last executing test programs: 2m26.532651779s ago: executing program 3 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c001400", @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) 2m26.161292495s ago: executing program 3 (id=72): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000300), 0x4da) 2m25.931564548s ago: executing program 3 (id=75): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x0, 0x1, 0x6, 0x7}, 0x20) 2m25.710563692s ago: executing program 3 (id=79): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560af27e0202c6000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200070c10000000010000000000", 0x58}], 0x1) 2m25.480578326s ago: executing program 3 (id=82): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m24.338453713s ago: executing program 3 (id=88): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') lseek(r0, 0x0, 0x1) 2m13.633265938s ago: executing program 2 (id=207): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x20040}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="5cfedd01a69e"}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x50}}, 0x0) 2m13.323548323s ago: executing program 2 (id=210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000240)) 2m13.133247786s ago: executing program 2 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 2m12.969092718s ago: executing program 2 (id=216): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 2m12.395694207s ago: executing program 2 (id=222): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) 2m11.715855038s ago: executing program 2 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x128}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20004890) 2m11.420046372s ago: executing program 32 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x128}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20004890) 2m9.227890616s ago: executing program 33 (id=88): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') lseek(r0, 0x0, 0x1) 4.868694976s ago: executing program 5 (id=1381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31042bbdca4effffffff1600000018000180140002006e657464657673696d300000000000000500020001000000050004"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.59811574s ago: executing program 5 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.247378865s ago: executing program 5 (id=1384): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futex(0x0, 0x80, 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x2) 4.124907987s ago: executing program 1 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 3.866247861s ago: executing program 5 (id=1387): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f0000000180)={[{@barrier}, {@nls={'nls', 0x3d, 'cp1250'}}, {@creator={'creator', 0x3d, "7af940e2"}}, {@creator={'creator', 0x3d, "ff60f383"}}, {@umask={'umask', 0x3d, 0x3}}, {@gid}, {@creator={'creator', 0x3d, "1362a84f"}}]}, 0x1, 0x6f4, &(0x7f0000000680)="$eJzs3U1sHGcZAOB3dtdrbyq52zZpC0KK1YgIGkhsLyVBQiIghHyoUCQuvZrEaays3ch2kBMhsgUKRzihHHooQubQE+oBqYgDopyRkLii3CNxjziwaGZn1rtre72b+CcJzyON55uZ7+ed1zOfd2cTbQD/txbeiYlWOWLh3Nub6faDrUbzwVZjpShHxGRElCIqnVUkqxHJZxGXo7PE59KdeXfJXuO89fDTD8/e/7jR2arkS1a/NKzdtvaQEVr5EjMRUc7XY6rs1d/VXfq7N1bXSTfuNGFnisTBcWvv0Bqn+Qj3LfC0uxdRnthlfz3iRERM5a8DIp8dSkcc3oEba5YDAACAp1N5vwovPopHsRnTRxMOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB+SzncGJvlSKsozkRTf/1/N96Wq1WOOd7iv7HP8g+tHFAgAAAAAAAAAHIpP8g/uTz+KR7EZ08X+dpJ95v9GtnEy+/lC3I71WIq1OB+bsRgbsRFrMRcxMd3TYXVzcWNjbW5ny99E2rLdbt/LW85HRH1Hy/kjOGkAAAAAAAAAeH79NBZi+riDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXklEubPKlpNFuR6lSkRMRUQ1rdeK+HNRfpb95bgDAAAAgMNXy9fTyX87hXaSved/NXvfPxW3YzU2Yjk2ohlLcS17FtB511/6R6vRfLDVWEmXnR1/+99jxZH1GBHleH+PkWezGqe6LRbie/GDOBczcSXWYjl+FIuxEUsxE7X0JGIxkqjXOk8v6kWcu8d7uW/rymBspwe2X88iqcX1WM5iOx9Xq9F5bJKdQzrm6z2j/bEaMTDi+2l2km/lRszRtZ7f16/z5zK59osj9nE46tmZT3QzMpvmPs/GS8NzP+Z1MjjSXJS6z6BObo+Sbg6OVOT8h+Pk/ES+TnP9i/6cH7QxH6UNZmI+SvnVF/Fqf85vffH+y/2Nv/zPv165UVq9eeP6+rlDPKVDNVEUBjPR6MnEa8OvvjwTzTQTrdEzMTG4Y+oJzuMAVfNsZFPRiLPld7PSYrzRcwm+F9diKS7GbMzFpZiNb8R8NPqusFN9ea00Vvpzkt1rpZ3zW21I8Ge+1FPpl/tU3jY7Uq0nk+blpZ689s509exYvufyr2K2J0svD7/6xv4rkI7/+bycjvGz7l+cp0FfJvK5uYjule0sTO0yN/+2nf5cb67eXLuxeGvE8c7m6/S2/aB/bv7dQZzP40uvl3TGrWRbWU5qxfWSHnulG21/vqr5Jy6ddqUdx051j9VjOpbj+3veqdX8NdzOnjrHXus99q/tmbOav74pjvW9yon3opm9ChkwczRZBWBkJ948Ua09rP299lHt57UbtbenvjN5afIL1Zj4W+VP5T+Ufl/6ZvJmfBQ/ienjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4H63fu3lxsNpfWuoWYGtzzpIXqnmMNL0Rp3zpbL4zWYdQjho+V5IXqwZ77s1ioxSH1/ElEDKlTfeIhkrGvsbEL6YV8IB0WX5yW7WmXx2heKVrtXqcS61N7/QYnt++CqN9cbP6n3VenFj23DPCcu7CxcuvC+p27X11eWXx36d2l1flLFy9dbHx97msXri83l2Y7P487SuAwrN+5Wz7uGAAAAAAAAAAAAIDx5P/6f+Ox/zNDZZ861bX13Uc+fdSnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyjFt6JiVYkMTd7fjbdfrDVaKZLUd6uWYmIUkQkP45IPou4HJ0l6j3dJXuN89bDTz88e//jxnZflaJ+aVi70VQjopUWZiKinK/3Nzmw3eotdPu72tNfq7f67dKI4SXdM0wTdqZIHBy3/wUAAP//AZj3og==") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x221008, 0x0) 3.672439374s ago: executing program 1 (id=1388): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x800000}) 3.28254738s ago: executing program 5 (id=1391): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x1, 0x555f, &(0x7f000000cdc0)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') 3.192803741s ago: executing program 1 (id=1392): setgid(0xee00) r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x4, r0, 0xffffffffffffffff, 0x0) 2.931781155s ago: executing program 1 (id=1393): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x2}, 0x1) 2.681604659s ago: executing program 1 (id=1395): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800), 0x1, 0x975c, &(0x7f0000012f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010586e, 0x0) 2.537720681s ago: executing program 0 (id=1396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 1.863239572s ago: executing program 6 (id=1400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x90}}, 0x0) 1.575719506s ago: executing program 6 (id=1401): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/268, 0x10c}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000002000)=""/4071, 0xfe7}, {&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000001f00)=""/256, 0x100}, {&(0x7f0000000f00)=""/4076, 0xfec}, {&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000140)=""/239, 0xef}], 0xa}, 0x0) 1.500786637s ago: executing program 0 (id=1402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) 1.281686161s ago: executing program 6 (id=1404): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x1a0000, 0x2c) ftruncate(r0, 0x14000000000) 1.160972552s ago: executing program 0 (id=1405): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x16, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x3}}}}]}, 0x40}}, 0x4000000) 1.160438043s ago: executing program 4 (id=1406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2e, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000054) 1.087761024s ago: executing program 4 (id=1407): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 979.292495ms ago: executing program 0 (id=1408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 915.634787ms ago: executing program 5 (id=1409): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80405880, &(0x7f0000000040)={0x2c20, 0x10000000000000, 0xff}) 900.303807ms ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff0000000006000000180100002000752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 880.605897ms ago: executing program 6 (id=1411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 841.640088ms ago: executing program 1 (id=1412): r0 = socket(0x40000000015, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x3f, &(0x7f0000000080)=0x1, 0x4) 672.1026ms ago: executing program 0 (id=1413): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1af, &(0x7f0000000580)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x100002) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 539.683092ms ago: executing program 4 (id=1414): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2c, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0) 539.255592ms ago: executing program 6 (id=1415): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000002340)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c747970653d2bbe4f3d2c706172743d3078303030303030303030303030303030392c636f6465706167653d63703836392c71756965742c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030322c63726561746f723d8c1b2e182c00ee2879e640600fc575f08753a458d12410b28336039209bb6953c240f7b7bae0efa6bf3aba3a310e54a5039ebde391562aa75a9f1d9da7cf21308ac1686f3d019975557bea6a668d64fbe3f727f215f887dbfaea7e13c48a35a1f40e88fee4bf53dc1db281754bef40c659e95e42c86e0068d6db47e4e2f578a699be7e1590feeb942dd1f96877ffeb99"], 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 266.076547ms ago: executing program 4 (id=1416): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) flistxattr(r0, 0x0, 0x0) 177.130098ms ago: executing program 6 (id=1417): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)={0x0, 0x800, 0x0, 0x10, 0xfffffffe}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 32.38257ms ago: executing program 0 (id=1418): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc20a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x21, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "cb8e7e34"}]}}, 0x0}, 0x0) 0s ago: executing program 4 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="bf1ea0e3c19ed614ebadb3161741", 0x0, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): e loop6): disabling free space tree [ 127.703235][ T5487] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.735164][ T5487] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.030785][ T5557] loop4: detected capacity change from 0 to 512 [ 128.056523][ T5559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 128.061042][ T5557] EXT4-fs: Ignoring removed i_version option [ 128.185665][ T5031] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.218317][ T5557] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.425: corrupted in-inode xattr [ 128.339786][ T5557] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.425: couldn't read orphan inode 15 (err -117) [ 128.460957][ T5557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.555374][ T5563] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 128.674570][ T4427] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop6 scanned by udevd (4427) [ 128.771360][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 129.143490][ T5588] tipc: Started in network mode [ 129.155327][ T5588] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 129.194881][ T5588] tipc: Enabling of bearer rejected, failed to enable media [ 129.235791][ T5550] loop5: detected capacity change from 0 to 32768 [ 129.492812][ T5550] XFS (loop5): Mounting V5 Filesystem [ 129.654427][ T26] audit: type=1326 audit(1753096461.048:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 129.707839][ T5550] XFS (loop5): Ending clean mount [ 129.759070][ T5550] XFS (loop5): Quotacheck needed: Please wait. [ 129.766154][ T26] audit: type=1326 audit(1753096461.078:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 129.896764][ T26] audit: type=1326 audit(1753096461.078:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 129.981364][ T5616] loop6: detected capacity change from 0 to 512 [ 129.987988][ T5550] XFS (loop5): Quotacheck: Done. [ 130.065548][ T26] audit: type=1326 audit(1753096461.078:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 130.093465][ T5621] Zero length message leads to an empty skb [ 130.101233][ T5616] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 130.133185][ T5550] XFS (loop5): syz.5.423 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 130.183459][ T5616] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.205468][ T26] audit: type=1326 audit(1753096461.118:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 130.360541][ T26] audit: type=1326 audit(1753096461.118:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 130.365970][ T4972] XFS (loop5): Unmounting Filesystem [ 130.485791][ T26] audit: type=1326 audit(1753096461.118:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5609 comm="syz.1.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91cb8e9a9 code=0x7ffc0000 [ 130.667337][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 130.812449][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 130.854503][ T5635] loop4: detected capacity change from 0 to 4096 [ 130.933463][ T5635] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 131.055014][ T5635] ntfs: volume version 3.1. [ 131.143770][ T5644] device vlan2 entered promiscuous mode [ 131.168116][ T5644] device wlan1 entered promiscuous mode [ 131.283583][ T5648] loop1: detected capacity change from 0 to 1024 [ 131.335903][ T5648] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.421438][ T5648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.577556][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 131.577571][ T26] audit: type=1800 audit(1753096462.978:63): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.454" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.611525][ T5648] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 131.644357][ T5658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 131.698072][ T5648] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.941620][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.985214][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.985214][ T9] [ 131.995012][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 132.042833][ T9] EXT4-fs (loop1): Free/Dirty block details [ 132.081423][ T9] EXT4-fs (loop1): free_blocks=20480 [ 132.090597][ T9] EXT4-fs (loop1): dirty_blocks=16 [ 132.103876][ T9] EXT4-fs (loop1): Block reservation details [ 132.123747][ T9] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 132.133374][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 132.335491][ T4933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.545429][ T4933] usb 5-1: Using ep0 maxpacket: 8 [ 132.558714][ T4933] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 132.595926][ T4933] usb 5-1: config 135 has an invalid descriptor of length 97, skipping remainder of the config [ 132.626974][ T4933] usb 5-1: config 135 has no interface number 0 [ 132.633391][ T4933] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 132.702801][ T4933] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 132.732312][ T4933] usb 5-1: config 135 interface 230 has no altsetting 0 [ 132.749498][ T4933] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 132.779943][ T4933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.789178][ T4933] usb 5-1: Product: syz [ 132.793835][ T4933] usb 5-1: Manufacturer: syz [ 132.808161][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.815589][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.826881][ T4933] usb 5-1: SerialNumber: syz [ 132.883578][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'. [ 133.035190][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.049436][ T4933] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 133.060002][ T4933] usb 5-1: No valid video chain found. [ 133.068576][ T4933] usb 5-1: USB disconnect, device number 4 [ 133.245375][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 133.259511][ T7] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 133.279273][ T7] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.304040][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.365443][ T7] usb 2-1: Product: syz [ 133.383363][ T7] usb 2-1: Manufacturer: syz [ 133.402274][ T5713] netlink: 'syz.6.476': attribute type 10 has an invalid length. [ 133.416690][ T7] usb 2-1: SerialNumber: syz [ 133.440367][ T7] usb 2-1: config 0 descriptor?? [ 133.463518][ T7] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 133.467740][ T5711] loop0: detected capacity change from 0 to 4096 [ 133.483428][ T7] usb 2-1: setting power ON [ 133.491233][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 133.546785][ T5714] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.554154][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.627229][ T7] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 133.643817][ T5713] team0: Device hsr_slave_0 failed to register rx_handler [ 133.670629][ T5692] dvb-usb: bulk message failed: -22 (3/0) [ 133.697595][ T5692] cxusb: i2c rd: len=143 is too big! [ 133.697595][ T5692] [ 133.733969][ T7] usb 2-1: media controller created [ 133.836437][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.972836][ T7] usb 2-1: selecting invalid altsetting 6 [ 134.036094][ T7] usb 2-1: digital interface selection failed (-22) [ 134.042850][ T7] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 134.120260][ T7] usb 2-1: setting power OFF [ 134.144524][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 134.148772][ T5726] loop6: detected capacity change from 0 to 2048 [ 134.179113][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 134.204032][ T5726] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.214884][ T7] (NULL device *): no alternate interface [ 134.245485][ T5726] NILFS (loop6): mounting unchecked fs [ 134.369423][ T4430] udevd[4430]: incorrect nilfs2 checksum on /dev/loop6 [ 134.380279][ T7] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 134.390839][ T5726] NILFS (loop6): recovery complete [ 134.422173][ T7] usb 2-1: USB disconnect, device number 3 [ 134.472912][ T5734] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.052702][ T5750] loop0: detected capacity change from 0 to 2048 [ 135.180123][ T5749] loop6: detected capacity change from 0 to 8192 [ 135.187888][ T5750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.266977][ T5749] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.268509][ T5723] loop5: detected capacity change from 0 to 32768 [ 135.334168][ T26] audit: type=1800 audit(1753096466.728:64): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.489" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 135.342263][ T5764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'. [ 135.374244][ T5749] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 135.419413][ T5749] REISERFS (device loop6): using ordered data mode [ 135.435416][ T5749] reiserfs: using flush barriers [ 135.451473][ T5763] delete_channel: no stack [ 135.470024][ T5749] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.511297][ T5723] XFS (loop5): Mounting V5 Filesystem [ 135.539490][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 135.574524][ T5749] REISERFS (device loop6): checking transaction log (loop6) [ 135.671135][ T5749] REISERFS (device loop6): Using r5 hash to sort names [ 135.680826][ T5749] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 135.697845][ T5723] XFS (loop5): Ending clean mount [ 135.753451][ T5776] sp0: Synchronizing with TNC [ 135.794373][ T5723] XFS (loop5): Quotacheck needed: Please wait. [ 135.958537][ T5723] XFS (loop5): Quotacheck: Done. [ 136.314114][ T4972] XFS (loop5): Unmounting Filesystem [ 136.825133][ T4933] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 136.864902][ T5804] loop1: detected capacity change from 0 to 64 [ 136.961526][ T5804] hfs: bad catalog entry type 0 [ 137.046871][ T4933] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 137.084178][ T4933] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 137.094245][ T5802] loop0: detected capacity change from 0 to 8192 [ 137.105531][ T4933] usb 7-1: Product: syz [ 137.119627][ T5802] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.147617][ T5802] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 137.183033][ T4933] usb 7-1: Manufacturer: syz [ 137.190661][ T5802] REISERFS (device loop0): using ordered data mode [ 137.200685][ T4933] usb 7-1: SerialNumber: syz [ 137.214615][ T5813] loop5: detected capacity change from 0 to 4096 [ 137.219405][ T5802] reiserfs: using flush barriers [ 137.252028][ T5813] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 137.255966][ T5802] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.307472][ T5802] REISERFS (device loop0): checking transaction log (loop0) [ 137.310171][ T4933] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 137.357957][ T5802] REISERFS (device loop0): Using rupasov hash to sort names [ 137.433230][ T5802] REISERFS (device loop0): using 3.5.x disk format [ 137.437233][ T5813] ntfs3: loop5: Failed to load $Extend. [ 137.460516][ T5802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.503570][ T5802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.570865][ T5802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.638899][ T5802] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 137.658977][ T26] audit: type=1804 audit(1753096469.058:65): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.500" name="/newroot/15/file0/file0" dev="loop5" ino=0 res=1 errno=0 [ 137.736366][ T4933] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 137.765258][ T26] audit: type=1800 audit(1753096469.098:66): pid=5813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.500" name="file0" dev="loop5" ino=0 res=0 errno=0 [ 137.795316][ T4933] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 137.972203][ T41] usb 7-1: USB disconnect, device number 2 [ 138.068922][ T5826] loop1: detected capacity change from 0 to 8192 [ 138.164980][ T5826] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.205122][ T5826] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 138.228839][ T5826] REISERFS (device loop1): using ordered data mode [ 138.259190][ T5826] reiserfs: using flush barriers [ 138.299839][ T5826] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.372536][ T5826] REISERFS (device loop1): checking transaction log (loop1) [ 138.385812][ T5840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.422128][ T5826] REISERFS (device loop1): Using rupasov hash to sort names [ 138.452000][ T5826] REISERFS (device loop1): using 3.5.x disk format [ 138.472436][ T5826] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.585271][ T5826] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.656289][ T5826] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.691392][ T5826] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 138.779616][ T26] audit: type=1326 audit(1753096470.178:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.6.517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb90ed8e9a9 code=0x0 [ 138.792189][ T5826] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 138.900409][ T5845] loop0: detected capacity change from 0 to 4096 [ 139.067202][ T5845] ntfs3: loop0: failed to convert name for inode 1e. [ 139.504582][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 139.535568][ T4933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.545475][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 139.587310][ T5871] netlink: 'syz.0.523': attribute type 11 has an invalid length. [ 139.755174][ T4933] usb 2-1: Using ep0 maxpacket: 32 [ 139.762384][ T4933] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.794337][ T4933] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 139.875131][ T4933] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.894608][ T4933] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 139.948883][ T26] audit: type=1326 audit(1753096471.348:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 139.980255][ T4933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.992359][ T5888] netlink: 96 bytes leftover after parsing attributes in process `syz.6.529'. [ 139.994331][ T5881] XFS (nullb0): Invalid superblock magic number [ 140.008302][ T5888] netlink: 'syz.6.529': attribute type 5 has an invalid length. [ 140.020397][ T4933] usb 2-1: config 0 descriptor?? [ 140.046204][ T5888] netlink: 44 bytes leftover after parsing attributes in process `syz.6.529'. [ 140.054223][ T26] audit: type=1326 audit(1753096471.388:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.096929][ T26] audit: type=1326 audit(1753096471.418:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.143735][ T26] audit: type=1326 audit(1753096471.418:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.237092][ T26] audit: type=1326 audit(1753096471.418:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.335351][ T26] audit: type=1326 audit(1753096471.428:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.424257][ T26] audit: type=1326 audit(1753096471.428:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5890 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 140.478279][ T4933] betop 0003:20BC:5500.0002: unbalanced collection at end of report description [ 140.499609][ T4933] betop 0003:20BC:5500.0002: parse failed [ 140.515141][ T4933] betop: probe of 0003:20BC:5500.0002 failed with error -22 [ 140.699375][ T41] usb 2-1: USB disconnect, device number 4 [ 141.279338][ T5906] loop4: detected capacity change from 0 to 32768 [ 141.412262][ T5906] XFS (loop4): Mounting V5 Filesystem [ 141.516663][ T5906] XFS (loop4): Ending clean mount [ 141.540195][ T5906] XFS (loop4): Quotacheck needed: Please wait. [ 141.638455][ T5935] loop1: detected capacity change from 0 to 4096 [ 141.696233][ T5935] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 141.699692][ T5906] XFS (loop4): Quotacheck: Done. [ 141.860753][ T5935] ntfs3: loop1: Failed to load $Extend. [ 141.972157][ T4265] XFS (loop4): Unmounting Filesystem [ 141.995685][ T5948] tipc: Enabling of bearer rejected, media not registered [ 142.354737][ T5955] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 142.731788][ T5965] nbd: socks must be embedded in a SOCK_ITEM attr [ 142.859783][ T5928] loop0: detected capacity change from 0 to 32768 [ 143.032246][ T5928] XFS (loop0): Mounting V5 Filesystem [ 143.302146][ T5928] XFS (loop0): Ending clean mount [ 143.327567][ T5928] XFS (loop0): Quotacheck needed: Please wait. [ 143.424060][ T5928] XFS (loop0): Quotacheck: Done. [ 143.456931][ T5991] loop1: detected capacity change from 0 to 256 [ 143.615211][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 143.636281][ T5993] loop5: detected capacity change from 0 to 1024 [ 143.653626][ T5993] EXT4-fs: Ignoring removed orlov option [ 143.699482][ T5993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.798472][ T4264] XFS (loop0): Unmounting Filesystem [ 143.832543][ T5993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 143.857134][ T7] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.875161][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.919168][ T7] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.938926][ T7] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 143.985190][ T7] usb 7-1: Manufacturer: syz [ 144.007073][ T7] usb 7-1: config 0 descriptor?? [ 144.127971][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 144.173629][ T6007] loop4: detected capacity change from 0 to 64 [ 144.300293][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 144.300310][ T26] audit: type=1800 audit(1753096475.698:77): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.564" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 144.336192][ T7] rc_core: IR keymap rc-hauppauge not found [ 144.342207][ T7] Registered IR keymap rc-empty [ 144.375646][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 144.433979][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 144.571461][ C0] igorplugusb 7-1:0.0: receive overflow invalid: 185 [ 144.787937][ T6024] loop1: detected capacity change from 0 to 16 [ 144.822009][ T14] usb 7-1: USB disconnect, device number 3 [ 144.860577][ T6024] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 144.890607][ T6024] cramfs: empty filesystem [ 145.147091][ T6035] loop1: detected capacity change from 0 to 64 [ 145.815249][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.032146][ T14] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 146.053453][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.092471][ T14] usb 2-1: Product: syz [ 146.133441][ T14] usb 2-1: Manufacturer: syz [ 146.153297][ T14] usb 2-1: SerialNumber: syz [ 146.187070][ T14] usb 2-1: config 0 descriptor?? [ 146.274971][ T6064] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 146.430105][ T6068] loop0: detected capacity change from 0 to 256 [ 146.458220][ T6068] exfat: Deprecated parameter 'utf8' [ 146.463599][ T6068] exfat: Deprecated parameter 'namecase' [ 146.508401][ T6068] exfat: Deprecated parameter 'namecase' [ 146.534547][ T6068] exfat: Deprecated parameter 'utf8' [ 146.577017][ T6068] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 146.758764][ T6048] loop5: detected capacity change from 0 to 32768 [ 146.819354][ T14] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 146.839762][ T14] asix: probe of 2-1:0.0 failed with error -71 [ 146.854839][ T6048] XFS (loop5): Mounting V5 Filesystem [ 146.940899][ T14] usb 2-1: USB disconnect, device number 5 [ 147.082762][ T6048] XFS (loop5): Ending clean mount [ 147.139013][ T6048] XFS (loop5): Quotacheck needed: Please wait. [ 147.218616][ T6048] XFS (loop5): Quotacheck: Done. [ 147.613560][ T6071] loop6: detected capacity change from 0 to 32768 [ 147.633603][ T6105] loop4: detected capacity change from 0 to 1024 [ 147.711671][ T4972] XFS (loop5): Unmounting Filesystem [ 147.784098][ T6107] find_entry called with index = 0 [ 147.829027][ T6107] read_mapping_page failed! [ 147.867084][ T6107] ERROR: (device loop6): txCommit: [ 147.867084][ T6107] [ 147.920174][ T6107] ERROR: (device loop6): diFree: numfree > numinos [ 147.920174][ T6107] [ 148.099879][ T6109] loop1: detected capacity change from 0 to 4096 [ 148.145966][ T6109] EXT4-fs: inline encryption not supported [ 148.152012][ T6109] EXT4-fs: Ignoring removed oldalloc option [ 148.246702][ T6109] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.330849][ T6109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.394163][ T6120] loop0: detected capacity change from 0 to 4096 [ 148.534253][ T6120] ntfs3: loop0: failed to convert "0080" to cp860 [ 148.574640][ T6120] ntfs3: loop0: failed to convert name for inode 1e. [ 148.639952][ T6128] netlink: 256 bytes leftover after parsing attributes in process `syz.5.596'. [ 148.700820][ T6128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.596'. [ 148.726438][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 148.737665][ T6124] loop6: detected capacity change from 0 to 4096 [ 148.801528][ T6124] EXT4-fs: inline encryption not supported [ 148.888806][ T6124] EXT4-fs (loop6): Test dummy encryption mode enabled [ 148.947017][ T6124] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 149.188767][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 149.403017][ T6145] loop5: detected capacity change from 0 to 64 [ 149.521325][ T6145] hfs: keylen 94 too large [ 149.766925][ T6122] loop4: detected capacity change from 0 to 32768 [ 149.894443][ T6122] XFS (loop4): Mounting V5 Filesystem [ 150.017107][ T6122] XFS (loop4): Ending clean mount [ 150.032232][ T6122] XFS (loop4): Quotacheck needed: Please wait. [ 150.113088][ T6122] XFS (loop4): Quotacheck: Done. [ 150.131620][ T6135] loop1: detected capacity change from 0 to 32768 [ 150.175533][ T41] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 150.249800][ T6135] XFS (loop1): Mounting V5 Filesystem [ 150.351584][ T6137] loop0: detected capacity change from 0 to 32768 [ 150.376888][ T41] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.403701][ T41] usb 7-1: config 0 interface 0 has no altsetting 0 [ 150.415400][ T41] usb 7-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 150.431762][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.442602][ T41] usb 7-1: config 0 descriptor?? [ 150.502551][ T6137] XFS (loop0): Mounting V5 Filesystem [ 150.528606][ T4265] XFS (loop4): Unmounting Filesystem [ 150.535805][ T6135] XFS (loop1): Ending clean mount [ 150.545361][ T6135] XFS (loop1): Quotacheck needed: Please wait. [ 150.744829][ T6137] XFS (loop0): Ending clean mount [ 150.761591][ T6135] XFS (loop1): Quotacheck: Done. [ 150.815995][ T6193] loop5: detected capacity change from 0 to 512 [ 150.822261][ T6137] XFS (loop0): Quotacheck needed: Please wait. [ 150.823693][ T6193] EXT4-fs: Ignoring removed orlov option [ 150.863948][ T41] razer 0003:1532:011B.0003: collection stack underflow [ 150.881126][ T6193] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 150.892270][ T41] razer 0003:1532:011B.0003: item 0 4 0 12 parsing failed [ 150.932285][ T6137] XFS (loop0): Quotacheck: Done. [ 150.942255][ T41] razer: probe of 0003:1532:011B.0003 failed with error -22 [ 150.980508][ T6193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 151.085227][ T6193] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.614: corrupted in-inode xattr [ 151.093962][ T5566] usb 7-1: USB disconnect, device number 4 [ 151.144613][ T6193] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.614: couldn't read orphan inode 15 (err -117) [ 151.167035][ T6193] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 151.186153][ T4264] XFS (loop0): Unmounting Filesystem [ 151.217799][ T4271] XFS (loop1): Unmounting Filesystem [ 151.380144][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 151.818590][ T6203] loop4: detected capacity change from 0 to 4096 [ 151.866017][ T6203] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 151.986626][ T6203] ntfs3: loop4: Failed to load $Extend. [ 152.003977][ T6213] loop0: detected capacity change from 0 to 256 [ 152.038145][ T6213] exfat: Deprecated parameter 'utf8' [ 152.057540][ T6213] exfat: Deprecated parameter 'utf8' [ 152.076575][ T26] audit: type=1800 audit(1753096483.478:78): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="file0" dev="loop4" ino=0 res=0 errno=0 [ 152.108583][ T6213] exfat: Deprecated parameter 'utf8' [ 152.200313][ T6213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 152.261345][ T6218] loop5: detected capacity change from 0 to 512 [ 152.303198][ T6218] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.385327][ T6218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.476424][ T6220] loop4: detected capacity change from 0 to 1024 [ 152.503801][ T6218] EXT4-fs (loop5): 1 truncate cleaned up [ 152.544781][ T6218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.622629][ T6220] hfsplus: found bad thread record in catalog [ 152.635309][ T6220] hfsplus: catalog searching failed [ 152.679514][ T6208] loop6: detected capacity change from 0 to 32768 [ 152.836730][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 152.900490][ T32] hfsplus: b-tree write err: -5, ino 4 [ 152.924002][ T6208] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 153.322045][ T5031] ocfs2: Unmounting device (7,6) on (node local) [ 153.583934][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.634'. [ 153.689348][ T6255] netlink: 'syz.0.635': attribute type 2 has an invalid length. [ 153.775311][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 153.957642][ T6265] loop0: detected capacity change from 0 to 64 [ 154.015420][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 154.023583][ T7] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.040011][ T6267] loop1: detected capacity change from 0 to 512 [ 154.045114][ T7] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 154.069990][ T6267] EXT4-fs: Ignoring removed oldalloc option [ 154.105655][ T6267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.125230][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.170930][ T7] usb 7-1: config 0 descriptor?? [ 154.256262][ T6267] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.641: Parent and EA inode have the same ino 15 [ 154.301707][ T6274] loop5: detected capacity change from 0 to 16 [ 154.366417][ T6267] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.641: Parent and EA inode have the same ino 15 [ 154.402688][ T6274] erofs: (device loop5): mounted with root inode @ nid 36. [ 154.432873][ T6267] EXT4-fs (loop1): 1 orphan inode deleted [ 154.479477][ T6274] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 154.491846][ T6267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.501854][ T6274] syz.5.643: attempt to access beyond end of device [ 154.501854][ T6274] loop5: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 154.588845][ T6283] xt_hashlimit: max too large, truncated to 1048576 [ 154.606078][ T6267] EXT4-fs warning (device loop1): __ext4_unlink:3335: inode #15: comm syz.1.641: Deleting file 'file1' with no links [ 154.609946][ T7] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 154.641891][ T6283] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 154.836815][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 154.877360][ T7] usb 7-1: USB disconnect, device number 5 [ 155.046578][ T6292] Bluetooth: MGMT ver 1.22 [ 155.230649][ T6298] netlink: 'syz.0.655': attribute type 298 has an invalid length. [ 155.985409][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 156.169737][ T6333] [U] ¦ [ 156.753848][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 156.800865][ T6356] netlink: 5 bytes leftover after parsing attributes in process `syz.6.678'. [ 156.900353][ T6319] loop5: detected capacity change from 0 to 32768 [ 156.987577][ T6319] JBD2: Ignoring recovery information on journal [ 157.113806][ T6319] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 157.257012][ T26] audit: type=1800 audit(1753096488.658:79): pid=6319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.664" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 157.616223][ T4972] ocfs2: Unmounting device (7,5) on (node local) [ 157.914643][ T6391] loop1: detected capacity change from 0 to 64 [ 158.341638][ T6405] loop0: detected capacity change from 0 to 512 [ 158.418627][ T6405] EXT4-fs: Ignoring removed orlov option [ 158.486834][ T6405] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 158.527817][ T6405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 158.594993][ T6405] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.699: corrupted in-inode xattr [ 158.673252][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.699: couldn't read orphan inode 15 (err -117) [ 158.730179][ T6405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.847289][ T6424] device macsec1 entered promiscuous mode [ 159.027679][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 159.761662][ T6417] loop1: detected capacity change from 0 to 32768 [ 159.806510][ T6452] sp0: Synchronizing with TNC [ 160.193154][ T6462] loop0: detected capacity change from 0 to 256 [ 160.274655][ T6462] exfat: Deprecated parameter 'namecase' [ 160.313300][ T6462] exfat: Deprecated parameter 'utf8' [ 160.403912][ T6462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 160.464833][ T6468] loop4: detected capacity change from 0 to 256 [ 160.510328][ T6431] loop5: detected capacity change from 0 to 32768 [ 160.532776][ T6468] exfat: Deprecated parameter 'namecase' [ 160.587202][ T6468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 160.661072][ T6474] sp0: Synchronizing with TNC [ 160.752905][ T6431] XFS (loop5): Mounting V5 Filesystem [ 160.895004][ T6483] loop1: detected capacity change from 0 to 4096 [ 160.947818][ T6483] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 160.981855][ T6431] XFS (loop5): Ending clean mount [ 161.010218][ T6431] XFS (loop5): Quotacheck needed: Please wait. [ 161.083065][ T6483] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 161.142670][ T6431] XFS (loop5): Quotacheck: Done. [ 161.432153][ T4972] XFS (loop5): Unmounting Filesystem [ 161.765219][ T41] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 161.890907][ T6505] loop1: detected capacity change from 0 to 4096 [ 161.956544][ T6505] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 161.967746][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.001150][ T41] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 162.041649][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.050201][ T6505] ntfs3: loop1: Failed to load $Extend. [ 162.097454][ T41] usb 7-1: config 0 descriptor?? [ 162.259911][ T6514] loop5: detected capacity change from 0 to 1024 [ 162.408368][ T6514] hfsplus: keylen 65060 too large [ 162.413875][ T6514] hfsplus: xattr searching failed [ 162.461959][ T26] audit: type=1800 audit(1753096493.858:80): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.732" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 162.544268][ T41] sigmamicro 0003:1C4F:0059.0005: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0 [ 162.737097][ T41] usb 7-1: USB disconnect, device number 6 [ 162.942340][ T6527] fido_id[6527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 163.131475][ T6502] loop0: detected capacity change from 0 to 40427 [ 163.174092][ T6502] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 163.186538][ T6502] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.235166][ T6502] F2FS-fs (loop0): invalid crc value [ 163.283072][ T6502] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.497288][ T6502] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.504423][ T6502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.686861][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.747'. [ 163.832191][ T4264] syz-executor: attempt to access beyond end of device [ 163.832191][ T4264] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.772983][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.978162][ T7] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.001388][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.023902][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 165.055209][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.113731][ T7] usb 2-1: config 0 descriptor?? [ 165.351162][ T6603] loop5: detected capacity change from 0 to 164 [ 165.428909][ T6581] loop6: detected capacity change from 0 to 32768 [ 165.449567][ T6603] Unable to read rock-ridge attributes [ 165.510119][ T6585] loop4: detected capacity change from 0 to 32768 [ 165.548425][ T6581] XFS (loop6): Mounting V5 Filesystem [ 165.562448][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.564778][ T6603] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 165.605626][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.652346][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.662127][ T6585] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 165.685316][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.723442][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.740569][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.775353][ T7] magicmouse 0003:05AC:0269.0006: unknown main item tag 0x0 [ 165.849173][ T7] magicmouse 0003:05AC:0269.0006: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 165.857135][ T4265] ocfs2: Unmounting device (7,4) on (node local) [ 165.929200][ T7] usb 2-1: USB disconnect, device number 6 [ 165.952366][ T6581] XFS (loop6): Ending clean mount [ 165.994780][ T6581] XFS (loop6): Quotacheck needed: Please wait. [ 166.012616][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.767'. [ 166.043410][ T6617] loop0: detected capacity change from 0 to 8192 [ 166.122018][ T6581] XFS (loop6): Quotacheck: Done. [ 166.215401][ T6625] loop4: detected capacity change from 0 to 2048 [ 166.319367][ T6625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.480663][ T6623] fido_id[6623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 166.627187][ T5031] XFS (loop6): Unmounting Filesystem [ 167.058361][ T4272] Bluetooth: hci1: Malformed Event: 0x02 [ 167.161090][ T6650] loop4: detected capacity change from 0 to 512 [ 167.282642][ T6650] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.291332][ T6657] sp0: Synchronizing with TNC [ 167.340734][ T6650] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.471774][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 167.737498][ T26] audit: type=1326 audit(1753096755.140:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 167.824905][ T26] audit: type=1326 audit(1753096755.140:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 167.891208][ T26] audit: type=1326 audit(1753096755.170:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.061511][ T26] audit: type=1326 audit(1753096755.170:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.155891][ T26] audit: type=1326 audit(1753096755.170:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.259928][ T26] audit: type=1326 audit(1753096755.170:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.370235][ T26] audit: type=1326 audit(1753096755.170:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.463698][ T26] audit: type=1326 audit(1753096755.170:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332858e9a9 code=0x7ffc0000 [ 168.854262][ T6695] loop1: detected capacity change from 0 to 4096 [ 168.893564][ T6695] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 169.037880][ T6669] loop4: detected capacity change from 0 to 32768 [ 169.052007][ T6704] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 169.052007][ T6704] program syz.6.796 not setting count and/or reply_len properly [ 169.240334][ T6669] XFS (loop4): Mounting V5 Filesystem [ 169.396650][ T6683] loop0: detected capacity change from 0 to 32768 [ 169.403465][ T4271] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 169.437121][ T4271] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 169.443709][ T4271] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 169.466229][ T6669] XFS (loop4): Ending clean mount [ 169.485890][ T6669] XFS (loop4): Quotacheck needed: Please wait. [ 169.676174][ T6669] XFS (loop4): Quotacheck: Done. [ 169.706184][ T6683] XFS (loop0): Mounting V5 Filesystem [ 169.782818][ T6683] XFS (loop0): Ending clean mount [ 169.955498][ T6739] program syz.5.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.065689][ T4264] XFS (loop0): Unmounting Filesystem [ 170.283095][ T4265] XFS (loop4): Unmounting Filesystem [ 170.435281][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.449368][ T6748] loop5: detected capacity change from 0 to 256 [ 170.596290][ T6748] FAT-fs (loop5): Directory bread(block 64) failed [ 170.602883][ T6748] FAT-fs (loop5): Directory bread(block 65) failed [ 170.640078][ T6748] FAT-fs (loop5): Directory bread(block 66) failed [ 170.648886][ T7] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.678672][ T7] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.703786][ T6748] FAT-fs (loop5): Directory bread(block 67) failed [ 170.722864][ T7] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.743963][ T6748] FAT-fs (loop5): Directory bread(block 68) failed [ 170.764057][ T6748] FAT-fs (loop5): Directory bread(block 69) failed [ 170.774155][ T7] usb 2-1: config 220 has no interface number 2 [ 170.785265][ T6748] FAT-fs (loop5): Directory bread(block 70) failed [ 170.791848][ T6748] FAT-fs (loop5): Directory bread(block 71) failed [ 170.808834][ T7] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.863365][ T6748] FAT-fs (loop5): Directory bread(block 72) failed [ 170.872917][ T7] usb 2-1: config 220 interface 0 has no altsetting 0 [ 170.902489][ T6748] FAT-fs (loop5): Directory bread(block 73) failed [ 170.909405][ T7] usb 2-1: config 220 interface 76 has no altsetting 0 [ 170.925119][ T7] usb 2-1: config 220 interface 1 has no altsetting 0 [ 170.946279][ T7] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.956490][ T6754] tipc: Enabling not permitted [ 170.962209][ T6754] tipc: Enabling of bearer rejected, failed to enable media [ 171.011880][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.019473][ T6731] loop6: detected capacity change from 0 to 32768 [ 171.042250][ T7] usb 2-1: Product: syz [ 171.065355][ T7] usb 2-1: Manufacturer: syz [ 171.071034][ T7] usb 2-1: SerialNumber: syz [ 171.130435][ T6731] XFS (loop6): Mounting V5 Filesystem [ 171.360798][ T7] usb 2-1: selecting invalid altsetting 0 [ 171.406568][ T7] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 171.463430][ T7] usb 2-1: No valid video chain found. [ 171.476586][ T6731] XFS (loop6): Ending clean mount [ 171.519492][ T6731] XFS (loop6): Quotacheck needed: Please wait. [ 171.527000][ T7] usb 2-1: selecting invalid altsetting 0 [ 171.555507][ T7] usbtest: probe of 2-1:220.1 failed with error -22 [ 171.592809][ T7] usb 2-1: USB disconnect, device number 7 [ 171.645709][ T6731] XFS (loop6): Quotacheck: Done. [ 171.704765][ T26] audit: type=1800 audit(1753096759.100:89): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.802" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 171.859296][ T5031] XFS (loop6): Unmounting Filesystem [ 172.324313][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 172.408852][ T6772] loop5: detected capacity change from 0 to 32768 [ 172.491295][ T6772] XFS (loop5): Mounting V5 Filesystem [ 172.495368][ T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.523333][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.820'. [ 172.545236][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.820'. [ 172.566321][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.820'. [ 172.571532][ T6772] XFS (loop5): Ending clean mount [ 172.618587][ T6772] XFS (loop5): Quotacheck needed: Please wait. [ 172.695396][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 172.732645][ T41] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.760756][ T41] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.814031][ T41] usb 2-1: config 0 interface 0 has no altsetting 0 [ 172.835921][ T6814] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20001 [ 172.843712][ T41] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 172.867215][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.892973][ T41] usb 2-1: config 0 descriptor?? [ 172.907968][ T6772] XFS (loop5): Quotacheck: Done. [ 173.154554][ T4972] XFS (loop5): Unmounting Filesystem [ 173.290228][ T6823] loop0: detected capacity change from 0 to 1764 [ 173.336841][ T41] aquacomputer_d5next 0003:0C70:F00E.0007: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 173.372517][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 173.546339][ T41] usb 2-1: USB disconnect, device number 8 [ 173.578577][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 173.763866][ T6831] loop6: detected capacity change from 0 to 4096 [ 173.789301][ T6833] fido_id[6833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 173.837848][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 173.878438][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 173.893413][ T6838] netlink: 'syz.0.828': attribute type 5 has an invalid length. [ 173.937670][ T6838] netlink: 'syz.0.828': attribute type 6 has an invalid length. [ 174.495102][ T5565] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 174.725916][ T5565] usb 1-1: Using ep0 maxpacket: 32 [ 174.733742][ T5565] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 174.767806][ T5565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.806939][ T5565] usb 1-1: config 0 descriptor?? [ 174.847517][ T5565] gspca_main: sq930x-2.14.0 probing 041e:403c [ 175.009879][ T6872] netlink: 'syz.4.840': attribute type 50 has an invalid length. [ 175.475524][ T5565] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 175.481581][ T5565] sq930x: probe of 1-1:0.0 failed with error -71 [ 175.522503][ T5565] usb 1-1: USB disconnect, device number 3 [ 175.586214][ T6884] loop4: detected capacity change from 0 to 256 [ 175.716228][ T6855] loop1: detected capacity change from 0 to 32768 [ 175.740391][ T6882] loop6: detected capacity change from 0 to 4096 [ 175.772851][ T6882] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 175.811880][ T6855] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 175.970185][ T6882] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 175.983331][ T6855] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 176.311905][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 176.378108][ T6871] loop5: detected capacity change from 0 to 40427 [ 176.445289][ T5565] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.454738][ T6871] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 176.490560][ T6871] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 176.529751][ T6871] F2FS-fs (loop5): invalid crc value [ 176.555637][ T6900] loop6: detected capacity change from 0 to 2048 [ 176.572048][ T6871] F2FS-fs (loop5): Found nat_bits in checkpoint [ 176.610460][ T6900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.635236][ T5565] usb 1-1: Using ep0 maxpacket: 32 [ 176.642738][ T5565] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.696799][ T5565] usb 1-1: config 0 interface 0 has no altsetting 0 [ 176.718572][ T5565] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 176.755188][ T5565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.804768][ T6871] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 176.813749][ T5565] usb 1-1: config 0 descriptor?? [ 176.831133][ T6871] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 177.212874][ T4972] syz-executor: attempt to access beyond end of device [ 177.212874][ T4972] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.352386][ T5565] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 177.368720][ T5565] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 177.508541][ T5565] usb 1-1: USB disconnect, device number 4 [ 178.695617][ T6955] loop0: detected capacity change from 0 to 2048 [ 178.718065][ T6929] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.733803][ T6928] loop4: detected capacity change from 0 to 32768 [ 178.741846][ T6929] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 178.748010][ T6955] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.765710][ T6929] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 178.783898][ T6928] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 178.785696][ T6955] NILFS (loop0): mounting unchecked fs [ 178.796942][ T6929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.807664][ T6929] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 178.814103][ T6929] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 178.828965][ T6929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.835381][ T6929] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 178.841557][ T6929] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 178.859181][ T6929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.861441][ T5831] udevd[5831]: incorrect nilfs2 checksum on /dev/loop0 [ 178.880812][ T6929] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.908131][ T6929] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 178.923682][ T6929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.931809][ T6955] NILFS (loop0): recovery complete [ 178.944535][ T6929] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 178.972548][ T6956] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.000361][ T6929] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 179.031662][ T6929] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 179.052303][ T6929] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 179.077437][ T6929] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 179.121112][ T6829] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 179.315352][ T6932] loop5: detected capacity change from 0 to 40427 [ 179.413719][ T6932] F2FS-fs (loop5): Found nat_bits in checkpoint [ 179.533282][ T6932] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 179.620938][ T6932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 179.640518][ T6975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 179.842099][ T6977] loop1: detected capacity change from 0 to 2048 [ 179.851872][ T4972] syz-executor: attempt to access beyond end of device [ 179.851872][ T4972] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.891682][ T6977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.085398][ T4272] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.308094][ T6990] loop1: detected capacity change from 0 to 16 [ 180.355532][ T6990] erofs: (device loop1): mounted with root inode @ nid 36. [ 180.805820][ T4272] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.885332][ T4272] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.885613][ T4278] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.976421][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.985257][ T5566] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 181.055311][ T4278] Bluetooth: hci5: command 0x0c1a tx timeout [ 181.177015][ T5566] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.195759][ T5566] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.222476][ T5566] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 181.246718][ T5566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.264830][ T7024] loop0: detected capacity change from 0 to 4096 [ 181.285858][ T5566] usb 7-1: config 0 descriptor?? [ 181.472647][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.893'. [ 181.490647][ T7024] ntfs: (device loop0): parse_options(): NLS character set cp86 not found. Using previous one cp1255. [ 181.524720][ T7024] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 181.557036][ T7024] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 181.592272][ T7024] ntfs: volume version 3.1. [ 181.599614][ T7024] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 181.634218][ T7024] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 181.646094][ T7024] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 181.660794][ T7033] loop5: detected capacity change from 0 to 4096 [ 181.677960][ T7033] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 181.716407][ T7033] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.729470][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.754490][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.778165][ T7033] ntfs3: loop5: ino=1e, "file1" attr_set_size [ 181.796175][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.803543][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.851685][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.889254][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.913710][ T5566] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 181.946166][ T5566] magicmouse 0003:05AC:0269.0009: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.6-1/input0 [ 182.017706][ T5566] usb 7-1: USB disconnect, device number 7 [ 182.094835][ T4972] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 182.165168][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 182.222829][ T7042] loop0: detected capacity change from 0 to 2048 [ 182.326282][ T7043] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.368570][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 182.413874][ T7038] fido_id[7038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 182.525442][ T7045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 182.565854][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.898'. [ 182.614903][ T7046] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 182.691000][ T4934] lo speed is unknown, defaulting to 1000 [ 182.885228][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 182.966247][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 182.975137][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 183.002023][ T7055] loop6: detected capacity change from 0 to 256 [ 183.016898][ T7055] exfat: Deprecated parameter 'namecase' [ 183.045421][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 183.084096][ T7055] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 183.127215][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 183.235804][ T7040] loop4: detected capacity change from 0 to 40427 [ 183.271557][ T7040] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 183.294110][ T7040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 183.345859][ T7040] F2FS-fs (loop4): invalid crc value [ 183.358424][ T7061] loop5: detected capacity change from 0 to 256 [ 183.368389][ T7061] exfat: Deprecated parameter 'utf8' [ 183.389813][ T7061] exfat: Deprecated parameter 'utf8' [ 183.401201][ T7037] loop1: detected capacity change from 0 to 32768 [ 183.401972][ T7040] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 183.472727][ T7061] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 183.533467][ T7037] XFS (loop1): Mounting V5 Filesystem [ 183.722101][ T7040] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 183.735895][ T7040] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.793924][ T7037] XFS (loop1): Ending clean mount [ 183.802217][ T7037] XFS (loop1): Quotacheck needed: Please wait. [ 183.915677][ T7037] XFS (loop1): Quotacheck: Done. [ 184.019582][ T4359] Bluetooth: hci6: Frame reassembly failed (-84) [ 184.208386][ T4271] XFS (loop1): Unmounting Filesystem [ 184.912551][ T7087] loop0: detected capacity change from 0 to 32768 [ 184.942633][ T7087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.913 (7087) [ 184.983884][ T7087] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.026935][ T7087] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 185.045287][ T7087] BTRFS info (device loop0): setting nodatacow, compression disabled [ 185.053658][ T7087] BTRFS info (device loop0): max_inline at 0 [ 185.073959][ T7087] BTRFS info (device loop0): enabling disk space caching [ 185.084184][ T7087] BTRFS info (device loop0): turning off barriers [ 185.102107][ T7087] BTRFS info (device loop0): turning on flush-on-commit [ 185.123662][ T7087] BTRFS info (device loop0): doing ref verification [ 185.150063][ T7087] BTRFS info (device loop0): force clearing of disk cache [ 185.177824][ T7087] BTRFS info (device loop0): enabling ssd optimizations [ 185.178194][ T7106] loop5: detected capacity change from 0 to 64 [ 185.184920][ T7087] BTRFS info (device loop0): max_inline at 4096 [ 185.238566][ T7087] BTRFS info (device loop0): disk space caching is enabled [ 185.246280][ T4736] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 185.447901][ T4736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 185.468147][ T4736] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 185.496208][ T4736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 185.551472][ T4736] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 185.574386][ T7087] BTRFS info (device loop0): rebuilding free space tree [ 185.613864][ T4736] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 185.656683][ T7131] loop1: detected capacity change from 0 to 1024 [ 185.661299][ T4736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.685906][ T7131] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 185.688651][ T7087] BTRFS info (device loop0): disabling free space tree [ 185.706715][ T7087] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 185.715151][ T7131] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 185.717888][ T4736] usb 5-1: Product: syz [ 185.730854][ T7087] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.743782][ T4736] usb 5-1: Manufacturer: syz [ 185.750445][ T7131] EXT4-fs error (device loop1): ext4_get_journal_inode:5735: inode #5: comm syz.1.926: unexpected bad inode w/o EXT4_IGET_BAD [ 185.762689][ T4736] usb 5-1: SerialNumber: syz [ 185.804883][ T7131] EXT4-fs (loop1): no journal found [ 185.806289][ T4736] usb 5-1: config 0 descriptor?? [ 185.823190][ T7131] EXT4-fs (loop1): can't get journal size [ 185.840837][ T4736] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 185.846059][ T7131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 185.892041][ T7131] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 16: comm syz.1.926: path /209/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 186.060000][ T4736] ums-isd200: probe of 5-1:0.0 failed with error -22 [ 186.085321][ T4278] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 186.092192][ T4267] Bluetooth: hci6: command 0x1003 tx timeout [ 186.127522][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 186.252183][ T4264] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.319985][ T7] usb 5-1: USB disconnect, device number 5 [ 186.594207][ T7149] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 186.699974][ T7154] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.064603][ T7162] mmap: syz.4.938 (7162) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.076820][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 187.110658][ T7164] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 187.122864][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.6.939'. [ 187.152579][ T7167] loop0: detected capacity change from 0 to 1024 [ 187.158846][ T7164] nbd: illegal input index 65544 [ 187.173828][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 187.265165][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 187.272116][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.313939][ T7] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 187.322743][ T46] hfsplus: b-tree write err: -5, ino 4 [ 187.344384][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.396095][ T7] usb 2-1: config 0 descriptor?? [ 187.514791][ T7178] loop4: detected capacity change from 0 to 128 [ 187.614513][ T7178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.634009][ T7178] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.634032][ T7182] loop6: detected capacity change from 0 to 64 [ 187.718598][ T7182] overlayfs: upper fs needs to support d_type. [ 187.731435][ T7182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.746485][ T7182] overlayfs: failed to set xattr on upper [ 187.756956][ T7182] overlayfs: ...falling back to index=off,metacopy=off. [ 187.868481][ T7] megaworld 0003:07B5:0312.000A: item fetching failed at offset 10/11 [ 187.891604][ T7] megaworld 0003:07B5:0312.000A: parse failed [ 187.932197][ T7] megaworld: probe of 0003:07B5:0312.000A failed with error -22 [ 188.028561][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 188.080741][ T5565] usb 2-1: USB disconnect, device number 9 [ 188.178110][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 188.219864][ T7194] loop5: detected capacity change from 0 to 1024 [ 188.257795][ T7192] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 188.307740][ T7196] netlink: 'syz.4.952': attribute type 5 has an invalid length. [ 188.323926][ T4349] hfsplus: b-tree write err: -5, ino 4 [ 188.339006][ T7196] device ip6erspan0 entered promiscuous mode [ 188.349475][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 188.372021][ T7197] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 188.435132][ T41] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 188.625609][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 188.634997][ T41] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.680796][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.698299][ T41] usb 7-1: Product: syz [ 188.705310][ T41] usb 7-1: Manufacturer: syz [ 188.709965][ T41] usb 7-1: SerialNumber: syz [ 188.745923][ T41] r8152-cfgselector 7-1: config 0 descriptor?? [ 189.044996][ T7217] netlink: 184 bytes leftover after parsing attributes in process `syz.4.962'. [ 189.054457][ T7217] netlink: 184 bytes leftover after parsing attributes in process `syz.4.962'. [ 189.101254][ T7215] loop1: detected capacity change from 0 to 4096 [ 189.175857][ T41] r8152-cfgselector 7-1: Unknown version 0x0000 [ 189.194418][ T41] r8152-cfgselector 7-1: bad CDC descriptors [ 189.204397][ T7221] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.222836][ T41] r8152-cfgselector 7-1: Unknown version 0x0000 [ 189.283843][ T41] r8152-cfgselector 7-1: USB disconnect, device number 8 [ 189.327490][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 189.441565][ T7225] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.521632][ T7203] loop0: detected capacity change from 0 to 32768 [ 189.529174][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 189.554733][ T7226] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 189.626165][ T7203] XFS (loop0): Mounting V5 Filesystem [ 189.639527][ T7232] netem: change failed [ 189.763017][ T7203] XFS (loop0): Ending clean mount [ 189.777436][ T7203] XFS (loop0): Quotacheck needed: Please wait. [ 189.796323][ T7240] loop4: detected capacity change from 0 to 1024 [ 189.898858][ T7203] XFS (loop0): Quotacheck: Done. [ 190.091663][ T4264] XFS (loop0): Unmounting Filesystem [ 190.134278][ T7251] loop6: detected capacity change from 0 to 512 [ 190.165857][ T7251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.178158][ T7251] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.256753][ T7251] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.256853][ T7251] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.324768][ T26] audit: type=1800 audit(1753096777.720:90): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.976" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 190.558468][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 190.903390][ T7268] loop4: detected capacity change from 0 to 512 [ 191.008693][ T7268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.019160][ T7257] loop5: detected capacity change from 0 to 32768 [ 191.064632][ T7257] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 191.073512][ T7268] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.105159][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.193451][ T7257] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 191.216664][ T5565] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 191.297051][ T7268] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 3: comm syz.4.981: lblock 8 mapped to illegal pblock 3 (length 26) [ 191.321262][ T7283] loop6: detected capacity change from 0 to 256 [ 191.382586][ T7268] EXT4-fs (loop4): Remounting filesystem read-only [ 191.415403][ T5565] usb 2-1: Using ep0 maxpacket: 32 [ 191.423921][ T5565] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.476600][ T4972] ocfs2: Unmounting device (7,5) on (node local) [ 191.493227][ T5565] usb 2-1: config 0 interface 0 has no altsetting 0 [ 191.530305][ T5565] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 191.555541][ T5565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.592907][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 191.595552][ T5565] usb 2-1: config 0 descriptor?? [ 191.775859][ T4267] Bluetooth: hci2: Unknown advertising packet type: 0xffff [ 191.776003][ T4267] Bluetooth: hci2: Malformed LE Event: 0x0d [ 192.052812][ T5565] corsair-psu 0003:1B1C:1C0D.000B: item fetching failed at offset 1/5 [ 192.085983][ T5565] corsair-psu: probe of 0003:1B1C:1C0D.000B failed with error -22 [ 192.254734][ T14] usb 2-1: USB disconnect, device number 10 [ 192.886977][ T7322] loop4: detected capacity change from 0 to 512 [ 192.984696][ T7322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.005862][ T7322] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.028360][ T7328] loop0: detected capacity change from 0 to 1024 [ 193.041837][ T7328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.108364][ T7328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 193.158456][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 193.216151][ T7328] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.1007: Freeing blocks not in datazone - block = 0, count = 4096 [ 193.264676][ T7328] EXT4-fs (loop0): Remounting filesystem read-only [ 193.288517][ T7328] EXT4-fs (loop0): 1 orphan inode deleted [ 193.303963][ T7328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.423096][ T7328] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.1007: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 193.446425][ T7328] EXT4-fs (loop0): Remounting filesystem read-only [ 193.473184][ T7333] loop6: detected capacity change from 0 to 1024 [ 193.529269][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 193.537422][ T7333] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 193.548346][ T7333] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.602309][ T7316] loop5: detected capacity change from 0 to 40427 [ 193.656048][ T7316] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 193.662446][ T7316] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 193.679847][ T7316] F2FS-fs (loop5): invalid crc value [ 193.718604][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 193.727406][ T7338] loop4: detected capacity change from 0 to 1024 [ 193.756832][ T7316] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 193.784646][ T7345] loop0: detected capacity change from 0 to 2048 [ 193.861723][ T7338] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.895190][ T7345] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 194.039870][ T7351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.119835][ T56] Bluetooth: hci6: Frame reassembly failed (-84) [ 194.143901][ T7316] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 194.155439][ T7316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.189632][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 194.209597][ T7356] loop6: detected capacity change from 0 to 512 [ 194.248825][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255249][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.531347][ T7361] loop0: detected capacity change from 0 to 1024 [ 194.657182][ T7361] hfsplus: bad catalog entry type [ 194.768143][ T4349] hfsplus: b-tree write err: -5, ino 4 [ 194.900094][ T7373] loop0: detected capacity change from 0 to 512 [ 194.999072][ T7373] EXT4-fs: inline encryption not supported [ 195.026219][ T7373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.109209][ T7373] EXT4-fs (loop0): 1 truncate cleaned up [ 195.114925][ T7373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.179926][ T7378] loop5: detected capacity change from 0 to 512 [ 195.265532][ T7378] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 195.335777][ T7378] EXT4-fs (loop5): 1 orphan inode deleted [ 195.381869][ T7378] EXT4-fs (loop5): 1 truncate cleaned up [ 195.395154][ T7378] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.415671][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 195.428398][ T7369] loop6: detected capacity change from 0 to 32768 [ 195.587573][ T7364] loop4: detected capacity change from 0 to 32768 [ 195.630874][ T7369] XFS (loop6): Mounting V5 Filesystem [ 195.680900][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 195.776568][ T7364] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.945507][ T7369] XFS (loop6): Ending clean mount [ 196.022978][ T4265] ocfs2: Unmounting device (7,4) on (node local) [ 196.165214][ T4267] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 196.195969][ T5031] XFS (loop6): Unmounting Filesystem [ 196.314712][ T7404] loop5: detected capacity change from 0 to 1024 [ 196.326876][ T7404] EXT4-fs: inline encryption not supported [ 196.332800][ T7404] EXT4-fs: Ignoring removed bh option [ 196.444238][ T7404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 196.674616][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 196.723861][ T7412] loop4: detected capacity change from 0 to 128 [ 196.851949][ T7412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 196.911231][ T7412] FAT-fs (loop4): Filesystem has been set read-only [ 196.931490][ T7412] syz.4.1034: attempt to access beyond end of device [ 196.931490][ T7412] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 196.957989][ T7412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 196.975179][ T7412] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 197.070285][ T7412] syz.4.1034: attempt to access beyond end of device [ 197.070285][ T7412] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.070522][ T26] audit: type=1800 audit(1753096784.470:91): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1034" name="file2" dev="loop4" ino=1048642 res=0 errno=0 [ 197.127353][ T7412] syz.4.1034 (7412) used greatest stack depth: 20416 bytes left [ 197.162017][ T7401] loop0: detected capacity change from 0 to 40427 [ 197.195137][ T7401] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 197.235451][ T7401] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 197.240282][ T7401] F2FS-fs (loop0): invalid crc value [ 197.264710][ T7401] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 197.471107][ T7401] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 197.489242][ T4928] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 197.498764][ T7401] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.695112][ T4928] usb 7-1: Using ep0 maxpacket: 16 [ 197.702228][ T4928] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.748127][ T4928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 197.762702][ T4928] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 197.774242][ T4928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.789213][ T4928] usb 7-1: config 0 descriptor?? [ 197.819204][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 197.876670][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 197.893940][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 197.922758][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 197.958837][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1044'. [ 198.222100][ T4928] kye 0003:0458:0138.000C: unknown main item tag 0x4 [ 198.239965][ T4928] kye 0003:0458:0138.000C: unexpected long global item [ 198.259416][ T4928] kye 0003:0458:0138.000C: parse failed [ 198.279161][ T4928] kye: probe of 0003:0458:0138.000C failed with error -22 [ 198.376859][ T7450] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1045'. [ 198.425180][ T4928] usb 7-1: USB disconnect, device number 9 [ 198.584870][ T7452] loop5: detected capacity change from 0 to 4096 [ 198.652841][ T7455] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.740415][ T7446] loop4: detected capacity change from 0 to 32768 [ 198.795850][ T7446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1048 (7446) [ 198.880219][ T7446] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.912280][ T7446] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 198.958351][ T7446] BTRFS info (device loop4): setting nodatacow, compression disabled [ 198.983080][ T7457] loop0: detected capacity change from 0 to 64 [ 198.985380][ T7452] syz.5.1050 (7452) used greatest stack depth: 19568 bytes left [ 199.007361][ T7446] BTRFS info (device loop4): max_inline at 0 [ 199.013441][ T7446] BTRFS info (device loop4): enabling disk space caching [ 199.051768][ T7446] BTRFS info (device loop4): turning off barriers [ 199.081669][ T7446] BTRFS info (device loop4): turning on flush-on-commit [ 199.119181][ T7457] overlayfs: upper fs needs to support d_type. [ 199.135327][ T7446] BTRFS info (device loop4): doing ref verification [ 199.167205][ T7457] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.168608][ T7459] loop6: detected capacity change from 0 to 512 [ 199.181031][ T7446] BTRFS info (device loop4): force clearing of disk cache [ 199.184354][ T7457] overlayfs: failed to set xattr on upper [ 199.202222][ T7446] BTRFS info (device loop4): enabling ssd optimizations [ 199.217338][ T7446] BTRFS info (device loop4): max_inline at 4096 [ 199.225472][ T7457] overlayfs: ...falling back to index=off,metacopy=off. [ 199.294311][ T7448] loop1: detected capacity change from 0 to 32768 [ 199.326661][ T7446] BTRFS info (device loop4): disk space caching is enabled [ 199.327144][ T7459] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 199.362120][ T7448] [ 199.362120][ T7448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.362120][ T7448] [ 199.375831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.493852][ T7459] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.598393][ T7474] loop5: detected capacity change from 0 to 1024 [ 199.612043][ T7459] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.1054: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 199.631606][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.643327][ T4271] [ 199.643327][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.643327][ T4271] [ 199.659719][ T4271] [ 199.659719][ T4271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 199.659719][ T4271] [ 199.728847][ T7459] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.1054: directory missing '.' [ 199.821440][ T7446] BTRFS info (device loop4): rebuilding free space tree [ 199.898847][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 199.962481][ T7446] BTRFS info (device loop4): disabling free space tree [ 200.024854][ T7446] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.071010][ T7446] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.473118][ T4265] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.721691][ T7502] loop1: detected capacity change from 0 to 2048 [ 200.796038][ T4928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.929322][ T7492] loop6: detected capacity change from 0 to 32768 [ 200.995372][ T4928] usb 6-1: Using ep0 maxpacket: 32 [ 201.004245][ T4928] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 201.121952][ T4928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.130795][ T7492] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 201.194978][ T4928] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 201.204354][ T4928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.287709][ T4928] usb 6-1: config 0 descriptor?? [ 201.395590][ T5031] ocfs2: Unmounting device (7,6) on (node local) [ 201.445650][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 201.451759][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 201.457870][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 201.457887][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 201.744905][ T4928] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 201.764762][ T4928] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 201.799650][ T4928] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 201.828469][ T4928] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 201.854837][ T7529] loop0: detected capacity change from 0 to 64 [ 201.862141][ T4928] corsair-psu 0003:1B1C:1C09.000D: unknown main item tag 0x0 [ 201.903442][ T4928] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 202.027776][ T4928] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-38) [ 202.056920][ T4928] corsair-psu: probe of 0003:1B1C:1C09.000D failed with error -38 [ 202.103228][ T4928] usb 6-1: USB disconnect, device number 2 [ 202.370286][ T7536] fido_id[7536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 202.427742][ T7515] loop1: detected capacity change from 0 to 40427 [ 202.538298][ T7515] F2FS-fs (loop1): Found nat_bits in checkpoint [ 202.721332][ T7515] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.734607][ T7548] loop6: detected capacity change from 0 to 1024 [ 202.971601][ T4271] syz-executor: attempt to access beyond end of device [ 202.971601][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.560978][ T7572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1089'. [ 204.001285][ T7564] loop6: detected capacity change from 0 to 32768 [ 204.018390][ T7578] loop1: detected capacity change from 0 to 4096 [ 204.040220][ T7578] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 204.106200][ T7564] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1086 (7564) [ 204.178438][ T7564] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.214529][ T7564] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 204.237952][ T7564] BTRFS info (device loop6): setting nodatacow, compression disabled [ 204.312872][ T7564] BTRFS info (device loop6): max_inline at 0 [ 204.345099][ T7564] BTRFS info (device loop6): enabling disk space caching [ 204.386754][ T7564] BTRFS info (device loop6): turning off barriers [ 204.393250][ T7564] BTRFS info (device loop6): turning on flush-on-commit [ 204.441554][ T7564] BTRFS info (device loop6): doing ref verification [ 204.458648][ T7564] BTRFS info (device loop6): force clearing of disk cache [ 204.478945][ T7564] BTRFS info (device loop6): enabling ssd optimizations [ 204.579811][ T7590] loop0: detected capacity change from 0 to 2048 [ 204.586464][ T7564] BTRFS info (device loop6): max_inline at 4096 [ 204.592755][ T7564] BTRFS info (device loop6): disk space caching is enabled [ 204.715799][ T7605] autofs4:pid:7605:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 204.736367][ T7590] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 204.790655][ T26] audit: type=1800 audit(1753096792.190:92): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 204.956553][ T7564] BTRFS info (device loop6): rebuilding free space tree [ 205.086827][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 205.093258][ T7564] BTRFS info (device loop6): disabling free space tree [ 205.120315][ T7564] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.173014][ T7564] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.537964][ T7564] BTRFS warning (device loop6): failed to trim 1 device(s), last error -512 [ 205.711073][ T5031] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.897287][ T7632] loop0: detected capacity change from 0 to 16 [ 205.938933][ T7632] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 205.996197][ T7632] cramfs: wrong endianness [ 206.102452][ T5831] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop6 scanned by udevd (5831) [ 206.143669][ T7612] loop1: detected capacity change from 0 to 32768 [ 206.229603][ T26] audit: type=1800 audit(1753096793.630:93): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1099" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 206.292218][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1107'. [ 206.739053][ T7647] loop4: detected capacity change from 0 to 64 [ 206.851686][ T7647] syz.4.1113: attempt to access beyond end of device [ 206.851686][ T7647] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 206.935655][ T7647] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 207.127175][ T7647] Trying to free block not in datazone [ 207.258226][ T7629] loop5: detected capacity change from 0 to 32768 [ 207.377539][ T7666] tipc: Enabling of bearer rejected, failed to enable media [ 207.422922][ T7629] XFS (loop5): Mounting V5 Filesystem [ 207.494616][ T7673] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 207.592980][ T7673] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1122'. [ 207.604377][ T7629] XFS (loop5): Ending clean mount [ 207.629139][ T7629] XFS (loop5): Quotacheck needed: Please wait. [ 207.730171][ T7629] XFS (loop5): Quotacheck: Done. [ 207.903815][ T4972] XFS (loop5): Unmounting Filesystem [ 208.039343][ T7505] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 208.236928][ T7505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.296885][ T7505] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 208.346868][ T7505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.383547][ T7505] usb 1-1: config 0 descriptor?? [ 208.678312][ T7712] loop1: detected capacity change from 0 to 256 [ 208.812461][ T7505] macally 0003:060B:0001.000E: unknown main item tag 0x0 [ 208.835328][ T7505] macally 0003:060B:0001.000E: item fetching failed at offset 3/5 [ 208.878741][ T7505] macally: probe of 0003:060B:0001.000E failed with error -22 [ 208.901325][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1141'. [ 208.975779][ T7718] Bluetooth: MGMT ver 1.22 [ 209.033439][ T7720] usb usb9: usbfs: process 7720 (syz.1.1143) did not claim interface 0 before use [ 209.066181][ T7633] usb 1-1: USB disconnect, device number 5 [ 209.371720][ T7730] loop6: detected capacity change from 0 to 512 [ 209.444255][ T7730] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1148: bad orphan inode 15 [ 209.464450][ T7730] ext4_test_bit(bit=14, block=5) = 0 [ 209.485275][ T7730] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 209.619032][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 209.795311][ T7745] netlink: 'syz.6.1154': attribute type 3 has an invalid length. [ 210.694172][ T7777] loop1: detected capacity change from 0 to 1024 [ 210.764290][ T7777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.793683][ T7780] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1171'. [ 210.869588][ T7777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c019, mo2=0002] [ 210.895462][ T7777] System zones: 0-1, 3-12 [ 210.906775][ T7777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 210.964140][ T7753] loop0: detected capacity change from 0 to 40427 [ 211.045486][ T4278] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 211.045695][ T4272] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.083747][ T7790] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #13: comm syz.1.1170: corrupted in-inode xattr [ 211.085329][ T4935] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.106477][ T7753] F2FS-fs (loop0): invalid crc value [ 211.126740][ T7753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.193713][ T7790] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2748: inode #13: comm syz.1.1170: corrupted in-inode xattr [ 211.255517][ T7753] F2FS-fs (loop0): Start checkpoint disabled! [ 211.324853][ T4935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 211.348454][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 211.361036][ T7753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 211.395852][ T4935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.412840][ T4935] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 211.434575][ T4935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.464484][ T4935] usb 5-1: config 0 descriptor?? [ 211.707616][ T4359] kworker/u4:7: attempt to access beyond end of device [ 211.707616][ T4359] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 211.893362][ T7810] device bridge0 entered promiscuous mode [ 211.910919][ T7810] device macvlan2 entered promiscuous mode [ 211.923785][ T4935] elo 0003:04E7:0030.000F: unknown main item tag 0x0 [ 211.969090][ T4935] elo 0003:04E7:0030.000F: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 212.184414][ T7813] loop1: detected capacity change from 0 to 164 [ 212.192881][ T7505] usb 5-1: USB disconnect, device number 6 [ 212.291842][ T7811] fido_id[7811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.326738][ T7800] loop5: detected capacity change from 0 to 32768 [ 212.370768][ T7800] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1180 (7800) [ 212.434133][ T7800] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 212.477848][ T7800] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 212.515678][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 212.535185][ T7800] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.557952][ T7800] BTRFS info (device loop5): use zstd compression, level 3 [ 212.568406][ T7800] BTRFS info (device loop5): using free space tree [ 212.678909][ T7829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1190'. [ 212.885610][ T7505] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 212.922026][ T7800] BTRFS info (device loop5): enabling ssd optimizations [ 212.939812][ T7849] loop4: detected capacity change from 0 to 16 [ 212.969181][ T7849] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.027050][ T7849] syz.4.1194: attempt to access beyond end of device [ 213.027050][ T7849] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 213.070794][ T7844] loop0: detected capacity change from 0 to 4096 [ 213.076384][ T7851] syz.4.1194: attempt to access beyond end of device [ 213.076384][ T7851] loop4: rw=0, sector=48, nr_sectors = 16 limit=16 [ 213.092455][ T7505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.122508][ T7844] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 213.123006][ T7505] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 213.193345][ T7505] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 213.229485][ T7505] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.261277][ T7505] usb 7-1: config 0 descriptor?? [ 213.397532][ T4972] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 213.707874][ T7857] loop0: detected capacity change from 0 to 2048 [ 213.730531][ T7505] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 213.763200][ T7857] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 213.845728][ T7862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.931529][ T7505] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 213.945371][ T7505] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 213.955924][ T5831] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (5831) [ 213.969924][ T7505] kovaplus: probe of 0003:1E7D:2D50.0010 failed with error -71 [ 214.048474][ T7505] usb 7-1: USB disconnect, device number 10 [ 214.434548][ T7871] fido_id[7871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 215.168364][ T7866] loop4: detected capacity change from 0 to 32768 [ 215.218996][ T7866] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 215.505318][ T4935] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 215.521112][ T5831] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 215.705291][ T4935] usb 7-1: Using ep0 maxpacket: 8 [ 215.714814][ T4935] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 215.755976][ T4935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.764084][ T4935] usb 7-1: Product: syz [ 215.805145][ T4930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.812969][ T4935] usb 7-1: Manufacturer: syz [ 215.835412][ T4935] usb 7-1: SerialNumber: syz [ 215.865921][ T4935] usb 7-1: config 0 descriptor?? [ 215.902973][ T4935] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 216.015646][ T4930] usb 6-1: Using ep0 maxpacket: 8 [ 216.023745][ T4930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.065289][ T4930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.079538][ T4930] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 216.103777][ T4930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.135184][ T4930] usb 6-1: config 0 descriptor?? [ 216.146714][ T7920] loop4: detected capacity change from 0 to 64 [ 216.183812][ T7920] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 216.471689][ T7925] loop4: detected capacity change from 0 to 2048 [ 216.496135][ T4935] gspca_sonixj: reg_w1 err -71 [ 216.501070][ T4935] sonixj: probe of 7-1:0.0 failed with error -71 [ 216.550116][ T4935] usb 7-1: USB disconnect, device number 11 [ 216.562653][ T4930] hid-multitouch 0003:0EEF:72C4.0011: item fetching failed at offset 0/5 [ 216.598677][ T7925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 216.614632][ T7925] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 216.623407][ T4930] hid-multitouch: probe of 0003:0EEF:72C4.0011 failed with error -22 [ 216.669612][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 216.747061][ T26] audit: type=1326 audit(1753096804.150:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 216.749706][ T26] audit: type=1326 audit(1753096804.150:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 216.750006][ T26] audit: type=1326 audit(1753096804.150:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 216.845078][ T4930] usb 6-1: USB disconnect, device number 3 [ 216.854389][ T26] audit: type=1326 audit(1753096804.190:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 216.885835][ T26] audit: type=1326 audit(1753096804.240:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 216.918327][ T26] audit: type=1326 audit(1753096804.240:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7933 comm="syz.4.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44deb8e9a9 code=0x7ffc0000 [ 217.414567][ T7954] loop4: detected capacity change from 0 to 164 [ 217.435120][ T4317] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 217.468648][ T7954] Unable to read rock-ridge attributes [ 217.504484][ T7954] Unable to read rock-ridge attributes [ 217.535661][ T7954] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 217.627351][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 217.651112][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 217.703569][ T4317] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 217.750685][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.797123][ T4317] usb 1-1: config 0 descriptor?? [ 217.804495][ T7945] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.058568][ T26] audit: type=1326 audit(1753096805.460:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.1.1248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff91cb8e9a9 code=0x0 [ 218.080259][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.212466][ T7946] loop6: detected capacity change from 0 to 40427 [ 218.250457][ T4317] lenovo 0003:17EF:6009.0012: report_id 1754907481 is invalid [ 218.269124][ T4317] lenovo 0003:17EF:6009.0012: item 0 4 1 8 parsing failed [ 218.274041][ T7946] F2FS-fs (loop6): invalid crc value [ 218.290428][ T7946] F2FS-fs (loop6): Found nat_bits in checkpoint [ 218.297985][ T4317] lenovo 0003:17EF:6009.0012: hid_parse failed [ 218.309814][ T4317] lenovo: probe of 0003:17EF:6009.0012 failed with error -22 [ 218.395203][ T7946] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 218.438848][ T7956] loop5: detected capacity change from 0 to 32768 [ 218.464593][ T4317] usb 1-1: USB disconnect, device number 6 [ 218.468372][ T26] audit: type=1800 audit(1753096805.860:101): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1238" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 218.489601][ T7956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1243 (7956) [ 218.495187][ T4930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 218.550767][ T7956] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.562055][ T5031] syz-executor: attempt to access beyond end of device [ 218.562055][ T5031] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.589549][ T7956] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 218.601013][ T7956] BTRFS info (device loop5): force clearing of disk cache [ 218.611090][ T7956] BTRFS info (device loop5): enabling auto defrag [ 218.622262][ T7956] BTRFS info (device loop5): max_inline at 0 [ 218.630813][ T7956] BTRFS info (device loop5): enabling disk space caching [ 218.642243][ T7956] BTRFS info (device loop5): disk space caching is enabled [ 218.715123][ T4930] usb 5-1: Using ep0 maxpacket: 16 [ 218.722645][ T4930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.741992][ T4930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.752576][ T4930] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.762143][ T4930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.802831][ T4930] usb 5-1: config 0 descriptor?? [ 218.831796][ T7956] BTRFS info (device loop5): enabling ssd optimizations [ 218.845510][ T7956] BTRFS info (device loop5): rebuilding free space tree [ 218.883845][ T7956] BTRFS info (device loop5): disabling free space tree [ 218.905141][ T7956] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.920373][ T7956] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 219.132836][ T7993] loop6: detected capacity change from 0 to 512 [ 219.160868][ T7993] EXT4-fs: Ignoring removed oldalloc option [ 219.210325][ T7993] EXT4-fs: Ignoring removed bh option [ 219.231264][ T4930] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 219.251778][ T4930] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 219.271095][ T7993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 219.279208][ T4930] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 219.279258][ T4930] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 219.279282][ T4930] savu 0003:1E7D:2D5A.0013: unknown main item tag 0x0 [ 219.304926][ T4930] savu 0003:1E7D:2D5A.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 219.429012][ T7996] loop0: detected capacity change from 0 to 4096 [ 219.435373][ T4930] usb 5-1: USB disconnect, device number 7 [ 219.447596][ T7993] System zones: 1-12 [ 219.459983][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 219.463632][ T7993] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.1250: corrupted in-inode xattr [ 219.546065][ T7993] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1250: couldn't read orphan inode 15 (err -117) [ 219.592626][ T7993] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 219.680463][ T4972] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.004189][ T5831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop5 scanned by udevd (5831) [ 220.246058][ T5031] EXT4-fs (loop6): unmounting filesystem. [ 220.506920][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'. [ 220.545141][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 220.723255][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1265'. [ 220.765592][ T8029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1265'. [ 221.084557][ T8043] loop4: detected capacity change from 0 to 256 [ 221.178615][ T8043] FAT-fs (loop4): Directory bread(block 64) failed [ 221.217704][ T8043] FAT-fs (loop4): Directory bread(block 65) failed [ 221.224441][ T8043] FAT-fs (loop4): Directory bread(block 66) failed [ 221.273740][ T8037] loop1: detected capacity change from 0 to 4096 [ 221.280356][ T8043] FAT-fs (loop4): Directory bread(block 67) failed [ 221.305585][ T8043] FAT-fs (loop4): Directory bread(block 68) failed [ 221.312216][ T8043] FAT-fs (loop4): Directory bread(block 69) failed [ 221.341599][ T8037] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 221.372911][ T8043] FAT-fs (loop4): Directory bread(block 70) failed [ 221.420698][ T8043] FAT-fs (loop4): Directory bread(block 71) failed [ 221.438077][ T8052] loop5: detected capacity change from 0 to 736 [ 221.473878][ T8043] FAT-fs (loop4): Directory bread(block 72) failed [ 221.473940][ T8037] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 221.488706][ T8043] FAT-fs (loop4): Directory bread(block 73) failed [ 221.601057][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 221.611567][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:5 Not tainted 6.1.146-syzkaller #0 [ 221.619853][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.629949][ T4278] Workqueue: hci0 hci_rx_work [ 221.634695][ T4278] Call Trace: [ 221.637992][ T4278] [ 221.640942][ T4278] dump_stack_lvl+0x168/0x22e [ 221.645664][ T4278] ? show_regs_print_info+0x12/0x12 [ 221.650895][ T4278] ? load_image+0x3b0/0x3b0 [ 221.655438][ T4278] sysfs_create_dir_ns+0x252/0x280 [ 221.660573][ T4278] ? hci_rx_work+0x3eb/0xd40 [ 221.665190][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 221.669913][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 221.675140][ T4278] kobject_add_internal+0x6b8/0xc80 [ 221.680372][ T4278] kobject_add+0x152/0x210 [ 221.684809][ T4278] ? kobject_init+0x1d0/0x1d0 [ 221.689508][ T4278] ? klist_children_get+0x50/0x50 [ 221.694634][ T4278] ? get_device_parent+0x121/0x3f0 [ 221.699759][ T4278] device_add+0x483/0xfb0 [ 221.704099][ T4278] ? kmem_cache_free+0xf7/0x290 [ 221.708970][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 221.713926][ T4278] le_conn_complete_evt+0xd1d/0x1320 [ 221.719239][ T4278] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 221.725501][ T4278] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 221.731149][ T4278] ? skb_pull_data+0xf7/0x200 [ 221.735855][ T4278] hci_le_enh_conn_complete_evt+0x185/0x460 [ 221.741770][ T4278] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 221.748224][ T4278] ? hci_remote_host_features_evt+0x270/0x270 [ 221.754301][ T4278] hci_event_packet+0x791/0x1210 [ 221.759275][ T4278] ? bis_list+0x280/0x280 [ 221.763706][ T4278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 221.769622][ T4278] ? kcov_remote_start+0x4c7/0x7e0 [ 221.774751][ T4278] ? mce_start+0x60/0x140 [ 221.779107][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 221.784320][ T4278] hci_rx_work+0x3eb/0xd40 [ 221.788752][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 221.793618][ T4278] ? process_one_work+0x7a1/0x1160 [ 221.798730][ T4278] process_one_work+0x898/0x1160 [ 221.803691][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 221.809335][ T4278] ? _raw_spin_lock_irq+0xab/0xe0 [ 221.814366][ T4278] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 221.819917][ T4278] ? kthread_data+0x4b/0xc0 [ 221.824437][ T4278] worker_thread+0xaa2/0x1250 [ 221.829162][ T4278] kthread+0x29d/0x330 [ 221.833257][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 221.838287][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 221.842898][ T4278] ret_from_fork+0x1f/0x30 [ 221.847341][ T4278] [ 221.852082][ T4278] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 221.875685][ T4278] Bluetooth: hci0: failed to register connection device [ 221.914421][ T8052] rock: directory entry would overflow storage [ 221.920824][ T8052] rock: sig=0x5850, size=36, remaining=14 [ 221.950705][ T8057] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1277'. [ 222.143487][ T56] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 222.163781][ T4271] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 222.261656][ T8066] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1282'. [ 222.719168][ T8077] loop1: detected capacity change from 0 to 256 [ 222.801922][ T8077] FAT-fs (loop1): Directory bread(block 64) failed [ 222.824310][ T8077] FAT-fs (loop1): Directory bread(block 65) failed [ 222.843258][ T8077] FAT-fs (loop1): Directory bread(block 66) failed [ 222.869191][ T8077] FAT-fs (loop1): Directory bread(block 67) failed [ 222.899631][ T8077] FAT-fs (loop1): Directory bread(block 68) failed [ 222.913739][ T8077] FAT-fs (loop1): Directory bread(block 69) failed [ 222.951703][ T8077] FAT-fs (loop1): Directory bread(block 70) failed [ 222.984712][ T8077] FAT-fs (loop1): Directory bread(block 71) failed [ 223.031211][ T8077] FAT-fs (loop1): Directory bread(block 72) failed [ 223.040408][ T8077] FAT-fs (loop1): Directory bread(block 73) failed [ 223.141023][ T8064] loop6: detected capacity change from 0 to 32768 [ 223.233588][ T8064] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 223.330745][ T8064] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 223.506271][ T8099] loop4: detected capacity change from 0 to 512 [ 223.587903][ T5031] ocfs2: Unmounting device (7,6) on (node local) [ 223.606917][ T8099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.663863][ T8099] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.706881][ T4339] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 223.781530][ T8099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.825867][ T8099] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 223.897011][ T4339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.917866][ T4339] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 223.960523][ T4339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.000633][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 224.007999][ T4339] usb 1-1: config 0 descriptor?? [ 224.320371][ T8122] loop4: detected capacity change from 0 to 512 [ 224.370294][ T8122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.416398][ T8122] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.445582][ T4339] wacom 0003:056A:0336.0014: unknown main item tag 0x0 [ 224.464803][ T4339] wacom 0003:056A:0336.0014: unknown main item tag 0x0 [ 224.472374][ T4339] wacom 0003:056A:0336.0014: unknown main item tag 0x0 [ 224.490100][ T4339] wacom 0003:056A:0336.0014: hidraw0: USB HID v0.03 Device [HID 056a:0336] on usb-dummy_hcd.0-1/input0 [ 224.556887][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 224.652522][ T4928] usb 1-1: USB disconnect, device number 7 [ 224.812673][ T8129] fido_id[8129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.025432][ T126] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 225.185776][ T8147] loop6: detected capacity change from 0 to 8192 [ 225.216996][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.235417][ T126] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 225.263373][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.304391][ T126] usb 5-1: config 0 descriptor?? [ 225.585817][ T8158] loop5: detected capacity change from 0 to 1024 [ 225.624479][ T8158] EXT4-fs: Ignoring removed nobh option [ 225.664844][ T8158] EXT4-fs: Ignoring removed bh option [ 225.682396][ T8158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 225.773075][ T126] wacom 0003:056A:0317.0015: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 225.790306][ T126] wacom 0003:056A:0317.0015: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.4-1/input0 [ 225.811716][ T126] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0317.0015/input/input11 [ 225.833378][ T8158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.932129][ T8158] EXT4-fs (loop5): can't enable nombcache during remount [ 225.987673][ T126] usb 5-1: USB disconnect, device number 8 [ 226.179199][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 226.183651][ T8175] loop1: detected capacity change from 0 to 2048 [ 226.269863][ T8175] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.391764][ T8173] fido_id[8173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 227.594336][ T8206] loop5: detected capacity change from 0 to 1024 [ 227.647452][ T8206] EXT4-fs: Ignoring removed orlov option [ 227.712240][ T8206] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 227.806548][ T8210] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1340'. [ 227.912331][ T8202] loop0: detected capacity change from 0 to 32768 [ 227.920462][ T4972] EXT4-fs (loop5): unmounting filesystem. [ 227.969240][ T8202] read_mapping_page failed! [ 227.974130][ T8202] ERROR: (device loop0): txCommit: [ 227.974130][ T8202] [ 227.983054][ T8202] ERROR: (device loop0): remounting filesystem as read-only [ 228.065147][ T4339] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 228.149284][ T8216] loop5: detected capacity change from 0 to 256 [ 228.236170][ T8216] FAT-fs (loop5): Directory bread(block 64) failed [ 228.265871][ T8216] FAT-fs (loop5): Directory bread(block 65) failed [ 228.278888][ T4339] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 228.291744][ T8216] FAT-fs (loop5): Directory bread(block 66) failed [ 228.298465][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.306766][ T4339] usb 5-1: config 0 descriptor?? [ 228.340762][ T8216] FAT-fs (loop5): Directory bread(block 67) failed [ 228.347953][ T8216] FAT-fs (loop5): Directory bread(block 68) failed [ 228.354587][ T8216] FAT-fs (loop5): Directory bread(block 69) failed [ 228.371216][ T8216] FAT-fs (loop5): Directory bread(block 70) failed [ 228.380672][ T8216] FAT-fs (loop5): Directory bread(block 71) failed [ 228.433041][ T8216] FAT-fs (loop5): Directory bread(block 72) failed [ 228.440413][ T8216] FAT-fs (loop5): Directory bread(block 73) failed [ 228.715682][ T4339] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 228.732405][ T4339] elan 0003:04F3:0755.0016: item fetching failed at offset 3/5 [ 228.746056][ T4339] elan 0003:04F3:0755.0016: Hid Parse failed [ 228.756489][ T4339] elan: probe of 0003:04F3:0755.0016 failed with error -22 [ 228.916862][ T4923] usb 5-1: USB disconnect, device number 9 [ 228.942569][ T8237] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 229.483523][ T8256] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.755012][ C1] sched: RT throttling activated [ 230.779612][ T8270] loop1: detected capacity change from 0 to 131072 [ 230.793574][ T8270] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 230.801564][ T8270] F2FS-fs (loop1): inline_xattr_size option should be set with inline_xattr option [ 230.957623][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 231.600305][ T8272] loop0: detected capacity change from 0 to 40427 [ 231.646894][ T8272] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 231.653911][ T8272] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 231.737380][ T8272] F2FS-fs (loop0): invalid crc value [ 231.856730][ T8272] F2FS-fs (loop0): Found nat_bits in checkpoint [ 231.878612][ T8313] loop1: detected capacity change from 0 to 128 [ 231.963461][ T8313] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 232.003019][ T8313] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.048536][ T8272] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 232.131758][ T8272] F2FS-fs (loop0): Start checkpoint disabled! [ 232.155650][ T8272] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 232.165070][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 232.175355][ T8272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 232.272032][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 232.712663][ T5293] kworker/u4:9: attempt to access beyond end of device [ 232.712663][ T5293] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 232.755936][ T8331] loop5: detected capacity change from 0 to 1024 [ 232.823329][ T8331] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 233.612154][ T26] audit: type=1326 audit(1753096821.010:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 233.721587][ T26] audit: type=1326 audit(1753096821.040:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 233.743940][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.800517][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1394'. [ 233.836952][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1394'. [ 233.854908][ T26] audit: type=1326 audit(1753096821.070:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 233.877128][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.893365][ T8354] netlink: 'syz.6.1394': attribute type 15 has an invalid length. [ 233.934059][ T26] audit: type=1326 audit(1753096821.070:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 234.016455][ T26] audit: type=1326 audit(1753096821.070:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 234.074538][ T26] audit: type=1326 audit(1753096821.070:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 234.096786][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.168659][ T26] audit: type=1326 audit(1753096821.080:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 234.248339][ T26] audit: type=1326 audit(1753096821.080:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.0.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2638e9a9 code=0x7ffc0000 [ 234.324319][ T26] audit: type=1326 audit(1753096821.380:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.0.1396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fec26385967 code=0x0 [ 234.346041][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.558901][ T8368] process 'syz.4.1399' launched '/dev/fd/3' with NULL argv: empty string added [ 234.631148][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1400'. [ 234.758129][ T8342] loop5: detected capacity change from 0 to 40427 [ 234.787854][ T8342] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 234.813317][ T8342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 234.905321][ T8342] F2FS-fs (loop5): invalid crc value [ 234.930357][ T8375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1401'. [ 234.943086][ T8342] F2FS-fs (loop5): Found nat_bits in checkpoint [ 234.943312][ T8375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1401'. [ 234.955966][ T8356] loop1: detected capacity change from 0 to 32768 [ 234.962342][ T8375] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1401'. [ 235.091864][ T8342] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 235.102888][ T8342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 235.136271][ T8356] XFS (loop1): Mounting V5 Filesystem [ 235.317451][ T8356] XFS (loop1): Ending clean mount [ 235.487455][ T4972] syz-executor: attempt to access beyond end of device [ 235.487455][ T4972] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.576456][ T4271] XFS (loop1): Unmounting Filesystem [ 235.824299][ T8406] loop0: detected capacity change from 0 to 64 [ 235.965978][ T8409] loop6: detected capacity change from 0 to 64 [ 236.167136][ T26] audit: type=1800 audit(1753096823.570:111): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1413" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 236.492650][ T27] INFO: task syz-executor:4276 blocked for more than 143 seconds. [ 236.529122][ T27] Not tainted 6.1.146-syzkaller #0 [ 236.534821][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.610868][ T27] task:syz-executor state:D stack:21824 pid:4276 ppid:1 flags:0x00004004 [ 236.643717][ T8424] loop1: detected capacity change from 0 to 512 [ 236.648618][ T27] Call Trace: [ 236.681831][ T27] [ 236.685420][ T27] __schedule+0x10e9/0x40d0 [ 236.690074][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 236.698085][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 236.705440][ T8424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.732576][ T27] ? lock_chain_count+0x20/0x20 [ 236.734687][ T8424] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.766861][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 236.790998][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 236.819746][ T27] schedule+0xb9/0x180 [ 236.840361][ T27] io_schedule+0x7c/0xd0 [ 236.857926][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 236.874438][ T27] ? folio_wait_bit+0x30/0x30 [ 236.883287][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 236.893550][ T27] ? folio_mapping+0x1ba/0x4d0 [ 236.904673][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 236.915140][ T4387] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 236.931873][ T27] ? mapping_evict_folio+0x520/0x520 [ 236.939460][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 236.950866][ T8419] loop5: detected capacity change from 0 to 32768 [ 236.958811][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 236.964645][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 236.970797][ T27] evict+0x498/0x870 [ 236.975363][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 236.980705][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 236.986215][ T27] ? _raw_spin_unlock+0x24/0x40 [ 236.991239][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 236.997018][ T27] evict_inodes+0x604/0x690 [ 237.002108][ T27] ? clear_inode+0x150/0x150 [ 237.006886][ T27] ? dput+0x1c9/0x1d0 [ 237.011014][ T27] ? sync_filesystem+0x103/0x220 [ 237.011043][ T8419] XFS (loop5): Mounting V5 Filesystem [ 237.017188][ T27] generic_shutdown_super+0x93/0x340 [ 237.027559][ T27] kill_block_super+0x7c/0xe0 [ 237.032363][ T27] deactivate_locked_super+0x93/0xf0 [ 237.037843][ T27] cleanup_mnt+0x463/0x4f0 [ 237.042381][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 237.050604][ T27] task_work_run+0x1ca/0x250 [ 237.057055][ T27] ? task_work_cancel+0x230/0x230 [ 237.062277][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 237.067952][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 237.073370][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 237.079220][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 237.084968][ T27] do_syscall_64+0x58/0xa0 [ 237.093359][ T27] ? clear_bhb_loop+0x60/0xb0 [ 237.098891][ T27] ? clear_bhb_loop+0x60/0xb0 [ 237.103871][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.105453][ T8419] XFS (loop5): Ending clean mount [ 237.110612][ T27] RIP: 0033:0x7f14a1d8fcd7 [ 237.122302][ T27] RSP: 002b:00007ffc2939c598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 237.131772][ T27] RAX: 0000000000000000 RBX: 00007f14a1e10b55 RCX: 00007f14a1d8fcd7 [ 237.140959][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2939c650 [ 237.149790][ T27] RBP: 00007ffc2939c650 R08: 0000000000000000 R09: 0000000000000000 [ 237.158480][ T4387] usb 1-1: too many endpoints for config 0 interface 0 altsetting 1: 33, using maximum allowed: 30 [ 237.169663][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2939d6e0 [ 237.178296][ T4387] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 237.191784][ T27] R13: 00007f14a1e10b55 R14: 00000000000166df R15: 00007ffc2939d720 [ 237.200112][ T27] [ 237.209663][ T4387] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.221234][ T27] [ 237.221234][ T27] Showing all locks held in the system: [ 237.230522][ T4387] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 237.240306][ T27] 1 lock held by rcu_tasks_kthre/12: [ 237.250805][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 237.268435][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.282059][ T4387] usb 1-1: config 0 descriptor?? [ 237.290803][ T27] 1 lock held by rcu_tasks_trace/13: [ 237.300797][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 237.324034][ T27] 1 lock held by khungtaskd/27: [ 237.329573][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 237.340070][ T27] 2 locks held by kworker/u4:3/46: [ 237.345531][ T27] 2 locks held by getty/4027: [ 237.350307][ T27] #0: ffff8880309dd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 237.360505][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 237.371053][ T27] 1 lock held by syz-executor/4276: [ 237.376396][ T27] #0: ffff88807b62c0e0 (&type->s_umount_key#67){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 237.387267][ T27] 2 locks held by kworker/1:5/4317: [ 237.392564][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.403007][ T27] #1: ffffc90004c2fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.414728][ T27] 5 locks held by kworker/1:8/4387: [ 237.420414][ T27] #0: ffff88801c69a538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.432249][ T27] #1: ffffc90004fdfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 237.444816][ T27] #2: ffff888027b79190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 237.454177][ T27] #3: ffff888024327190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 237.463618][ T27] #4: ffff888057bff118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 237.473162][ T27] 1 lock held by syz-executor/4972: [ 237.478798][ T27] #0: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 237.489819][ T27] 4 locks held by udevd/6829: [ 237.494628][ T27] #0: ffff8880587a2418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 237.503750][ T27] #1: ffff888056f7cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 237.513406][ T27] #2: ffff8880765b2578 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 237.522954][ T27] #3: ffff888024327190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 237.532966][ T27] 1 lock held by syz.4.1419/8421: [ 237.538526][ T27] #0: ffffffff8dd42488 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0x9d/0xcc0 [ 237.550013][ T27] 4 locks held by syz.1.1420/8424: [ 237.555399][ T27] #0: ffff888058b3e460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 237.565696][ T27] #1: ffff888054d6e850 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xaf0 [ 237.576596][ T27] #2: ffff888024710b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ind_migrate+0x259/0x910 [ 237.587424][ T27] #3: ffffffff8cb30af8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 237.622549][ T4972] XFS (loop5): Unmounting Filesystem [ 237.631603][ T27] [ 237.652453][ T27] ============================================= [ 237.652453][ T27] [ 237.668948][ T27] NMI backtrace for cpu 0 [ 237.673341][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 237.681267][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.691367][ T27] Call Trace: [ 237.694690][ T27] [ 237.697653][ T27] dump_stack_lvl+0x168/0x22e [ 237.702356][ T27] ? irq_work_queue+0xb8/0x140 [ 237.707145][ T27] ? show_regs_print_info+0x12/0x12 [ 237.712372][ T27] ? load_image+0x3b0/0x3b0 [ 237.716893][ T27] ? vprintk_emit+0x571/0x680 [ 237.721601][ T27] ? printk_sprint+0x460/0x460 [ 237.726484][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 237.731445][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 237.737625][ T27] ? _printk+0xcc/0x110 [ 237.741816][ T27] ? load_image+0x3b0/0x3b0 [ 237.746357][ T27] ? load_image+0x3b0/0x3b0 [ 237.750903][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 237.757003][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 237.763023][ T27] watchdog+0xeee/0xf30 [ 237.767226][ T27] ? watchdog+0x1ed/0xf30 [ 237.771596][ T27] kthread+0x29d/0x330 [ 237.775711][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.780769][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.785671][ T27] ret_from_fork+0x1f/0x30 [ 237.790138][ T27] [ 237.793256][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.800387][ T27] Sending NMI from CPU 0 to CPUs 1: [ 237.805921][ C1] NMI backtrace for cpu 1 [ 237.805931][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.146-syzkaller #0 [ 237.805949][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.805963][ C1] Workqueue: bat_events batadv_nc_worker [ 237.805992][ C1] RIP: 0010:_raw_spin_lock_bh+0x2d/0x50 [ 237.806019][ C1] Code: 48 89 fb 4c 8b 74 24 10 4c 89 f7 be 01 02 00 00 e8 f8 33 2e f7 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 41 56 1e c1 42 f7 48 83 c4 08 48 89 df 5b 41 5e e9 8f 04 44 f7 66 2e [ 237.806034][ C1] RSP: 0018:ffffc900000e7b28 EFLAGS: 00000246 [ 237.806056][ C1] RAX: 7ab69c7be0aebf00 RBX: ffff888079ab4d00 RCX: 0000000000000000 [ 237.806069][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888079ab4d18 [ 237.806080][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 237.806091][ C1] R10: fffffbfff215ba64 R11: 1ffffffff215ba63 R12: ffff888027c299a0 [ 237.806104][ C1] R13: dffffc0000000000 R14: ffffffff89e07847 R15: ffff88805846a3d0 [ 237.806117][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 237.806132][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.806144][ C1] CR2: 0000555560d3b5c8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 237.806159][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.806169][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.806180][ C1] Call Trace: [ 237.806186][ C1] [ 237.806191][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 237.806217][ C1] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 237.806244][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 237.806276][ C1] batadv_nc_worker+0x365/0x600 [ 237.806302][ C1] ? process_one_work+0x7a1/0x1160 [ 237.806320][ C1] process_one_work+0x898/0x1160 [ 237.806346][ C1] ? worker_detach_from_pool+0x240/0x240 [ 237.806367][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 237.806389][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 237.806413][ C1] ? kthread_data+0x4b/0xc0 [ 237.806438][ C1] worker_thread+0xaa2/0x1250 [ 237.806470][ C1] kthread+0x29d/0x330 [ 237.806493][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 237.806510][ C1] ? kthread_blkcg+0xd0/0xd0 [ 237.806547][ C1] ret_from_fork+0x1f/0x30 [ 237.806576][ C1] [ 237.816544][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 237.816558][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 237.816582][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.816595][ T27] Call Trace: [ 237.816603][ T27] [ 237.816612][ T27] dump_stack_lvl+0x168/0x22e [ 237.816643][ T27] ? memcpy+0x3c/0x60 [ 237.816678][ T27] ? show_regs_print_info+0x12/0x12 [ 237.816700][ T27] ? load_image+0x3b0/0x3b0 [ 237.816743][ T27] panic+0x2c9/0x710 [ 237.816770][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 237.816809][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 237.816845][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 237.816871][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 237.816900][ T27] watchdog+0xf2d/0xf30 [ 237.816931][ T27] ? watchdog+0x1ed/0xf30 [ 237.816962][ T27] kthread+0x29d/0x330 [ 237.816992][ T27] ? hungtask_pm_notify+0x40/0x40 [ 237.817017][ T27] ? kthread_blkcg+0xd0/0xd0 [ 237.817055][ T27] ret_from_fork+0x1f/0x30 [ 237.817099][ T27] [ 237.819470][ T27] Kernel Offset: disabled [ 238.139134][ T27] Rebooting in 86400 seconds..