last executing test programs: 2.447157199s ago: executing program 1 (id=1583): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x1, 0x0, 0x4, 0x600, 0xc000000000, 0xd10000}) 2.191779914s ago: executing program 1 (id=1587): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x80d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.979777808s ago: executing program 1 (id=1591): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0) 1.817428114s ago: executing program 2 (id=1594): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), &(0x7f0000000240)=0x4) 1.655608389s ago: executing program 1 (id=1597): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000000)={0x6, @output={0x0, 0x0, {0x6, 0x7}, 0x0, 0x200}}) 1.631667636s ago: executing program 2 (id=1598): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) 1.456828901s ago: executing program 0 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a310000000c0500040000000000050005000200000011000300686173683a6e65742c6e65740000000014000780080006000000000f0800134000000007050001"], 0x60}, 0x1, 0x0, 0x0, 0x240408d4}, 0x0) 1.408411072s ago: executing program 1 (id=1602): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0xfa000, 0x1a5e00}) 1.273438141s ago: executing program 3 (id=1603): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000001fc0), 0x8) 1.237036571s ago: executing program 4 (id=1604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}}, 0x0) 1.229816301s ago: executing program 0 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x26, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="5b0f00000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.217178177s ago: executing program 1 (id=1606): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xca00200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.098878445s ago: executing program 2 (id=1607): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 1.027342862s ago: executing program 3 (id=1608): r0 = mq_open(&(0x7f0000000140)='\\{^\x00', 0xc2, 0x12, &(0x7f0000000180)={0x10001, 0x8, 0xd, 0xffffffff}) mq_timedreceive(r0, &(0x7f0000000480)=""/29, 0x1d, 0x800, &(0x7f00000004c0)={0x0, 0x3938700}) 995.349738ms ago: executing program 4 (id=1609): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x746d}, 0x1c) 960.415927ms ago: executing program 0 (id=1610): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x84) 785.595082ms ago: executing program 2 (id=1611): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@secondary) 785.032281ms ago: executing program 3 (id=1612): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}, {0x0}], 0x2}}], 0x1, 0x24000004) 746.494078ms ago: executing program 0 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xd9ffffff}]}}}]}, 0x3c}}, 0x0) 726.728585ms ago: executing program 4 (id=1614): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 577.082488ms ago: executing program 3 (id=1615): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0) 564.1172ms ago: executing program 4 (id=1616): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) 513.649345ms ago: executing program 2 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f7c0000000c0a01080000000000000000010000000900020073797a3200000000500003804c000080080003400000000240000b803c0001800a0001006c696d69740000002c0002800c00024000000000000000000c000140fffffffffffffceb0800034000000c6348000440000000010900010073797a30"], 0x100}}, 0x0) 378.342333ms ago: executing program 4 (id=1618): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000002540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c13, &(0x7f0000000100)={[{@check_relaxed}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x10}}, {@block={'block', 0x3d, 0x800}}, {@sbsector}, {@map_off}, {@session={'session', 0x3d, 0x46}}, {@map_off}, {@check_relaxed}, {@map_off}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x2, 0x9f8, &(0x7f0000002e80)="$eJzs3c1vXOV+B/Dv8UviGJQESCmNgExCEwy4ju2UpBGLNrEnialfKtuRiLoglDhVFLe00EqAKjVIVVdFrdSqi3aHuuoKiU3ZVOzu3d27uosrXfEvoLvKXfnqnBk7Y3vssYPfCJ+PNTPn5Xee53fmnDmP58yZecIPy9KxVWNLS9XtMcdv/u8eZMwBdnX82y++/Ly8ffYgh9KdN4v/S/qS1JKeJC8kvWPjszNTHQq6n9xO8k1SJDmcxuOW3E7xr3n60fg3Kf67rHdDh7ZaMp0s8aO23/sfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcRMXY+PDwSHEoE9M336k1JLV1xsZnZ4osLa2fs7xMw9dVr9/F1x3rTYrylr6+5a6+XzjxaPbzSWpn8mJj7MWqQ/L05dOnnj/+1nM9XcvLb5TN93J468V+9Mmn999bXFz4cFcSOfiu16cn5mYmpq5cr9cm5mZqly9eHD5/49pc7drEZH3u1tx8fao2Nlu/Mj8zWxsYe602cvnyhVp96NbMzenr40OT9eWJl/5gdHj4Yu3toT+rX5mdm5k+//bQ3NiNicnJienrVUw5u4y5VO6IfzoxX5uvX5mq1e7eW1y4sCan7qzZf8ugkU5rUgaNdgoaHR4dHRkZHR35rNl79sqEi29efvPS8HDP8BpZF7FLOy0Hy5GNN/POH8ThMXU12v9kMhOZzs28k1rbv7GMZzYzmdpgftNy+3/2fH3Telvb/2Yr39My+2R5dyYvN0f7Nmj/N8hl7/4+yif5NPfzXhazmIV8uO8ZbevvyPct4Xrqmc5E5jKTiUzlSjWl1pxSy+VczMUM593cyKnMpZZrmchk6pnLrcxlPvVqjxrLbOq5kvnMZDa1DGQsr6WWkVzO5VxILfUM5VZmcjPTuZ7xXKlKuZt71fN+YZMcV4JGthI0uknQusZ82+1/fe0/J/zo7PxBHB7TUrP9P9Q5dGBsLxICAAAAdtzv/TRHTzz7k18lRV6qzstfm5isD+93WgAAAMAOqi7Xe7F86C2HXkrh/T8AAAA8aYrqO3ZFkv6cagwtfxPKSQAAAAB4QlSf/7+c4tSjCd7/AwAAwBOm82/sd4woBpd//rd2p/F4pxnRGCv6r01M1ofGZibfGsm56lcGqm8arCutOyl6q68fvJ7TjajT/XlQPvY/KrGss6+MGhl6aySv50xzRQZeKR9eGWgTOdqIfLUR+WprZHdWRV4oIwHgSXdmk/Z4q+3/6xlsRAyerJr8npNt2uBhLSsAHBQrfez8ptmlWZv2vxnx8kbt/x9u8v6/jHg2d081LikYyvv5IIu5k8E0rzg41a7U5d4IGpchDLacDaisORvQ37xk4eeXujK47nxA38q6tsYuZDSDzTMCR5rzm+cOipXYYjmHC42A7l3YAACwD85s2g5vrf0f7PD+v98lhQBwoKz0YL+LA/u9jgDAalppAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Hlb+gH/n51LFhcXkj3oLGBloG87GW4+0JU9ynnfB7qT7Fftf5xtL1Vu44Py1BlYPbDPByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2RJF0t5velRxOMpzk/N5ntXse7HcCO6X2eIsVD/MwH+foTqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBj1/z9/640Hp9qTEpPV3I2ye0kf77fOe6kh/udwL75q+q+5ff/u5LeLBXpaWz2FL1j47MzU+XmLw6X87/94svPy1vnstf3qlAWUNawqnOJZg0tU3pXL/VMtVT/+MJH9//ug7+pjV+tdsyr89cmx6euz/7Jo8Dni68aXSC0doOwnO8/nP3/f2uZfKhZ+Vflmra3tt5rVb3j6+v93XZLb1DvFtxbXBgta5qvvzP/93997+OWWc/mdPLKQDKwuqa/LG8b1HR67fO5WvFd8c/F0fxnblfbv3w2iqWi3ETHqvU/cvfe4sLQ+x8s3lnJ6R9X5XQ8p5LcSfq2ntOp6njSVrXXdfWWtQ5XQeXdiQ7lbaqlxJENntdnql2mf1vrUNt4HSodnvdmRhfaZvTvf/tczm17S5/rUGNbxXfFL4sb+UX+qaX/j65y+59N21dnmyKqyJY9pXXeqpdXVyOyWvPR1hnvri1zw1clu+Bf8hf5o5Xt39Vy/G9uq705HrXU2P51kWz/dfE/x9a1KI9ULdKJNS1S8+jTdoG+lTxPNKI2yPN38kbSc3JbR5Q3OhxRduv1/1/FQH6dB/r/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr4i6W43vSs5m+R4kmPleC1ZWhvz4DHq6+ovHifNHfM4Of/wFBuuaPEwD/Nxju51RgAAAAAAAADsjqvj337x5eflrfo8vju/39WcU0t6khwv/qN3bHx2ZqpDQb3J7eWP9Pu2l8Pt8u7pR+PflGMvdFhofy8fAIAftN8GAAD//z1UbuM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 377.607223ms ago: executing program 0 (id=1619): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0\x00', 0x1810002, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x1cd, &(0x7f0000002180)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 286.990355ms ago: executing program 3 (id=1620): r0 = socket(0x1d, 0x2, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 132.738113ms ago: executing program 2 (id=1621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a3000000000580003805400008008000340000000", @ANYRES32=r0], 0x108}}, 0x0) 129.497034ms ago: executing program 4 (id=1622): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0xee0000) 61.584687ms ago: executing program 0 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 0s ago: executing program 3 (id=1624): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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") chdir(&(0x7f0000000100)='./file0\x00') kernel console output (not intermixed with test programs): 0, idProduct=6751, bcdDevice=75.8b [ 101.448350][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.498495][ T5885] usb 4-1: config 0 descriptor?? [ 101.544985][ T5885] hso 4-1:0.0: Can't find BULK IN endpoint [ 101.663986][ T6109] loop1: detected capacity change from 0 to 32768 [ 101.731846][ T6109] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.788918][ T5885] usb 4-1: USB disconnect, device number 2 [ 101.795610][ T5893] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 101.814240][ T5893] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 102.052043][ T6183] loop4: detected capacity change from 0 to 256 [ 102.106811][ T5893] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 102.179653][ T5893] usb 3-1: USB disconnect, device number 2 [ 102.189951][ T6183] FAT-fs (loop4): Directory bread(block 64) failed [ 102.246500][ T6183] FAT-fs (loop4): Directory bread(block 65) failed [ 102.263533][ T6183] FAT-fs (loop4): Directory bread(block 66) failed [ 102.287038][ T6183] FAT-fs (loop4): Directory bread(block 67) failed [ 102.330762][ T6183] FAT-fs (loop4): Directory bread(block 68) failed [ 102.350123][ T6109] XFS (loop1): Ending clean mount [ 102.358907][ T6183] FAT-fs (loop4): Directory bread(block 69) failed [ 102.409395][ T6183] FAT-fs (loop4): Directory bread(block 70) failed [ 102.442804][ T6183] FAT-fs (loop4): Directory bread(block 71) failed [ 102.468704][ T5830] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.484279][ T6183] FAT-fs (loop4): Directory bread(block 72) failed [ 102.514917][ T6183] FAT-fs (loop4): Directory bread(block 73) failed [ 102.532024][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 103.042229][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 103.089017][ T6196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.98'. [ 103.525694][ T6176] loop0: detected capacity change from 0 to 32768 [ 104.064545][ T6232] loop1: detected capacity change from 0 to 2048 [ 104.273984][ T6176] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 104.274012][ T6176] allowing incompatible features above 0.0: (unknown version) [ 104.274024][ T6176] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 104.340573][ T6232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.528109][ T6176] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 104.536927][ T6243] xt_ecn: cannot match TCP bits for non-tcp packets [ 104.578133][ T6176] bcachefs (loop0): initializing new filesystem [ 104.634084][ T6176] bcachefs (loop0): going read-write [ 104.744306][ T6176] bcachefs (loop0): marking superblocks [ 104.941860][ T6176] bcachefs (loop0): initializing freespace [ 105.016739][ T6176] bcachefs (loop0): done initializing freespace [ 105.058321][ T6176] bcachefs (loop0): reading snapshots table [ 105.068140][ T6176] bcachefs (loop0): reading snapshots done [ 105.079914][ T6259] loop2: detected capacity change from 0 to 64 [ 105.266201][ T6176] bcachefs (loop0): done starting filesystem [ 105.386116][ T6176] syz.0.91 (6176) used greatest stack depth: 17416 bytes left [ 105.501860][ T5825] bcachefs (loop0): shutting down [ 105.507123][ T5825] bcachefs (loop0): going read-only [ 105.518438][ T5825] bcachefs (loop0): finished waiting for writes to stop [ 105.528452][ T6219] loop3: detected capacity change from 0 to 32768 [ 105.539533][ T6219] XFS: attr2 mount option is deprecated. [ 105.568258][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.120'. [ 105.580380][ T5825] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 105.631612][ T6219] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 105.693260][ T5825] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 105.735064][ T5825] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 105.745264][ T6219] XFS (loop3): Ending clean mount [ 105.766886][ T5825] bcachefs (loop0): marking filesystem clean [ 105.797484][ T6219] XFS (loop3): Quotacheck needed: Please wait. [ 105.920867][ T6219] XFS (loop3): Quotacheck: Done. [ 106.063152][ T5825] bcachefs (loop0): shutdown complete [ 106.213865][ T5826] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 106.574179][ T6293] loop2: detected capacity change from 0 to 4096 [ 107.083808][ T6307] netlink: set zone limit has 8 unknown bytes [ 107.452839][ T6317] netlink: 'syz.3.142': attribute type 8 has an invalid length. [ 107.535137][ T6319] loop2: detected capacity change from 0 to 1024 [ 107.558943][ T6321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.629647][ T6319] hfsplus: xattr searching failed [ 108.114685][ T6331] loop2: detected capacity change from 0 to 4096 [ 108.206220][ T6333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.670580][ T6297] loop1: detected capacity change from 0 to 32768 [ 108.865295][ T6297] find_entry called with index >= next_index [ 108.928393][ T6297] find_entry called with index >= next_index [ 108.978051][ T6297] find_entry called with index >= next_index [ 109.021484][ T6323] loop3: detected capacity change from 0 to 32768 [ 109.229009][ T6323] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 109.258862][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.430234][ T6353] loop2: detected capacity change from 0 to 1024 [ 109.448470][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 109.464113][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 109.499819][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.510773][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 109.542498][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.543048][ T6353] EXT4-fs: Ignoring removed orlov option [ 109.557359][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 109.619747][ T48] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 109.680728][ T48] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 109.692662][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.717659][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.774404][ T48] usb 5-1: config 0 descriptor?? [ 109.808650][ T6345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.002884][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.135852][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.143026][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.150164][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.157129][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.164306][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.173016][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.182037][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.189486][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.196386][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.203409][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.210411][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.217801][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.225186][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.232278][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.239485][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.246375][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.253342][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.262427][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.269573][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.276460][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.285821][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.292788][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.301432][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.308537][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.315420][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.322829][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.329780][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.337464][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.344629][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 110.352970][ T5836] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 110.381720][ T48] usb 5-1: USB disconnect, device number 2 [ 110.401473][ T6369] loop2: detected capacity change from 0 to 2048 [ 110.493127][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.624184][ T6369] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.161: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 110.698876][ T6351] loop0: detected capacity change from 0 to 32768 [ 110.866411][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.048567][ T6381] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 111.056276][ T6381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.170'. [ 111.532014][ T6397] loop0: detected capacity change from 0 to 256 [ 111.681621][ T6397] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 112.349659][ T6379] loop3: detected capacity change from 0 to 32768 [ 112.383304][ T6379] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 112.383304][ T6379] [ 112.424477][ T6379] ERROR: (device loop3): remounting filesystem as read-only [ 112.454899][ T6379] ialloc: diAlloc returned -5! [ 112.588806][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.668298][ T6425] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 112.788050][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 112.828509][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.865725][ T48] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 112.903027][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.922810][ T48] usb 1-1: Product: syz [ 112.927031][ T48] usb 1-1: Manufacturer: syz [ 112.967996][ T48] usb 1-1: SerialNumber: syz [ 112.989099][ T48] usb 1-1: config 0 descriptor?? [ 113.020184][ T48] usb 1-1: bad CDC descriptors [ 113.059228][ T48] usb 1-1: unsupported MDLM descriptors [ 113.151964][ T6438] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 113.211753][ T5893] usb 1-1: USB disconnect, device number 3 [ 113.278392][ T6413] loop1: detected capacity change from 0 to 32768 [ 113.370502][ T5908] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 113.572180][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 113.603261][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.636440][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.653364][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.681121][ T5908] usb 3-1: Product: syz [ 113.695654][ T5908] usb 3-1: Manufacturer: syz [ 113.715972][ T5908] usb 3-1: SerialNumber: syz [ 113.750851][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 114.041030][ T5908] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 114.101914][ T5908] usb 3-1: USB disconnect, device number 3 [ 114.175846][ T5908] usblp0: removed [ 114.511327][ T6472] loop3: detected capacity change from 0 to 64 [ 114.648218][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 114.734573][ T6446] loop1: detected capacity change from 0 to 32768 [ 114.796818][ T6477] loop2: detected capacity change from 0 to 256 [ 114.914950][ T6446] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.016695][ T6477] FAT-fs (loop2): Directory bread(block 64) failed [ 115.021965][ T6495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.220'. [ 115.045817][ T6477] FAT-fs (loop2): Directory bread(block 65) failed [ 115.086853][ T6477] FAT-fs (loop2): Directory bread(block 66) failed [ 115.150976][ T6477] FAT-fs (loop2): Directory bread(block 67) failed [ 115.157645][ T6477] FAT-fs (loop2): Directory bread(block 68) failed [ 115.192771][ T6477] FAT-fs (loop2): Directory bread(block 69) failed [ 115.216489][ T6446] XFS (loop1): Ending clean mount [ 115.231179][ T6477] FAT-fs (loop2): Directory bread(block 70) failed [ 115.237760][ T6477] FAT-fs (loop2): Directory bread(block 71) failed [ 115.269424][ T6446] XFS (loop1): Quotacheck needed: Please wait. [ 115.298812][ T6477] FAT-fs (loop2): Directory bread(block 72) failed [ 115.316944][ T6477] FAT-fs (loop2): Directory bread(block 73) failed [ 115.399705][ T6446] XFS (loop1): Quotacheck: Done. [ 115.456499][ T6503] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 115.478194][ T6503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.224'. [ 115.492862][ T6505] loop4: detected capacity change from 0 to 256 [ 115.506951][ T6503] batman_adv: batadv0: Adding interface: wlan0 [ 115.517759][ T6505] exfat: Deprecated parameter 'utf8' [ 115.535023][ T6503] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.572490][ T6505] exfat: Deprecated parameter 'namecase' [ 115.582625][ T6507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 115.582702][ T6505] exfat: Deprecated parameter 'utf8' [ 115.598774][ T6503] batman_adv: batadv0: Interface activated: wlan0 [ 115.626758][ T5830] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.654884][ T6505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 115.897060][ T6505] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 115.978049][ T6515] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 115.985753][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 116.535444][ T6521] loop2: detected capacity change from 0 to 4096 [ 116.651900][ T6534] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 116.911275][ T6521] ntfs3(loop2): ino=1e, "file1" attr_set_size [ 116.963320][ T6521] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 117.693192][ T6571] dlm: non-version read from control device 90 [ 118.033736][ T6578] team0: Port device team_slave_0 removed [ 118.059315][ T6578] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 118.187666][ T6588] loop0: detected capacity change from 0 to 128 [ 118.216176][ T6588] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 118.330436][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.044627][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 119.150318][ T6619] xt_hashlimit: overflow, try lower: 3/0 [ 119.352335][ T6625] netlink: 'syz.4.275': attribute type 10 has an invalid length. [ 119.379082][ T6625] netlink: 2 bytes leftover after parsing attributes in process `syz.4.275'. [ 119.397767][ T6625] team0: entered promiscuous mode [ 119.406035][ T6627] loop1: detected capacity change from 0 to 16 [ 119.428102][ T6625] team_slave_0: entered promiscuous mode [ 119.450609][ T6627] erofs (device loop1): mounted with root inode @ nid 36. [ 119.458623][ T6625] team_slave_1: entered promiscuous mode [ 119.484991][ T6625] bridge0: port 3(team0) entered blocking state [ 119.525610][ T6584] loop2: detected capacity change from 0 to 40427 [ 119.538180][ T6625] bridge0: port 3(team0) entered disabled state [ 119.570069][ T6625] team0: entered allmulticast mode [ 119.585257][ T6584] F2FS-fs (loop2): build fault injection rate: 690 [ 119.588197][ T6625] team_slave_0: entered allmulticast mode [ 119.624851][ T6629] loop3: detected capacity change from 0 to 2048 [ 119.631610][ T6625] team_slave_1: entered allmulticast mode [ 119.633801][ T6584] F2FS-fs (loop2): Image doesn't support compression [ 119.668527][ T6584] F2FS-fs (loop2): Image doesn't support compression [ 119.692667][ T6625] bridge0: port 3(team0) entered blocking state [ 119.699339][ T6625] bridge0: port 3(team0) entered forwarding state [ 119.765578][ T6629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.779620][ T6584] F2FS-fs (loop2): invalid crc value [ 120.054121][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.155664][ T6648] netlink: 256 bytes leftover after parsing attributes in process `syz.4.284'. [ 120.235655][ T6584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.425974][ T6584] F2FS-fs (loop2): build fault injection rate: 690 [ 120.456768][ T6584] F2FS-fs (loop2): Image doesn't support compression [ 120.481089][ T6584] F2FS-fs (loop2): Image doesn't support compression [ 120.597138][ T6660] loop1: detected capacity change from 0 to 512 [ 120.620371][ T6660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.725512][ T6660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 120.796340][ T6660] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.290: invalid indirect mapped block 2683928664 (level 1) [ 120.877254][ T6660] EXT4-fs (loop1): Remounting filesystem read-only [ 120.912313][ T6660] EXT4-fs (loop1): 1 truncate cleaned up [ 120.924767][ T6660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.037009][ T6660] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #2: comm syz.1.290: directory missing '.' [ 121.249374][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.885417][ T6694] tmpfs: Bad value for 'mpol' [ 121.900996][ T6693] netlink: 'syz.2.292': attribute type 11 has an invalid length. [ 121.923229][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 121.993855][ T6658] loop4: detected capacity change from 0 to 32768 [ 122.858049][ T5885] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 123.022613][ T5885] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 123.045606][ T5885] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 123.079749][ T5885] usb 4-1: config 0 has no interface number 0 [ 123.095486][ T5885] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 123.111321][ T5885] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.126380][ T5885] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 123.140240][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.157700][ T6723] warning: `syz.4.319' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.183403][ T5885] usb 4-1: config 0 descriptor?? [ 123.397615][ T6701] loop1: detected capacity change from 0 to 32768 [ 123.414186][ T6706] loop0: detected capacity change from 0 to 32768 [ 123.470984][ T6706] (syz.0.311,6706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.527412][ T6706] (syz.0.311,6706,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.652941][ T5885] usb 4-1: USB disconnect, device number 3 [ 123.700910][ T6706] JBD2: Ignoring recovery information on journal [ 123.751311][ T30] audit: type=1326 audit(1750667285.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 123.777837][ T6706] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 123.883614][ T30] audit: type=1326 audit(1750667285.896:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 123.915777][ T30] audit: type=1326 audit(1750667285.916:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 123.938184][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 123.947786][ T6740] loop1: detected capacity change from 0 to 256 [ 123.964670][ T30] audit: type=1326 audit(1750667285.916:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 124.104831][ T30] audit: type=1326 audit(1750667285.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6733 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 124.131502][ T6740] FAT-fs (loop1): Directory bread(block 64) failed [ 124.168569][ T6740] FAT-fs (loop1): Directory bread(block 65) failed [ 124.175342][ T6740] FAT-fs (loop1): Directory bread(block 66) failed [ 124.228154][ T6740] FAT-fs (loop1): Directory bread(block 67) failed [ 124.234922][ T6740] FAT-fs (loop1): Directory bread(block 68) failed [ 124.282165][ T6740] FAT-fs (loop1): Directory bread(block 69) failed [ 124.315016][ T6740] FAT-fs (loop1): Directory bread(block 70) failed [ 124.327549][ T5825] ocfs2: Unmounting device (7,0) on (node local) [ 124.349079][ T6740] FAT-fs (loop1): Directory bread(block 71) failed [ 124.388124][ T6740] FAT-fs (loop1): Directory bread(block 72) failed [ 124.394714][ T6740] FAT-fs (loop1): Directory bread(block 73) failed [ 124.466243][ T6747] loop2: detected capacity change from 0 to 4096 [ 124.651520][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 124.662200][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: kworker/u9:4 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 124.662228][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.662241][ T5835] Workqueue: hci1 hci_rx_work [ 124.662269][ T5835] Call Trace: [ 124.662278][ T5835] [ 124.662287][ T5835] dump_stack_lvl+0x189/0x250 [ 124.662320][ T5835] ? kernfs_path_from_node+0x2c/0x260 [ 124.662343][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.662371][ T5835] ? __pfx__printk+0x10/0x10 [ 124.662396][ T5835] ? kernfs_path_from_node+0x2c/0x260 [ 124.662414][ T5835] ? kernfs_path_from_node+0x2c/0x260 [ 124.662436][ T5835] ? kernfs_path_from_node+0x22c/0x260 [ 124.662453][ T5835] ? kernfs_path_from_node+0x2c/0x260 [ 124.662476][ T5835] sysfs_create_dir_ns+0x259/0x280 [ 124.662500][ T5835] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 124.662523][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 124.662550][ T5835] kobject_add_internal+0x59f/0xb40 [ 124.662587][ T5835] kobject_add+0x155/0x220 [ 124.662619][ T5835] ? __pfx_kobject_add+0x10/0x10 [ 124.662646][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 124.662671][ T5835] ? get_device_parent+0x366/0x3a0 [ 124.662724][ T5835] device_add+0x408/0xb50 [ 124.662753][ T5835] hci_conn_add_sysfs+0xd5/0x1e0 [ 124.662779][ T5835] le_conn_complete_evt+0xc3a/0x1220 [ 124.662823][ T5835] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 124.662853][ T5835] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 124.662880][ T5835] ? __pfx___mutex_lock+0x10/0x10 [ 124.662904][ T5835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.662926][ T5835] ? skb_pull_data+0xfb/0x200 [ 124.662954][ T5835] hci_le_enh_conn_complete_evt+0x189/0x470 [ 124.662984][ T5835] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 124.663016][ T5835] hci_event_packet+0x78f/0x1200 [ 124.663044][ T5835] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 124.663074][ T5835] ? __pfx_hci_event_packet+0x10/0x10 [ 124.663099][ T5835] ? kcov_remote_start+0x4d3/0x7f0 [ 124.663120][ T5835] ? lockdep_hardirqs_on+0x80/0x150 [ 124.663146][ T5835] ? hci_send_to_monitor+0xe2/0x570 [ 124.663179][ T5835] hci_rx_work+0x46a/0xe80 [ 124.663212][ T5835] ? process_scheduled_works+0x9ef/0x17b0 [ 124.663242][ T5835] process_scheduled_works+0xade/0x17b0 [ 124.663304][ T5835] ? __pfx_process_scheduled_works+0x10/0x10 [ 124.663352][ T5835] worker_thread+0x8a0/0xda0 [ 124.663411][ T5835] kthread+0x711/0x8a0 [ 124.663435][ T5835] ? __pfx_worker_thread+0x10/0x10 [ 124.663459][ T5835] ? __pfx_kthread+0x10/0x10 [ 124.663480][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.663500][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.663519][ T5835] ? __pfx_kthread+0x10/0x10 [ 124.663541][ T5835] ret_from_fork+0x3fc/0x770 [ 124.663570][ T5835] ? __pfx_ret_from_fork+0x10/0x10 [ 124.663604][ T5835] ? __switch_to_asm+0x39/0x70 [ 124.663620][ T5835] ? __switch_to_asm+0x33/0x70 [ 124.663635][ T5835] ? __pfx_kthread+0x10/0x10 [ 124.663654][ T5835] ret_from_fork_asm+0x1a/0x30 [ 124.663692][ T5835] [ 124.663730][ T5835] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.703903][ T6756] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.710441][ T5835] Bluetooth: hci1: failed to register connection device [ 125.419234][ T6771] loop4: detected capacity change from 0 to 8 [ 125.529082][ T6771] SQUASHFS error: Unable to read inode 0xa7 [ 125.964642][ T6784] loop4: detected capacity change from 0 to 512 [ 125.978084][ T5893] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.024990][ T6784] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 126.076417][ T6784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.130224][ T6784] EXT4-fs (loop4): 1 truncate cleaned up [ 126.148002][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 126.157549][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.168426][ T5893] usb 1-1: config 7 has an invalid interface number: 5 but max is 0 [ 126.180874][ T5893] usb 1-1: config 7 has no interface number 0 [ 126.187222][ T5893] usb 1-1: config 7 interface 5 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 126.198797][ T5893] usb 1-1: config 7 interface 5 has no altsetting 0 [ 126.209661][ T5893] usb 1-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=e3.83 [ 126.219125][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.227147][ T5893] usb 1-1: Product: syz [ 126.234023][ T6784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.246556][ T5893] usb 1-1: Manufacturer: syz [ 126.251238][ T5893] usb 1-1: SerialNumber: syz [ 126.264189][ T6778] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.378530][ T6764] loop2: detected capacity change from 0 to 32768 [ 126.416670][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.443150][ T6772] loop1: detected capacity change from 0 to 32768 [ 126.486805][ T6764] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.519793][ T5893] usb 1-1: Could not find all expected endpoints [ 126.533859][ T5893] usb 1-1: USB disconnect, device number 4 [ 126.771291][ T6764] XFS (loop2): Ending clean mount [ 126.784848][ T6772] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,noexcl,read_only,version_upgrade=none [ 126.784874][ T6772] allowing incompatible features above 0.0: (unknown version) [ 126.784886][ T6772] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 126.906166][ T6772] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 126.938353][ T6772] bcachefs (loop1): recovering from clean shutdown, journal seq 13 [ 127.004957][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.084951][ T6772] bcachefs (loop1): accounting_read... done [ 127.118106][ T6772] bcachefs (loop1): alloc_read... done [ 127.124223][ T6772] bcachefs (loop1): snapshots_read... done [ 127.183017][ T6772] bcachefs (loop1): journal_replay... done [ 127.224355][ T6772] bcachefs (loop1): resume_logged_ops... done [ 127.228187][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.237992][ T6772] bcachefs (loop1): delete_dead_inodes... done [ 127.269805][ T6772] bcachefs (loop1): done starting filesystem [ 127.358402][ T6772] overlay: case-insensitive capable filesystem on . not supported [ 127.448065][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 127.470175][ T5830] bcachefs (loop1): shutting down [ 127.498338][ T5893] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 127.506565][ T5893] usb 5-1: config 0 has no interface number 0 [ 127.530351][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.572014][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 127.613129][ T5830] bcachefs (loop1): shutdown complete [ 127.618008][ T5893] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 127.654788][ T6820] loop3: detected capacity change from 0 to 64 [ 127.660902][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 127.672864][ T6823] netlink: 'syz.0.363': attribute type 5 has an invalid length. [ 127.692686][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 127.702050][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 127.732040][ T5893] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.788106][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.809529][ T5893] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 127.836285][ T5893] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.929193][ T5893] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 127.948110][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.966535][ T5893] usb 5-1: Product: syz [ 127.976025][ T5893] usb 5-1: Manufacturer: syz [ 127.988089][ T5893] usb 5-1: SerialNumber: syz [ 128.010859][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'. [ 128.019198][ T5893] usb 5-1: config 0 descriptor?? [ 128.036648][ T6810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.045435][ T6810] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.072134][ T5893] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 128.118044][ T5893] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 128.172959][ T5893] scsi host1: microtekX6 [ 128.340709][ T6842] loop2: detected capacity change from 0 to 256 [ 128.349459][ T48] usb 5-1: USB disconnect, device number 3 [ 128.391776][ T6842] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.978788][ T6859] loop2: detected capacity change from 0 to 128 [ 128.987020][ T6857] loop0: detected capacity change from 0 to 1024 [ 129.002909][ T6859] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 129.036650][ T6857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.077017][ T6859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.163161][ T6857] EXT4-fs error (device loop0): ext4_get_first_dir_block:3547: inode #11: comm syz.0.378: directory missing '..' [ 129.278816][ T6869] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.380171][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.668263][ T6878] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 129.776240][ T6878] team0: Device veth0_vlan failed to register rx_handler [ 130.127109][ T6896] netlink: 'syz.0.395': attribute type 3 has an invalid length. [ 130.140631][ T6896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.395'. [ 130.650226][ T6918] netlink: 'syz.4.406': attribute type 10 has an invalid length. [ 130.806985][ T6918] veth0_vlan: left promiscuous mode [ 130.837804][ T6918] veth0_vlan: entered promiscuous mode [ 130.850687][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.861086][ T6918] team0: Device veth0_vlan failed to register rx_handler [ 130.941566][ T6925] tmpfs: Bad value for 'mpol' [ 131.026865][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.059479][ T5893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 131.089528][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.138033][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.181953][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.234503][ T5893] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 131.251097][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.294079][ T6934] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 131.319031][ T5893] usb 4-1: SerialNumber: syz [ 131.343459][ T5893] usb 4-1: config 0 descriptor?? [ 131.372566][ T5893] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 131.616617][ T24] usb 4-1: USB disconnect, device number 4 [ 132.933875][ T6992] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.974906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.982885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074538][ T6996] loop1: detected capacity change from 0 to 1024 [ 133.498156][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.610326][ T7011] loop4: detected capacity change from 0 to 1024 [ 133.698146][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 133.728136][ T5917] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 133.765840][ T6975] loop3: detected capacity change from 0 to 32768 [ 133.777167][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.806907][ T5917] usb 1-1: Product: syz [ 133.822966][ T5917] usb 1-1: Manufacturer: syz [ 133.837976][ T5917] usb 1-1: SerialNumber: syz [ 133.882501][ T6975] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 133.884903][ T49] hfsplus: b-tree write err: -5, ino 4 [ 134.112149][ T5917] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 134.179931][ T5917] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 134.237045][ T7026] loop4: detected capacity change from 0 to 1764 [ 134.273425][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 134.300317][ T5917] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 134.378104][ T5917] usb 1-1: USB disconnect, device number 5 [ 134.424944][ T5917] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 134.516816][ T5917] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 134.568752][ T5917] visor 1-1:1.0: device disconnected [ 134.809155][ T7036] loop2: detected capacity change from 0 to 1764 [ 134.854726][ T7039] loop3: detected capacity change from 0 to 1024 [ 134.996427][ T7039] hfsplus: bad catalog entry type [ 135.341390][ T7050] erspan1: entered promiscuous mode [ 135.384137][ T7016] loop1: detected capacity change from 0 to 32768 [ 135.910406][ T7065] loop4: detected capacity change from 0 to 1764 [ 136.148243][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.348599][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 136.360416][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.379181][ T5917] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 136.397858][ T5917] usb 4-1: config 7 has no interface number 0 [ 136.428052][ T5917] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 136.487003][ T5917] usb 4-1: config 7 interface 187 has no altsetting 0 [ 136.511055][ T5917] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 136.550030][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.587171][ T5917] usb 4-1: Product: syz [ 136.592992][ T5917] usb 4-1: Manufacturer: syz [ 136.597620][ T5917] usb 4-1: SerialNumber: syz [ 136.631286][ T7067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.855287][ T5917] usb 4-1: Limiting number of CPorts to U8_MAX [ 136.881952][ T5917] usb 4-1: Unknown endpoint type found, address 0x07 [ 136.938546][ T5917] usb 4-1: Not enough endpoints found in device, aborting! [ 137.096712][ T5917] usb 4-1: USB disconnect, device number 5 [ 137.215558][ T7109] syz.4.487: attempt to access beyond end of device [ 137.215558][ T7109] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 137.329201][ T7109] syz.4.487: attempt to access beyond end of device [ 137.329201][ T7109] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 137.354739][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 137.366524][ T7109] syz.4.487: attempt to access beyond end of device [ 137.366524][ T7109] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 137.403825][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 137.472795][ T7109] syz.4.487: attempt to access beyond end of device [ 137.472795][ T7109] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 137.526161][ T7109] syz.4.487: attempt to access beyond end of device [ 137.526161][ T7109] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 137.552519][ T7120] loop2: detected capacity change from 0 to 8 [ 137.570373][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 137.573905][ T7123] netlink: 'syz.0.493': attribute type 7 has an invalid length. [ 137.594872][ T7123] netlink: 'syz.0.493': attribute type 3 has an invalid length. [ 137.625410][ T7120] SQUASHFS error: Unable to read directory block [629:26] [ 137.638497][ T7123] netlink: 224 bytes leftover after parsing attributes in process `syz.0.493'. [ 137.650407][ T7109] syz.4.487: attempt to access beyond end of device [ 137.650407][ T7109] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 137.731032][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 137.755709][ T7109] syz.4.487: attempt to access beyond end of device [ 137.755709][ T7109] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 137.792113][ T7109] syz.4.487: attempt to access beyond end of device [ 137.792113][ T7109] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 137.884134][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 137.935525][ T7109] syz.4.487: attempt to access beyond end of device [ 137.935525][ T7109] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 138.001315][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 138.066288][ T7109] syz.4.487: attempt to access beyond end of device [ 138.066288][ T7109] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 138.133428][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 138.168884][ T7109] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 138.185131][ T7109] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 138.199554][ T7140] netlink: 52 bytes leftover after parsing attributes in process `syz.3.502'. [ 138.206207][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 138.220259][ T7140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.245463][ T30] audit: type=1326 audit(1750667300.326:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 138.245527][ T30] audit: type=1326 audit(1750667300.326:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7136 comm="syz.2.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e2f8e929 code=0x7ffc0000 [ 139.104184][ T7171] geneve1: entered allmulticast mode [ 139.564548][ T7189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.526'. [ 140.102786][ T7160] loop0: detected capacity change from 0 to 40427 [ 140.182286][ T7160] F2FS-fs (loop0): invalid crc value [ 140.330461][ T7214] process 'syz.3.537' launched './file0' with NULL argv: empty string added [ 140.630805][ T7160] F2FS-fs (loop0): Start checkpoint disabled! [ 140.663438][ T7160] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 140.768541][ T7160] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 141.471901][ T7248] loop4: detected capacity change from 0 to 128 [ 141.518107][ T7251] netlink: 'syz.1.556': attribute type 3 has an invalid length. [ 141.899585][ T7257] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.559'. [ 141.933007][ T7257] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 142.297883][ T7271] netlink: 'syz.3.565': attribute type 30 has an invalid length. [ 142.425660][ T7239] loop2: detected capacity change from 0 to 32768 [ 142.460602][ T7239] (syz.2.550,7239,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.545435][ T7278] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 142.588362][ T7239] (syz.2.550,7239,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 142.663738][ T7239] JBD2: Ignoring recovery information on journal [ 142.726553][ T7239] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 142.946192][ T7290] wg1 speed is unknown, defaulting to 1000 [ 142.995104][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.029457][ T5845] ocfs2: Unmounting device (7,2) on (node local) [ 143.076698][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.174050][ T7290] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.245279][ T7290] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 143.457023][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.530986][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.550510][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.578966][ T7290] wg1 speed is unknown, defaulting to 1000 [ 143.606657][ T7290] wg1 speed is unknown, defaulting to 1000 [ 144.833853][ T7315] loop4: detected capacity change from 0 to 32768 [ 145.016142][ T7353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.023881][ T7353] IPv6: NLM_F_CREATE should be set when creating new route [ 145.031620][ T7353] IPv6: NLM_F_CREATE should be set when creating new route [ 145.048897][ T7315] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 145.157610][ T7331] loop1: detected capacity change from 0 to 32768 [ 145.429143][ T5838] ocfs2: Unmounting device (7,4) on (node local) [ 145.525674][ T7375] netlink: 'syz.2.610': attribute type 87 has an invalid length. [ 145.586114][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'. [ 145.662951][ T7331] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 145.662977][ T7331] allowing incompatible features above 0.0: (unknown version) [ 145.662989][ T7331] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 145.805426][ T7383] program syz.2.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.899379][ T7331] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 145.928125][ T7331] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 145.936469][ T7331] bcachefs (loop1): Version upgrade required: [ 145.936469][ T7331] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 145.936469][ T7331] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 145.936469][ T7331] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 146.036186][ T7385] loop0: detected capacity change from 0 to 512 [ 146.082927][ T7385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.128693][ T7331] bcachefs (loop1): dropping and reconstructing all alloc info [ 146.227426][ T7385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.254877][ T7385] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.274837][ T7331] bcachefs (loop1): accounting_read... done [ 146.299150][ T7331] bcachefs (loop1): alloc_read... done [ 146.305116][ T7331] bcachefs (loop1): snapshots_read... done [ 146.312006][ T7331] bcachefs (loop1): done starting filesystem [ 146.379200][ T7385] EXT4-fs error (device loop0): ext4_get_verity_descriptor_location:335: inode #15: comm syz.0.615: verity file corrupted; can't find descriptor [ 146.406468][ T7385] EXT4-fs (loop0): Remounting filesystem read-only [ 146.492682][ T7385] fs-verity (loop0, inode 15): Error -117 getting verity descriptor size [ 146.550455][ T7402] loop3: detected capacity change from 0 to 64 [ 146.678174][ T5830] bcachefs (loop1): shutting down [ 146.764380][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.844435][ T5830] bcachefs (loop1): shutdown complete [ 147.251082][ T7421] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 147.587791][ T7429] loop4: detected capacity change from 0 to 4096 [ 147.606074][ T7429] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 147.748280][ T7429] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 148.108051][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.217288][ T7448] Illegal XDP return value 2134748966 on prog (id 27) dev N/A, expect packet loss! [ 148.280276][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.348152][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.370413][ T7424] loop2: detected capacity change from 0 to 32768 [ 148.370798][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 148.398664][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 148.428177][ T9] usb 1-1: SerialNumber: syz [ 148.476355][ T7424] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.493916][ T7452] loop3: detected capacity change from 0 to 256 [ 148.597238][ T7424] (syz.2.632,7424,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 148.618321][ T7452] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.643645][ T7424] (syz.2.632,7424,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 148.672999][ T9] usb 1-1: 0:2 : does not exist [ 148.680645][ T7452] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.698114][ T7424] (syz.2.632,7424,1):ocfs2_symlink:2077 ERROR: status = -117 [ 148.708954][ T9] usb 1-1: unit 5: unexpected type 0x03 [ 148.769061][ T7452] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 148.833831][ T9] usb 1-1: USB disconnect, device number 6 [ 148.855189][ T5845] (syz-executor,5845,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 76 [ 148.944209][ T5845] ocfs2: Unmounting device (7,2) on (node local) [ 148.947773][ T6804] udevd[6804]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.708581][ T7470] loop3: detected capacity change from 0 to 64 [ 149.983215][ T7480] netlink: 132 bytes leftover after parsing attributes in process `syz.4.658'. [ 149.993715][ T7482] netlink: 164 bytes leftover after parsing attributes in process `syz.3.659'. [ 150.241199][ T7490] random: crng reseeded on system resumption [ 150.264203][ T7489] autofs: Bad value for 'fd' [ 150.722486][ T7509] loop1: detected capacity change from 0 to 256 [ 151.146336][ T7526] tmpfs: User quota inode hardlimit too large. [ 151.223295][ T7521] loop4: detected capacity change from 0 to 2048 [ 151.317079][ T7532] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.356313][ T7521] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 151.392012][ T7534] loop2: detected capacity change from 0 to 256 [ 151.398106][ T7536] netlink: 'syz.1.684': attribute type 10 has an invalid length. [ 151.411051][ T7521] Remounting filesystem read-only [ 151.424179][ T7534] exfat: Deprecated parameter 'namecase' [ 151.452862][ T7534] exfat: Deprecated parameter 'namecase' [ 151.569568][ T7534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 151.646481][ T7536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 151.770910][ T7539] C: renamed from team_slave_0 (while UP) [ 151.796030][ T7539] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 151.814816][ T7539] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 151.993648][ T7550] loop1: detected capacity change from 0 to 64 [ 152.183298][ T7550] bio_check_eod: 2 callbacks suppressed [ 152.183318][ T7550] syz.1.691: attempt to access beyond end of device [ 152.183318][ T7550] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 152.669535][ T7574] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 152.687227][ T7574] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 152.710961][ T7574] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 152.870202][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.956248][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 153.069932][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 153.116181][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 153.142517][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 153.155376][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.173695][ T7591] loop1: detected capacity change from 0 to 512 [ 153.178338][ T9] usb 1-1: Product: syz [ 153.186533][ T9] usb 1-1: Manufacturer: syz [ 153.206043][ T9] usb 1-1: SerialNumber: syz [ 153.232914][ T7591] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.711: bad orphan inode 13 [ 153.271542][ T9] usb 1-1: config 0 descriptor?? [ 153.311782][ T7571] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.313562][ T7591] ext4_test_bit(bit=12, block=4) = 1 [ 153.324584][ T7591] is_bad_inode(inode)=0 [ 153.329514][ T7591] NEXT_ORPHAN(inode)=0 [ 153.333838][ T7591] max_ino=32 [ 153.337148][ T7591] i_nlink=1 [ 153.346161][ T7591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.356920][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.373573][ T7591] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.711: Unrecognised inode hash code 20 [ 153.395685][ T7591] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.711: Corrupt directory, running e2fsck is recommended [ 153.504582][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.670148][ T9] usb 1-1: USB disconnect, device number 7 [ 153.783056][ T7602] netlink: 'syz.2.716': attribute type 3 has an invalid length. [ 153.808768][ T7602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.716'. [ 153.855589][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.957323][ T7607] netlink: 116 bytes leftover after parsing attributes in process `syz.4.717'. [ 154.044732][ T7584] loop3: detected capacity change from 0 to 32768 [ 154.265826][ T7617] loop1: detected capacity change from 0 to 256 [ 154.502284][ T7584] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc [ 154.502311][ T7584] allowing incompatible features above 0.0: (unknown version) [ 154.502331][ T7584] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 154.619914][ T7584] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 154.645684][ T7584] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 154.654006][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.688930][ T7584] bcachefs (loop3): Version upgrade required: [ 154.688930][ T7584] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 154.688930][ T7584] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 154.688930][ T7584] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 154.873837][ T9] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 154.892148][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 154.913305][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 154.949804][ T7584] bcachefs (loop3): dropping and reconstructing all alloc info [ 154.966243][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 155.010072][ T7584] bcachefs (loop3): accounting_read... done [ 155.016542][ T7584] bcachefs (loop3): alloc_read... done [ 155.034765][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 155.048914][ T7584] bcachefs (loop3): snapshots_read... done [ 155.056125][ T7584] bcachefs (loop3): done starting filesystem [ 155.062742][ T9] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 155.074748][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.103882][ T9] usb 1-1: Product: syz [ 155.121022][ T9] usb 1-1: Manufacturer: syz [ 155.125679][ T9] usb 1-1: SerialNumber: syz [ 155.191394][ T7646] xt_cgroup: xt_cgroup: no path or classid specified [ 155.214985][ T9] usb 1-1: config 0 descriptor?? [ 155.226885][ T7628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.279478][ T9] usb 1-1: ucan: probing device on interface #0 [ 155.285789][ T9] usb 1-1: ucan: invalid endpoint configuration [ 155.317993][ T9] usb 1-1: ucan: probe failed; try to update the device firmware [ 155.419937][ T30] audit: type=1326 audit(1750667317.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 155.445428][ T5826] bcachefs (loop3): shutting down [ 155.524101][ T30] audit: type=1326 audit(1750667317.576:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 155.527100][ T48] usb 1-1: USB disconnect, device number 8 [ 155.608213][ T30] audit: type=1326 audit(1750667317.576:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 155.685742][ T5826] bcachefs (loop3): shutdown complete [ 155.701700][ T30] audit: type=1326 audit(1750667317.576:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 155.816274][ T7658] Option ' ' to dns_resolver key: bad/missing value [ 155.967534][ T7640] loop2: detected capacity change from 0 to 32768 [ 156.179469][ T7667] loop4: detected capacity change from 0 to 512 [ 156.188261][ T7667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.249825][ T7667] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.743: bad orphan inode 16 [ 156.310067][ T7665] loop1: detected capacity change from 0 to 4096 [ 156.322352][ T7667] ext4_test_bit(bit=15, block=4) = 0 [ 156.328078][ T7667] EXT4-fs (loop4): 1 orphan inode deleted [ 156.335829][ T7667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.336807][ T7673] Cannot find add_set index 2 as target [ 156.357311][ T7665] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 156.414936][ T7667] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.743: reserved inode found cleared - inode=9 [ 156.442658][ T7665] ntfs3(loop1): ino=19, mi_enum_attr [ 156.462277][ T7665] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 156.555629][ T7665] ntfs3(loop1): failed to convert "c46c" to cp932 [ 156.582455][ T7665] ntfs3(loop1): ino=20, mi_enum_attr [ 156.589674][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.036827][ T7687] loop0: detected capacity change from 0 to 1024 [ 157.052321][ T7640] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,degraded=yes,norecovery,noexcl,reconstruct_alloc,version_upgrade=none,nocow [ 157.052347][ T7640] allowing incompatible features above 0.0: (unknown version) [ 157.052359][ T7640] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 157.173099][ T7640] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 157.232639][ T7640] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 157.260090][ T7640] bcachefs (loop2): dropping and reconstructing all alloc info [ 157.327514][ T7640] bcachefs (loop2): accounting_read... done [ 157.377230][ T7640] bcachefs (loop2): alloc_read... done [ 157.397566][ T7640] bcachefs (loop2): snapshots_read... done [ 157.419216][ T7640] bcachefs (loop2): done starting filesystem [ 157.631404][ T7701] loop1: detected capacity change from 0 to 256 [ 157.797260][ T7701] FAT-fs (loop1): Directory bread(block 64) failed [ 157.818337][ T5845] bcachefs (loop2): shutting down [ 157.824509][ T7705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'. [ 157.826875][ T7701] FAT-fs (loop1): Directory bread(block 65) failed [ 157.843526][ T7701] FAT-fs (loop1): Directory bread(block 66) failed [ 157.850498][ T7701] FAT-fs (loop1): Directory bread(block 67) failed [ 157.857433][ T7701] FAT-fs (loop1): Directory bread(block 68) failed [ 157.884767][ T7701] FAT-fs (loop1): Directory bread(block 69) failed [ 157.981039][ T5845] bcachefs (loop2): shutdown complete [ 157.983600][ T7701] FAT-fs (loop1): Directory bread(block 70) failed [ 158.048035][ T7701] FAT-fs (loop1): Directory bread(block 71) failed [ 158.071608][ T7701] FAT-fs (loop1): Directory bread(block 72) failed [ 158.104288][ T7701] FAT-fs (loop1): Directory bread(block 73) failed [ 158.196637][ T7689] loop4: detected capacity change from 0 to 32768 [ 158.529528][ T7720] loop3: detected capacity change from 0 to 256 [ 158.555918][ T7722] netlink: 'syz.1.765': attribute type 1 has an invalid length. [ 158.600048][ T7722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.765'. [ 158.935263][ T7730] loop0: detected capacity change from 0 to 1024 [ 159.025996][ T3413] hfsplus: b-tree write err: -5, ino 4 [ 159.325451][ T7689] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 159.325478][ T7689] allowing incompatible features above 0.0: (unknown version) [ 159.325490][ T7689] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 159.488105][ T7749] netlink: 'syz.3.778': attribute type 21 has an invalid length. [ 159.556806][ T7689] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 159.640381][ T7689] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 159.672691][ T7689] bcachefs (loop4): Version upgrade required: [ 159.672691][ T7689] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 159.672691][ T7689] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 159.672691][ T7689] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 159.788770][ T7689] bcachefs (loop4): dropping and reconstructing all alloc info [ 159.875424][ T7689] bcachefs (loop4): accounting_read... done [ 159.884919][ T7689] bcachefs (loop4): alloc_read... done [ 159.947808][ T7689] bcachefs (loop4): snapshots_read... done [ 159.996107][ T7689] bcachefs (loop4): done starting filesystem [ 160.134698][ T5838] bcachefs (loop4): shutting down [ 160.265234][ T5838] bcachefs (loop4): shutdown complete [ 160.379402][ T5917] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.441063][ T7779] loop1: detected capacity change from 0 to 8 [ 160.512175][ T7779] SQUASHFS error: Failed to read block 0x6e6: -5 [ 160.545389][ T7779] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 160.555231][ T7779] SQUASHFS error: Unable to read directory block [631:26] [ 160.588009][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 160.630928][ T5917] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 160.639529][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.660139][ T5917] usb 4-1: config 0 has no interface number 0 [ 160.690719][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 160.708019][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.728061][ T5917] usb 4-1: Product: syz [ 160.732461][ T5917] usb 4-1: Manufacturer: syz [ 160.747306][ T5917] usb 4-1: SerialNumber: syz [ 160.778888][ T5917] usb 4-1: config 0 descriptor?? [ 160.821936][ T5917] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 160.836878][ T7785] loop1: detected capacity change from 0 to 256 [ 160.858140][ T5917] usb 4-1: No valid video chain found. [ 160.882067][ T7785] exfat: Deprecated parameter 'utf8' [ 160.887532][ T7785] exfat: Deprecated parameter 'utf8' [ 160.973564][ T7785] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 161.062046][ T5917] usb 4-1: USB disconnect, device number 6 [ 161.143175][ T7789] loop2: detected capacity change from 0 to 256 [ 161.267464][ T7789] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.043264][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 162.269904][ T7816] bridge2: entered promiscuous mode [ 162.361789][ T7818] loop0: detected capacity change from 0 to 64 [ 163.155414][ T7843] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 163.202642][ T7846] netlink: 'syz.0.824': attribute type 10 has an invalid length. [ 163.242875][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.294093][ T7846] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 163.324522][ T7850] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 163.401965][ T7850] veth0_macvtap: left promiscuous mode [ 163.431304][ T7850] batman_adv: batadv0: Adding interface: macvtap0 [ 163.465808][ T7850] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.523156][ T7850] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 163.546081][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 163.557237][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 163.617714][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 163.669994][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 163.803700][ T7867] loop2: detected capacity change from 0 to 512 [ 163.883112][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.901750][ T7867] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.050799][ T7867] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 164.111703][ T7867] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 164.148845][ T7867] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.834: Failed to acquire dquot type 1 [ 164.357638][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.568611][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 164.645481][ T7901] netlink: 'syz.3.850': attribute type 21 has an invalid length. [ 164.677116][ T7901] netlink: 156 bytes leftover after parsing attributes in process `syz.3.850'. [ 164.780002][ T48] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 164.788606][ T48] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.855517][ T48] usb 1-1: config 220 has no interface number 2 [ 164.879674][ T48] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.911792][ T48] usb 1-1: config 220 interface 0 has no altsetting 0 [ 164.933410][ T48] usb 1-1: config 220 interface 76 has no altsetting 0 [ 164.956589][ T48] usb 1-1: config 220 interface 1 has no altsetting 0 [ 164.979103][ T48] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.996002][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.034733][ T48] usb 1-1: Product: syz [ 165.057182][ T48] usb 1-1: Manufacturer: syz [ 165.095023][ T48] usb 1-1: SerialNumber: syz [ 165.332896][ T7925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.861'. [ 165.335939][ T48] usb 1-1: selecting invalid altsetting 0 [ 165.378927][ T48] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 165.390873][ T48] usb 1-1: No valid video chain found. [ 165.415418][ T48] usb 1-1: selecting invalid altsetting 0 [ 165.430899][ T48] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 165.485755][ T48] usb 1-1: USB disconnect, device number 9 [ 165.875272][ T7946] usb usb1: usbfs: process 7946 (syz.1.872) did not claim interface 0 before use [ 165.876055][ T7944] loop2: detected capacity change from 0 to 2048 [ 165.958041][ T7944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.493887][ T7965] loop4: detected capacity change from 0 to 2048 [ 166.574846][ T7965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.637746][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.884'. [ 166.662581][ T7965] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 166.827434][ T7973] loop0: detected capacity change from 0 to 8 [ 166.893005][ T7973] cramfs: Error -5 while decompressing! [ 166.918388][ T7604] udevd[7604]: incorrect cramfs checksum on /dev/loop0 [ 166.950250][ T7973] cramfs: ffffffff99be5b88(26)->ffff888073d47000(4096) [ 166.957210][ T7973] cramfs: Error -5 while decompressing! [ 167.004794][ T7973] cramfs: ffffffff99be5ba2(26)->ffff88804d421000(4096) [ 167.012880][ T7973] cramfs: Error -3 while decompressing! [ 167.036670][ T7973] cramfs: ffffffff99be5bbc(16)->ffff8880738ac000(4096) [ 167.075058][ T7973] cramfs: Error -5 while decompressing! [ 167.098203][ T7973] cramfs: ffffffff99be5b88(26)->ffff888073d47000(4096) [ 167.122197][ T30] audit: type=1326 audit(1750667329.226:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b21b8e929 code=0x7ffc0000 [ 167.166351][ T5832] udevd[5832]: incorrect cramfs checksum on /dev/loop0 [ 167.261583][ T30] audit: type=1326 audit(1750667329.226:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b21b8e929 code=0x7ffc0000 [ 167.361313][ T30] audit: type=1326 audit(1750667329.266:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6b21b8e929 code=0x7ffc0000 [ 167.465708][ T30] audit: type=1326 audit(1750667329.266:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.3.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b21b8e929 code=0x7ffc0000 [ 167.488940][ T7999] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.783685][ T8009] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 167.862101][ T30] audit: type=1326 audit(1750667329.966:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 167.968031][ T30] audit: type=1326 audit(1750667329.996:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 167.990141][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.078644][ T30] audit: type=1326 audit(1750667329.996:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 168.155593][ T30] audit: type=1326 audit(1750667329.996:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.1.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f788218e929 code=0x7ffc0000 [ 168.392726][ T8020] loop1: detected capacity change from 0 to 4096 [ 168.438019][ T8020] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 169.041548][ T8052] netlink: 'syz.2.924': attribute type 5 has an invalid length. [ 169.097475][ T8052] ip6erspan0: entered allmulticast mode [ 169.289650][ T8061] loop3: detected capacity change from 0 to 256 [ 169.388109][ T8065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.931'. [ 169.412081][ T8061] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 169.492989][ T8061] exFAT-fs (loop3): error, data size is invalid(10) [ 169.534743][ T8061] exFAT-fs (loop3): Filesystem has been set read-only [ 169.803287][ T8079] loop4: detected capacity change from 0 to 256 [ 169.883378][ T8081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.939'. [ 169.947502][ T8084] netlink: 'syz.2.940': attribute type 10 has an invalid length. [ 170.409796][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 170.588801][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 170.624495][ T5893] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 170.644157][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.664429][ T5893] usb 2-1: Product: syz [ 170.684267][ T5893] usb 2-1: Manufacturer: syz [ 170.708020][ T5893] usb 2-1: SerialNumber: syz [ 170.734143][ T5893] usb 2-1: config 0 descriptor?? [ 170.757202][ T5893] s2255 2-1:0.0: Could not find bulk-in endpoint [ 170.795321][ T5893] Sensoray 2255 driver load failed: 0xfffffff4 [ 170.823861][ T5893] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 170.861854][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.959'. [ 170.936020][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 170.955345][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 171.045492][ T48] usb 2-1: USB disconnect, device number 2 [ 171.105534][ T8129] loop0: detected capacity change from 0 to 16 [ 171.145909][ T8129] erofs (device loop0): mounted with root inode @ nid 36. [ 171.720190][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 171.788020][ T5908] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.828381][ T8155] autofs: Bad value for 'fd' [ 171.953285][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 171.958736][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.967808][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 171.998258][ T5917] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.022146][ T5908] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 172.040346][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.058491][ T5908] usb 4-1: Product: syz [ 172.062709][ T5908] usb 4-1: Manufacturer: syz [ 172.078004][ T5908] usb 4-1: SerialNumber: syz [ 172.095982][ T5908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 172.103718][ T5908] r8152-cfgselector 4-1: config 0 descriptor?? [ 172.158316][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 172.170988][ T5917] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 172.193103][ T5917] usb 2-1: config 0 has no interface number 0 [ 172.224283][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 172.235874][ T8167] netlink: 'syz.4.982': attribute type 1 has an invalid length. [ 172.255930][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.272912][ T5917] usb 2-1: Product: syz [ 172.278155][ T5917] usb 2-1: Manufacturer: syz [ 172.284813][ T5917] usb 2-1: SerialNumber: syz [ 172.306882][ T5917] usb 2-1: config 0 descriptor?? [ 172.331131][ T5917] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 172.366028][ T8172] loop4: detected capacity change from 0 to 256 [ 172.390374][ T8172] exfat: Deprecated parameter 'namecase' [ 172.475080][ T8172] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1b231e04, utbl_chksum : 0xe619d30d) [ 172.489339][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 172.552137][ T5893] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 172.563896][ T5917] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 172.580091][ T5917] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 172.676445][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.708743][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 172.727607][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.739445][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.792898][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 172.806537][ T5893] usb 2-1: USB disconnect, device number 3 [ 172.829136][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 172.842925][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 172.861950][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 172.878409][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.897148][ T9] usb 1-1: Product: syz [ 172.901782][ T9] usb 1-1: Manufacturer: syz [ 172.906437][ T9] usb 1-1: SerialNumber: syz [ 172.953057][ T9] ipaq 1-1:1.0: PocketPC PDA converter detected [ 173.183091][ T9] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 173.381990][ T9] usb 1-1: USB disconnect, device number 10 [ 173.455800][ T9] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 173.496464][ T9] ipaq 1-1:1.0: device disconnected [ 173.977501][ T8224] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1008'. [ 174.036374][ T8226] netlink: 'syz.3.1007': attribute type 21 has an invalid length. [ 174.071880][ T8226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1007'. [ 174.134273][ T8226] netlink: 'syz.3.1007': attribute type 5 has an invalid length. [ 174.170212][ T8234] openvswitch: netlink: Actions may not be safe on all matching packets [ 174.278013][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 174.470493][ T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.500970][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.522074][ T8246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 174.553744][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.573922][ T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.607092][ T24] usb 1-1: Product: syz [ 174.621891][ T24] usb 1-1: Manufacturer: syz [ 174.640358][ T8252] __nla_validate_parse: 1 callbacks suppressed [ 174.640376][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 174.641998][ T24] usb 1-1: SerialNumber: syz [ 174.647222][ T8251] loop2: detected capacity change from 0 to 1024 [ 174.703931][ T24] usb 1-1: config 0 descriptor?? [ 174.745935][ T8254] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1022'. [ 174.747237][ T24] usb 1-1: selecting invalid altsetting 0 [ 174.784663][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.939091][ T49] hfsplus: b-tree write err: -5, ino 4 [ 175.074356][ T48] usb 1-1: USB disconnect, device number 11 [ 175.663700][ T8280] loop4: detected capacity change from 0 to 1024 [ 175.754551][ T8280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.779826][ T8280] EXT4-fs (loop4): Test dummy encryption mode enabled [ 175.788095][ T8280] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.822092][ T8280] EXT4-fs (loop4): group descriptors corrupted! [ 176.238579][ T8298] PKCS8: Unsupported PKCS#8 version [ 176.428217][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 176.460586][ T8306] loop3: detected capacity change from 0 to 512 [ 176.480265][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1047'. [ 176.528558][ T8312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.529280][ T8306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.550825][ T8306] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.570008][ T8304] geneve2: entered promiscuous mode [ 176.608272][ T8304] geneve2: entered allmulticast mode [ 176.690188][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.934122][ T8322] loop1: detected capacity change from 0 to 512 [ 176.943242][ T8327] loop2: detected capacity change from 0 to 64 [ 177.120797][ T8322] EXT4-fs (loop1): 1 orphan inode deleted [ 177.161209][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.198998][ T8322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.216321][ T36] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 177.240314][ T8333] loop0: detected capacity change from 0 to 1024 [ 177.282074][ T8322] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.385537][ T8333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.428178][ T8333] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.566274][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.605374][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.099827][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 178.272564][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 178.293169][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 178.326058][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 178.374156][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 178.421445][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.449238][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 178.458657][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.466939][ T9] usb 3-1: Product: syz [ 178.487134][ T9] usb 3-1: Manufacturer: syz [ 178.497288][ T9] usb 3-1: SerialNumber: syz [ 178.517863][ T9] usb 3-1: config 0 descriptor?? [ 178.525345][ T8353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.605822][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 178.689385][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 178.868096][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 178.895587][ T8345] loop3: detected capacity change from 0 to 32768 [ 178.949456][ T9] usb 3-1: USB disconnect, device number 4 [ 178.949617][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 179.251160][ T8361] loop0: detected capacity change from 0 to 32768 [ 179.393898][ T8361] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.466980][ T8361] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 179.546995][ T8361] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 179.632787][ T8361] OCFS2: File system is now read-only. [ 179.671977][ T8361] (syz.0.1072,8361,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 179.713172][ T8361] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 179.740222][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 179.762687][ T8361] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 179.783894][ T8395] bridge_slave_0: left allmulticast mode [ 179.797866][ T8361] (syz.0.1072,8361,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 179.807037][ T8395] bridge_slave_0: left promiscuous mode [ 179.829800][ T8361] (syz.0.1072,8361,1):ocfs2_mknod:502 ERROR: status = -30 [ 179.839006][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.871368][ T8397] loop3: detected capacity change from 0 to 128 [ 179.875192][ T8361] (syz.0.1072,8361,1):ocfs2_create:675 ERROR: status = -30 [ 179.903935][ T8395] bridge_slave_1: left allmulticast mode [ 179.928046][ T8395] bridge_slave_1: left promiscuous mode [ 179.950462][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.974110][ T8399] syz.4.1090 uses obsolete (PF_INET,SOCK_PACKET) [ 180.005256][ T5825] ocfs2: Unmounting device (7,0) on (node local) [ 180.022751][ T8395] bond0: (slave bond_slave_0): Releasing backup interface [ 180.150383][ T8395] bond0: (slave bond_slave_1): Releasing backup interface [ 180.226441][ T8395] team0: Port device team_slave_0 removed [ 180.287772][ T8377] loop1: detected capacity change from 0 to 32768 [ 180.290869][ T8395] team0: Port device team_slave_1 removed [ 180.337333][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.373794][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.424198][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.442118][ T8395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.444171][ T8377] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 180.444171][ T8377] [ 180.513614][ T8395] batman_adv: batadv0: Removing interface: macvtap0 [ 180.527287][ T8377] jfs_create: dtInsert returned -EIO [ 180.558474][ T8377] ERROR: (device loop1): jfs_create: [ 180.558474][ T8377] [ 180.622652][ T8407] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 181.037435][ T8421] loop0: detected capacity change from 0 to 512 [ 181.105352][ T8421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 181.118633][ T8421] System zones: 1-12 [ 181.145772][ T8421] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.1100: Directory hole found for htree index block 0 [ 181.241450][ T8421] EXT4-fs (loop0): Remounting filesystem read-only [ 181.288560][ T8421] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 181.339197][ T8421] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 181.398297][ T8421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.508875][ T8421] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.687388][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.878106][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.081104][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 182.102993][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.139786][ T5928] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 182.178075][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.241927][ T5928] usb 2-1: config 0 descriptor?? [ 182.458675][ T5928] cdc_subset 2-1:0.0: probe with driver cdc_subset failed with error -22 [ 182.586915][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.706721][ T5928] usb 2-1: USB disconnect, device number 4 [ 182.771995][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.799187][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.847115][ T8485] loop4: detected capacity change from 0 to 256 [ 182.853648][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.853678][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.853697][ T24] usb 4-1: Product: syz [ 182.853711][ T24] usb 4-1: Manufacturer: syz [ 182.853727][ T24] usb 4-1: SerialNumber: syz [ 182.873790][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 182.959232][ T5885] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 183.073739][ T5928] usb 4-1: USB disconnect, device number 8 [ 183.140674][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.175375][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 183.206900][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 183.241956][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 183.267470][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.323553][ T5885] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 183.334981][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.373944][ T5885] usb 1-1: Product: syz [ 183.427620][ T5885] usb 1-1: Manufacturer: syz [ 183.434738][ T5885] usb 1-1: SerialNumber: syz [ 183.479696][ T5885] usb 1-1: config 0 descriptor?? [ 183.505975][ T8481] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 183.569011][ T5885] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 183.914048][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 183.927751][ T5893] usb 1-1: USB disconnect, device number 12 [ 184.090313][ T30] audit: type=1326 audit(1750667346.196:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabe38e929 code=0x7ffc0000 [ 184.112948][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.156616][ T30] audit: type=1326 audit(1750667346.226:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabe38e929 code=0x7ffc0000 [ 184.189291][ T30] audit: type=1326 audit(1750667346.236:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ffabe38e929 code=0x7ffc0000 [ 184.293579][ T30] audit: type=1326 audit(1750667346.236:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabe38e929 code=0x7ffc0000 [ 184.315772][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.380766][ T30] audit: type=1326 audit(1750667346.236:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8519 comm="syz.4.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffabe38e929 code=0x7ffc0000 [ 184.903381][ T8552] unsupported nlmsg_type 40 [ 185.336410][ T8568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 185.491384][ T8576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.650914][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 185.904916][ T8591] syz.4.1180 uses old SIOCAX25GETINFO [ 185.961483][ T8597] loop0: detected capacity change from 0 to 8 [ 186.019619][ T8597] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 186.538085][ T5893] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.728016][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 186.735424][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.768339][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 186.787254][ T8627] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 186.791603][ T5893] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 186.818104][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.823600][ T8627] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1197'. [ 186.836941][ T5893] usb 4-1: Product: syz [ 186.848237][ T5893] usb 4-1: Manufacturer: syz [ 186.873307][ T5893] usb 4-1: SerialNumber: syz [ 186.906409][ T8623] loop2: detected capacity change from 0 to 4096 [ 186.909608][ T5893] usb 4-1: config 0 descriptor?? [ 186.933397][ T8623] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 187.138017][ T8623] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 187.381848][ T5893] usb 4-1: USB disconnect, device number 9 [ 187.471920][ T8635] xt_socket: unknown flags 0x50 [ 187.517265][ T8615] loop4: detected capacity change from 0 to 32768 [ 187.574919][ T8615] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.745240][ T8615] XFS (loop4): Ending clean mount [ 187.804481][ T8629] loop1: detected capacity change from 0 to 32768 [ 187.832960][ T8649] loop2: detected capacity change from 0 to 64 [ 187.841934][ T8615] XFS (loop4): Quotacheck needed: Please wait. [ 187.939754][ T8615] XFS (loop4): Quotacheck: Done. [ 188.109961][ T5838] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.551725][ T8661] netlink: 'syz.0.1212': attribute type 7 has an invalid length. [ 188.896701][ T8667] loop1: detected capacity change from 0 to 4096 [ 189.008463][ T30] audit: type=1800 audit(1750667351.106:27): pid=8666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1214" name="/newroot/248/file0" dev="tmpfs" ino=1285 res=0 errno=0 [ 189.106494][ T8667] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 189.110049][ T8674] loop4: detected capacity change from 0 to 8192 [ 189.243873][ T8674] loop4: p1 p3 p4 [ 189.252095][ T8674] loop4: partition table partially beyond EOD, truncated [ 189.270733][ T8674] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 189.339774][ T8687] loop2: detected capacity change from 0 to 164 [ 189.344416][ T8674] loop4: p3 start 4294901760 is beyond EOD, truncated [ 189.405461][ T8687] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 189.433548][ T8674] loop4: p4 size 50331648 extends beyond EOD, truncated [ 189.931349][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1230'. [ 189.956662][ T8701] loop1: detected capacity change from 0 to 1024 [ 190.199178][ T7604] udevd[7604]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 190.220436][ T5832] udevd[5832]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 190.432706][ T8716] loop4: detected capacity change from 0 to 1024 [ 190.535588][ T8716] fuse: Bad value for 'fd' [ 190.687435][ T79] hfsplus: b-tree write err: -5, ino 4 [ 190.899043][ T8733] netlink: 'syz.1.1245': attribute type 5 has an invalid length. [ 191.671196][ T8754] loop4: detected capacity change from 0 to 4096 [ 191.702200][ T8754] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 191.798229][ T5908] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.994993][ T5908] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 192.048043][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.069875][ T5908] usb 3-1: Product: syz [ 192.074091][ T5908] usb 3-1: Manufacturer: syz [ 192.109752][ T5908] usb 3-1: SerialNumber: syz [ 192.160622][ T5908] usb 3-1: config 0 descriptor?? [ 192.183606][ T5908] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 192.492796][ T8776] loop0: detected capacity change from 0 to 64 [ 192.597191][ T5908] usb 3-1: USB disconnect, device number 5 [ 192.621536][ T8776] hfs: keylen 94 too large [ 192.650181][ T8776] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 192.726382][ T8762] loop3: detected capacity change from 0 to 32768 [ 192.765914][ T8764] loop1: detected capacity change from 0 to 32768 [ 192.788360][ T8762] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 192.800334][ T8762] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.960646][ T8762] XFS (loop3): Ending clean mount [ 193.022962][ T8762] XFS (loop3): Quotacheck needed: Please wait. [ 193.103867][ T8762] XFS (loop3): Quotacheck: Done. [ 193.243381][ T5826] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.904117][ T8806] loop1: detected capacity change from 0 to 1024 [ 194.408628][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.415480][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460840][ T8825] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 194.508582][ T8825] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1287'. [ 195.022180][ T8797] loop2: detected capacity change from 0 to 32768 [ 195.050533][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 195.113162][ T8797] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.288732][ T8797] XFS (loop2): Ending clean mount [ 195.382672][ T8797] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 195.588876][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.819847][ T8873] libceph: resolve '0' (ret=-3): failed [ 196.298493][ T8887] loop1: detected capacity change from 0 to 16 [ 196.334625][ T8887] erofs (device loop1): mounted with root inode @ nid 36. [ 197.479888][ T8928] loop3: detected capacity change from 0 to 4096 [ 197.504251][ T8928] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 197.603323][ T8939] loop1: detected capacity change from 0 to 512 [ 197.671382][ T8939] EXT4-fs: Ignoring removed orlov option [ 197.677348][ T8939] EXT4-fs: inline encryption not supported [ 197.693740][ T8928] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 197.762204][ T8939] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.816723][ T8939] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.947538][ T8939] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1338: bg 0: block 64: padding at end of block bitmap is not set [ 198.030009][ T8955] loop4: detected capacity change from 0 to 65 [ 198.045406][ T8955] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 198.085302][ T8939] Quota error (device loop1): write_blk: dquota write failed [ 198.120272][ T8939] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 198.147748][ T8939] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1338: Failed to acquire dquot type 0 [ 198.193789][ T8939] EXT4-fs (loop1): 1 truncate cleaned up [ 198.215730][ T8939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.265787][ T8957] loop2: detected capacity change from 0 to 2048 [ 198.414863][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.016020][ T8983] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 199.349961][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 199.542276][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 199.553876][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.586395][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.631234][ T5928] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 199.667239][ T5928] usb 2-1: config 0 interface 0 has no altsetting 1 [ 199.720828][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 199.736784][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.755909][ T5928] usb 2-1: Product: syz [ 199.775158][ T9015] netlink: 'syz.0.1375': attribute type 10 has an invalid length. [ 199.783935][ T5928] usb 2-1: Manufacturer: syz [ 199.794146][ T5928] usb 2-1: SerialNumber: syz [ 199.805073][ T9015] veth1_macvtap: left promiscuous mode [ 199.817431][ T9017] netlink: 'syz.4.1376': attribute type 3 has an invalid length. [ 199.819172][ T5928] usb 2-1: config 0 descriptor?? [ 199.837809][ T9015] bridge0: port 3(macsec0) entered blocking state [ 199.865401][ T9015] bridge0: port 3(macsec0) entered disabled state [ 199.873195][ T9012] loop3: detected capacity change from 0 to 4096 [ 199.881290][ T9015] macsec0: entered allmulticast mode [ 199.892681][ T9012] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 199.936657][ T9015] macsec0: entered promiscuous mode [ 200.016422][ T9012] ntfs3(loop3): ino=19, mi_enum_attr [ 200.036829][ T9012] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 200.151925][ T9012] ntfs3(loop3): failed to convert "c46c" to koi8-r [ 200.186855][ T9012] ntfs3(loop3): ino=20, mi_enum_attr [ 200.216218][ T9025] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 200.267365][ T9025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1379'. [ 200.280210][ T5928] usb 2-1: USB disconnect, device number 5 [ 200.594076][ T9033] loop2: detected capacity change from 0 to 256 [ 200.637043][ T9033] exfat: Deprecated parameter 'namecase' [ 200.682333][ T9033] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 200.832358][ T9037] loop3: detected capacity change from 0 to 2048 [ 200.881426][ T9037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.069032][ T9071] netlink: 'syz.2.1402': attribute type 2 has an invalid length. [ 202.078585][ T9073] binder: 9072:9073 ioctl c018620c 0 returned -14 [ 202.525266][ T9089] program syz.0.1411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.604093][ T9092] ip6gretap1: entered allmulticast mode [ 202.705636][ T9096] random: crng reseeded on system resumption [ 203.316504][ T9121] lo: entered promiscuous mode [ 203.340687][ T9121] lo: left allmulticast mode [ 203.361164][ T9121] tunl0: entered promiscuous mode [ 203.385185][ T9121] gre0: entered promiscuous mode [ 203.404677][ T9121] gretap0: entered promiscuous mode [ 203.423291][ T9121] erspan0: entered promiscuous mode [ 203.439839][ T9121] ip_vti0: entered promiscuous mode [ 203.451577][ T9121] ip6_vti0: entered promiscuous mode [ 203.457852][ T9121] sit0: entered promiscuous mode [ 203.464153][ T9121] ip6tnl0: entered promiscuous mode [ 203.484038][ T9121] ip6gre0: entered promiscuous mode [ 203.528906][ T9121] syz_tun: entered promiscuous mode [ 203.535430][ T9121] ip6gretap0: entered promiscuous mode [ 203.545499][ T9121] bridge0: entered promiscuous mode [ 203.550955][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 203.573914][ T9121] vcan0: entered promiscuous mode [ 203.585001][ T9121] bond0: entered promiscuous mode [ 203.593319][ T9121] bond_slave_0: entered promiscuous mode [ 203.600535][ T9121] bond_slave_1: entered promiscuous mode [ 203.609366][ T9121] dummy0: entered promiscuous mode [ 203.618582][ T9121] nlmon0: entered promiscuous mode [ 203.625213][ T9121] caif0: entered promiscuous mode [ 203.633370][ T9121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.728001][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 203.736729][ T5908] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.752691][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.803980][ T9125] loop1: detected capacity change from 0 to 32768 [ 203.838128][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.908320][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.948597][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.977269][ T5908] usb 1-1: Product: syz [ 204.025510][ T5908] usb 1-1: Manufacturer: syz [ 204.043048][ T5908] usb 1-1: SerialNumber: syz [ 204.107736][ T9125] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 204.107762][ T9125] allowing incompatible features above 0.0: (unknown version) [ 204.107774][ T9125] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 204.183721][ T9146] mmap: syz.2.1435 (9146): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 204.247834][ T9150] loop4: detected capacity change from 0 to 256 [ 204.333724][ T9125] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 204.361211][ T9125] bcachefs (loop1): initializing new filesystem [ 204.422011][ T9125] bcachefs (loop1): going read-write [ 204.475309][ T5908] usb 1-1: 0:2 : does not exist [ 204.509860][ T9125] bcachefs (loop1): marking superblocks [ 204.550781][ T5908] usb 1-1: USB disconnect, device number 13 [ 204.555311][ T9125] bcachefs (loop1): initializing freespace [ 204.598851][ T9125] bcachefs (loop1): done initializing freespace [ 204.630541][ T9125] bcachefs (loop1): reading snapshots table [ 204.666132][ T9125] bcachefs (loop1): reading snapshots done [ 204.666385][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.814233][ T9125] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 204.848660][ T9125] bcachefs (loop1): done starting filesystem [ 204.922057][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 205.245169][ T9125] syz.1.1428 (9125) used greatest stack depth: 16456 bytes left [ 205.282888][ T9175] loop3: detected capacity change from 0 to 1024 [ 205.283786][ T9178] capability: warning: `syz.0.1449' uses deprecated v2 capabilities in a way that may be insecure [ 205.308262][ T5830] bcachefs (loop1): shutting down [ 205.315335][ T5830] bcachefs (loop1): going read-only [ 205.344403][ T5830] bcachefs (loop1): finished waiting for writes to stop [ 205.415821][ T5830] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 205.576628][ T5830] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 205.606543][ T5830] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 205.631464][ T5830] bcachefs (loop1): marking filesystem clean [ 205.805221][ T5830] bcachefs (loop1): shutdown complete [ 206.098823][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 206.214187][ T9207] loop3: detected capacity change from 0 to 164 [ 206.270001][ T9207] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 206.278327][ T9209] x_tables: duplicate underflow at hook 1 [ 206.562636][ T9219] netlink: 'syz.0.1471': attribute type 18 has an invalid length. [ 206.676746][ T9224] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 206.722253][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 206.729901][ T9224] veth1_macvtap: left promiscuous mode [ 206.773229][ T9224] bridge0: port 3(macsec0) entered blocking state [ 206.813200][ T9224] bridge0: port 3(macsec0) entered disabled state [ 206.843267][ T9224] macsec0: entered allmulticast mode [ 206.891209][ T9224] macsec0: entered promiscuous mode [ 206.970166][ T9233] loop0: detected capacity change from 0 to 1024 [ 207.038414][ T9235] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 207.047284][ T9233] hfsplus: bad catalog entry type [ 207.205145][ T79] hfsplus: b-tree write err: -5, ino 4 [ 207.290365][ T9241] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 207.853869][ T9260] loop3: detected capacity change from 0 to 2048 [ 207.949877][ T9260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.014813][ T9262] loop2: detected capacity change from 0 to 4096 [ 208.040806][ T30] audit: type=1800 audit(1750667370.146:28): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1493" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 208.465637][ T9276] loop0: detected capacity change from 0 to 256 [ 208.499020][ T9276] exfat: Deprecated parameter 'utf8' [ 208.504559][ T9276] exfat: Deprecated parameter 'utf8' [ 208.623154][ T9276] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 208.931464][ T9293] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 208.965846][ T9294] loop2: detected capacity change from 0 to 512 [ 209.090711][ T9294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.198137][ T9294] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.281185][ T9309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1513'. [ 209.294922][ T9309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1513'. [ 209.393760][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.517637][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1518'. [ 209.718159][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 209.913027][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.945383][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 209.981120][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.021982][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.061924][ T5885] usb 4-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 210.104632][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.153586][ T5885] usb 4-1: config 0 descriptor?? [ 210.175639][ T9338] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1527'. [ 210.185949][ T5885] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.228881][ T5885] usb 4-1: MIDIStreaming interface descriptor not found [ 210.392339][ T9344] ieee802154 phy0 wpan0: encryption failed: -90 [ 210.588345][ T5885] usb 4-1: USB disconnect, device number 10 [ 210.682811][ T9349] ip6gretap1: entered promiscuous mode [ 211.514173][ T9340] loop4: detected capacity change from 0 to 32768 [ 211.829055][ T9340] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 211.829084][ T9340] allowing incompatible features above 0.0: (unknown version) [ 211.829097][ T9340] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 211.872552][ T9383] loop2: detected capacity change from 0 to 512 [ 211.880822][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 211.880874][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 211.880909][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 211.880971][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 212.076763][ T9383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.076897][ T9383] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.140135][ T9340] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 212.149180][ T9340] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 212.157407][ T9340] bcachefs (loop4): Version upgrade required: [ 212.157407][ T9340] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 212.157407][ T9340] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 212.157407][ T9340] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 212.292648][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.303378][ T9340] bcachefs (loop4): dropping and reconstructing all alloc info [ 212.412737][ T9340] bcachefs (loop4): accounting_read... done [ 212.424905][ T9340] bcachefs (loop4): alloc_read... done [ 212.452818][ T9340] bcachefs (loop4): snapshots_read... done [ 212.487310][ T9340] bcachefs (loop4): done starting filesystem [ 212.646019][ T9368] loop0: detected capacity change from 0 to 40427 [ 212.711256][ T9368] F2FS-fs (loop0): build fault injection rate: 690 [ 212.717838][ T9368] F2FS-fs (loop0): Image doesn't support compression [ 212.745364][ T9370] loop3: detected capacity change from 0 to 32768 [ 212.753099][ T5838] bcachefs (loop4): shutting down [ 212.769507][ T9368] F2FS-fs (loop0): heap/no_heap options were deprecated [ 212.776513][ T9368] F2FS-fs (loop0): Image doesn't support compression [ 212.841449][ T9368] F2FS-fs (loop0): invalid crc value [ 212.867415][ T9370] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.939754][ T5838] bcachefs (loop4): shutdown complete [ 213.060520][ T9368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.183128][ T9370] XFS (loop3): Ending clean mount [ 213.196967][ T9368] syz.0.1541: attempt to access beyond end of device [ 213.196967][ T9368] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.278502][ T9414] random: crng reseeded on system resumption [ 213.341780][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.353551][ T5825] syz-executor: attempt to access beyond end of device [ 213.353551][ T5825] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 213.410338][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 213.410360][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.410371][ T5825] Call Trace: [ 213.410378][ T5825] [ 213.410386][ T5825] dump_stack_lvl+0x189/0x250 [ 213.410423][ T5825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.410451][ T5825] ? __pfx_queue_work_on+0x10/0x10 [ 213.410488][ T5825] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 213.410510][ T5825] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 213.410532][ T5825] ? f2fs_hw_is_readonly+0x39b/0x470 [ 213.410562][ T5825] f2fs_handle_critical_error+0x37c/0x540 [ 213.410595][ T5825] f2fs_write_end_io+0x495/0x810 [ 213.410612][ T5825] ? blkg_put+0x22/0x240 [ 213.410655][ T5825] __submit_merged_bio+0x27a/0x6a0 [ 213.410689][ T5825] __submit_merged_write_cond+0x255/0x530 [ 213.410724][ T5825] f2fs_write_data_pages+0x261d/0x3000 [ 213.410791][ T5825] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.410874][ T5825] ? check_path+0x21/0x40 [ 213.410904][ T5825] ? check_noncircular+0xe0/0x160 [ 213.410989][ T5825] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 213.411016][ T5825] do_writepages+0x32b/0x550 [ 213.411054][ T5825] ? do_raw_spin_unlock+0x122/0x240 [ 213.411079][ T5825] filemap_fdatawrite+0x199/0x240 [ 213.411105][ T5825] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 213.411186][ T5825] ? do_raw_spin_unlock+0x122/0x240 [ 213.411211][ T5825] f2fs_sync_dirty_inodes+0x31f/0x830 [ 213.411246][ T5825] f2fs_write_checkpoint+0x95a/0x1df0 [ 213.411294][ T5825] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 213.411357][ T5825] ? try_to_wake_up+0x7e5/0x1290 [ 213.411385][ T5825] ? kill_f2fs_super+0x298/0x6c0 [ 213.411411][ T5825] kill_f2fs_super+0x2c3/0x6c0 [ 213.411438][ T5825] ? __pfx_kill_f2fs_super+0x10/0x10 [ 213.411453][ T5825] ? radix_tree_delete_item+0x2b6/0x400 [ 213.411491][ T5825] ? shrinker_free+0x2ce/0x3e0 [ 213.411515][ T5825] deactivate_locked_super+0xbc/0x130 [ 213.411542][ T5825] cleanup_mnt+0x425/0x4c0 [ 213.411564][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.411589][ T5825] task_work_run+0x1d4/0x260 [ 213.411614][ T5825] ? __pfx_task_work_run+0x10/0x10 [ 213.411650][ T5825] ? __x64_sys_umount+0x122/0x160 [ 213.411681][ T5825] ? exit_to_user_mode_loop+0x40/0x110 [ 213.411710][ T5825] exit_to_user_mode_loop+0xec/0x110 [ 213.411734][ T5825] do_syscall_64+0x2bd/0x3b0 [ 213.411757][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.411777][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.411795][ T5825] ? clear_bhb_loop+0x60/0xb0 [ 213.411820][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.411838][ T5825] RIP: 0033:0x7fb8bb58fc57 [ 213.411855][ T5825] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 213.411870][ T5825] RSP: 002b:00007ffd2ce77f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 213.411891][ T5825] RAX: 0000000000000000 RBX: 00007fb8bb610925 RCX: 00007fb8bb58fc57 [ 213.411903][ T5825] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2ce78000 [ 213.411915][ T5825] RBP: 00007ffd2ce78000 R08: 0000000000000000 R09: 0000000000000000 [ 213.411926][ T5825] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2ce79090 [ 213.411939][ T5825] R13: 00007fb8bb610925 R14: 000000000003410e R15: 00007ffd2ce790d0 [ 213.411973][ T5825] [ 213.412011][ T5825] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 214.165157][ T9429] SET target dimension over the limit! [ 214.271851][ T9431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.408300][ T9435] loop1: detected capacity change from 0 to 512 [ 214.459151][ T9435] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 214.640202][ T9442] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 214.705267][ T9442] batman_adv: batadv0: Adding interface: team0 [ 214.755262][ T9442] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.780501][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.790973][ T9442] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.814665][ T9445] loop2: detected capacity change from 0 to 4096 [ 214.848265][ T9435] EXT4-fs (loop1): failed to open journal device unknown-block(2940,205839) -6 [ 214.956698][ T9435] loop1: detected capacity change from 0 to 512 [ 214.999172][ T9449] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.024372][ T9435] EXT4-fs (loop1): unable to read superblock [ 215.086119][ T9445] syz.2.1569: attempt to access beyond end of device [ 215.086119][ T9445] loop2: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 215.144369][ T9445] syz.2.1569: attempt to access beyond end of device [ 215.144369][ T9445] loop2: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 215.213515][ T30] audit: type=1800 audit(1750667377.306:29): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1569" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 215.342849][ T9456] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 215.384461][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.392642][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.474557][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.481899][ T9456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.489707][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.497097][ T9456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.522506][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1575'. [ 215.555000][ T9456] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.688040][ T5893] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.812662][ T9465] loop2: detected capacity change from 0 to 64 [ 215.846332][ T9465] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 215.887593][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.918326][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.972117][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 216.018000][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 216.075273][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.118112][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.126175][ T5893] usb 4-1: Product: syz [ 216.153244][ T5893] usb 4-1: Manufacturer: syz [ 216.170357][ T5893] usb 4-1: SerialNumber: syz [ 216.204717][ T5893] usb 4-1: config 0 descriptor?? [ 216.223969][ T5893] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 216.271899][ T5893] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 216.315563][ T5893] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 216.504730][ T5893] usb 4-1: USB disconnect, device number 11 [ 216.517368][ T5893] garmin_gps 4-1:0.0: device disconnected [ 216.701159][ T9493] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.760421][ T9495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1591'. [ 216.845966][ T9499] binder: 9498:9499 unknown command 0 [ 216.854757][ T9495] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1591'. [ 216.865536][ T9499] binder: 9498:9499 ioctl c0306201 200000000480 returned -22 [ 217.361637][ T9509] loop2: detected capacity change from 0 to 8192 [ 218.003577][ T9523] wg1 speed is unknown, defaulting to 1000 [ 218.107044][ T9541] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073072017407) [ 218.140639][ T9541] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 218.290967][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 218.353239][ T9551] loop4: detected capacity change from 0 to 1764 [ 218.419141][ T9551] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 218.434773][ T9553] loop0: detected capacity change from 0 to 64 [ 218.596797][ T9557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1621'. [ 218.670885][ T9557] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1621'. [ 218.748281][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 218.760236][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 218.768923][ C1] CPU: 1 UID: 0 PID: 9562 Comm: syz.0.1623 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 218.780468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.790523][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 218.795904][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 218.815681][ C1] RSP: 0000:ffffc90000a08b90 EFLAGS: 00010246 [ 218.821748][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880308e0000 [ 218.829724][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88802f207270 [ 218.837871][ C1] RBP: 0000000000000001 R08: ffff88802f207203 R09: 1ffff11005e40e40 [ 218.846025][ C1] R10: dffffc0000000000 R11: ffffed1005e40e41 R12: 1ffff11005e40e4d [ 218.854085][ C1] R13: ffffffff81a83684 R14: ffff88802f207268 R15: dffffc0000000000 [ 218.862058][ C1] FS: 0000555586767500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 218.871121][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.877703][ C1] CR2: 0000001b2f820000 CR3: 0000000030fd6000 CR4: 00000000003526f0 [ 218.885791][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.893762][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.901736][ C1] Call Trace: [ 218.905012][ C1] [ 218.907860][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 218.913153][ C1] put_pid+0x9c/0x130 [ 218.917163][ C1] rcu_core+0xca5/0x1710 [ 218.921437][ C1] ? __pfx_rcu_core+0x10/0x10 [ 218.926144][ C1] ? sched_balance_domains+0x121/0x9e0 [ 218.931629][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 218.937184][ C1] ? sched_balance_domains+0x121/0x9e0 [ 218.942650][ C1] handle_softirqs+0x283/0x870 [ 218.947425][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 218.952203][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 218.957501][ C1] __irq_exit_rcu+0xca/0x1f0 [ 218.962178][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 218.967378][ C1] irq_exit_rcu+0x9/0x30 [ 218.971622][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 218.977270][ C1] [ 218.980214][ C1] [ 218.983171][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.989172][ C1] RIP: 0010:qlist_free_all+0x75/0x140 [ 218.994666][ C1] Code: 49 01 c4 0f 1f 44 00 00 41 0f b6 44 24 33 c1 e0 18 3d 00 00 00 f5 4d 0f 45 e5 4d 8b 64 24 08 49 8b 2f 49 63 84 24 c0 00 00 00 <49> 29 c7 4c 89 e7 4c 89 fe e8 bd e3 ff ff 66 90 48 8d 15 00 00 00 [ 219.014363][ C1] RSP: 0000:ffffc9001b4bfab0 EFLAGS: 00000246 [ 219.020868][ C1] RAX: 0000000000000000 RBX: ffffc9001b4bfae8 RCX: ffffea0000a69600 [ 219.028842][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.036907][ C1] RBP: ffff88807df7b000 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 219.044882][ C1] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: ffff88801a441dc0 [ 219.052860][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888029a5d800 [ 219.060926][ C1] kasan_quarantine_reduce+0x148/0x160 [ 219.066395][ C1] __kasan_slab_alloc+0x22/0x80 [ 219.071247][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 219.076717][ C1] ? __pmd_alloc+0xc6/0x3b0 [ 219.081221][ C1] __pmd_alloc+0xc6/0x3b0 [ 219.085556][ C1] __handle_mm_fault+0xa63/0x5620 [ 219.090975][ C1] ? __lock_acquire+0xab9/0xd20 [ 219.095831][ C1] ? reacquire_held_locks+0x127/0x1d0 [ 219.101382][ C1] ? do_user_addr_fault+0x2d9/0x1390 [ 219.106691][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 219.112151][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 219.117269][ C1] ? lock_vma_under_rcu+0xf8/0x710 [ 219.122390][ C1] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 219.127944][ C1] handle_mm_fault+0x40a/0x8e0 [ 219.132719][ C1] do_user_addr_fault+0xa81/0x1390 [ 219.138024][ C1] ? rcu_is_watching+0x15/0xb0 [ 219.142978][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 219.148352][ C1] exc_page_fault+0x76/0xf0 [ 219.152972][ C1] asm_exc_page_fault+0x26/0x30 [ 219.158013][ C1] RIP: 0033:0x7fb8bb46545b [ 219.162448][ C1] Code: 00 00 00 48 8d b8 c8 fe ff ff e8 50 54 0c 00 85 c0 0f 85 14 fb ff ff 48 8b 44 24 68 8b b4 24 98 00 00 00 89 30 e9 01 fb ff ff <89> 32 e9 d0 ef ff ff 48 8d 05 e7 41 23 00 48 8d 3d b0 02 e8 00 c6 [ 219.182156][ C1] RSP: 002b:00007ffd2ce78e20 EFLAGS: 00010246 [ 219.188246][ C1] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 219.196587][ C1] RDX: 0000001b2f820000 RSI: 0000000000600000 RDI: 00007fb8bb699650 [ 219.204734][ C1] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 219.212703][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 219.220671][ C1] R13: 00000000000927c0 R14: 0000000000035583 R15: 00007ffd2ce790d0 [ 219.228823][ C1] [ 219.231843][ C1] Modules linked in: [ 219.235833][ C1] ---[ end trace 0000000000000000 ]--- [ 219.241342][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 219.246843][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 219.266896][ C1] RSP: 0000:ffffc90000a08b90 EFLAGS: 00010246 [ 219.273037][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880308e0000 [ 219.281151][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88802f207270 [ 219.289176][ C1] RBP: 0000000000000001 R08: ffff88802f207203 R09: 1ffff11005e40e40 [ 219.297179][ C1] R10: dffffc0000000000 R11: ffffed1005e40e41 R12: 1ffff11005e40e4d [ 219.305215][ C1] R13: ffffffff81a83684 R14: ffff88802f207268 R15: dffffc0000000000 [ 219.313259][ C1] FS: 0000555586767500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 219.322269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.328939][ C1] CR2: 0000001b2f820000 CR3: 0000000030fd6000 CR4: 00000000003526f0 [ 219.336943][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.345278][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.353320][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 219.360909][ C1] Kernel Offset: disabled [ 219.365238][ C1] Rebooting in 86400 seconds..