity change from 0 to 2048 [ 420.531761][ T7355] NILFS (loop0): invalid segment: Magic number mismatch [ 420.539461][ T7355] NILFS (loop0): trying rollback from an earlier position [ 420.735166][ T7355] NILFS (loop0): recovery complete [ 420.754069][ T7364] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.941132][ T7355] overlayfs: upper fs does not support tmpfile. [ 420.984817][ T7355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 420.992207][ T7355] overlayfs: failed to set xattr on upper [ 420.998588][ T7355] overlayfs: ...falling back to redirect_dir=nofollow. [ 421.008444][ T7355] overlayfs: ...falling back to metacopy=off. [ 421.016154][ T7355] overlayfs: ...falling back to index=off. [ 421.022297][ T7355] overlayfs: ...falling back to uuid=null. [ 421.858274][ T7372] loop2: detected capacity change from 0 to 16 [ 421.997816][ T7372] erofs: DAX unsupported by block device. Turning off DAX. [ 422.006351][ T7372] erofs (device loop2): mounted with root inode @ nid 36. [ 422.115226][ T7375] loop1: detected capacity change from 0 to 64 [ 424.339708][ T7390] loop0: detected capacity change from 0 to 8192 [ 424.590870][ T7408] loop4: detected capacity change from 0 to 256 [ 425.508690][ T7411] tun0: tun_chr_ioctl cmd 1074812117 [ 425.662190][ T7415] loop1: detected capacity change from 0 to 164 [ 425.955406][ T7419] loop6: detected capacity change from 0 to 524287999 [ 427.511641][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 428.459133][ T7446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.725108][ T4736] Bluetooth: hci5: Frame reassembly failed (-84) [ 429.743483][ T7464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'. [ 430.872451][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 430.882142][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 430.908479][ T7474] bridge0: port 3(vlan2) entered blocking state [ 430.915399][ T7474] bridge0: port 3(vlan2) entered disabled state [ 430.922442][ T7474] vlan2: entered allmulticast mode [ 430.927956][ T7474] bridge0: entered allmulticast mode [ 430.987591][ T7474] vlan2: left allmulticast mode [ 430.992883][ T7474] bridge0: left allmulticast mode [ 431.524692][ T7483] Lens B: ================= START STATUS ================= [ 431.532452][ T7483] Lens B: Focus, Absolute: 0 [ 431.537940][ T7483] Lens B: ================== END STATUS ================== [ 431.734921][ T5813] Bluetooth: hci5: command 0xfc11 tx timeout [ 431.750647][ T5817] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 432.275459][ T74] tipc: Subscription rejected, illegal request [ 433.017319][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 433.026727][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 433.396263][ T7510] loop3: detected capacity change from 0 to 256 [ 433.481155][ T7510] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.497016][ T7510] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 433.777930][ T7510] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xddfd5d26, utbl_chksum : 0xe619d30d) [ 433.945623][ T7518] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 435.688961][ T7543] loop0: detected capacity change from 0 to 8 [ 435.747170][ T7543] cramfs: Unknown parameter ' ' [ 435.821061][ T7545] loop1: detected capacity change from 0 to 1024 [ 436.440639][ T35] hfsplus: b-tree write err: -5, ino 4 [ 438.035950][ T7556] loop0: detected capacity change from 0 to 32768 [ 438.344828][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 438.528061][ T7558] loop2: detected capacity change from 0 to 4096 [ 438.554691][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 438.640007][ T7558] NILFS (loop2): invalid segment: Checksum error in segment payload [ 438.648936][ T7558] NILFS (loop2): trying rollback from an earlier position [ 438.692111][ T11] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 438.701893][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.710422][ T11] usb 4-1: Product: syz [ 438.717487][ T11] usb 4-1: Manufacturer: syz [ 438.722355][ T11] usb 4-1: SerialNumber: syz [ 438.745678][ T30] audit: type=1326 audit(438.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.4.636" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39e9b8e929 code=0x0 [ 438.789477][ T7558] NILFS (loop2): recovery complete [ 438.846359][ T7569] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.862185][ T11] usb 4-1: config 0 descriptor?? [ 438.950568][ T11] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 438.961614][ T11] usb 4-1: Detected FT232H [ 439.302462][ T11] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 440.300206][ T11] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 440.362973][ T11] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 440.474796][ T11] usb 4-1: USB disconnect, device number 4 [ 440.519250][ T11] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 440.531712][ T11] ftdi_sio 4-1:0.0: device disconnected [ 440.740570][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 440.834988][ T5867] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 441.098750][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 441.145875][ T5867] usb 2-1: not running at top speed; connect to a high speed hub [ 441.208574][ T5867] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 441.301599][ T5867] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.311132][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.319868][ T5867] usb 2-1: Product: syz [ 441.324436][ T5867] usb 2-1: Manufacturer: syz [ 441.329343][ T5867] usb 2-1: SerialNumber: syz [ 441.697652][ T5867] cdc_ncm 2-1:1.0: bind() failure [ 441.746670][ T5867] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 441.753857][ T5867] cdc_ncm 2-1:1.1: bind() failure [ 441.901390][ T5867] usb 2-1: USB disconnect, device number 6 [ 442.029107][ T7586] loop4: detected capacity change from 0 to 2048 [ 442.135687][ T7586] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 442.150466][ T7590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 442.280309][ T7593] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.914579][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 444.147640][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 444.187093][ T5867] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 444.198953][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.206083][ T5867] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 444.215562][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.692454][ T5867] usb 2-1: config 0 descriptor?? [ 445.285613][ T5867] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 445.293617][ T5867] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 445.301717][ T5867] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 445.309686][ T5867] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 445.317764][ T5867] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x0 [ 445.326156][ T7621] loop4: detected capacity change from 0 to 1024 [ 445.421514][ T5867] corsair-cpro 0003:1B1C:0C10.0007: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 445.850286][ T5867] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -110 [ 445.965105][ T5867] usb 2-1: USB disconnect, device number 7 [ 446.019305][ T4736] hfsplus: b-tree write err: -5, ino 4 [ 446.222662][ T7625] fido_id[7625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 449.024633][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 449.742631][ T30] audit: type=1326 audit(449.716:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.686" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9035f8e929 code=0x0 [ 449.989367][ T7679] loop4: detected capacity change from 0 to 512 [ 450.022814][ T7681] loop0: detected capacity change from 0 to 128 [ 450.037889][ T7679] EXT4-fs: Ignoring removed oldalloc option [ 450.040005][ T7683] loop1: detected capacity change from 0 to 64 [ 450.128110][ T7681] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 450.153405][ T7679] EXT4-fs (loop4): 1 truncate cleaned up [ 450.162123][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.252991][ T7681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 450.411040][ T7681] EXT4-fs (loop0): shut down requested (2) [ 450.638385][ T5810] Bad inode number on dev loop1: 4160749571 is out of range [ 450.698990][ T5810] Bad inode number on dev loop1: 4160749571 is out of range [ 450.809673][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.937020][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 451.520383][ T4278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.798632][ T4278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.005453][ T11] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 452.047047][ T7691] sctp: failed to load transform for md5: -2 [ 452.138571][ T4278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.379204][ T4278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.398830][ T11] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 452.409123][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.418559][ T11] usb 4-1: Product: syz [ 452.423009][ T11] usb 4-1: Manufacturer: syz [ 452.428126][ T11] usb 4-1: SerialNumber: syz [ 452.474719][ T11] usb 4-1: config 0 descriptor?? [ 452.995144][ T4278] bridge_slave_1: left allmulticast mode [ 453.001081][ T4278] bridge_slave_1: left promiscuous mode [ 453.008086][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.093529][ T4278] bridge_slave_0: left allmulticast mode [ 453.100217][ T4278] bridge_slave_0: left promiscuous mode [ 453.107007][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.681583][ T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 453.692201][ T11] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 453.705713][ T11] asix 4-1:0.0: probe with driver asix failed with error -71 [ 453.856736][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.859675][ T11] usb 4-1: USB disconnect, device number 5 [ 453.938545][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.955787][ T4278] bond0 (unregistering): Released all slaves [ 455.086043][ T4278] hsr_slave_0: left promiscuous mode [ 455.178036][ T4278] hsr_slave_1: left promiscuous mode [ 455.193354][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.207416][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.368533][ T4278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.378332][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.502007][ T4278] veth1_macvtap: left promiscuous mode [ 455.511075][ T4278] veth0_macvtap: left promiscuous mode [ 455.517232][ T4278] veth1_vlan: left promiscuous mode [ 455.522994][ T4278] veth0_vlan: left promiscuous mode [ 456.137629][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 456.147320][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 456.158145][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 456.171869][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 456.184896][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.515871][ T7724] program syz.2.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.036860][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 457.136637][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 457.323553][ T7731] netlink: 72 bytes leftover after parsing attributes in process `syz.2.705'. [ 458.306509][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 458.316075][ T7742] netlink: 'syz.3.709': attribute type 9 has an invalid length. [ 458.343587][ T7742] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 458.351152][ T7742] macvlan3: entered allmulticast mode [ 458.356943][ T7742] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 458.484853][ T5817] Bluetooth: hci3: command tx timeout [ 460.162090][ T7763] loop4: detected capacity change from 0 to 512 [ 460.207767][ T7763] EXT4-fs: Ignoring removed i_version option [ 460.303573][ T7763] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.716: corrupted in-inode xattr: overlapping e_value [ 460.386868][ T7763] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.716: couldn't read orphan inode 15 (err -117) [ 460.409328][ T7763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.534588][ T5817] Bluetooth: hci3: command tx timeout [ 460.786944][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.886660][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 462.068805][ T7779] loop4: detected capacity change from 0 to 32768 [ 462.187226][ T7779] [ 462.187226][ T7779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.187226][ T7779] [ 462.212363][ T7779] [ 462.212363][ T7779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.212363][ T7779] [ 462.226184][ T7779] [ 462.226184][ T7779] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.226184][ T7779] [ 462.247147][ T111] [ 462.247147][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.247147][ T111] [ 462.336400][ T5808] [ 462.336400][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.336400][ T5808] [ 462.396192][ T5808] [ 462.396192][ T5808] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 462.396192][ T5808] [ 462.438296][ T7790] loop0: detected capacity change from 0 to 64 [ 462.615391][ T5817] Bluetooth: hci3: command tx timeout [ 462.621669][ T7790] Trying to free block not in datazone [ 463.579670][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.587459][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.595418][ T7719] bridge_slave_0: entered allmulticast mode [ 463.608045][ T7719] bridge_slave_0: entered promiscuous mode [ 463.807064][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.816557][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.824682][ T7719] bridge_slave_1: entered allmulticast mode [ 463.834663][ T7719] bridge_slave_1: entered promiscuous mode [ 463.941637][ T7808] netlink: 176 bytes leftover after parsing attributes in process `syz.2.730'. [ 463.951875][ T7808] ip6gretap0: entered promiscuous mode [ 464.147863][ T7808] netlink: 176 bytes leftover after parsing attributes in process `syz.2.730'. [ 464.372010][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.504515][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.694826][ T5817] Bluetooth: hci3: command tx timeout [ 464.850642][ T7719] team0: Port device team_slave_0 added [ 464.946446][ T7719] team0: Port device team_slave_1 added [ 465.479115][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.487830][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.514789][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.709460][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.716985][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.743700][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.529910][ T7828] loop2: detected capacity change from 0 to 32768 [ 466.539874][ T7828] btrfs: Deprecated parameter 'usebackuproot' [ 466.546460][ T7828] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 466.571752][ T7828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.739 (7828) [ 466.635161][ T7828] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 466.645925][ T7828] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 466.655948][ T7828] BTRFS info (device loop2): using free-space-tree [ 466.878871][ T7719] hsr_slave_0: entered promiscuous mode [ 466.890433][ T7719] hsr_slave_1: entered promiscuous mode [ 466.899450][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.907384][ T7719] Cannot create hsr debugfs directory [ 466.951188][ T3798] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x2b55bd01 level 0 [ 466.965386][ T7828] BTRFS error (device loop2): failed to load root extent [ 466.972834][ T7828] BTRFS warning (device loop2): try to load backup roots slot 1 [ 467.125327][ T3798] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 467.140318][ T7828] BTRFS warning (device loop2): couldn't read tree root [ 467.147782][ T7828] BTRFS warning (device loop2): try to load backup roots slot 2 [ 467.193184][ T3798] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 467.204684][ T7828] BTRFS warning (device loop2): couldn't read tree root [ 467.211918][ T7828] BTRFS warning (device loop2): try to load backup roots slot 3 [ 467.253111][ T35] BTRFS warning (device loop2): checksum verify failed on logical 5251072 mirror 1 wanted 0x6f2ebd38 found 0x0e9e00a9 level 0 [ 467.268681][ T7828] BTRFS error (device loop2): failed to load root extent [ 467.350868][ T7828] BTRFS error (device loop2): open_ctree failed: -5 [ 468.860920][ T7719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.017710][ T7719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.168447][ T7719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.295689][ T7719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 469.814590][ T11] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 470.095473][ T11] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 470.105275][ T11] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 470.113654][ T11] usb 5-1: Product: syz [ 470.118598][ T11] usb 5-1: Manufacturer: syz [ 470.123471][ T11] usb 5-1: SerialNumber: syz [ 470.175872][ T7885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.753'. [ 470.197093][ T11] usb 5-1: config 0 descriptor?? [ 470.895853][ T11] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 471.025219][ T7719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.150665][ T11] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 471.161209][ T11] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 471.173129][ T11] asix 5-1:0.0: probe with driver asix failed with error -71 [ 471.313651][ T7719] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.426642][ T11] usb 5-1: USB disconnect, device number 8 [ 471.448300][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.455991][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.590751][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.598515][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.783626][ T7899] loop0: detected capacity change from 0 to 32768 [ 472.852818][ T7899] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal bucket 7870 past end of device (nbuckets 128) [ 472.852818][ T7899] journal_v2 (size 40): [ 472.852818][ T7899] Buckets: 7864-7871 24-25 [ 472.852818][ T7899] [ 472.879374][ T7899] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 473.391798][ T7906] vcan0: tx drop: invalid da for name 0x00000000000000ee [ 474.852383][ T7910] loop3: detected capacity change from 0 to 40427 [ 474.892090][ T7910] F2FS-fs (loop3): build fault injection rate: 690 [ 474.900885][ T7910] F2FS-fs (loop3): Image doesn't support compression [ 474.908606][ T7910] F2FS-fs (loop3): Image doesn't support compression [ 474.923527][ T7910] F2FS-fs (loop3): invalid crc value [ 475.185525][ T7918] loop4: detected capacity change from 0 to 1764 [ 475.322820][ T7910] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 475.362546][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.369514][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.008425][ T7719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.715313][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 477.723250][ T7941] loop2: detected capacity change from 0 to 32768 [ 477.805379][ T7941] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 477.970991][ T7941] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 478.028352][ T7941] (syz.2.771,7941,0):ocfs2_mknod:502 ERROR: status = -31 [ 478.038289][ T7941] (syz.2.771,7941,0):ocfs2_mkdir:658 ERROR: status = -31 [ 478.180891][ T5811] ocfs2: Unmounting device (7,2) on (node local) [ 478.327450][ T9] kernel read not supported for file /adsp1 (pid: 9 comm: kworker/0:0) [ 480.075571][ T7719] veth0_vlan: entered promiscuous mode [ 480.241630][ T7719] veth1_vlan: entered promiscuous mode [ 480.576517][ T7977] netlink: 2 bytes leftover after parsing attributes in process `syz.3.780'. [ 480.775328][ T7719] veth0_macvtap: entered promiscuous mode [ 480.917602][ T7719] veth1_macvtap: entered promiscuous mode [ 481.219451][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.392784][ T7719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.461332][ T7982] loop2: detected capacity change from 0 to 2048 [ 481.547315][ T7719] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.556725][ T7719] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.562273][ T7982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.565880][ T7719] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.583919][ T7719] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.851678][ T7992] netlink: 'syz.0.785': attribute type 8 has an invalid length. [ 482.312595][ T7996] loop4: detected capacity change from 0 to 1024 [ 482.516427][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.690664][ T30] audit: type=1800 audit(482.666:10): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.786" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 483.007090][ T7996] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.786: lblock 1 mapped to illegal pblock 1 (length 15) [ 483.450318][ T7996] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 483.465584][ T7996] EXT4-fs (loop4): This should not happen!! Data will be lost [ 483.465584][ T7996] [ 483.743569][ T8008] loop2: detected capacity change from 0 to 32768 [ 483.986596][ T8008] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 484.760435][ T8008] XFS (loop2): Ending clean mount [ 484.806931][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.986675][ T5811] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 485.603660][ T8036] loop3: detected capacity change from 0 to 512 [ 485.691308][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 485.731425][ T8036] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 485.744787][ T8036] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 485.755296][ T8036] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.795: Failed to acquire dquot type 0 [ 485.943873][ T5815] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 486.320212][ T8046] loop0: detected capacity change from 0 to 64 [ 486.865613][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 487.114849][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 487.160751][ T11] usb 3-1: config 2 has an invalid interface number: 66 but max is 0 [ 487.170191][ T11] usb 3-1: config 2 has no interface number 0 [ 487.170402][ T5807] hfs: node 4:3 still has 2 user(s)! [ 487.176753][ T11] usb 3-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 487.277329][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 487.286887][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.295489][ T11] usb 3-1: Product: syz [ 487.299909][ T11] usb 3-1: Manufacturer: syz [ 487.304878][ T11] usb 3-1: SerialNumber: syz [ 487.549517][ T11] usb 3-1: Found UVC 0.00 device syz (046d:08c6) [ 487.556463][ T11] usb 3-1: No valid video chain found. [ 487.938514][ T5867] usb 3-1: USB disconnect, device number 4 [ 487.948113][ T11] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 488.309638][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.319984][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.428384][ T5817] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 488.428603][ T5817] Bluetooth: hci0: adv larger than maximum supported [ 488.437145][ T5817] Bluetooth: hci0: Malformed LE Event: 0x0d [ 488.454828][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 488.485536][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 488.510890][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 488.519872][ T11] usb 1-1: can't read configurations, error -71 [ 488.673988][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 488.683746][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.790344][ T9] usb 4-1: config 0 descriptor?? [ 489.091125][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 489.108106][ T8075] input: syz1 as /devices/virtual/input/input9 [ 489.378353][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 489.385468][ T9] [drm] Initialized udl on minor 2 [ 489.725160][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 489.734993][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 489.748993][ T11] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.795517][ T11] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 489.804889][ T11] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 489.827834][ T9] usb 4-1: USB disconnect, device number 6 [ 491.358474][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.366883][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.824043][ T4154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.832731][ T4154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.028446][ T8099] loop4: detected capacity change from 0 to 4096 [ 492.776554][ T8111] netlink: 'syz.3.814': attribute type 2 has an invalid length. [ 494.340471][ T8137] [U] [ 494.343607][ T8137] [U] [ 494.346665][ T8137] [U] [ 494.349716][ T8137] [U] [ 494.412010][ T8137] [U] [ 494.415128][ T8137] [U] [ 494.418195][ T8137] [U] [ 494.421356][ T8137] [U] [ 494.484926][ T8137] [U] [ 494.488032][ T8137] [U] [ 494.491071][ T8137] [U] [ 494.494129][ T8137] [U] [ 494.620384][ T8137] [U] [ 494.623513][ T8137] [U] [ 494.626585][ T8137] [U] [ 494.629663][ T8137] [U] [ 494.673385][ T8137] [U] [ 494.676493][ T8137] [U] [ 494.679563][ T8137] [U] [ 494.682718][ T8137] [U] [ 494.758547][ T8137] [U] [ 494.761762][ T8137] [U] [ 494.764820][ T8137] [U] [ 494.767837][ T8137] [U] [ 494.845064][ T8137] [U] [ 494.848203][ T8137] [U] [ 494.851268][ T8137] [U] [ 494.854343][ T8137] [U] [ 494.965225][ T8137] [U] [ 494.968352][ T8137] [U] [ 494.971418][ T8137] [U] [ 494.974505][ T8137] [U] [ 495.116207][ T8137] [U] [ 495.119353][ T8137] [U] [ 495.122414][ T8137] [U] [ 495.125470][ T8137] [U] [ 495.262011][ T8137] [U] [ 497.063637][ T8153] loop5: detected capacity change from 0 to 65536 [ 497.167006][ T8153] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 497.326401][ T8153] XFS (loop5): Ending clean mount [ 497.360115][ T8153] XFS (loop5): Quotacheck needed: Please wait. [ 497.546273][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 497.613740][ T8153] XFS (loop5): Quotacheck: Done. [ 497.760117][ T7719] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 500.449354][ T8201] loop2: detected capacity change from 0 to 8 [ 500.718362][ T8201] SQUASHFS error: Unable to read directory block [2c0:35] [ 501.025455][ T8209] xt_hashlimit: size too large, truncated to 1048576 [ 501.431205][ T8212] : renamed from bridge_slave_0 (while UP) [ 501.960113][ T8221] loop4: detected capacity change from 0 to 24 [ 502.576036][ T8226] tun0: tun_chr_ioctl cmd 1074025675 [ 502.581630][ T8226] tun0: persist disabled [ 502.840210][ T8230] loop2: detected capacity change from 0 to 512 [ 502.967532][ T8230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.241971][ T8230] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.852: corrupted xattr entries [ 503.304811][ T8230] EXT4-fs (loop2): Remounting filesystem read-only [ 503.314720][ T8230] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 503.329113][ T8230] EXT4-fs (loop2): 1 truncate cleaned up [ 503.339549][ T8230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.773274][ T8240] loop5: detected capacity change from 0 to 512 [ 503.808298][ T8236] loop4: detected capacity change from 0 to 2048 [ 503.854748][ T8240] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 503.915407][ T8240] EXT4-fs (loop5): invalid journal inode [ 503.921388][ T8240] EXT4-fs (loop5): can't get journal size [ 503.980050][ T5811] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.011665][ T8240] EXT4-fs (loop5): 1 truncate cleaned up [ 504.020230][ T8240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.276461][ T8236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.569358][ T8236] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 504.639175][ T8236] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 504.652709][ T8236] EXT4-fs (loop4): This should not happen!! Data will be lost [ 504.652709][ T8236] [ 504.666037][ T8236] EXT4-fs (loop4): Total free blocks count 0 [ 504.672312][ T8236] EXT4-fs (loop4): Free/Dirty block details [ 504.679230][ T8236] EXT4-fs (loop4): free_blocks=2415919104 [ 504.685445][ T8236] EXT4-fs (loop4): dirty_blocks=32 [ 504.690820][ T8236] EXT4-fs (loop4): Block reservation details [ 504.697339][ T8236] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 504.965189][ T7719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.168421][ T35] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 506.246369][ T8260] sctp: failed to load transform for md5: -2 [ 507.497759][ T8281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 507.995283][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 508.147911][ T8287] loop2: detected capacity change from 0 to 4096 [ 508.773675][ T8291] loop5: detected capacity change from 0 to 32768 [ 508.815786][ T8291] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.876 (8291) [ 508.847390][ T8301] dummy0: mtu less than device minimum [ 508.854017][ T8291] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 508.868430][ T8291] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 508.879691][ T8291] BTRFS info (device loop5): disk space caching is enabled [ 508.887367][ T8291] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 508.993418][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 509.016474][ T5867] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 509.024571][ T8287] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 509.025876][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.088768][ T5867] pvrusb2: Hardware description: Terratec Grabster AV400 [ 509.094411][ T8287] ntfs3(loop2): Failed to load $Extend (-22). [ 509.097330][ T5867] pvrusb2: ********** [ 509.102376][ T8287] ntfs3(loop2): Failed to initialize $Extend. [ 509.106312][ T5867] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 509.106394][ T5867] pvrusb2: Important functionality might not be entirely working. [ 509.133160][ T5867] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 509.144984][ T5867] pvrusb2: ********** [ 509.186931][ T8291] BTRFS info (device loop5): rebuilding free space tree [ 509.283600][ T8291] BTRFS info (device loop5): disabling free space tree [ 509.291773][ T8291] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 509.302121][ T8291] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 509.508168][ T2326] pvrusb2: Invalid write control endpoint [ 509.555296][ T7719] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 509.730697][ T11] usb 4-1: USB disconnect, device number 7 [ 509.842073][ T8324] loop2: detected capacity change from 0 to 128 [ 509.891974][ T8324] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 509.969560][ T8324] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 510.007238][ T2326] pvrusb2: Invalid write control endpoint [ 510.013221][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 510.023120][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 510.031097][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 510.041749][ T2326] pvrusb2: Device being rendered inoperable [ 510.049584][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 510.057158][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 510.066288][ T2326] pvrusb2: Attached sub-driver cx25840 [ 510.071986][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 510.082411][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 510.104516][ T5867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 510.142436][ T8324] EXT4-fs (loop2): shut down requested (0) [ 510.265125][ T5811] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.275317][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 510.290958][ T5867] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 510.302469][ T5867] usb 1-1: config 0 has no interface number 0 [ 510.309784][ T5867] usb 1-1: config 0 interface 184 has no altsetting 0 [ 510.356648][ T5867] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.366579][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.375571][ T5867] usb 1-1: Product: syz [ 510.380039][ T5867] usb 1-1: Manufacturer: syz [ 510.385411][ T5867] usb 1-1: SerialNumber: syz [ 510.453287][ T5867] usb 1-1: config 0 descriptor?? [ 510.485341][ T5867] smsc75xx v1.0.0 [ 511.187143][ T11] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 511.423754][ T11] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 511.433647][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.442363][ T11] usb 4-1: Product: syz [ 511.446878][ T11] usb 4-1: Manufacturer: syz [ 511.451757][ T11] usb 4-1: SerialNumber: syz [ 511.461110][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 511.472796][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.526498][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 511.538106][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 511.548269][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 511.559000][ T5867] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 511.569903][ T5867] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 511.609391][ T11] usb 4-1: config 0 descriptor?? [ 511.676584][ T5867] usb 1-1: USB disconnect, device number 9 [ 511.679302][ T11] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 512.483637][ T5867] usb 4-1: USB disconnect, device number 8 [ 513.080463][ T8362] loop4: detected capacity change from 0 to 256 [ 513.605593][ T11] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 514.520094][ T8373] loop2: detected capacity change from 0 to 32768 [ 514.570231][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 514.625747][ T11] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 514.634529][ T11] usb 4-1: config 1 has no interface number 0 [ 514.640903][ T11] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 514.651378][ T11] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 514.661996][ T11] usb 4-1: config 1 interface 105 has no altsetting 0 [ 514.710838][ T8373] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 514.711008][ T8373] allowing incompatible features above 0.0: (unknown version) [ 514.711106][ T8373] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 514.757073][ T8373] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 514.765739][ T8373] bcachefs (loop2): initializing new filesystem [ 514.790120][ T8373] bcachefs (loop2): going read-write [ 514.828948][ T8373] bcachefs (loop2): marking superblocks [ 514.887948][ T8373] bcachefs (loop2): initializing freespace [ 514.919574][ T8373] bcachefs (loop2): done initializing freespace [ 514.921627][ T8390] loop0: detected capacity change from 0 to 2048 [ 514.940666][ T8373] bcachefs (loop2): reading snapshots table [ 514.947223][ T8373] bcachefs (loop2): reading snapshots done [ 515.035079][ T11] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 515.044716][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.053017][ T11] usb 4-1: Product: syz [ 515.057917][ T11] usb 4-1: Manufacturer: syz [ 515.062792][ T11] usb 4-1: SerialNumber: syz [ 515.094517][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.122718][ T8373] bcachefs (loop2): done starting filesystem [ 515.143750][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.169011][ T8395] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 515.367381][ T8395] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 515.378797][ T8395] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 515.436152][ T5811] bcachefs (loop2): shutting down [ 515.441696][ T5811] bcachefs (loop2): going read-only [ 515.444579][ T8395] Remounting filesystem read-only [ 515.447787][ T5811] bcachefs (loop2): finished waiting for writes to stop [ 515.476412][ T8398] NILFS (loop0): mounting fs with errors [ 515.485142][ T5811] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 515.591056][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.602611][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.709966][ T5811] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 515.775335][ T5811] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 515.840920][ T5811] bcachefs (loop2): marking filesystem clean [ 515.921339][ T8395] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 515.936893][ T8395] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 515.948071][ T8395] Remounting filesystem read-only [ 515.988830][ T5807] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 516.016146][ T5811] bcachefs (loop2): shutdown complete [ 516.051497][ T11] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 516.080747][ T11] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 516.116400][ T11] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 516.149719][ T11] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:eb:0d:55:a1:6b [ 516.242682][ T11] usb 4-1: USB disconnect, device number 9 [ 516.257384][ T11] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 516.404352][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.916'. [ 516.413849][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.431763][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.447461][ T11] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 516.459069][ T11] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 516.469763][ T11] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 516.774642][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 517.334648][ T5867] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 517.350660][ T8419] loop5: detected capacity change from 0 to 64 [ 517.504656][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 517.549249][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.559983][ T5867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.638403][ T5867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.648170][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.656674][ T5867] usb 5-1: Product: syz [ 517.661105][ T5867] usb 5-1: Manufacturer: syz [ 517.669277][ T5867] usb 5-1: SerialNumber: syz [ 517.901487][ T8428] loop5: detected capacity change from 0 to 512 [ 518.034567][ T8428] EXT4-fs (loop5): 1 orphan inode deleted [ 518.042959][ T8428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.077396][ T4736] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 518.088012][ T4736] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 518.162773][ T5867] usb 5-1: 0:2 : does not exist [ 518.537366][ T7719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.613829][ T5867] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 518.745136][ T5867] usb 5-1: USB disconnect, device number 9 [ 520.140822][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 521.988002][ T8471] loop3: detected capacity change from 0 to 256 [ 522.026682][ T8457] loop2: detected capacity change from 0 to 65536 [ 522.106039][ T8457] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 522.165050][ T30] audit: type=1800 audit(522.136:11): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.943" name="file1" dev="loop3" ino=1048626 res=0 errno=0 [ 522.203290][ T8471] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.214431][ T8471] FAT-fs (loop3): Filesystem has been set read-only [ 522.221345][ T8471] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.231993][ T8471] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.238596][ T8457] XFS (loop2): Ending clean mount [ 522.253423][ T8457] XFS (loop2): Quotacheck needed: Please wait. [ 522.314875][ T8471] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.334463][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.345672][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.356600][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.369567][ T8457] XFS (loop2): Quotacheck: Done. [ 522.453075][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.466568][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.478377][ T8470] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 522.551769][ T5811] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 523.843839][ T8490] loop4: detected capacity change from 0 to 32768 [ 524.056947][ T8490] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 524.057112][ T8490] allowing incompatible features above 0.0: (unknown version) [ 524.057198][ T8490] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 524.101917][ T8490] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 524.111350][ T8490] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 524.124598][ T8490] bcachefs (loop4): Version upgrade required: [ 524.124598][ T8490] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 524.124598][ T8490] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 524.124598][ T8490] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 524.203585][ T8490] bcachefs (loop4): dropping and reconstructing all alloc info [ 524.267567][ T8490] bcachefs (loop4): accounting_read... done [ 524.281484][ T8490] bcachefs (loop4): alloc_read... done [ 524.292180][ T8490] bcachefs (loop4): snapshots_read... done [ 524.302993][ T8490] bcachefs (loop4): check_allocations... done [ 524.420584][ T8490] bcachefs (loop4): going read-write [ 524.430501][ T8490] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1 [ 524.430501][ T8490] rw journal devs: [ 524.487514][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 524.492735][ T8490] bcachefs (loop4): done starting filesystem [ 524.554414][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 524.685427][ T74] ===================================================== [ 524.692849][ T74] BUG: KMSAN: uninit-value in LZ4_decompress_safe_partial+0x94a/0x2190 [ 524.701822][ T74] LZ4_decompress_safe_partial+0x94a/0x2190 [ 524.708085][ T74] __bio_uncompress+0x627/0x1490 [ 524.713375][ T74] bch2_bio_uncompress+0x507/0x9b0 [ 524.718941][ T74] __bch2_read_endio+0x17e4/0x2240 [ 524.724422][ T74] process_scheduled_works+0xb91/0x1d80 [ 524.733240][ T74] worker_thread+0xedf/0x1590 [ 524.739017][ T74] kthread+0xd59/0xf00 [ 524.743311][ T74] ret_from_fork+0x1e0/0x310 [ 524.748242][ T74] ret_from_fork_asm+0x1a/0x30 [ 524.748269][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 524.748408][ T74] [ 524.748437][ T74] Uninit was created at: [ 524.753443][ T11] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 524.763440][ T74] __alloc_frozen_pages_noprof+0x689/0xf00 [ 524.766327][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 524.770216][ T74] alloc_pages_mpol+0x328/0x860 [ 524.781446][ T11] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 524.786077][ T74] alloc_pages_noprof+0x102/0x280 [ 524.786237][ T74] bch2_bio_alloc_pages_pool+0x8f/0x230 [ 524.786374][ T74] __bch2_read_extent+0x334e/0x6220 [ 524.786483][ T74] bchfs_read+0x3ccb/0x4800 [ 524.835616][ T74] bch2_readahead+0x1579/0x1c10 [ 524.840730][ T74] read_pages+0x15c/0xe30 [ 524.846259][ T74] page_cache_ra_order+0xeab/0x14f0 [ 524.851711][ T74] page_cache_sync_ra+0x1083/0x13e0 [ 524.857289][ T74] filemap_get_pages+0xfb3/0x3a60 [ 524.862509][ T74] filemap_read+0x5d2/0x2300 [ 524.867434][ T74] bch2_read_iter+0x559/0x21b0 [ 524.872404][ T74] __kernel_read+0x765/0xdb0 [ 524.877343][ T74] integrity_kernel_read+0x77/0x90 [ 524.882685][ T74] ima_calc_file_hash+0x17cb/0x4050 [ 524.888312][ T74] ima_collect_measurement+0x45d/0xe60 [ 524.894028][ T74] process_measurement+0x2d1a/0x40e0 [ 524.899644][ T74] ima_file_check+0x8e/0xd0 [ 524.904803][ T74] security_file_post_open+0xbf/0x530 [ 524.910441][ T74] path_openat+0x5ac3/0x6760 [ 524.915405][ T74] do_filp_open+0x280/0x660 [ 524.920146][ T74] do_sys_openat2+0x1bb/0x2f0 [ 524.925155][ T74] __x64_sys_openat+0x240/0x300 [ 524.930231][ T74] x64_sys_call+0x213/0x3db0 [ 524.937893][ T74] do_syscall_64+0xd9/0x210 [ 524.942657][ T74] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.949498][ T74] [ 524.952009][ T74] CPU: 1 UID: 0 PID: 74 Comm: kworker/u8:5 Tainted: G W 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 524.964294][ T74] Tainted: [W]=WARN [ 524.968243][ T74] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.978678][ T74] Workqueue: events_unbound __bch2_read_endio [ 524.985120][ T74] ===================================================== [ 524.992189][ T74] Disabling lock debugging due to kernel taint [ 524.998835][ T74] Kernel panic - not syncing: kmsan.panic set ... [ 525.005421][ T74] CPU: 1 UID: 0 PID: 74 Comm: kworker/u8:5 Tainted: G B W 6.16.0-rc6-syzkaller #0 PREEMPT(none) [ 525.017515][ T74] Tainted: [B]=BAD_PAGE, [W]=WARN [ 525.022719][ T74] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.032987][ T74] Workqueue: events_unbound __bch2_read_endio [ 525.039324][ T74] Call Trace: [ 525.042777][ T74] [ 525.045855][ T74] __dump_stack+0x26/0x30 [ 525.050440][ T74] dump_stack_lvl+0x53/0x270 [ 525.055316][ T74] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 525.061448][ T74] dump_stack+0x1e/0x25 [ 525.065876][ T74] panic+0x4bd/0xd50 [ 525.070081][ T74] kmsan_report+0x31c/0x320 [ 525.074865][ T74] ? __msan_warning+0x1b/0x30 [ 525.079824][ T74] ? LZ4_decompress_safe_partial+0x94a/0x2190 [ 525.086173][ T74] ? __bio_uncompress+0x627/0x1490 [ 525.091684][ T74] ? bch2_bio_uncompress+0x507/0x9b0 [ 525.097258][ T74] ? __bch2_read_endio+0x17e4/0x2240 [ 525.102774][ T74] ? process_scheduled_works+0xb91/0x1d80 [ 525.108777][ T74] ? worker_thread+0xedf/0x1590 [ 525.113933][ T74] ? kthread+0xd59/0xf00 [ 525.118392][ T74] ? ret_from_fork+0x1e0/0x310 [ 525.123373][ T74] ? ret_from_fork_asm+0x1a/0x30 [ 525.128597][ T74] ? kmsan_get_metadata+0xfb/0x160 [ 525.133994][ T74] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 525.140606][ T74] ? kmsan_get_metadata+0xfb/0x160 [ 525.145985][ T74] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 525.152106][ T74] ? __bio_map_or_bounce+0xdc4/0x1a00 [ 525.157811][ T74] ? kmsan_get_metadata+0xfb/0x160 [ 525.163198][ T74] __msan_warning+0x1b/0x30 [ 525.167948][ T74] LZ4_decompress_safe_partial+0x94a/0x2190 [ 525.174145][ T74] ? kmsan_get_metadata+0xfb/0x160 [ 525.179560][ T74] __bio_uncompress+0x627/0x1490 [ 525.184849][ T74] bch2_bio_uncompress+0x507/0x9b0 [ 525.190301][ T74] __bch2_read_endio+0x17e4/0x2240 [ 525.195788][ T74] ? __pfx___bch2_read_endio+0x10/0x10 [ 525.201511][ T74] process_scheduled_works+0xb91/0x1d80 [ 525.207409][ T74] worker_thread+0xedf/0x1590 [ 525.212403][ T74] kthread+0xd59/0xf00 [ 525.216696][ T74] ? __pfx_worker_thread+0x10/0x10 [ 525.222126][ T74] ? __pfx_kthread+0x10/0x10 [ 525.226992][ T74] ret_from_fork+0x1e0/0x310 [ 525.231819][ T74] ? __pfx_kthread+0x10/0x10 [ 525.236666][ T74] ret_from_fork_asm+0x1a/0x30 [ 525.241720][ T74] [ 525.245246][ T74] Kernel Offset: disabled [ 525.249674][ T74] Rebooting in 86400 seconds..