last executing test programs: 4.665611948s ago: executing program 3 (id=1560): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000004900)=0x7) 4.477191064s ago: executing program 3 (id=1564): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x13, 0x6b3, &(0x7f0000000a00)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 4.181142272s ago: executing program 3 (id=1570): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x0, @local, 0x6}}, 0x8, 0xfffb}, &(0x7f0000000480)=0x90) 3.983910777s ago: executing program 3 (id=1573): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x0) 3.812647714s ago: executing program 3 (id=1576): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e240003000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) 3.667360988s ago: executing program 3 (id=1579): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) 1.311365205s ago: executing program 1 (id=1618): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x3f, 0x4, 0x4}) 1.240516625s ago: executing program 0 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x59) 1.240337088s ago: executing program 4 (id=1620): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) 1.081540716s ago: executing program 0 (id=1622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.038833765s ago: executing program 1 (id=1623): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000100)) 997.950436ms ago: executing program 4 (id=1624): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) 990.658852ms ago: executing program 2 (id=1625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) 808.565186ms ago: executing program 0 (id=1626): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$SIOCAX25OPTRT(r0, 0x89e7, 0x0) 808.458964ms ago: executing program 1 (id=1627): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) 797.598596ms ago: executing program 4 (id=1628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x1, 0x70bd2d, 0x3, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x200abf8}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) 744.187225ms ago: executing program 2 (id=1629): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) 651.189658ms ago: executing program 0 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002b000b00000000ff0f00000007000000040003000c00018006000000e948ef000c000200070001"], 0x30}}, 0x4000) 624.418508ms ago: executing program 4 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) 555.86357ms ago: executing program 1 (id=1632): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) mmap(&(0x7f0000964000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x12, r0, 0x0) 537.102832ms ago: executing program 2 (id=1633): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 398.606142ms ago: executing program 4 (id=1634): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000100)="51398ecfa0b675e0ee41784648eea4da11cdadbb", 0x14) 398.430106ms ago: executing program 0 (id=1635): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$eJzs3U1rE0Ecx/Hf7KZpamtdbaUgHqRa9CRtvYiXghRfgxdFbVIohha1gk9g8Sy+AO9F8AX4IjyJ4FlPnnwBva3MZpLMNrtJm5psgt8PRCfZefjPZrM7/0C6AvDfur3+c//Gb/swUqhQ0i0psJsuqSTpvBYqz7d3t3brtWq3jkKpouRhpKSl6aizsV3LamrbJS2cyD4racZ/DYMRx3H8q+ggUKSK+z/M2hhIk+7TGfqVx9leKO0VHUTBzIEO9EKzRccBACiWaVzfA3edn3Hr9yCQltxl37/+/zhdcLwnc1UHRYdQMO/6n2RZsbHv75lkUzvfS1I4uz1oZonHHccuHstqHFmpBaZJZ5WdyWISSzC1uVWvXd/YqVcDvdOa41Wbl7SmqstZnR7RLmYMl1bW0Xtr+vRmYfPQS9PJHCbsHFZz4p/LGrTfvX0U5qv5Zu6bSB9Vba3/SnF7j0Std+rORDv+5bzudp7cS1o1auXM8mwyyIX0ju06yzAvI5HbU3Go9BcEUTrOcmarsg61asxuJW8k189cZqvVHq3mbavPXqv20ZzfctDMB3PXLOqPvmjdW/8Hdm8vqfOTmd1JUtMdGc35ZOaGpaRm5L+0dzGzz6C/+SDNP05zP0DSez3STc0+e/nq8cN6vfa0s1DK3/QPCjaGwfQ8eoXX5ZEIo11oHgSjEk9/BXuOHe5B2yqUT7zrKjpW5c6Z+oXmqfMIHTZP0j0HHczZCaOl/abn13k7zIAwbPbkYRr5n5evLCcJgf0n6rJOj3st27weVzJyg8lWxVNeT8Z9P5+fAU3nZ3Ddcq59r97la9IV73mPnCvSOWmq61zHiVnXdz3g+38AAAAAAAAAAAAAAAAAAIBxM4xfa3jD8Rd9AAAAAAAAAAAAAAAAAAAAAADoQ/79fysa4P1/U78DOMH9f7vc4ARAL38DAAD//0EVdWo=") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 397.890432ms ago: executing program 2 (id=1636): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x9200}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 325.808107ms ago: executing program 1 (id=1637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010013000000000000000000000a200000001a0a0300000000000000000007000004090001"], 0xe4}}, 0x0) 225.46958ms ago: executing program 2 (id=1638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) 225.244075ms ago: executing program 4 (id=1639): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x0, 0x47524247, 0x5}}) 161.87753ms ago: executing program 1 (id=1640): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000080)) 28.58582ms ago: executing program 0 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x18, 0x76, 0x401}, 0x18}}, 0x0) 0s ago: executing program 2 (id=1642): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) kernel console output (not intermixed with test programs): USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 93.401876][ T6157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.458696][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.474174][ T5907] usb 2-1: Product: syz [ 93.488258][ T5907] usb 2-1: Manufacturer: syz [ 93.503203][ T5907] usb 2-1: SerialNumber: syz [ 93.553592][ T6125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.622087][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.636236][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.645771][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.658191][ T6164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.717100][ T6164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.786288][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.807433][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.824284][ T5907] usb 2-1: USB disconnect, device number 2 [ 93.845814][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.853657][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.925462][ T6164] wlan0 speed is unknown, defaulting to 1000 [ 93.944460][ T6169] loop4: detected capacity change from 0 to 4096 [ 93.949682][ T6172] loop3: detected capacity change from 0 to 256 [ 93.977903][ T6169] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 94.026448][ T6172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 94.117733][ T6169] ntfs3(loop4): ino=19, mi_enum_attr [ 94.164257][ T6169] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 94.316652][ T6169] ntfs3(loop4): failed to convert "c46c" to macroman [ 94.336270][ T6178] cgroup2: Unknown parameter 'obj_user' [ 94.343134][ T6169] ntfs3(loop4): ino=20, mi_enum_attr [ 94.547503][ T6184] loop1: detected capacity change from 0 to 512 [ 94.580423][ T6184] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.638757][ T6187] loop3: detected capacity change from 0 to 764 [ 94.673963][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.709130][ T6187] rock: directory entry would overflow storage [ 94.718650][ T6184] EXT4-fs (loop1): 1 orphan inode deleted [ 94.751521][ T6195] loop2: detected capacity change from 0 to 16 [ 94.760517][ T5947] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 94.774674][ T6187] rock: sig=0x4654, size=5, remaining=4 [ 94.795301][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.834157][ T5947] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 94.843224][ T6195] erofs (device loop2): mounted with root inode @ nid 36. [ 94.873958][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 94.886954][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 94.910715][ T6184] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.928144][ T6195] erofs (device loop2): readahead error at folio 3 @ nid 89 [ 94.952034][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.993942][ T6195] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 95.001289][ T6195] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 95.017447][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.044250][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 95.044654][ T6195] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 95.057323][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 95.074272][ T5908] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 95.083333][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.098445][ T5908] usb 1-1: config 0 descriptor?? [ 95.117668][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.126598][ T6195] erofs (device loop2): read error -117 @ 0 of nid 89 [ 95.140119][ T30] audit: type=1800 audit(1750931871.394:8): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.115" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 95.177575][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.294746][ T6205] netlink: 'syz.4.122': attribute type 2 has an invalid length. [ 95.314392][ T6205] netlink: 119 bytes leftover after parsing attributes in process `syz.4.122'. [ 95.603782][ T5970] usb 1-1: USB disconnect, device number 2 [ 95.617210][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 95.687867][ T6219] process 'syz.2.128' launched '/dev/fd/3' with NULL argv: empty string added [ 96.266289][ T6238] loop0: detected capacity change from 0 to 64 [ 96.278309][ T6237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.137'. [ 96.352739][ T6213] loop4: detected capacity change from 0 to 32768 [ 96.533383][ T6249] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.540164][ T6249] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.761373][ T6264] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 96.793495][ T6213] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 96.793519][ T6213] allowing incompatible features above 0.0: (unknown version) [ 96.793529][ T6213] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 96.817311][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.942390][ T6213] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 96.942433][ T6213] bcachefs (loop4): initializing new filesystem [ 96.951279][ T6213] bcachefs (loop4): going read-write [ 97.025920][ T6213] bcachefs (loop4): marking superblocks [ 97.144700][ T6273] loop2: detected capacity change from 0 to 2048 [ 97.165246][ T6213] bcachefs (loop4): initializing freespace [ 97.189047][ T6213] bcachefs (loop4): done initializing freespace [ 97.241384][ T6280] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 97.253635][ T6213] bcachefs (loop4): reading snapshots table [ 97.265607][ T6213] bcachefs (loop4): reading snapshots done [ 97.283594][ T6273] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 97.321805][ T6273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.354534][ T6213] bcachefs (loop4): done starting filesystem [ 97.589160][ T6286] syz.0.156: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 97.650246][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.0.156 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 97.650276][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.650295][ T6286] Call Trace: [ 97.650304][ T6286] [ 97.650313][ T6286] dump_stack_lvl+0x189/0x250 [ 97.650351][ T6286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.650382][ T6286] ? __pfx__printk+0x10/0x10 [ 97.650403][ T6286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.650434][ T6286] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 97.650472][ T6286] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 97.650507][ T6286] warn_alloc+0x214/0x310 [ 97.650538][ T6286] ? stack_depot_save_flags+0x429/0x900 [ 97.650569][ T6286] ? __pfx_warn_alloc+0x10/0x10 [ 97.650601][ T6286] ? kasan_save_track+0x4f/0x80 [ 97.650627][ T6286] ? xskq_create+0x56/0x170 [ 97.650652][ T6286] ? xsk_init_queue+0xb0/0x110 [ 97.650674][ T6286] ? xsk_setsockopt+0x43f/0x710 [ 97.650697][ T6286] ? do_sock_setsockopt+0x25a/0x3e0 [ 97.650715][ T6286] ? __x64_sys_setsockopt+0x18b/0x220 [ 97.650733][ T6286] ? do_syscall_64+0xfa/0x3b0 [ 97.650760][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.650787][ T6286] __vmalloc_node_range_noprof+0x125/0x12f0 [ 97.650848][ T6286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.650884][ T6286] ? __kasan_kmalloc+0x93/0xb0 [ 97.650913][ T6286] vmalloc_user_noprof+0xad/0xf0 [ 97.650942][ T6286] ? xskq_create+0xbf/0x170 [ 97.650969][ T6286] xskq_create+0xbf/0x170 [ 97.650998][ T6286] xsk_init_queue+0xb0/0x110 [ 97.651026][ T6286] xsk_setsockopt+0x43f/0x710 [ 97.651054][ T6286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.651077][ T6286] ? __lock_acquire+0xab9/0xd20 [ 97.651105][ T6286] ? aa_sock_opt_perm+0xff/0x1b0 [ 97.651136][ T6286] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 97.651158][ T6286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 97.651184][ T6286] do_sock_setsockopt+0x25a/0x3e0 [ 97.651206][ T6286] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 97.651232][ T6286] ? __fget_files+0x2a/0x420 [ 97.651273][ T6286] __x64_sys_setsockopt+0x18b/0x220 [ 97.651301][ T6286] do_syscall_64+0xfa/0x3b0 [ 97.651327][ T6286] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.651354][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.651373][ T6286] ? clear_bhb_loop+0x60/0xb0 [ 97.651398][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.651417][ T6286] RIP: 0033:0x7fa8ca38e929 [ 97.651441][ T6286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.651464][ T6286] RSP: 002b:00007fa8cb2d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.651485][ T6286] RAX: ffffffffffffffda RBX: 00007fa8ca5b5fa0 RCX: 00007fa8ca38e929 [ 97.651500][ T6286] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 97.651512][ T6286] RBP: 00007fa8ca410b39 R08: 0000000000000004 R09: 0000000000000000 [ 97.651524][ T6286] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.651537][ T6286] R13: 0000000000000000 R14: 00007fa8ca5b5fa0 R15: 00007ffd23091658 [ 97.651568][ T6286] [ 97.651580][ T6286] Mem-Info: [ 97.729990][ T6290] loop2: detected capacity change from 0 to 256 [ 97.760099][ T6213] syz.4.125 (6213) used greatest stack depth: 16408 bytes left [ 97.816994][ T6290] exfat: Deprecated parameter 'namecase' [ 97.912043][ T6286] active_anon:12755 inactive_anon:0 isolated_anon:0 [ 97.912043][ T6286] active_file:1391 inactive_file:39916 isolated_file:0 [ 97.912043][ T6286] unevictable:768 dirty:746 writeback:0 [ 97.912043][ T6286] slab_reclaimable:10450 slab_unreclaimable:99490 [ 97.912043][ T6286] mapped:29658 shmem:8360 pagetables:1192 [ 97.912043][ T6286] sec_pagetables:0 bounce:0 [ 97.912043][ T6286] kernel_misc_reclaimable:0 [ 97.912043][ T6286] free:1319881 free_pcp:15522 free_cma:0 [ 98.040536][ T6286] Node 0 active_anon:55920kB inactive_anon:0kB active_file:5564kB inactive_file:159460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118632kB dirty:2972kB writeback:0kB shmem:36704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12076kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.084528][ T6290] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 98.089202][ T6286] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.111006][ T5837] bcachefs (loop4): shutting down [ 98.128550][ T6286] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.184089][ T6286] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 98.196697][ T6286] Node 0 DMA32 free:1372372kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56068kB inactive_anon:0kB active_file:5564kB inactive_file:157888kB unevictable:1536kB writepending:2964kB present:3129332kB managed:2558480kB mlocked:0kB bounce:0kB free_pcp:39428kB local_pcp:14476kB free_cma:0kB [ 98.229012][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.244431][ T5837] bcachefs (loop4): going read-only [ 98.250012][ T5837] bcachefs (loop4): finished waiting for writes to stop [ 98.253235][ T6286] lowmem_reserve[]: 0 0 1 1 1 [ 98.262366][ T6286] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 98.291395][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.297826][ T6286] lowmem_reserve[]: 0 0 0 0 0 [ 98.302956][ T6286] Node 1 Normal free:3887620kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21672kB local_pcp:5280kB free_cma:0kB [ 98.303693][ T5837] bcachefs (loop4): flushing journal and stopping allocators, journal seq 17 [ 98.334226][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.347465][ T6284] loop1: detected capacity change from 0 to 32768 [ 98.353981][ T6286] lowmem_reserve[]: 0 0 0 0 0 [ 98.361454][ T6286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.394852][ T6284] (syz.1.152,6284,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.438520][ T6286] Node 0 DMA32: 551*4kB (UME) 197*8kB (UM) 57*16kB (UE) 24*32kB (U) 2*64kB (UE) 2*128kB (E) 24*256kB (UME) 17*512kB (ME) 8*1024kB (ME) 2*2048kB (ME) 327*4096kB (M) = 1372372kB [ 98.477607][ T5837] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 18 [ 98.515672][ T6284] (syz.1.152,6284,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 98.526914][ T6297] netlink: 'syz.3.162': attribute type 32 has an invalid length. [ 98.532574][ T6286] Node 0 [ 98.539430][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.162'. [ 98.553484][ T5837] bcachefs (loop4): clean shutdown complete, journal seq 19 [ 98.561846][ T5837] bcachefs (loop4): marking filesystem clean [ 98.623955][ T6286] Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 98.651986][ T6284] JBD2: Ignoring recovery information on journal [ 98.677707][ T6286] Node 1 Normal: 49*4kB (UM) 18*8kB (UME) 21*16kB (UME) 49*32kB (UME) 13*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3887620kB [ 98.730382][ T6286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.740125][ T6286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.746521][ T5837] bcachefs (loop4): shutdown complete [ 98.754436][ T6286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.764417][ T6286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.774028][ T6286] 50935 total pagecache pages [ 98.779042][ T6286] 0 pages in swap cache [ 98.783203][ T6286] Free swap = 124996kB [ 98.814000][ T6286] Total swap = 124996kB [ 98.818196][ T6286] 2097051 pages RAM [ 98.831243][ T6284] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 98.849529][ T6286] 0 pages HighMem/MovableOnly [ 98.887592][ T6286] 425389 pages reserved [ 98.900863][ T6286] 0 pages cma reserved [ 99.019813][ T6309] vlan1: entered promiscuous mode [ 99.090277][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 99.537499][ T6318] loop2: detected capacity change from 0 to 4096 [ 99.597899][ T6318] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 99.710109][ T6318] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 100.035465][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 100.148646][ T6312] loop0: detected capacity change from 0 to 32768 [ 100.221105][ T6312] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.296910][ T6349] Cannot find del_set index 0 as target [ 100.491681][ T6312] XFS (loop0): Ending clean mount [ 100.513956][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.662493][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.703937][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 100.726616][ T5907] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 100.763957][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.772013][ T5907] usb 4-1: Product: syz [ 100.805833][ T5907] usb 4-1: Manufacturer: syz [ 100.820668][ T5907] usb 4-1: SerialNumber: syz [ 100.856706][ T5907] usb 4-1: config 0 descriptor?? [ 100.897419][ T5907] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 101.141857][ T5907] usb 4-1: USB disconnect, device number 2 [ 101.209431][ T6372] loop1: detected capacity change from 0 to 512 [ 101.259026][ T6372] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 101.326079][ T6372] EXT4-fs (loop1): orphan cleanup on readonly fs [ 101.363959][ T6372] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.192: bad orphan inode 15 [ 101.392589][ T6372] ext4_test_bit(bit=14, block=18) = 1 [ 101.416207][ T6372] is_bad_inode(inode)=0 [ 101.420397][ T6372] NEXT_ORPHAN(inode)=1023 [ 101.463267][ T6372] max_ino=32 [ 101.483945][ T6372] i_nlink=0 [ 101.500335][ T6372] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.192: corrupted xattr block 19: e_value size too large [ 101.527940][ T6383] geneve1: entered allmulticast mode [ 101.541238][ T6372] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 101.556100][ T6372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.598036][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.790632][ T6390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.029429][ T6402] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma? [ 102.517577][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 102.693975][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 102.838923][ T6438] netlink: 'syz.2.222': attribute type 2 has an invalid length. [ 102.873971][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.990876][ T6443] netlink: zone id is out of range [ 103.002258][ T6443] netlink: set zone limit has 8 unknown bytes [ 103.054476][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 103.073473][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 103.109199][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 103.123948][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 103.178451][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 103.213150][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 103.243763][ T5907] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 103.264314][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.292682][ T5907] usb 2-1: Product: syz [ 103.302163][ T5907] usb 2-1: Manufacturer: syz [ 103.333917][ T5907] usb 2-1: SerialNumber: syz [ 103.366067][ T5907] usb 2-1: config 0 descriptor?? [ 103.407254][ T5907] port100 2-1:0.0: NFC: Could not get supported command types [ 103.510885][ T6459] netlink: 168 bytes leftover after parsing attributes in process `syz.0.232'. [ 103.629587][ T5907] usb 2-1: USB disconnect, device number 3 [ 104.129025][ T6485] syz.0.245 uses old SIOCAX25GETINFO [ 104.163872][ T30] audit: type=1326 audit(1750931880.414:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.4.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14acb8e929 code=0x7ffc0000 [ 104.199174][ T30] audit: type=1326 audit(1750931880.414:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.4.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14acb8e929 code=0x7ffc0000 [ 104.249503][ T30] audit: type=1326 audit(1750931880.424:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.4.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f14acb8e929 code=0x7ffc0000 [ 104.303486][ T30] audit: type=1326 audit(1750931880.424:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.4.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14acb8e929 code=0x7ffc0000 [ 104.387749][ T6494] Cannot find add_set index 0 as target [ 104.576826][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 104.596993][ T6506] netlink: get zone limit has 4 unknown bytes [ 104.614957][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 104.879040][ T6516] loop0: detected capacity change from 0 to 1764 [ 104.991502][ T6516] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 105.068800][ T6525] loop1: detected capacity change from 0 to 16 [ 105.093574][ T6525] erofs (device loop1): mounted with root inode @ nid 36. [ 105.431099][ T6538] netlink: 'syz.1.270': attribute type 3 has an invalid length. [ 105.456498][ T6538] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.270'. [ 105.872199][ T6559] loop3: detected capacity change from 0 to 256 [ 105.941830][ T6559] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 106.702878][ T6591] bond0: (slave veth0_to_bridge): Error: Device can not be enslaved while up [ 106.970086][ T6597] loop3: detected capacity change from 0 to 1024 [ 107.058174][ T6601] loop1: detected capacity change from 0 to 512 [ 107.068732][ T6572] loop4: detected capacity change from 0 to 32768 [ 107.094012][ T6601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.139888][ T6601] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 107.262332][ T6601] EXT4-fs (loop1): 1 truncate cleaned up [ 107.298919][ T6587] loop0: detected capacity change from 0 to 32768 [ 107.328547][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.370850][ T6587] XFS: ikeep mount option is deprecated. [ 107.475492][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.500362][ T6587] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.519395][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 107.529390][ T6572] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 107.529417][ T6572] allowing incompatible features above 0.0: (unknown version) [ 107.529429][ T6572] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 107.704296][ T6572] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 107.712583][ T6572] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 107.720926][ T6572] bcachefs (loop4): Version upgrade required: [ 107.720926][ T6572] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 107.720926][ T6572] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 107.720926][ T6572] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 107.793773][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.827341][ T6587] XFS (loop0): Ending clean mount [ 107.880645][ T6587] XFS (loop0): Quotacheck needed: Please wait. [ 107.884049][ T6572] bcachefs (loop4): dropping and reconstructing all alloc info [ 107.967423][ T6587] XFS (loop0): Quotacheck: Done. [ 108.023114][ T6635] loop3: detected capacity change from 0 to 64 [ 108.042213][ T6572] bcachefs (loop4): accounting_read... done [ 108.061686][ T6572] bcachefs (loop4): alloc_read... done [ 108.109189][ T6572] bcachefs (loop4): snapshots_read... done [ 108.119702][ T6572] bcachefs (loop4): done starting filesystem [ 108.228701][ T5827] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.386451][ T6643] loop3: detected capacity change from 0 to 64 [ 108.522529][ T5837] bcachefs (loop4): shutting down [ 108.583241][ T6643] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 108.644124][ T5837] bcachefs (loop4): shutdown complete [ 109.859738][ T6700] loop2: detected capacity change from 0 to 8 [ 109.978266][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 110.312708][ T6717] loop1: detected capacity change from 0 to 1024 [ 111.067374][ T30] audit: type=1326 audit(1750931887.334:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 111.176123][ T30] audit: type=1326 audit(1750931887.334:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 111.270703][ T30] audit: type=1326 audit(1750931887.364:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 111.391344][ T30] audit: type=1326 audit(1750931887.364:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 111.478715][ T30] audit: type=1326 audit(1750931887.364:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.3.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 111.508662][ T6763] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 111.534851][ T6757] loop3: detected capacity change from 0 to 4096 [ 111.613192][ T6763] team0: Port device wlan1 added [ 111.852699][ T6773] loop4: detected capacity change from 0 to 8 [ 111.900361][ T6258] udevd[6258]: incorrect cramfs checksum on /dev/loop4 [ 111.939983][ T6773] cramfs: Error -3 while decompressing! [ 111.982551][ T6258] udevd[6258]: incorrect cramfs checksum on /dev/loop4 [ 111.994196][ T6773] cramfs: ffffffff99be7b88(26)->ffff88806a72a000(4096) [ 112.001132][ T6773] cramfs: Error -5 while decompressing! [ 112.026266][ T5936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.054063][ T6773] cramfs: ffffffff99be7ba2(26)->ffff88806a729000(4096) [ 112.084374][ T6773] cramfs: Error -3 while decompressing! [ 112.089966][ T6773] cramfs: ffffffff99be7bbc(16)->ffff88806a728000(4096) [ 112.104120][ T6773] cramfs: Error -3 while decompressing! [ 112.121370][ T6773] cramfs: ffffffff99be7b88(26)->ffff88806a72a000(4096) [ 112.191352][ T6750] loop0: detected capacity change from 0 to 32768 [ 112.193955][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 112.245329][ T6750] (syz.0.368,6750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.247683][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 112.293396][ T6750] (syz.0.368,6750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.309984][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.310012][ T5936] usb 2-1: Product: syz [ 112.310027][ T5936] usb 2-1: Manufacturer: syz [ 112.310042][ T5936] usb 2-1: SerialNumber: syz [ 112.318153][ T5936] usb 2-1: config 0 descriptor?? [ 112.443885][ T6750] JBD2: Ignoring recovery information on journal [ 112.584163][ T6750] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.688545][ T5936] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 112.863915][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 112.889912][ T5936] usb write operation failed. (-71) [ 112.938429][ T5936] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 112.994678][ T5936] dvbdev: DVB: registering new adapter (Terratec H7) [ 113.001682][ T5936] usb 2-1: media controller created [ 113.036945][ T5936] usb read operation failed. (-71) [ 113.072862][ T5936] usb write operation failed. (-71) [ 113.109151][ T5936] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 113.157950][ T5936] usb 2-1: USB disconnect, device number 4 [ 113.377703][ T5149] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 113.387593][ T5149] CPU: 0 UID: 0 PID: 5149 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 113.387621][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.387634][ T5149] Workqueue: hci0 hci_rx_work [ 113.387662][ T5149] Call Trace: [ 113.387670][ T5149] [ 113.387679][ T5149] dump_stack_lvl+0x189/0x250 [ 113.387718][ T5149] ? kernfs_path_from_node+0x2c/0x260 [ 113.387739][ T5149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.387770][ T5149] ? __pfx__printk+0x10/0x10 [ 113.387794][ T5149] ? kernfs_path_from_node+0x2c/0x260 [ 113.387812][ T5149] ? kernfs_path_from_node+0x2c/0x260 [ 113.387833][ T5149] ? kernfs_path_from_node+0x22c/0x260 [ 113.387850][ T5149] ? kernfs_path_from_node+0x2c/0x260 [ 113.387873][ T5149] sysfs_create_dir_ns+0x259/0x280 [ 113.387908][ T5149] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 113.387941][ T5149] ? do_raw_spin_unlock+0x122/0x240 [ 113.387966][ T5149] kobject_add_internal+0x59f/0xb40 [ 113.387995][ T5149] kobject_add+0x155/0x220 [ 113.388031][ T5149] ? __pfx_kobject_add+0x10/0x10 [ 113.388062][ T5149] ? _raw_spin_unlock+0x28/0x50 [ 113.388091][ T5149] ? get_device_parent+0x366/0x3a0 [ 113.388119][ T5149] device_add+0x408/0xb50 [ 113.388147][ T5149] hci_conn_add_sysfs+0xd5/0x1e0 [ 113.388173][ T5149] le_conn_complete_evt+0xc3a/0x1220 [ 113.388218][ T5149] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 113.388248][ T5149] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 113.388281][ T5149] ? __pfx___mutex_lock+0x10/0x10 [ 113.388309][ T5149] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 113.388336][ T5149] ? skb_pull_data+0xfb/0x200 [ 113.388365][ T5149] hci_le_enh_conn_complete_evt+0x189/0x470 [ 113.388397][ T5149] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 113.388431][ T5149] hci_event_packet+0x78c/0x1200 [ 113.388458][ T5149] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 113.388489][ T5149] ? __pfx_hci_event_packet+0x10/0x10 [ 113.388516][ T5149] ? kcov_remote_start+0x4d3/0x7f0 [ 113.388536][ T5149] ? local_clock_noinstr+0xe0/0xe0 [ 113.388566][ T5149] ? hci_send_to_monitor+0xe2/0x570 [ 113.388600][ T5149] hci_rx_work+0x46a/0xe80 [ 113.388634][ T5149] ? process_scheduled_works+0x9ef/0x17b0 [ 113.388663][ T5149] process_scheduled_works+0xade/0x17b0 [ 113.388727][ T5149] ? __pfx_process_scheduled_works+0x10/0x10 [ 113.388773][ T5149] worker_thread+0x8a0/0xda0 [ 113.388829][ T5149] kthread+0x711/0x8a0 [ 113.388851][ T5149] ? __pfx_worker_thread+0x10/0x10 [ 113.388878][ T5149] ? __pfx_kthread+0x10/0x10 [ 113.388899][ T5149] ? _raw_spin_unlock_irq+0x23/0x50 [ 113.388924][ T5149] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.388949][ T5149] ? __pfx_kthread+0x10/0x10 [ 113.388969][ T5149] ret_from_fork+0x3fc/0x770 [ 113.388999][ T5149] ? __pfx_ret_from_fork+0x10/0x10 [ 113.389031][ T5149] ? __switch_to_asm+0x39/0x70 [ 113.389049][ T5149] ? __switch_to_asm+0x33/0x70 [ 113.389066][ T5149] ? __pfx_kthread+0x10/0x10 [ 113.389086][ T5149] ret_from_fork_asm+0x1a/0x30 [ 113.389123][ T5149] [ 113.389153][ T5149] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 113.510942][ T6822] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.511767][ T5149] Bluetooth: hci0: failed to register connection device [ 113.605755][ T6823] bridge2: entered promiscuous mode [ 113.761849][ T6823] bridge2: entered allmulticast mode [ 113.814133][ T6827] netlink: 'syz.1.400': attribute type 10 has an invalid length. [ 113.927044][ T6827] team0: Port device wlan1 added [ 114.183904][ T5908] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.366959][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.388325][ T5908] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.440768][ T5908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.470928][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.491165][ T5908] usb 3-1: Product: syz [ 114.505574][ T5908] usb 3-1: Manufacturer: syz [ 114.516909][ T5908] usb 3-1: SerialNumber: syz [ 114.601240][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.643992][ T6829] loop4: detected capacity change from 0 to 32768 [ 114.667531][ T6829] (syz.4.401,6829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.712546][ T6829] (syz.4.401,6829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.776455][ T6829] JBD2: Ignoring recovery information on journal [ 114.842729][ T6829] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 114.968702][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.417'. [ 115.060943][ T5908] cdc_ncm 3-1:1.0: bind() failure [ 115.122041][ T5837] ocfs2: Unmounting device (7,4) on (node local) [ 115.133970][ T5908] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 115.167174][ T6871] netlink: 4400 bytes leftover after parsing attributes in process `syz.1.421'. [ 115.194675][ T5908] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 115.209187][ T6871] debugfs: Directory 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!' with parent 'ieee80211' already present! [ 115.219565][ T5908] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 115.247419][ T5908] usb 3-1: USB disconnect, device number 3 [ 115.563980][ T6881] loop4: detected capacity change from 0 to 1024 [ 115.665746][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.745103][ T6881] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.426: missing EA_INODE flag [ 115.760312][ T6881] EXT4-fs (loop4): Remounting filesystem read-only [ 115.923155][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.970146][ T6900] loop3: detected capacity change from 0 to 16 [ 116.012983][ T6900] erofs (device loop3): mounted with root inode @ nid 36. [ 116.043152][ T6902] netlink: 'syz.2.436': attribute type 21 has an invalid length. [ 116.085429][ T6902] netlink: 'syz.2.436': attribute type 11 has an invalid length. [ 116.262192][ T6910] netlink: 15 bytes leftover after parsing attributes in process `syz.1.439'. [ 116.288534][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 116.592808][ T6927] loop0: detected capacity change from 0 to 256 [ 117.909158][ T6976] loop0: detected capacity change from 0 to 2048 [ 118.019950][ T6938] loop2: detected capacity change from 0 to 32768 [ 118.022383][ T6976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.050716][ T6938] XFS: ikeep mount option is deprecated. [ 118.127204][ T6938] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.210925][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.224442][ T5936] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.294150][ T6938] XFS (loop2): Ending clean mount [ 118.336402][ T6938] XFS (loop2): Quotacheck needed: Please wait. [ 118.418032][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 118.437180][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.445041][ T6938] XFS (loop2): Quotacheck: Done. [ 118.452577][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 118.471022][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 118.492298][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 118.511864][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.535580][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 118.559214][ T7005] loop3: detected capacity change from 0 to 64 [ 118.574775][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 118.587276][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 118.617229][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 118.631787][ T5936] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 111 [ 118.654447][ T5832] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 118.723975][ T5936] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 118.774144][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.782177][ T5936] usb 2-1: Product: syz [ 118.827286][ T5936] usb 2-1: Manufacturer: syz [ 118.831924][ T5936] usb 2-1: SerialNumber: syz [ 118.863129][ T5936] usb 2-1: config 0 descriptor?? [ 118.914526][ T6980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.930648][ T5936] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.179306][ T5936] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 119.205335][ T7011] xt_connbytes: Forcing CT accounting to be enabled [ 119.212169][ T7011] Cannot find add_set index 0 as target [ 119.241577][ T5936] usb 2-1: USB disconnect, device number 5 [ 119.310770][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.615918][ T5907] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 119.778949][ T5907] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 119.828779][ T5907] usb 5-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 119.874280][ T5907] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.888684][ T7007] loop0: detected capacity change from 0 to 32768 [ 119.904178][ T5907] usb 5-1: config 1 has no interface number 1 [ 119.914159][ T5907] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 119.940569][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.497'. [ 119.973000][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'. [ 119.977912][ T7007] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 119.999687][ T5907] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 120.034061][ T7007] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 120.034775][ T5907] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2048, setting to 1023 [ 120.072993][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.082270][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.096050][ T5907] usb 5-1: Product: syz [ 120.100255][ T5907] usb 5-1: Manufacturer: syz [ 120.108783][ T5907] usb 5-1: SerialNumber: syz [ 120.132676][ T7007] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 120.258746][ T7045] loop3: detected capacity change from 0 to 2048 [ 120.377183][ T5907] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 120.426536][ T7007] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 120.444047][ T7050] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.542470][ T7045] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 65536 [ 120.580879][ T5907] usb 5-1: USB disconnect, device number 4 [ 120.594023][ T7045] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 120.670328][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.710794][ T7045] Remounting filesystem read-only [ 120.722558][ T7045] NILFS (loop3): error -5 truncating bmap (ino=16) [ 120.837229][ T7058] netlink: 'syz.1.507': attribute type 3 has an invalid length. [ 120.846600][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.507'. [ 120.904152][ T5834] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 121.040167][ T7064] loop3: detected capacity change from 0 to 256 [ 121.159682][ T7064] FAT-fs (loop3): Directory bread(block 64) failed [ 121.194254][ T7064] FAT-fs (loop3): Directory bread(block 65) failed [ 121.223546][ T7064] FAT-fs (loop3): Directory bread(block 66) failed [ 121.269513][ T7064] FAT-fs (loop3): Directory bread(block 67) failed [ 121.310261][ T7068] loop2: detected capacity change from 0 to 2048 [ 121.317159][ T7064] FAT-fs (loop3): Directory bread(block 68) failed [ 121.323718][ T7064] FAT-fs (loop3): Directory bread(block 69) failed [ 121.379160][ T7064] FAT-fs (loop3): Directory bread(block 70) failed [ 121.386087][ T7072] xt_connbytes: Forcing CT accounting to be enabled [ 121.386125][ T7072] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.435581][ T7075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.450983][ T7064] FAT-fs (loop3): Directory bread(block 71) failed [ 121.474892][ T7068] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 121.492694][ T7064] FAT-fs (loop3): Directory bread(block 72) failed [ 121.522384][ T7064] FAT-fs (loop3): Directory bread(block 73) failed [ 121.537080][ T7068] Remounting filesystem read-only [ 121.648264][ T7064] syz.3.508: attempt to access beyond end of device [ 121.648264][ T7064] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 121.706550][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 121.747653][ T7064] syz.3.508: attempt to access beyond end of device [ 121.747653][ T7064] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 121.841769][ T30] audit: type=1800 audit(1750931898.104:18): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.508" name="file0" dev="loop3" ino=1048604 res=0 errno=0 [ 121.882243][ T7087] xt_ecn: cannot match TCP bits for non-tcp packets [ 122.565206][ T7117] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 122.629532][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.535'. [ 122.791644][ T7127] loop1: detected capacity change from 0 to 64 [ 122.890815][ T7131] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 123.091564][ T7140] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.776213][ T7177] loop1: detected capacity change from 0 to 32768 [ 124.869283][ T7177] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.049327][ T7182] loop2: detected capacity change from 0 to 32768 [ 125.075832][ T7177] XFS (loop1): Ending clean mount [ 125.079740][ T7223] xt_hashlimit: overflow, rate too high: 0 [ 125.092256][ T7177] XFS (loop1): Quotacheck needed: Please wait. [ 125.244834][ T7177] XFS (loop1): Quotacheck: Done. [ 125.315144][ T7182] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 125.315173][ T7182] allowing incompatible features above 0.0: (unknown version) [ 125.315183][ T7182] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 125.375738][ T7182] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 125.384237][ T7182] bcachefs (loop2): initializing new filesystem [ 125.399836][ T7182] bcachefs (loop2): going read-write [ 125.463586][ T7182] bcachefs (loop2): marking superblocks [ 125.545225][ T7182] bcachefs (loop2): initializing freespace [ 125.551155][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.596554][ T7182] bcachefs (loop2): done initializing freespace [ 125.629936][ T7182] bcachefs (loop2): reading snapshots table [ 125.644391][ T7182] bcachefs (loop2): reading snapshots done [ 125.659747][ T7238] loop3: detected capacity change from 0 to 4096 [ 125.738840][ T7182] bcachefs (loop2): done starting filesystem [ 125.755595][ T7242] loop0: detected capacity change from 0 to 4096 [ 125.805778][ T7242] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 125.987812][ T7242] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 126.336248][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 126.373032][ T7260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.401233][ T5832] bcachefs (loop2): shutting down [ 126.436932][ T5832] bcachefs (loop2): going read-only [ 126.442193][ T5832] bcachefs (loop2): finished waiting for writes to stop [ 126.538487][ T5832] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14 [ 126.680112][ T5832] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 126.714240][ T5832] bcachefs (loop2): clean shutdown complete, journal seq 16 [ 126.717724][ T7273] IPv6: sit1: Disabled Multicast RS [ 126.735629][ T5832] bcachefs (loop2): marking filesystem clean [ 126.817537][ T5832] bcachefs (loop2): shutdown complete [ 126.966296][ T7280] bond0: option min_links: invalid value (18446744073709551604) [ 127.012542][ T7280] bond0: option min_links: allowed values 0 - 2147483647 [ 127.241681][ T30] audit: type=1326 audit(1750931903.504:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7289 comm="syz.0.610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa8ca38e929 code=0x0 [ 127.263164][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.441770][ T7276] loop3: detected capacity change from 0 to 32768 [ 127.521005][ T7276] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 127.642238][ T5834] ocfs2: Unmounting device (7,3) on (node local) [ 127.655414][ T7288] loop1: detected capacity change from 0 to 32768 [ 128.383476][ T7301] loop4: detected capacity change from 0 to 32768 [ 128.450012][ T7288] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 128.450041][ T7288] allowing incompatible features above 0.0: (unknown version) [ 128.450053][ T7288] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 128.528516][ T7317] loop3: detected capacity change from 0 to 256 [ 128.607003][ T7288] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 128.635275][ T7288] bcachefs (loop1): initializing new filesystem [ 128.652996][ T7317] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 128.674939][ T7288] bcachefs (loop1): going read-write [ 128.699215][ T7288] bcachefs (loop1): marking superblocks [ 128.714673][ T7317] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 128.728906][ T7301] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 128.728934][ T7301] allowing incompatible features above 0.0: (unknown version) [ 128.728945][ T7301] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 128.757205][ T7288] bcachefs (loop1): initializing freespace [ 128.760800][ T7288] bcachefs (loop1): done initializing freespace [ 128.763760][ T7288] bcachefs (loop1): reading snapshots table [ 128.764539][ T7288] bcachefs (loop1): reading snapshots done [ 128.794863][ T7288] bcachefs (loop1): done starting filesystem [ 128.938444][ T7331] openvswitch: netlink: Message has 8 unknown bytes. [ 129.009670][ T7301] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 129.064833][ T7301] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 129.073029][ T7301] bcachefs (loop4): Version upgrade required: [ 129.073029][ T7301] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 129.073029][ T7301] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 129.073029][ T7301] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 129.217281][ T7301] bcachefs (loop4): dropping and reconstructing all alloc info [ 129.234944][ T7336] Illegal XDP return value 1353331620 on prog (id 28) dev N/A, expect packet loss! [ 129.249837][ T5836] bcachefs (loop1): shutting down [ 129.255817][ T5836] bcachefs (loop1): going read-only [ 129.261041][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 129.285592][ T7301] bcachefs (loop4): accounting_read... done [ 129.306039][ T7301] bcachefs (loop4): alloc_read... done [ 129.311918][ T7301] bcachefs (loop4): snapshots_read... done [ 129.336781][ T7301] bcachefs (loop4): done starting filesystem [ 129.356909][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6 [ 129.518059][ T7307] loop0: detected capacity change from 0 to 40427 [ 129.518839][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 129.548131][ T5837] bcachefs (loop4): shutting down [ 129.587958][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 11 [ 129.602303][ T7307] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.605004][ T5836] bcachefs (loop1): marking filesystem clean [ 129.637445][ T7307] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.683205][ T5836] bcachefs (loop1): shutdown complete [ 129.689024][ T5837] bcachefs (loop4): shutdown complete [ 129.928483][ T7349] loop3: detected capacity change from 0 to 256 [ 130.004666][ T7307] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 130.045729][ T7307] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.218058][ T7356] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 130.244051][ T7356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.631'. [ 130.718502][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.635'. [ 131.332683][ T7381] loop3: detected capacity change from 0 to 1024 [ 131.363675][ T7382] netlink: 'syz.0.643': attribute type 11 has an invalid length. [ 131.374933][ T7381] EXT4-fs: Ignoring removed orlov option [ 131.380605][ T7381] EXT4-fs: Ignoring removed orlov option [ 131.509747][ T7381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.510989][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 131.662654][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.759050][ T7398] loop2: detected capacity change from 0 to 256 [ 131.803348][ T7398] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.828200][ T7398] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 131.871570][ T7401] geneve2: entered promiscuous mode [ 131.941888][ T7399] loop4: detected capacity change from 0 to 4096 [ 131.943934][ T7398] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 132.006388][ T7401] geneve2: entered allmulticast mode [ 132.369265][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 132.594328][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.618803][ T7425] No source specified [ 132.736722][ T7428] loop0: detected capacity change from 0 to 512 [ 132.754927][ T7428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.778368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.784144][ T7428] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.785518][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816638][ T5908] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 132.856639][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 132.882752][ T7428] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 132.914079][ T5908] usb 4-1: SerialNumber: syz [ 132.934056][ T7428] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 132.981230][ T5908] usb 4-1: config 0 descriptor?? [ 133.014158][ T7428] EXT4-fs (loop0): 1 truncate cleaned up [ 133.052271][ T7428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.083739][ T7439] loop2: detected capacity change from 0 to 8192 [ 133.121899][ T7428] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 4: comm syz.0.663: lblock 0 mapped to illegal pblock 4 (length 1) [ 133.170411][ T7428] EXT4-fs (loop0): Remounting filesystem read-only [ 133.267184][ T7446] loop4: detected capacity change from 0 to 512 [ 133.276350][ T7447] netlink: 'syz.2.672': attribute type 5 has an invalid length. [ 133.304506][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.359368][ T7446] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.431959][ T7446] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #17: comm syz.4.671: iget: bad i_size value: -6917529027641081756 [ 133.446858][ T5908] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 133.464097][ T5908] hackrf 4-1:0.0: Could not detect board [ 133.470380][ T5908] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 133.494122][ T5908] usb 4-1: USB disconnect, device number 3 [ 133.516221][ T7453] netlink: 'syz.2.675': attribute type 11 has an invalid length. [ 133.530401][ T7446] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.671: couldn't read orphan inode 17 (err -117) [ 133.576116][ T7446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.791189][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.798715][ T7464] loop2: detected capacity change from 0 to 256 [ 133.829845][ T7464] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 134.015878][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 134.344656][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.348830][ T7485] netlink: 'syz.4.690': attribute type 4 has an invalid length. [ 134.376413][ T7485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.690'. [ 134.414197][ T7488] overlay: Unknown parameter 'obj_type' [ 134.421258][ T7485] : renamed from bond0 (while UP) [ 134.574216][ T43] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 134.604348][ T43] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 134.639126][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.698825][ T43] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 134.952495][ T7511] netlink: 220 bytes leftover after parsing attributes in process `syz.0.702'. [ 135.356210][ T7530] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.635560][ T7543] loop2: detected capacity change from 0 to 64 [ 135.751216][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 135.783907][ T43] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 135.801435][ T43] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 135.822949][ T43] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 135.883534][ T43] usb 4-1: USB disconnect, device number 4 [ 136.232348][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 136.250816][ T7535] loop0: detected capacity change from 0 to 32768 [ 136.263407][ T7559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 136.295098][ T7535] (syz.0.713,7535,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.357730][ T7535] (syz.0.713,7535,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 136.493372][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 136.523934][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 136.539577][ T7535] JBD2: Ignoring recovery information on journal [ 136.685572][ T7535] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 137.020164][ T5827] ocfs2: Unmounting device (7,0) on (node local) [ 137.073141][ T7589] x_tables: unsorted underflow at hook 1 [ 137.084616][ T7590] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 137.327294][ T7598] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 137.347923][ T7598] netlink: 244 bytes leftover after parsing attributes in process `syz.1.743'. [ 137.933746][ T7622] loop3: detected capacity change from 0 to 512 [ 137.975859][ T7622] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 138.011592][ T7622] EXT4-fs (loop3): invalid journal inode [ 138.054413][ T7622] EXT4-fs (loop3): can't get journal size [ 138.151447][ T7622] EXT4-fs (loop3): 1 truncate cleaned up [ 138.200640][ T7622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.333777][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.500762][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 138.521851][ T7648] loop3: detected capacity change from 0 to 16 [ 138.588990][ T7648] erofs (device loop3): mounted with root inode @ nid 36. [ 138.630799][ T7654] SET target dimension over the limit! [ 138.655125][ T7648] erofs (device loop3): read error -117 @ 43 of nid 36 [ 138.776100][ T7658] QAT: Stopping all acceleration devices. [ 139.264598][ T7676] loop0: detected capacity change from 0 to 1024 [ 139.359949][ T7676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.372417][ T7679] loop1: detected capacity change from 0 to 1024 [ 139.429972][ T7686] binder: 7684:7686 ioctl 400c620e 200000000540 returned -22 [ 139.452880][ T7676] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.582344][ T7676] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.781: corrupted xattr block 128: bad e_name length [ 139.632131][ T30] audit: type=1800 audit(1750931915.894:20): pid=7676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 139.652824][ T7676] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.781: corrupted xattr block 128: bad e_name length [ 139.706312][ T7676] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.781: bg 0: block 273: padding at end of block bitmap is not set [ 139.738541][ T7689] MPI: mpi too large (124808 bits) [ 139.781046][ T7676] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 139.906247][ T7680] loop4: detected capacity change from 0 to 32768 [ 139.991269][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.011508][ T7680] jfs_strtoUCS: char2uni returned -22. [ 140.054070][ T7680] charset = euc-jp, char = 0xd4 [ 140.708241][ T7718] loop4: detected capacity change from 0 to 8 [ 140.777139][ T7718] SQUASHFS error: lzo decompression failed, data probably corrupt [ 140.814452][ T7718] SQUASHFS error: Failed to read block 0x4ef: -5 [ 140.834073][ T7718] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 140.857554][ T7718] SQUASHFS error: Unable to read inode 0x500e3 [ 140.948310][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'. [ 140.999754][ T7724] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 141.202149][ T7702] loop3: detected capacity change from 0 to 40427 [ 141.236096][ T7702] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (32769, 24) [ 141.249452][ T7702] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.259714][ T7702] F2FS-fs (loop3): Image doesn't support compression [ 141.270731][ T7702] F2FS-fs (loop3): build fault injection rate: 690 [ 141.275221][ T7733] 9p: Unknown access argument : -22 [ 141.282884][ T7702] F2FS-fs (loop3): heap/no_heap options were deprecated [ 141.310788][ T7702] F2FS-fs (loop3): build fault injection type: 0x7 [ 141.359683][ T7702] F2FS-fs (loop3): invalid crc value [ 141.482156][ T7714] loop1: detected capacity change from 0 to 32768 [ 141.678013][ T7702] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.705845][ T7702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.907164][ T7714] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 141.907189][ T7714] allowing incompatible features above 0.0: (unknown version) [ 141.907201][ T7714] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 142.067681][ T7714] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 142.102192][ T7714] bcachefs (loop1): initializing new filesystem [ 142.111163][ T7763] netlink: 'syz.0.817': attribute type 3 has an invalid length. [ 142.163750][ T7714] bcachefs (loop1): going read-write [ 142.218107][ T7714] bcachefs (loop1): marking superblocks [ 142.270904][ T7714] bcachefs (loop1): initializing freespace [ 142.292108][ T7714] bcachefs (loop1): done initializing freespace [ 142.308616][ T7714] bcachefs (loop1): reading snapshots table [ 142.314813][ T7714] bcachefs (loop1): reading snapshots done [ 142.347700][ T7714] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 142.379271][ T7714] bcachefs (loop1): done starting filesystem [ 142.658108][ T5836] bcachefs (loop1): shutting down [ 142.663184][ T5836] bcachefs (loop1): going read-only [ 142.731890][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 142.811677][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 142.922231][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 142.967229][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 142.978267][ T5836] bcachefs (loop1): marking filesystem clean [ 143.097529][ T5836] bcachefs (loop1): shutdown complete [ 143.562206][ T7780] loop0: detected capacity change from 0 to 40427 [ 143.590467][ T7780] F2FS-fs (loop0): build fault injection rate: 16 [ 143.610314][ T7802] loop2: detected capacity change from 0 to 256 [ 143.617820][ T7780] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 143.648183][ T7802] exfat: Deprecated parameter 'utf8' [ 143.677055][ T7780] F2FS-fs (loop0): invalid crc value [ 143.693554][ T7802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 143.724197][ T7780] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 143.788389][ T7786] loop4: detected capacity change from 0 to 32768 [ 143.805337][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70 [ 144.041149][ T7809] loop3: detected capacity change from 0 to 128 [ 144.044276][ T7780] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.105670][ T7809] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 144.162605][ T7809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 144.231843][ T7809] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.837: checksumming directory block 0 [ 144.249597][ T7780] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050 [ 144.330475][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.567414][ T7821] loop2: detected capacity change from 0 to 256 [ 144.718677][ T7786] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 144.718704][ T7786] allowing incompatible features above 0.0: (unknown version) [ 144.718715][ T7786] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 144.816922][ T7786] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 144.833259][ T7786] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 144.862164][ T7786] bcachefs (loop4): Version upgrade required: [ 144.862164][ T7786] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 144.862164][ T7786] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 144.862164][ T7786] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 144.934998][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.086936][ T7786] bcachefs (loop4): dropping and reconstructing all alloc info [ 145.158651][ T7786] bcachefs (loop4): accounting_read... done [ 145.237966][ T7786] bcachefs (loop4): alloc_read... done [ 145.263906][ T7786] bcachefs (loop4): snapshots_read... done [ 145.292138][ T7786] bcachefs (loop4): check_allocations... done [ 145.463557][ T7786] bcachefs (loop4): going read-write [ 145.521708][ T7786] bcachefs (loop4): done starting filesystem [ 145.910697][ T7786] bcachefs (loop4): inode 536870912 i_sectors underflow: 8 + -32 < 0 [ 146.026020][ T7786] bcachefs (loop4): inode 536870912 i_blocks underflow: 8 + -32 < 0 (ondisk 8) [ 146.034286][ T7864] netlink: 180 bytes leftover after parsing attributes in process `syz.1.858'. [ 146.139762][ T5837] bcachefs (loop4): shutting down [ 146.145392][ T5837] bcachefs (loop4): going read-only [ 146.151405][ T5837] bcachefs (loop4): finished waiting for writes to stop [ 146.169108][ T5837] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 146.174919][ T7868] capability: warning: `syz.2.859' uses 32-bit capabilities (legacy support in use) [ 146.208731][ T5837] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12 [ 146.240108][ T7837] loop0: detected capacity change from 0 to 32768 [ 146.256281][ T5837] bcachefs (loop4): unclean shutdown complete, journal seq 13 [ 146.269583][ T7837] XFS: ikeep mount option is deprecated. [ 146.297952][ T5837] bcachefs (loop4): done going read-only, filesystem not clean [ 146.310305][ T7837] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.420174][ T5837] bcachefs (loop4): shutdown complete [ 146.475010][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.489809][ T7882] xt_TCPMSS: Only works on TCP SYN packets [ 146.522840][ T7880] batadv_slave_0: entered promiscuous mode [ 146.553929][ T7880] batadv_slave_0: entered allmulticast mode [ 146.574973][ T7884] loop2: detected capacity change from 0 to 2048 [ 146.586461][ T7880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.604129][ T7837] XFS (loop0): Ending clean mount [ 146.611487][ T7837] XFS (loop0): Quotacheck needed: Please wait. [ 146.625326][ T7880] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 146.707106][ T7837] XFS (loop0): Quotacheck: Done. [ 146.707254][ T7887] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.799561][ T7884] NILFS (loop2): error -2 truncating bmap (ino=16) [ 146.850537][ T7887] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 146.880244][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.903916][ T7887] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 146.919234][ T7887] Remounting filesystem read-only [ 146.929381][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 147.111188][ T7896] loop2: detected capacity change from 0 to 256 [ 147.174997][ T7896] exfat: Deprecated parameter 'namecase' [ 147.200808][ T7896] exfat: Deprecated parameter 'namecase' [ 147.248632][ T7896] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 147.564035][ T7910] ieee802154 phy0 wpan0: encryption failed: -90 [ 147.876353][ T7914] loop0: detected capacity change from 0 to 4096 [ 147.911114][ T7914] ntfs3(loop0): Primary boot: invalid index size -14. [ 147.918881][ T7923] netlink: 'syz.2.885': attribute type 9 has an invalid length. [ 147.947385][ T7914] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 148.395806][ T7938] netlink: 'syz.3.890': attribute type 11 has an invalid length. [ 148.415844][ T7938] netlink: 428 bytes leftover after parsing attributes in process `syz.3.890'. [ 148.431349][ T7934] loop1: detected capacity change from 0 to 4096 [ 148.499252][ T7934] ntfs3(loop1): ino=3, Correct links count -> 2. [ 148.625588][ T7944] sit0: entered promiscuous mode [ 148.677169][ T7944] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 148.713876][ T7944] netlink: 1 bytes leftover after parsing attributes in process `syz.0.894'. [ 149.254597][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.263140][ T7963] netlink: 248 bytes leftover after parsing attributes in process `syz.1.903'. [ 149.450424][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 149.477052][ T7973] loop0: detected capacity change from 0 to 2048 [ 149.493659][ T7974] loop3: detected capacity change from 0 to 2048 [ 149.500590][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 149.524887][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.545593][ T5908] usb 3-1: Product: syz [ 149.549798][ T5908] usb 3-1: Manufacturer: syz [ 149.554451][ T7973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.581896][ T5908] usb 3-1: SerialNumber: syz [ 149.620875][ T5908] usb 3-1: config 0 descriptor?? [ 149.676932][ T5908] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e [ 149.766466][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 149.975359][ T7984] loop3: detected capacity change from 0 to 1024 [ 150.091613][ T7984] hfsplus: invalid xattr key length: 0 [ 150.092794][ T5908] gspca_sn9c20x: Write register 1001 failed -71 [ 150.139868][ T5908] gspca_sn9c20x: Device initialization failed [ 150.155107][ T5908] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 150.240407][ T5908] usb 3-1: USB disconnect, device number 4 [ 150.285104][ T7994] loop0: detected capacity change from 0 to 128 [ 150.540790][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.919'. [ 151.276896][ T8036] loop0: detected capacity change from 0 to 256 [ 151.316259][ T8036] FAT-fs (loop0): Directory bread(block 1285) failed [ 151.344785][ T8036] FAT-fs (loop0): Directory bread(block 1286) failed [ 151.377865][ T8036] FAT-fs (loop0): Directory bread(block 1287) failed [ 151.401834][ T8036] FAT-fs (loop0): Directory bread(block 1288) failed [ 151.449467][ T8036] FAT-fs (loop0): Directory bread(block 1289) failed [ 151.458676][ T8043] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 151.466723][ T8036] FAT-fs (loop0): Directory bread(block 1290) failed [ 151.495494][ T8036] FAT-fs (loop0): Directory bread(block 1291) failed [ 151.529214][ T8036] FAT-fs (loop0): Directory bread(block 1292) failed [ 151.549421][ T8036] FAT-fs (loop0): Directory bread(block 1293) failed [ 151.577130][ T8036] FAT-fs (loop0): Directory bread(block 1294) failed [ 151.789659][ T8007] loop1: detected capacity change from 0 to 32768 [ 151.824188][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.922192][ T8007] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 151.922215][ T8007] allowing incompatible features above 0.0: (unknown version) [ 151.922227][ T8007] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 152.059961][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.059995][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.060014][ T43] usb 4-1: Product: syz [ 152.060029][ T43] usb 4-1: Manufacturer: syz [ 152.060043][ T43] usb 4-1: SerialNumber: syz [ 152.077191][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 152.176841][ T43] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.334029][ T8007] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 152.372977][ T8007] bcachefs (loop1): initializing new filesystem [ 152.436827][ T8007] bcachefs (loop1): going read-write [ 152.474187][ T8007] bcachefs (loop1): marking superblocks [ 152.530571][ T8007] bcachefs (loop1): initializing freespace [ 152.560622][ T8007] bcachefs (loop1): done initializing freespace [ 152.599242][ T8007] bcachefs (loop1): reading snapshots table [ 152.629576][ T8007] bcachefs (loop1): reading snapshots done [ 152.638597][ T5908] usb 4-1: USB disconnect, device number 5 [ 152.715771][ T8007] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 152.765697][ T8007] bcachefs (loop1): done starting filesystem [ 152.878967][ T8038] loop4: detected capacity change from 0 to 32768 [ 153.062604][ T8038] gfs2: fsid=errors=withdraw: Trying to join cluster "lock_nolock", "errors=withdraw" [ 153.113358][ T8038] gfs2: fsid=errors=withdraw: Now mounting FS (format 1802)... [ 153.223936][ T5836] bcachefs (loop1): shutting down [ 153.289650][ T8056] loop2: detected capacity change from 0 to 32768 [ 153.313909][ T43] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 153.321330][ T43] ath9k_htc: Failed to initialize the device [ 153.344027][ T8038] gfs2: fsid=errors=withdraw.0: can't read journal index: -116 [ 153.371190][ T5836] bcachefs (loop1): going read-only [ 153.407877][ T5908] usb 4-1: ath9k_htc: USB layer deinitialized [ 153.486185][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 153.547412][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 153.699281][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 153.823916][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 153.831940][ T5836] bcachefs (loop1): marking filesystem clean [ 154.044472][ T8127] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 154.075522][ T5836] bcachefs (loop1): shutdown complete [ 154.086114][ T8127] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 154.230406][ T8130] loop2: detected capacity change from 0 to 2048 [ 154.290194][ T8130] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.396007][ T8137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.485812][ T8141] netlink: 'syz.4.952': attribute type 16 has an invalid length. [ 154.493585][ T8141] netlink: 'syz.4.952': attribute type 3 has an invalid length. [ 154.573941][ T8141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.952'. [ 154.846560][ T8155] loop2: detected capacity change from 0 to 164 [ 154.945784][ T8158] loop3: detected capacity change from 0 to 128 [ 154.976726][ T8158] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 155.139770][ T13] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 155.207155][ T30] audit: type=1400 audit(1750931931.474:21): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8164 comm="syz.0.964" [ 155.475521][ T8173] loop3: detected capacity change from 0 to 512 [ 155.505996][ T8173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.561940][ T8173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 155.633466][ T8173] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.968: invalid indirect mapped block 2683928664 (level 1) [ 155.705083][ T8173] EXT4-fs (loop3): Remounting filesystem read-only [ 155.714406][ T8173] EXT4-fs (loop3): 1 truncate cleaned up [ 155.721783][ T8173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.802457][ T8173] EXT4-fs warning (device loop3): ext4_empty_dir:3086: inode #2: comm syz.3.968: directory missing '.' [ 155.809263][ T8159] loop4: detected capacity change from 0 to 32768 [ 155.890311][ T8159] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.948137][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.968562][ T8195] netlink: 'syz.0.974': attribute type 2 has an invalid length. [ 155.976763][ T8195] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 156.072084][ T8197] loop2: detected capacity change from 0 to 4096 [ 156.114095][ T8197] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 156.166448][ T8159] XFS (loop4): Ending clean mount [ 156.270635][ T8197] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 156.313732][ T5837] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.468375][ T8205] netlink: 5 bytes leftover after parsing attributes in process `syz.3.980'. [ 156.519652][ T8205] netlink: 5 bytes leftover after parsing attributes in process `syz.3.980'. [ 157.120907][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 157.190372][ T8230] loop4: detected capacity change from 0 to 64 [ 157.241891][ T8221] xt_CT: No such helper "syz1" [ 157.400920][ T8233] loop3: detected capacity change from 0 to 256 [ 157.480072][ T8233] exfat: Deprecated parameter 'namecase' [ 157.503915][ T8233] exfat: Deprecated parameter 'namecase' [ 157.543415][ T8233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 157.861992][ T8252] loop3: detected capacity change from 0 to 256 [ 158.499957][ T8278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1012'. [ 158.733987][ T30] audit: type=1326 audit(1750931934.964:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffadf58e929 code=0x7ffc0000 [ 158.761528][ T8292] loop4: detected capacity change from 0 to 256 [ 158.785733][ T8284] loop3: detected capacity change from 0 to 4096 [ 158.799160][ T8292] exfat: Deprecated parameter 'utf8' [ 158.813907][ T8284] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 158.829022][ T8292] exfat: Deprecated parameter 'namecase' [ 158.843901][ T30] audit: type=1326 audit(1750931934.994:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7ffadf58e929 code=0x7ffc0000 [ 158.866069][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.894154][ T8292] exfat: Deprecated parameter 'namecase' [ 158.899893][ T8292] exfat: Deprecated parameter 'utf8' [ 158.926970][ T30] audit: type=1326 audit(1750931934.994:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffadf58e929 code=0x7ffc0000 [ 158.949148][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.996562][ T8284] ntfs3(loop3): ino=b, mi_enum_attr [ 159.001820][ T8284] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 159.013427][ T30] audit: type=1326 audit(1750931934.994:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.1.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffadf58e929 code=0x7ffc0000 [ 159.066982][ T8284] ntfs3(loop3): Failed to load $Extend (-22). [ 159.073099][ T8284] ntfs3(loop3): Failed to initialize $Extend. [ 159.091873][ T8292] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 159.219605][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'. [ 159.648150][ T8318] loop3: detected capacity change from 0 to 256 [ 159.685293][ T8318] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.976875][ T8335] loop3: detected capacity change from 0 to 256 [ 160.025077][ T8335] exfat: Deprecated parameter 'utf8' [ 160.030437][ T8335] exfat: Deprecated parameter 'utf8' [ 160.074035][ T8335] exfat: Deprecated parameter 'utf8' [ 160.134037][ T8335] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 160.644086][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.690306][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 160.712514][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 160.834174][ T5894] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 160.842387][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.897927][ T5894] usb 2-1: config 0 has no interface number 0 [ 160.912923][ T5894] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 160.963848][ T5894] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.024149][ T5894] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 161.043028][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.069753][ T5894] usb 2-1: Product: syz [ 161.077257][ T8374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1060'. [ 161.087803][ T5894] usb 2-1: Manufacturer: syz [ 161.112473][ T5894] usb 2-1: SerialNumber: syz [ 161.154478][ T5894] usb 2-1: config 0 descriptor?? [ 161.626385][ T5907] usb 2-1: USB disconnect, device number 6 [ 161.692780][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1070'. [ 161.723155][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1070'. [ 161.780640][ T8359] loop4: detected capacity change from 0 to 40427 [ 161.797585][ T8359] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 161.816723][ T8359] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 161.873967][ T8359] F2FS-fs (loop4): invalid crc value [ 162.107192][ T8359] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 162.116100][ T8359] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.140850][ T8412] loop0: detected capacity change from 0 to 256 [ 162.213984][ T8412] FAT-fs (loop0): Directory bread(block 64) failed [ 162.230809][ T8412] FAT-fs (loop0): Directory bread(block 65) failed [ 162.249381][ T8412] FAT-fs (loop0): Directory bread(block 66) failed [ 162.312922][ T8412] FAT-fs (loop0): Directory bread(block 67) failed [ 162.324411][ T8412] FAT-fs (loop0): Directory bread(block 68) failed [ 162.330989][ T8412] FAT-fs (loop0): Directory bread(block 69) failed [ 162.398946][ T8412] FAT-fs (loop0): Directory bread(block 70) failed [ 162.409687][ T8412] FAT-fs (loop0): Directory bread(block 71) failed [ 162.417012][ T8412] FAT-fs (loop0): Directory bread(block 72) failed [ 162.424113][ T8412] FAT-fs (loop0): Directory bread(block 73) failed [ 162.664116][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.924911][ T8408] loop3: detected capacity change from 0 to 32768 [ 163.497583][ T8447] loop4: detected capacity change from 0 to 512 [ 163.607906][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.719413][ T8447] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.722920][ T8462] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (4), value rounded to 0 ms [ 163.742194][ T8462] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547521) [ 163.753220][ T8462] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 163.783256][ T8447] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 163.807761][ T8447] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 64512 [ 163.849944][ T8447] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1080: Failed to acquire dquot type 0 [ 164.021973][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.061394][ T8468] loop2: detected capacity change from 0 to 1024 [ 164.076201][ T8472] loop1: detected capacity change from 0 to 64 [ 164.085072][ T8468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.101023][ T8468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.177783][ T8468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 164.225558][ T8468] System zones: 0-1, 3-36 [ 164.255884][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.261289][ T30] audit: type=1326 audit(1750931940.524:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 164.363895][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.388497][ T30] audit: type=1326 audit(1750931940.524:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 164.410756][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.481619][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.522853][ T30] audit: type=1326 audit(1750931940.564:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 164.545005][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.554407][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 164.586953][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.609241][ T30] audit: type=1326 audit(1750931940.564:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.3.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa897d8e929 code=0x7ffc0000 [ 164.631423][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.636147][ T10] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 164.662705][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.690439][ T8489] loop3: detected capacity change from 0 to 256 [ 164.714371][ T10] usb 1-1: Product: syz [ 164.733826][ T10] usb 1-1: Manufacturer: syz [ 164.738465][ T10] usb 1-1: SerialNumber: syz [ 164.778025][ T10] usb 1-1: config 0 descriptor?? [ 164.803207][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 164.832767][ T10] usb 1-1: selecting invalid altsetting 1 [ 164.977966][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 164.989311][ T8499] loop4: detected capacity change from 0 to 1024 [ 164.999476][ T10] gspca_stk014: init reg: 0x00 [ 165.007216][ T10] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 165.076398][ T8499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.145897][ T8499] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.196620][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.201695][ T8499] EXT4-fs (loop4): Remounting filesystem read-only [ 165.220842][ T5970] usb 1-1: USB disconnect, device number 3 [ 165.237473][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.244466][ T8499] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.4.1118: cleanup dec ref error -28 [ 165.267796][ T5908] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.280874][ T5908] usb 2-1: config 1 interface 0 has no altsetting 1 [ 165.295486][ T5908] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.333945][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.333976][ T5908] usb 2-1: Product: syz [ 165.333993][ T5908] usb 2-1: Manufacturer: syz [ 165.334007][ T5908] usb 2-1: SerialNumber: syz [ 165.359841][ T5908] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 165.389960][ T5908] cdc_ncm 2-1:1.0: bind() failure [ 165.404972][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.601226][ T5908] usb 2-1: USB disconnect, device number 7 [ 165.695694][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1128'. [ 165.955573][ T8531] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 165.967235][ T8535] loop2: detected capacity change from 0 to 1024 [ 165.976636][ T8531] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 165.993506][ T8535] EXT4-fs: Ignoring removed orlov option [ 166.002896][ T8535] EXT4-fs: Ignoring removed orlov option [ 166.061913][ T8535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.192224][ T8535] EXT4-fs error (device loop2): ext4_xattr_set_entry:1660: inode #13: comm syz.2.1134: corrupted xattr entries [ 166.415986][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.478311][ T8559] sock: sock_timestamping_bind_phc: sock not bind to device [ 166.607706][ T8567] netlink: del zone limit has 4 unknown bytes [ 166.643898][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.827127][ T5908] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 166.868904][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.906314][ T5908] usb 1-1: config 0 has no interface number 0 [ 166.942285][ T5908] usb 1-1: too many endpoints for config 0 interface 108 altsetting 111: 119, using maximum allowed: 30 [ 166.979501][ T5908] usb 1-1: config 0 interface 108 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 119 [ 167.053869][ T5908] usb 1-1: config 0 interface 108 has no altsetting 0 [ 167.060720][ T5908] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.109182][ T8584] x_tables: duplicate underflow at hook 2 [ 167.125631][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.153470][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 167.196102][ T5908] usb 1-1: config 0 descriptor?? [ 167.409445][ T5908] usb 1-1: string descriptor 0 read error: -71 [ 167.452807][ T5908] usb 1-1: USB disconnect, device number 4 [ 167.497710][ T8596] wlan0 speed is unknown, defaulting to 1000 [ 167.815778][ T8604] loop4: detected capacity change from 0 to 4096 [ 167.900211][ T8604] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 167.917922][ T8604] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 167.966644][ T8604] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 168.478896][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 168.664047][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 168.984371][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.160395][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 169.180479][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.202234][ T10] usb 1-1: Product: syz [ 169.209688][ T10] usb 1-1: Manufacturer: syz [ 169.215438][ T10] usb 1-1: SerialNumber: syz [ 169.229330][ T10] usb 1-1: config 0 descriptor?? [ 169.291400][ T8638] loop2: detected capacity change from 0 to 32768 [ 169.324236][ T8666] x_tables: unsorted entry at hook 2 [ 169.396470][ T8638] jfs_strtoUCS: char2uni returned -22. [ 169.417675][ T8638] charset = cp950, char = 0xd4 [ 169.460853][ T10] hso 1-1:0.0: Failed to find INT IN ep [ 169.496639][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 169.685151][ T10] usb 1-1: USB disconnect, device number 5 [ 170.153934][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.334716][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 170.357526][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 170.373466][ T8706] loop0: detected capacity change from 0 to 128 [ 170.385861][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.419119][ T10] usb 5-1: Product: syz [ 170.424821][ T10] usb 5-1: Manufacturer: syz [ 170.447517][ T10] usb 5-1: SerialNumber: syz [ 170.531503][ T10] usb 5-1: config 0 descriptor?? [ 170.585653][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 170.719211][ T8720] x_tables: unsorted entry at hook 3 [ 170.993738][ T10] gspca_sq930x: ucbus_write failed -71 [ 171.001148][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 171.040583][ T8734] netlink: 'syz.3.1224': attribute type 4 has an invalid length. [ 171.050987][ T10] usb 5-1: USB disconnect, device number 5 [ 171.116814][ T8732] loop1: detected capacity change from 0 to 2048 [ 171.216829][ T8740] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.294826][ T8738] loop2: detected capacity change from 0 to 4096 [ 171.297778][ T8732] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 171.316532][ T8738] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.378901][ T8732] Remounting filesystem read-only [ 171.398542][ T8738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.448638][ T8749] loop3: detected capacity change from 0 to 8 [ 171.466261][ T8749] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 171.526803][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.572830][ T5836] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 171.783759][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 172.035486][ T8767] loop3: detected capacity change from 0 to 1024 [ 172.042850][ T8767] EXT4-fs: Ignoring removed oldalloc option [ 172.082230][ T8767] EXT4-fs: Ignoring removed i_version option [ 172.118149][ T8767] EXT4-fs (loop3): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 172.198987][ T8767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.284037][ T8779] netlink: 'syz.1.1243': attribute type 3 has an invalid length. [ 172.291818][ T8779] netlink: 'syz.1.1243': attribute type 1 has an invalid length. [ 172.343933][ T8783] loop4: detected capacity change from 0 to 256 [ 172.383219][ T8783] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.415659][ T8785] loop2: detected capacity change from 0 to 164 [ 172.459278][ T8785] Unsupported NM flag settings (8) [ 172.481253][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.927462][ T8801] loop2: detected capacity change from 0 to 512 [ 172.962820][ T8801] EXT4-fs: Ignoring removed orlov option [ 172.978923][ T8801] EXT4-fs: inline encryption not supported [ 172.994002][ T8801] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.037367][ T8801] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.113917][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.152098][ T8801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1255: bg 0: block 64: padding at end of block bitmap is not set [ 173.258460][ T8801] Quota error (device loop2): write_blk: dquota write failed [ 173.272941][ T8801] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 173.275621][ T5907] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 173.283686][ T8801] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1255: Failed to acquire dquot type 0 [ 173.326877][ T5907] usb 1-1: config 0 has no interface number 0 [ 173.332552][ T8801] EXT4-fs (loop2): 1 truncate cleaned up [ 173.338898][ T8796] loop4: detected capacity change from 0 to 32768 [ 173.353416][ T5907] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 173.370253][ T8801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.391973][ T5907] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.431167][ T5907] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 173.459354][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.502756][ T5907] usb 1-1: Product: syz [ 173.522792][ T5907] usb 1-1: Manufacturer: syz [ 173.542888][ T5907] usb 1-1: SerialNumber: syz [ 173.611828][ T5907] usb 1-1: config 0 descriptor?? [ 173.621408][ T8799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 173.685057][ T5907] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 173.697711][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.758614][ T5907] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 173.825109][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 173.924772][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1266'. [ 174.003088][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 174.206927][ T5907] usb 1-1: USB disconnect, device number 6 [ 174.238676][ T5907] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 174.304575][ T5907] cyberjack 1-1:0.69: device disconnected [ 174.419064][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1275'. [ 174.549230][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 174.709245][ T8855] netlink: 'syz.3.1281': attribute type 25 has an invalid length. [ 174.731581][ T8859] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1284'. [ 174.742409][ T8855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1281'. [ 175.203899][ T5163] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.387834][ T5163] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.418525][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 175.467235][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.507576][ T5163] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.569765][ T5163] usb 1-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 175.606892][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.648637][ T5163] usb 1-1: config 0 descriptor?? [ 175.683435][ T5163] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.701950][ T5163] usb 1-1: MIDIStreaming interface descriptor not found [ 175.935448][ T5163] usb 1-1: USB disconnect, device number 7 [ 175.981488][ T8910] loop3: detected capacity change from 0 to 64 [ 176.070814][ T8910] syz.3.1308: attempt to access beyond end of device [ 176.070814][ T8910] loop3: rw=0, sector=548, nr_sectors = 2 limit=64 [ 176.114746][ T8910] Trying to free block not in datazone [ 176.142846][ T8910] Trying to free block not in datazone [ 176.155824][ T8910] Trying to free block not in datazone [ 176.180288][ T8910] Trying to free block not in datazone [ 176.191582][ T8910] minix_free_block (loop3:6): bit already cleared [ 176.207938][ T8910] Trying to free block not in datazone [ 176.231119][ T8910] Trying to free block not in datazone [ 176.361932][ T8923] loop2: detected capacity change from 0 to 256 [ 176.554290][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 176.657659][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1317'. [ 176.704474][ T8935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'. [ 176.726064][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 176.749380][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 176.750887][ T8931] loop3: detected capacity change from 0 to 4096 [ 176.788363][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 176.803609][ T8931] ntfs3(loop3): It is recommened to use chkdsk. [ 176.826594][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 176.863281][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 176.864962][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.896999][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 176.920057][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 176.930191][ T8941] loop2: detected capacity change from 0 to 256 [ 176.939510][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 176.951914][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.957481][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00 [ 176.972478][ T10] usb 2-1: Product: syz [ 176.977641][ T10] usb 2-1: Manufacturer: syz [ 176.982369][ T10] usb 2-1: SerialNumber: syz [ 176.993459][ T10] usb 2-1: config 0 descriptor?? [ 177.004622][ T8921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.024063][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00 [ 177.029270][ T8941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 177.031944][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00 [ 177.057694][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 177.078908][ T5163] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.084786][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00 [ 177.115349][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 177.150309][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00 [ 177.193334][ T8931] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00 [ 177.269480][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 177.292403][ T5163] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 177.309123][ T5163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 177.319866][ T5163] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 177.391923][ T5163] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 177.408774][ T8947] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 177.416994][ T5163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.427959][ T8947] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1323'. [ 177.450577][ T5163] usb 1-1: config 0 descriptor?? [ 177.452947][ T10] usb 2-1: USB disconnect, device number 8 [ 177.643417][ T8952] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 177.685732][ T5163] hdpvr 1-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½ËDŠ^jvi0ì [ 177.685732][ T5163] †Ã“‘êpY [ 177.887353][ T5163] hdpvr 1-1:0.0: device init failed [ 177.906639][ T5163] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 177.944322][ T5163] usb 1-1: USB disconnect, device number 8 [ 178.327299][ T8982] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 178.473929][ T5163] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 178.635974][ T5163] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 178.653848][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.683903][ T5163] usb 4-1: config 0 descriptor?? [ 178.796893][ T5907] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 178.911959][ T5163] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 178.999631][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 179.021134][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 179.066368][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 79, setting to 64 [ 179.094669][ T5907] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 179.112823][ T9008] loop0: detected capacity change from 0 to 512 [ 179.113650][ T5163] [drm:udl_init] *ERROR* Selecting channel failed [ 179.131094][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.143706][ T9008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.171874][ T5907] usb 3-1: Product: syz [ 179.190749][ T5907] usb 3-1: Manufacturer: syz [ 179.198821][ T9008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.205983][ T5907] usb 3-1: SerialNumber: syz [ 179.222517][ T5163] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 179.231461][ T5163] [drm] Initialized udl on minor 2 [ 179.238270][ T5907] usb 3-1: config 0 descriptor?? [ 179.244221][ T8990] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.256616][ T5163] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 179.269034][ T5163] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 179.280092][ T43] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 179.289191][ T43] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 179.298776][ T5163] usb 4-1: USB disconnect, device number 6 [ 179.319589][ T9008] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.475160][ T5907] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 179.501933][ T5907] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 179.582673][ C1] powermate: config urb returned -71 [ 179.588658][ C1] powermate: config urb returned -71 [ 179.595593][ C1] powermate: config urb returned -71 [ 179.602171][ C1] powermate: config urb returned -71 [ 179.636304][ T9008] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 179.663366][ T5907] usb 3-1: USB disconnect, device number 5 [ 179.669342][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 179.778299][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.134374][ T9024] tipc: Can't bind to reserved service type 0 [ 180.155960][ T9025] netlink: 732 bytes leftover after parsing attributes in process `syz.0.1359'. [ 180.296654][ T9032] loop1: detected capacity change from 0 to 764 [ 180.361638][ T9032] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 180.778856][ T9050] loop0: detected capacity change from 0 to 64 [ 180.901164][ T9055] loop1: detected capacity change from 0 to 128 [ 181.602903][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.788085][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 181.815726][ T10] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 181.835355][ T9092] loop1: detected capacity change from 0 to 1764 [ 181.841813][ T10] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 181.878292][ T10] usb 5-1: config 6 has no interface number 0 [ 181.888432][ T10] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.934234][ T10] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.957765][ T10] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.977895][ T10] usb 5-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.020438][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 182.048080][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.071599][ T10] usb 5-1: Product: syz [ 182.087671][ T10] usb 5-1: Manufacturer: syz [ 182.092318][ T10] usb 5-1: SerialNumber: syz [ 182.144338][ T10] hso 5-1:6.2: Failed to find BULK IN ep [ 182.269148][ T9110] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 182.308873][ T9110] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1401'. [ 182.396359][ T5163] usb 5-1: USB disconnect, device number 6 [ 182.521548][ T9121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 182.587381][ T9122] loop2: detected capacity change from 0 to 2048 [ 182.626305][ T9122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.213947][ T5907] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.264719][ T9152] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 183.365484][ T9155] loop2: detected capacity change from 0 to 256 [ 183.422668][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.454718][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.483165][ T9155] FAT-fs (loop2): Directory bread(block 64) failed [ 183.493716][ T9155] FAT-fs (loop2): Directory bread(block 65) failed [ 183.495355][ T5907] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 183.517749][ T9155] FAT-fs (loop2): Directory bread(block 66) failed [ 183.529648][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.549660][ T5907] usb 2-1: config 0 descriptor?? [ 183.550210][ T9155] FAT-fs (loop2): Directory bread(block 67) failed [ 183.564602][ T9160] netlink: 'syz.0.1426': attribute type 30 has an invalid length. [ 183.614103][ T9155] FAT-fs (loop2): Directory bread(block 68) failed [ 183.620903][ T9155] FAT-fs (loop2): Directory bread(block 69) failed [ 183.631121][ T9155] FAT-fs (loop2): Directory bread(block 70) failed [ 183.649418][ T9155] FAT-fs (loop2): Directory bread(block 71) failed [ 183.669739][ T9155] FAT-fs (loop2): Directory bread(block 72) failed [ 183.697797][ T9155] FAT-fs (loop2): Directory bread(block 73) failed [ 183.768721][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 183.780006][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 183.801913][ T5907] usb 2-1: USB disconnect, device number 9 [ 183.816439][ T9165] netlink: 'syz.0.1428': attribute type 11 has an invalid length. [ 183.837330][ T9165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1428'. [ 184.662659][ T9198] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 184.830923][ T9206] dlm: no locking on control device [ 185.037136][ T9204] loop1: detected capacity change from 0 to 4096 [ 185.067399][ T9204] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 185.130695][ T9204] ntfs3(loop1): ino=19, mi_enum_attr [ 185.149480][ T9218] loop0: detected capacity change from 0 to 1024 [ 185.162802][ T9204] ntfs3(loop1): failed to convert "c46c" to euc-jp [ 185.203277][ T9204] ntfs3(loop1): ino=20, mi_enum_attr [ 185.568625][ T9230] loop2: detected capacity change from 0 to 16 [ 185.608020][ T9230] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 185.741611][ T9237] loop0: detected capacity change from 0 to 128 [ 185.754878][ T9239] loop3: detected capacity change from 0 to 256 [ 185.781705][ T9237] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.836534][ T9237] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.939346][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.048907][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.070800][ T30] audit: type=1326 audit(1750931962.334:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946378e929 code=0x7ffc0000 [ 186.148088][ T30] audit: type=1326 audit(1750931962.334:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f946378e929 code=0x7ffc0000 [ 186.176277][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 186.185550][ T10] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 186.193653][ T10] usb 2-1: Product: syz [ 186.198973][ T10] usb 2-1: Manufacturer: syz [ 186.205406][ T10] usb 2-1: SerialNumber: syz [ 186.248916][ T9253] fuse: Invalid rootmode [ 186.257411][ T10] usb 2-1: config 0 descriptor?? [ 186.302860][ T30] audit: type=1326 audit(1750931962.334:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946378e929 code=0x7ffc0000 [ 186.325433][ T9257] overlayfs: missing 'lowerdir' [ 186.393836][ T30] audit: type=1326 audit(1750931962.334:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9248 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f946378e929 code=0x7ffc0000 [ 186.682434][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.708954][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 186.709167][ T9271] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1480'. [ 186.743610][ T10] usb 2-1: USB disconnect, device number 10 [ 186.989584][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 187.030555][ T9285] cgroup: Unknown subsys name 'cpuset' [ 187.188025][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 187.376617][ T9301] loop4: detected capacity change from 0 to 64 [ 187.943906][ T5907] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.017035][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 188.101984][ T5907] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 188.111293][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.142503][ T5907] usb 4-1: Product: syz [ 188.162159][ T5907] usb 4-1: Manufacturer: syz [ 188.181403][ T5907] usb 4-1: SerialNumber: syz [ 188.209854][ T5907] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 188.240734][ T5163] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 188.303558][ T9331] netlink: 'syz.2.1509': attribute type 5 has an invalid length. [ 188.679282][ T5907] usb 4-1: USB disconnect, device number 7 [ 188.725143][ T9343] loop4: detected capacity change from 0 to 1024 [ 188.926359][ T49] hfsplus: b-tree write err: -5, ino 4 [ 189.088954][ T9357] loop0: detected capacity change from 0 to 256 [ 189.138102][ T9357] exfat: Deprecated parameter 'namecase' [ 189.232957][ T9357] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 189.495614][ T5163] usb 4-1: Service connection timeout for: 256 [ 189.522707][ T5163] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 189.556411][ T9373] 8021q: VLANs not supported on lo [ 189.566927][ T5163] ath9k_htc: Failed to initialize the device [ 189.620408][ T5907] usb 4-1: ath9k_htc: USB layer deinitialized [ 190.178009][ T9401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 190.521031][ T9417] libceph: resolve '4.' (ret=-3): failed [ 190.544990][ T9419] syz.1.1553 uses obsolete (PF_INET,SOCK_PACKET) [ 190.626025][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 190.700533][ T9428] xt_bpf: check failed: parse error [ 191.162238][ T9445] loop3: detected capacity change from 0 to 1024 [ 191.343979][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 191.517246][ T9458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1571'. [ 191.548395][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 191.572639][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 191.591075][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.614762][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 191.633953][ T10] usb 1-1: config 1 has no interface number 0 [ 191.640304][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 191.670817][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.717305][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 191.914105][ T10] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 191.941196][ T10] snd_usb_pod 1-1:1.1: invalid control EP [ 191.958691][ T10] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 191.990180][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 192.036944][ T10] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 192.096343][ T9479] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1582'. [ 192.125665][ T10] usb 1-1: USB disconnect, device number 9 [ 192.419983][ T9491] loop2: detected capacity change from 0 to 8 [ 192.432223][ T9491] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 192.493166][ T6258] udevd[6258]: incorrect cramfs checksum on /dev/loop2 [ 192.604839][ T6258] udevd[6258]: incorrect cramfs checksum on /dev/loop2 [ 192.891071][ T9473] infiniband syz0: set down [ 192.934252][ T9473] infiniband syz0: added ipvlan1 [ 192.966752][ T9473] syz0: rxe_create_cq: returned err = -12 [ 192.972791][ T9473] infiniband syz0: Couldn't create ib_mad CQ [ 193.032854][ T9473] infiniband syz0: Couldn't open port 1 [ 193.165365][ T9473] RDS/IB: syz0: added [ 193.170171][ T9473] smc: adding ib device syz0 with port count 1 [ 193.207844][ T9473] smc: ib device syz0 port 1 has pnetid [ 193.246710][ T9521] Invalid option length (1048125) for dns_resolver key [ 193.335609][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 193.408442][ T9525] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 193.441402][ T9525] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 193.521042][ T9529] loop1: detected capacity change from 0 to 512 [ 193.584522][ T9534] loop2: detected capacity change from 0 to 256 [ 193.597023][ T9529] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.691295][ T5836] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 193.701492][ T9534] FAT-fs (loop2): Directory bread(block 64) failed [ 193.743913][ T9534] FAT-fs (loop2): Directory bread(block 65) failed [ 193.750561][ T9534] FAT-fs (loop2): Directory bread(block 66) failed [ 193.802332][ T9534] FAT-fs (loop2): Directory bread(block 67) failed [ 193.812256][ T9540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.827180][ T9534] FAT-fs (loop2): Directory bread(block 68) failed [ 193.839121][ T9534] FAT-fs (loop2): Directory bread(block 69) failed [ 193.876776][ T9534] FAT-fs (loop2): Directory bread(block 70) failed [ 193.914865][ T9534] FAT-fs (loop2): Directory bread(block 71) failed [ 193.962184][ T9534] FAT-fs (loop2): Directory bread(block 72) failed [ 193.991817][ T9534] FAT-fs (loop2): Directory bread(block 73) failed [ 194.220201][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.226638][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.347309][ T9558] loop2: detected capacity change from 0 to 1024 [ 194.504685][ T13] hfsplus: b-tree write err: -5, ino 4 [ 194.899259][ T9577] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 194.948948][ T9577] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 195.189487][ T9589] loop0: detected capacity change from 0 to 64 [ 195.422748][ T8097] ------------[ cut here ]------------ [ 195.428486][ T8097] kernel BUG at fs/hfs/inode.c:444! [ 195.448251][ T8097] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 195.454542][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: kworker/u8:11 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 195.466263][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.476330][ T8097] Workqueue: writeback wb_workfn (flush-7:0) [ 195.482340][ T8097] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 195.487908][ T8097] Code: c1 60 92 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 60 92 af 99 e8 b3 15 89 ff e9 6c fe ff ff e8 b9 35 25 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.507525][ T8097] RSP: 0018:ffffc90003a2f180 EFLAGS: 00010293 [ 195.513591][ T8097] RAX: ffffffff829a86c7 RBX: ffff888031216318 RCX: ffff888024958000 [ 195.521555][ T8097] RDX: 0000000000000000 RSI: ffffffff8e364220 RDI: 0000000000000000 [ 195.529516][ T8097] RBP: ffffc90003a2f310 R08: ffff888024958000 R09: 0000000000000003 [ 195.537486][ T8097] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 195.545459][ T8097] R13: 1ffff92000745e34 R14: ffff8880312162d8 R15: 0000000000000000 [ 195.553423][ T8097] FS: 0000000000000000(0000) GS:ffff888125d1f000(0000) knlGS:0000000000000000 [ 195.562343][ T8097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.568913][ T8097] CR2: 0000200000000080 CR3: 000000005cfbc000 CR4: 00000000003526f0 [ 195.576874][ T8097] Call Trace: [ 195.580144][ T8097] [ 195.583064][ T8097] ? __pfx_hfs_write_inode+0x10/0x10 [ 195.588358][ T8097] __writeback_single_inode+0x6ee/0xff0 [ 195.593910][ T8097] writeback_sb_inodes+0x6c7/0x1010 [ 195.599122][ T8097] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 195.604777][ T8097] ? rcu_is_watching+0x15/0xb0 [ 195.609546][ T8097] wb_writeback+0x43b/0xaf0 [ 195.614046][ T8097] ? queue_io+0x381/0x590 [ 195.618368][ T8097] ? __pfx_wb_writeback+0x10/0x10 [ 195.623384][ T8097] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.628578][ T8097] wb_workfn+0x409/0xef0 [ 195.632817][ T8097] ? __pfx_wb_workfn+0x10/0x10 [ 195.637569][ T8097] ? __lock_acquire+0xab9/0xd20 [ 195.642413][ T8097] ? process_scheduled_works+0x9ef/0x17b0 [ 195.648124][ T8097] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.653310][ T8097] ? process_scheduled_works+0x9ef/0x17b0 [ 195.659018][ T8097] ? process_scheduled_works+0x9ef/0x17b0 [ 195.664727][ T8097] process_scheduled_works+0xade/0x17b0 [ 195.670274][ T8097] ? __pfx_process_scheduled_works+0x10/0x10 [ 195.676246][ T8097] worker_thread+0x8a0/0xda0 [ 195.680832][ T8097] kthread+0x711/0x8a0 [ 195.684892][ T8097] ? __pfx_worker_thread+0x10/0x10 [ 195.689997][ T8097] ? __pfx_kthread+0x10/0x10 [ 195.694571][ T8097] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.699758][ T8097] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.704950][ T8097] ? __pfx_kthread+0x10/0x10 [ 195.709525][ T8097] ret_from_fork+0x3fc/0x770 [ 195.714108][ T8097] ? __pfx_ret_from_fork+0x10/0x10 [ 195.719209][ T8097] ? __switch_to_asm+0x39/0x70 [ 195.723961][ T8097] ? __switch_to_asm+0x33/0x70 [ 195.728721][ T8097] ? __pfx_kthread+0x10/0x10 [ 195.733297][ T8097] ret_from_fork_asm+0x1a/0x30 [ 195.738053][ T8097] [ 195.741056][ T8097] Modules linked in: [ 195.745590][ T8097] ---[ end trace 0000000000000000 ]--- [ 195.783360][ T8097] RIP: 0010:hfs_write_inode+0x7c8/0x7d0 [ 195.795175][ T8097] Code: c1 60 92 af 99 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 60 92 af 99 e8 b3 15 89 ff e9 6c fe ff ff e8 b9 35 25 ff 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.816907][ T8097] RSP: 0018:ffffc90003a2f180 EFLAGS: 00010293 [ 195.823067][ T8097] RAX: ffffffff829a86c7 RBX: ffff888031216318 RCX: ffff888024958000 [ 195.832143][ T8097] RDX: 0000000000000000 RSI: ffffffff8e364220 RDI: 0000000000000000 [ 195.857098][ T8097] RBP: ffffc90003a2f310 R08: ffff888024958000 R09: 0000000000000003 [ 195.866747][ T8097] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 195.875472][ T8097] R13: 1ffff92000745e34 R14: ffff8880312162d8 R15: 0000000000000000 [ 195.883520][ T8097] FS: 0000000000000000(0000) GS:ffff888125d1f000(0000) knlGS:0000000000000000 [ 195.892786][ T8097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.901727][ T8097] CR2: 00007f946397e2d8 CR3: 0000000033576000 CR4: 00000000003526f0 [ 195.909979][ T8097] Kernel panic - not syncing: Fatal exception [ 195.916281][ T8097] Kernel Offset: disabled [ 195.920590][ T8097] Rebooting in 86400 seconds..