last executing test programs: 10.520935426s ago: executing program 3 (id=1054): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") unlink(&(0x7f0000000180)='./file1\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) 8.265903951s ago: executing program 1 (id=1060): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 7.337199646s ago: executing program 3 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x400300, 0x0) socket$inet(0x2, 0x3, 0x8) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 6.238916053s ago: executing program 0 (id=1067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 5.78868217s ago: executing program 0 (id=1068): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x0, 0x1, 0x12d}, &(0x7f0000000100), &(0x7f0000000640)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e27, 0x3, 'dh\x00', 0x1, 0x3, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@empty, 0x4e23, 0x10000, 0x8db, 0x12d5c, 0x12d5c}}, 0x44) pselect6(0x40, &(0x7f0000000000)={0x6, 0x9, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x90001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) 4.559509219s ago: executing program 0 (id=1070): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 4.430834911s ago: executing program 1 (id=1071): socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 4.129526496s ago: executing program 1 (id=1072): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") unlink(&(0x7f0000000180)='./file1\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) 4.097711866s ago: executing program 2 (id=1073): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0xff2}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 3.402677057s ago: executing program 0 (id=1074): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x0, 0x1, 0x12d}, &(0x7f0000000100), &(0x7f0000000640)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f0000000000)={0x6, 0x9, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x90001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) 3.261932819s ago: executing program 3 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005b40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 2.902084294s ago: executing program 2 (id=1076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 2.900882734s ago: executing program 3 (id=1077): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 2.686340588s ago: executing program 1 (id=1078): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x0, 0x1, 0x12d}, &(0x7f0000000100), &(0x7f0000000640)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e27, 0x3, 'dh\x00', 0x1, 0x3, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@empty, 0x4e23, 0x10000, 0x8db, 0x12d5c, 0x12d5c}}, 0x44) pselect6(0x40, &(0x7f0000000000)={0x6, 0x9, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x90001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) 2.346210503s ago: executing program 2 (id=1079): r0 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.345645133s ago: executing program 3 (id=1080): socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 2.281025534s ago: executing program 0 (id=1081): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) 1.24461524s ago: executing program 1 (id=1082): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 1.24373386s ago: executing program 3 (id=1083): syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6286, &(0x7f000000dc80)="$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") r0 = open(&(0x7f0000000200)='./file0\x00', 0x200081, 0x4c) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.121598712s ago: executing program 0 (id=1084): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x400300, 0x0) socket$inet(0x2, 0x3, 0x8) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 968.462135ms ago: executing program 2 (id=1085): socket$netlink(0x10, 0x3, 0xc) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0xff2}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 548.151621ms ago: executing program 2 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005b40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 262.013616ms ago: executing program 2 (id=1087): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1546010000000000280012800a000100767863616e0000001800028014000100000000005e", @ANYBLOB], 0x48}}, 0x20008040) 0s ago: executing program 1 (id=1088): syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 08] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.284617][ T7308] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.441: inode #11: comm syz.0.441: iget: illegal inode # [ 240.298708][ T7310] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 240.309302][ T7308] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.441: couldn't read orphan inode 11 (err -117) [ 240.316164][ T23] usb 3-1: device descriptor read/64, error -71 [ 240.333909][ T7308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.523476][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.686295][ T7318] netlink: 76 bytes leftover after parsing attributes in process `syz.3.442'. [ 240.700060][ T23] usb usb3-port1: attempt power cycle [ 241.635690][ T7320] loop3: detected capacity change from 0 to 32768 [ 241.681670][ T7320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.442 (7320) [ 241.762700][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.764032][ T7320] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.788089][ T7320] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 241.796898][ T7320] BTRFS info (device loop3): using free space tree [ 241.847513][ T7320] BTRFS info (device loop3): enabling ssd optimizations [ 241.855844][ T7320] BTRFS info (device loop3): auto enabling async discard [ 241.917729][ T7321] syz.0.444: attempt to access beyond end of device [ 241.917729][ T7321] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 241.931073][ T7321] hpfs: hpfs_map_sector(): read error [ 242.144783][ T5767] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.244552][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 242.284319][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 242.295412][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.324466][ T9] usb 2-1: config 0 has no interfaces? [ 242.380778][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 242.434409][ T9] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 242.452215][ T9] usb 2-1: Product: syz [ 242.460023][ T7343] loop0: detected capacity change from 0 to 64 [ 242.464507][ T9] usb 2-1: Manufacturer: syz [ 242.471537][ T9] usb 2-1: SerialNumber: syz [ 242.518174][ T9] usb 2-1: config 0 descriptor?? [ 242.543978][ T7343] hfs: unable to locate alternate MDB [ 242.574296][ T7343] hfs: continuing without an alternate MDB [ 242.629694][ T7345] loop2: detected capacity change from 0 to 2048 [ 242.709741][ T7345] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 242.758182][ T7345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.786059][ T9] usb 2-1: USB disconnect, device number 23 [ 243.018969][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 243.247945][ T7352] loop2: detected capacity change from 0 to 2048 [ 243.344421][ T7352] Alternate GPT is invalid, using primary GPT. [ 243.351107][ T7352] loop2: p1 p2 p3 [ 243.628081][ T7355] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present [ 244.598058][ T5774] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 244.605388][ T6591] I/O error, dev loop2, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.615591][ T5960] I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.625683][ T5770] I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.637092][ T5960] I/O error, dev loop2, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.646879][ T6591] I/O error, dev loop2, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.656626][ T5770] I/O error, dev loop2, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.673722][ T5960] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 244.683399][ T6591] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 244.691969][ T5770] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 244.701457][ T5770] I/O error, dev loop2, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.711381][ T5960] I/O error, dev loop2, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.714150][ T7360] loop0: detected capacity change from 0 to 4096 [ 244.721649][ T6591] I/O error, dev loop2, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.739882][ T7363] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[7363] [ 244.748802][ T5770] Buffer I/O error on dev loop2p1, logical block 9, async page read [ 244.760036][ T5960] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 244.768530][ T6591] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 244.779750][ T5770] I/O error, dev loop2, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 244.789742][ T5960] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 244.800569][ T6591] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 244.815532][ T5960] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 244.825580][ T5770] Buffer I/O error on dev loop2p1, logical block 10, async page read [ 244.836849][ T7360] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 244.965615][ T7360] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 245.107389][ T7368] loop2: detected capacity change from 0 to 512 [ 245.184960][ T7368] EXT4-fs: Ignoring removed oldalloc option [ 247.224424][ T7368] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.380708][ T7368] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.454: inode #11: comm syz.2.454: iget: illegal inode # [ 247.423760][ T7368] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.454: couldn't read orphan inode 11 (err -117) [ 247.491760][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.630757][ T7371] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 247.703825][ T7373] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 247.725311][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.763109][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 247.775894][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 247.789554][ T5893] udevd[5893]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 248.242338][ T7382] loop2: detected capacity change from 0 to 2048 [ 248.330068][ T7382] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 248.378555][ T7382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.448569][ T7378] loop3: detected capacity change from 0 to 4096 [ 248.604406][ T7379] netlink: 76 bytes leftover after parsing attributes in process `syz.0.456'. [ 248.768670][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 249.284474][ T1194] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 249.390825][ T7385] loop0: detected capacity change from 0 to 32768 [ 249.405005][ T7385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.456 (7385) [ 249.474957][ T1194] usb 3-1: Using ep0 maxpacket: 8 [ 249.485770][ T1194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.519409][ T1194] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.552764][ T1194] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 249.577877][ T1194] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 249.596452][ T1194] usb 3-1: Product: syz [ 249.600688][ T1194] usb 3-1: Manufacturer: syz [ 249.617610][ T1194] usb 3-1: SerialNumber: syz [ 249.626989][ T1194] usb 3-1: config 0 descriptor?? [ 249.878908][ T1194] usb 3-1: USB disconnect, device number 30 [ 250.451511][ T7385] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.462110][ T7385] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 250.470865][ T7385] BTRFS info (device loop0): using free space tree [ 250.551687][ T7404] syz.3.463: attempt to access beyond end of device [ 250.551687][ T7404] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 250.565704][ T7404] hpfs: hpfs_map_sector(): read error [ 250.846961][ T7385] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 250.856834][ T7385] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 250.871327][ T7385] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 251.251109][ T7385] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 251.261684][ T7385] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 251.433463][ T7385] BTRFS error (device loop0): open_ctree failed: -12 [ 251.699305][ T5770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5770) [ 252.709075][ T7422] syz.0.472: attempt to access beyond end of device [ 252.709075][ T7422] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 252.722451][ T7422] hpfs: hpfs_map_sector(): read error [ 253.438580][ T7421] loop1: detected capacity change from 0 to 2048 [ 253.891254][ T7424] snd_dummy snd_dummy.0: control 3:2:0:syz0:211 is already present [ 253.941166][ T7421] Alternate GPT is invalid, using primary GPT. [ 253.948521][ T7421] loop1: p1 p2 p3 [ 254.423461][ T7416] loop2: detected capacity change from 0 to 4096 [ 254.476221][ T7416] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 254.506409][ T7432] loop3: detected capacity change from 0 to 512 [ 254.586514][ T7432] EXT4-fs: Ignoring removed oldalloc option [ 254.600016][ T7416] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 254.680328][ T7432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.740233][ T7432] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.468: inode #11: comm syz.3.468: iget: illegal inode # [ 254.790870][ T7432] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.468: couldn't read orphan inode 11 (err -117) [ 254.839396][ T7432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.018783][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.111619][ T6591] udevd[6591]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 256.127216][ T6000] udevd[6000]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 256.165973][ T5770] udevd[5770]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 256.175368][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.182589][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301415][ T7450] loop3: detected capacity change from 0 to 256 [ 256.383067][ T7453] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 256.408257][ T7450] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 256.813151][ T7461] syz.0.477: attempt to access beyond end of device [ 256.813151][ T7461] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 256.826212][ T7461] hpfs: hpfs_map_sector(): read error [ 257.747778][ T7467] loop0: detected capacity change from 0 to 2048 [ 257.829866][ T7467] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 257.886922][ T7472] loop1: detected capacity change from 0 to 512 [ 257.894962][ T7472] EXT4-fs: Ignoring removed oldalloc option [ 257.906064][ T7472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.924465][ T7467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.985238][ T7472] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.483: inode #11: comm syz.1.483: iget: illegal inode # [ 258.085512][ T7472] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.483: couldn't read orphan inode 11 (err -117) [ 258.091876][ T7478] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 258.106935][ T7472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.432297][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.200320][ T7482] netlink: 76 bytes leftover after parsing attributes in process `syz.3.485'. [ 259.472922][ T7486] loop2: detected capacity change from 0 to 256 [ 259.522874][ T7488] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 259.581181][ T7486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 259.584780][ T7479] loop3: detected capacity change from 0 to 32768 [ 259.621120][ T7479] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.631466][ T7479] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 259.640506][ T7479] BTRFS info (device loop3): using free space tree [ 259.719221][ T7479] BTRFS info (device loop3): enabling ssd optimizations [ 259.726459][ T7479] BTRFS info (device loop3): auto enabling async discard [ 259.820940][ T7505] loop1: detected capacity change from 0 to 4096 [ 259.831160][ T7505] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 259.867698][ T7507] loop0: detected capacity change from 0 to 512 [ 260.117192][ T7507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.190696][ T7507] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.253882][ T5767] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 261.782206][ T28] audit: type=1800 audit(1751277667.483:9): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.490" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 261.934371][ T7517] syz.0.490 (7517) used greatest stack depth: 20272 bytes left [ 262.170967][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.208911][ T7521] loop1: detected capacity change from 0 to 2048 [ 262.290578][ T7521] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 262.395681][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.718803][ T7527] loop0: detected capacity change from 0 to 512 [ 262.813183][ T7527] EXT4-fs: Ignoring removed oldalloc option [ 262.882186][ T7527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.029254][ T7527] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.495: inode #11: comm syz.0.495: iget: illegal inode # [ 263.192825][ T7527] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.495: couldn't read orphan inode 11 (err -117) [ 263.277596][ T7538] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 263.339833][ T7527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.756192][ T7542] loop1: detected capacity change from 0 to 4096 [ 263.829652][ T7546] syz.3.502: attempt to access beyond end of device [ 263.829652][ T7546] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 263.842595][ T7546] hpfs: hpfs_map_sector(): read error [ 264.008660][ T7542] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 264.191399][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.793425][ T7553] loop2: detected capacity change from 0 to 512 [ 265.463959][ T7553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.547084][ T7553] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.713916][ T28] audit: type=1800 audit(1751277672.393:10): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.505" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 267.104572][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.162289][ T7573] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 267.460880][ T7577] loop3: detected capacity change from 0 to 64 [ 267.469942][ T7578] loop1: detected capacity change from 0 to 64 [ 267.487823][ T7578] hfs: unable to locate alternate MDB [ 267.494810][ T7577] MINIX-fs: mounting file system with errors, running fsck is recommended [ 267.523739][ T7578] hfs: continuing without an alternate MDB [ 267.855703][ T7583] loop0: detected capacity change from 0 to 4096 [ 268.107076][ T5085] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 268.180177][ T7589] loop1: detected capacity change from 0 to 4096 [ 268.193425][ T7589] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 269.267856][ T7601] loop3: detected capacity change from 0 to 64 [ 269.292345][ T7601] MINIX-fs: mounting file system with errors, running fsck is recommended [ 269.303828][ T7598] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 270.082432][ T7607] loop0: detected capacity change from 0 to 32768 [ 270.092097][ T7607] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.521 (7607) [ 270.110203][ T7607] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.121655][ T7607] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 270.131686][ T7607] BTRFS info (device loop0): using free space tree [ 270.394396][ T7607] BTRFS info (device loop0): enabling ssd optimizations [ 270.401427][ T7607] BTRFS info (device loop0): auto enabling async discard [ 270.519631][ T7631] loop2: detected capacity change from 0 to 64 [ 270.756782][ T7631] hfs: unable to locate alternate MDB [ 270.770216][ T7631] hfs: continuing without an alternate MDB [ 270.825257][ T7636] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 270.852520][ T7636] CIFS mount error: No usable UNC path provided in device string! [ 270.852520][ T7636] [ 270.863322][ T7636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 271.852501][ T7639] loop1: detected capacity change from 0 to 4096 [ 272.168341][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.349759][ T7641] loop2: detected capacity change from 0 to 4096 [ 272.376515][ T7641] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 274.176807][ T7657] loop3: detected capacity change from 0 to 2048 [ 274.245475][ T5840] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 274.264879][ T7657] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 274.379686][ T7657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.494408][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 274.514898][ T5840] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.580610][ T7662] loop0: detected capacity change from 0 to 64 [ 274.626743][ T7662] hfs: unable to locate alternate MDB [ 274.632649][ T7662] hfs: continuing without an alternate MDB [ 274.793090][ T5840] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.814797][ T5840] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 274.834251][ T5840] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 274.842339][ T5840] usb 2-1: Product: syz [ 274.864425][ T5840] usb 2-1: Manufacturer: syz [ 274.869202][ T5840] usb 2-1: SerialNumber: syz [ 274.894009][ T5840] usb 2-1: config 0 descriptor?? [ 274.937690][ T7664] syz.2.538: attempt to access beyond end of device [ 274.937690][ T7664] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 274.950715][ T7664] hpfs: hpfs_map_sector(): read error [ 275.501900][ T23] usb 2-1: USB disconnect, device number 24 [ 275.773882][ T7666] CIFS mount error: No usable UNC path provided in device string! [ 275.773882][ T7666] [ 275.804975][ T7666] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.826385][ T7668] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 277.573496][ T7675] loop2: detected capacity change from 0 to 32768 [ 277.774585][ T7675] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.542 (7675) [ 277.894483][ T7675] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.904835][ T7675] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 277.913519][ T7675] BTRFS info (device loop2): using free space tree [ 278.003400][ T7677] loop0: detected capacity change from 0 to 4096 [ 278.051313][ T7675] BTRFS info (device loop2): enabling ssd optimizations [ 278.058668][ T7675] BTRFS info (device loop2): auto enabling async discard [ 278.384718][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 279.045624][ T7703] loop3: detected capacity change from 0 to 2048 [ 279.258450][ T7703] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 279.319925][ T7703] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.442875][ T7704] loop2: detected capacity change from 0 to 4096 [ 279.521707][ T7704] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 280.017351][ T7720] syz.1.551: attempt to access beyond end of device [ 280.017351][ T7720] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 280.030283][ T7720] hpfs: hpfs_map_sector(): read error [ 280.904941][ T7723] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 281.270203][ T7732] netlink: 76 bytes leftover after parsing attributes in process `syz.3.554'. [ 281.937322][ T1194] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.174024][ T7733] loop3: detected capacity change from 0 to 32768 [ 282.304120][ T7733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.554 (7733) [ 282.401448][ T1194] usb 3-1: Using ep0 maxpacket: 8 [ 282.415325][ T7733] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.425911][ T7733] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 282.435830][ T7733] BTRFS info (device loop3): using free space tree [ 282.442664][ T1194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.442692][ T1194] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.459508][ T1194] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 282.530991][ T1194] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 282.544886][ T1194] usb 3-1: Product: syz [ 282.549134][ T1194] usb 3-1: Manufacturer: syz [ 282.558111][ T1194] usb 3-1: SerialNumber: syz [ 282.568939][ T1194] usb 3-1: config 0 descriptor?? [ 282.628437][ T7733] BTRFS info (device loop3): enabling ssd optimizations [ 282.635711][ T7733] BTRFS info (device loop3): auto enabling async discard [ 282.666751][ T7755] loop1: detected capacity change from 0 to 64 [ 282.703362][ T7755] hfs: unable to locate alternate MDB [ 282.727255][ T7755] hfs: continuing without an alternate MDB [ 282.797582][ T1194] usb 3-1: USB disconnect, device number 31 [ 282.837708][ T7759] loop0: detected capacity change from 0 to 2048 [ 282.890644][ T7759] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 282.912776][ T5767] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 282.957468][ T7759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.336461][ T7761] loop1: detected capacity change from 0 to 4096 [ 283.414797][ T7761] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 283.696042][ T7767] syz.0.564: attempt to access beyond end of device [ 283.696042][ T7767] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 283.708950][ T7767] hpfs: hpfs_map_sector(): read error [ 286.359051][ T7795] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.828197][ T7839] loop0: detected capacity change from 0 to 4096 [ 286.836377][ T7839] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 286.841289][ T7837] loop3: detected capacity change from 0 to 2048 [ 287.059446][ T7837] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 287.144273][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.296719][ T7846] loop3: detected capacity change from 0 to 64 [ 288.338631][ T7846] hfs: unable to locate alternate MDB [ 288.344099][ T7846] hfs: continuing without an alternate MDB [ 288.626357][ T7795] netlink: 76 bytes leftover after parsing attributes in process `syz.2.571'. [ 289.456349][ T7850] loop0: detected capacity change from 0 to 1024 [ 289.594427][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.647047][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.686877][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.694444][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.701876][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.709288][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.794545][ T7851] loop2: detected capacity change from 0 to 32768 [ 289.804043][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.811624][ T7851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.571 (7851) [ 289.814594][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 289.905738][ T7857] syz.1.577: attempt to access beyond end of device [ 289.905738][ T7857] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 289.918781][ T7857] hpfs: hpfs_map_sector(): read error [ 290.022459][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.464956][ T7851] BTRFS error (device loop2): open_ctree failed: -4 [ 290.658351][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.684364][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.704374][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.745816][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.763197][ T6000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6000) [ 290.915900][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.924436][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.935096][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.951061][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 290.961094][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.020664][ T7865] CIFS mount error: No usable UNC path provided in device string! [ 291.020664][ T7865] [ 291.038496][ T7865] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 291.715759][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.729722][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.744279][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.756720][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.780271][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 291.793451][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.226885][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.314661][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.487832][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.573813][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.581451][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.589287][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.600169][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.627322][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.694988][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.733387][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.815366][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.835459][ T7850] hfsplus: request for non-existent node 16777216 in B*Tree [ 292.835875][ T7874] loop1: detected capacity change from 0 to 2048 [ 292.853298][ T28] audit: type=1800 audit(1751277698.553:11): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.576" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 292.978179][ T7874] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 293.011780][ T7874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.229181][ T7850] syz.0.576 (7850) used greatest stack depth: 20176 bytes left [ 294.161113][ T7884] loop3: detected capacity change from 0 to 4096 [ 294.169305][ T7884] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 294.337860][ T7889] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 294.409026][ T7890] loop1: detected capacity change from 0 to 512 [ 294.978950][ T7890] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.936506][ T7890] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 296.099505][ T7895] loop2: detected capacity change from 0 to 32768 [ 296.394810][ T7895] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.405118][ T7895] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 296.413907][ T7895] BTRFS info (device loop2): using free space tree [ 296.502552][ T7902] syz.3.589: attempt to access beyond end of device [ 296.502552][ T7902] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 296.515394][ T7902] hpfs: hpfs_map_sector(): read error [ 297.238881][ T7895] BTRFS error (device loop2): open_ctree failed: -4 [ 297.453947][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 297.668797][ T7916] loop1: detected capacity change from 0 to 1024 [ 298.496490][ T7918] loop3: detected capacity change from 0 to 512 [ 298.573280][ T7918] EXT4-fs: Ignoring removed oldalloc option [ 298.728652][ T6000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (6000) [ 298.765659][ T28] audit: type=1326 audit(1751277704.473:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.786276][ T7918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.851950][ T28] audit: type=1326 audit(1751277704.513:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.874308][ T28] audit: type=1326 audit(1751277704.513:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.898330][ T28] audit: type=1326 audit(1751277704.513:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.922795][ T28] audit: type=1326 audit(1751277704.513:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.945113][ T28] audit: type=1326 audit(1751277704.513:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.967579][ T28] audit: type=1326 audit(1751277704.513:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 298.991202][ T28] audit: type=1326 audit(1751277704.513:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 299.029497][ T28] audit: type=1326 audit(1751277704.513:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 299.114485][ T7918] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.590: inode #11: comm syz.3.590: iget: illegal inode # [ 299.155058][ T7918] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.590: couldn't read orphan inode 11 (err -117) [ 299.167288][ T28] audit: type=1326 audit(1751277704.513:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.1.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff7b18e929 code=0x7fc00000 [ 299.275456][ T7918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.516145][ T7924] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 299.577204][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.761221][ T7930] loop0: detected capacity change from 0 to 2048 [ 299.837158][ T7930] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 299.886131][ T7936] CIFS mount error: No usable UNC path provided in device string! [ 299.886131][ T7936] [ 299.896564][ T7936] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 300.173514][ T7930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.609097][ T7940] loop2: detected capacity change from 0 to 1024 [ 300.777742][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.849046][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.856604][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.864592][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.872363][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.879902][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.891638][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.899065][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.906529][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.915432][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.922850][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 300.984620][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 301.183599][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 301.211482][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 301.223988][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 301.285851][ T7952] syz.3.600: attempt to access beyond end of device [ 301.285851][ T7952] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 301.298794][ T7952] hpfs: hpfs_map_sector(): read error [ 302.057347][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.066554][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.084315][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.105968][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.113673][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.170589][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.178598][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.268817][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.294805][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.311947][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.328236][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.336045][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.359230][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.369216][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.389641][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.425076][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.474730][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.505622][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.517712][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.525966][ T23] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.765250][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.775417][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.784648][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.786177][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.802990][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.811827][ T23] usb 2-1: Product: syz [ 302.816948][ T23] usb 2-1: Manufacturer: syz [ 302.821739][ T23] usb 2-1: SerialNumber: syz [ 302.828168][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.836861][ T7940] hfsplus: request for non-existent node 16777216 in B*Tree [ 302.965209][ T23] cdc_mbim 2-1:1.0: skipping garbage [ 303.757799][ T7965] loop2: detected capacity change from 0 to 512 [ 303.822546][ T7965] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.861345][ T7965] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 304.080414][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 304.306809][ T7969] loop2: detected capacity change from 0 to 1024 [ 304.353172][ T23] cdc_mbim 2-1:1.0: bind() failure [ 304.481742][ T23] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 304.562395][ T23] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 304.635329][ T23] usbtest: probe of 2-1:1.1 failed with error -71 [ 304.766018][ T23] usb 2-1: USB disconnect, device number 25 [ 305.236795][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 305.236813][ T28] audit: type=1326 audit(1751277710.883:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.265840][ T28] audit: type=1326 audit(1751277710.883:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.288235][ T28] audit: type=1326 audit(1751277710.883:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.341940][ T7971] loop3: detected capacity change from 0 to 512 [ 305.349993][ T7971] EXT4-fs: Ignoring removed oldalloc option [ 305.358748][ T7971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.394404][ T28] audit: type=1326 audit(1751277710.883:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.451262][ T28] audit: type=1326 audit(1751277710.883:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.474007][ T7971] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.605: inode #11: comm syz.3.605: iget: illegal inode # [ 305.492208][ T7971] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.605: couldn't read orphan inode 11 (err -117) [ 305.508149][ T28] audit: type=1326 audit(1751277710.883:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.532246][ T7971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.545901][ T28] audit: type=1326 audit(1751277710.883:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.590530][ T28] audit: type=1326 audit(1751277710.883:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.662100][ T28] audit: type=1326 audit(1751277710.883:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.697698][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.723419][ T28] audit: type=1326 audit(1751277710.893:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7964 comm="syz.2.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0d38e929 code=0x7fc00000 [ 305.980075][ T7981] loop3: detected capacity change from 0 to 2048 [ 306.025095][ T7981] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 306.066526][ T7981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.351157][ T7987] CIFS mount error: No usable UNC path provided in device string! [ 306.351157][ T7987] [ 306.362134][ T7987] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 307.164819][ T7973] loop1: detected capacity change from 0 to 32768 [ 307.200575][ T7973] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.604 (7973) [ 307.447156][ T7973] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 307.457692][ T7973] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 307.467298][ T7973] BTRFS info (device loop1): force zlib compression, level 3 [ 307.475197][ T7973] BTRFS info (device loop1): force clearing of disk cache [ 307.482502][ T7973] BTRFS info (device loop1): setting nodatasum [ 307.536596][ T7992] syz.0.611[7992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.536766][ T7992] syz.0.611[7992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.007119][ T7973] BTRFS info (device loop1): allowing degraded mounts [ 308.250417][ T7995] loop2: detected capacity change from 0 to 64 [ 308.303671][ T7973] BTRFS info (device loop1): enabling disk space caching [ 308.353751][ T7995] hfs: unable to locate alternate MDB [ 308.377820][ T7973] BTRFS info (device loop1): disk space caching is enabled [ 308.414350][ T7995] hfs: continuing without an alternate MDB [ 308.452298][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 308.453160][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 308.549921][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 308.625686][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 308.688018][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 308.697871][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 308.708857][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 308.847716][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 308.895095][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 308.975925][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 309.289711][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 309.704099][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 310.083694][ T7973] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 310.125797][ T7973] BTRFS error (device loop1): open_ctree failed: -12 [ 310.145921][ T1194] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 310.357287][ T1194] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.373110][ T1194] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.394798][ T1194] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.416375][ T1194] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.430809][ T1194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.439753][ T1194] usb 4-1: Product: syz [ 310.444081][ T1194] usb 4-1: Manufacturer: syz [ 310.474337][ T1194] usb 4-1: SerialNumber: syz [ 310.520744][ T1194] cdc_mbim 4-1:1.0: skipping garbage [ 310.530962][ T8022] syz.0.619: attempt to access beyond end of device [ 310.530962][ T8022] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 310.543830][ T8022] hpfs: hpfs_map_sector(): read error [ 310.990527][ T8030] loop1: detected capacity change from 0 to 2048 [ 311.051327][ T8031] CIFS mount error: No usable UNC path provided in device string! [ 311.051327][ T8031] [ 311.061665][ T8031] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.449284][ T8030] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 311.539218][ T8030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.651369][ T1194] cdc_mbim 4-1:1.0: bind() failure [ 311.707730][ T1194] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 311.748286][ T1194] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 311.801634][ T1194] usbtest: probe of 4-1:1.1 failed with error -71 [ 311.857928][ T1194] usb 4-1: USB disconnect, device number 18 [ 312.001406][ T8038] loop1: detected capacity change from 0 to 64 [ 312.091947][ T8038] hfs: unable to locate alternate MDB [ 312.132848][ T8038] hfs: continuing without an alternate MDB [ 312.209451][ T8041] loop2: detected capacity change from 0 to 512 [ 312.218956][ T8041] EXT4-fs: Ignoring removed oldalloc option [ 312.239907][ T8041] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 312.259501][ T8041] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.626: inode #11: comm syz.2.626: iget: illegal inode # [ 312.296773][ T8041] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.626: couldn't read orphan inode 11 (err -117) [ 312.362753][ T8041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.694074][ T8050] syz.3.627[8050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.694469][ T8050] syz.3.627[8050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.361384][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.083183][ T8061] loop0: detected capacity change from 0 to 1024 [ 316.388198][ T8075] CIFS mount error: No usable UNC path provided in device string! [ 316.388198][ T8075] [ 316.399148][ T8075] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 316.632999][ T8073] loop1: detected capacity change from 0 to 2048 [ 316.843893][ T8073] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 316.974402][ T5811] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 317.108128][ T8073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.145342][ T6989] hfsplus: b-tree write err: -5, ino 8 [ 317.168919][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.220087][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.222381][ T8078] loop2: detected capacity change from 0 to 512 [ 317.267684][ T5811] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 317.296601][ T8078] EXT4-fs: Ignoring removed oldalloc option [ 317.308786][ T5811] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.326340][ T8078] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 317.373427][ T8083] loop1: detected capacity change from 0 to 64 [ 317.379914][ T8078] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.637: inode #11: comm syz.2.637: iget: illegal inode # [ 317.392478][ T5811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.392511][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.392532][ T5811] usb 4-1: Product: syz [ 317.392548][ T5811] usb 4-1: Manufacturer: syz [ 317.392564][ T5811] usb 4-1: SerialNumber: syz [ 317.416682][ T8083] hfs: unable to locate alternate MDB [ 317.431022][ T8081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 317.438643][ T8078] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.637: couldn't read orphan inode 11 (err -117) [ 317.443300][ T5811] cdc_mbim 4-1:1.0: skipping garbage [ 317.499897][ T8083] hfs: continuing without an alternate MDB [ 317.546206][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.599794][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.606588][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.668901][ T8076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.804064][ T8086] netlink: 76 bytes leftover after parsing attributes in process `syz.0.638'. [ 318.818847][ T8086] loop0: detected capacity change from 0 to 32768 [ 318.819141][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.860379][ T8086] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 318.870752][ T8086] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 318.879705][ T8086] BTRFS info (device loop0): using free space tree [ 319.208853][ T8076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.255256][ T8086] BTRFS info (device loop0): enabling ssd optimizations [ 319.262360][ T8086] BTRFS info (device loop0): auto enabling async discard [ 319.516552][ T5811] cdc_mbim 4-1:1.0: bind() failure [ 319.721089][ T8112] syz.2.642[8112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.721248][ T8112] syz.2.642[8112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.271849][ T5811] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 321.304874][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.347664][ T5811] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 321.413550][ T5811] usbtest: probe of 4-1:1.1 failed with error -71 [ 321.441448][ T5811] usb 4-1: USB disconnect, device number 19 [ 321.895182][ T8123] CIFS mount error: No usable UNC path provided in device string! [ 321.895182][ T8123] [ 321.905647][ T8123] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 321.971718][ T8122] loop2: detected capacity change from 0 to 1024 [ 323.269698][ T6974] hfsplus: b-tree write err: -5, ino 8 [ 323.430383][ T8129] loop0: detected capacity change from 0 to 512 [ 323.445290][ T8129] EXT4-fs: Ignoring removed oldalloc option [ 323.481080][ T8131] loop2: detected capacity change from 0 to 64 [ 323.490432][ T8129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 323.515101][ T8131] hfs: unable to locate alternate MDB [ 323.520554][ T8131] hfs: continuing without an alternate MDB [ 323.565344][ T8129] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.650: inode #11: comm syz.0.650: iget: illegal inode # [ 323.639389][ T8129] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.650: couldn't read orphan inode 11 (err -117) [ 323.674956][ T8129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.892726][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.988967][ T8141] syz.1.652[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.989111][ T8141] syz.1.652[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.974290][ T5840] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 326.122455][ T8153] CIFS mount error: No usable UNC path provided in device string! [ 326.122455][ T8153] [ 326.133201][ T8153] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 326.216811][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.248057][ T5840] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.285761][ T5840] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 326.313279][ T5840] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.333058][ T5840] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.343633][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.352558][ T5840] usb 1-1: Product: syz [ 326.359523][ T5840] usb 1-1: Manufacturer: syz [ 326.364638][ T5840] usb 1-1: SerialNumber: syz [ 326.380818][ T5840] cdc_mbim 1-1:1.0: skipping garbage [ 326.477582][ T8148] loop2: detected capacity change from 0 to 40427 [ 326.504529][ T8148] F2FS-fs (loop2): invalid crc value [ 326.523137][ T8148] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.585945][ T8144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 326.604600][ T8148] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.907315][ T8166] loop3: detected capacity change from 0 to 512 [ 326.925124][ T8166] EXT4-fs: Ignoring removed oldalloc option [ 326.928050][ T5774] syz-executor: attempt to access beyond end of device [ 326.928050][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 326.949601][ T8166] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 326.972059][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 326.995488][ T8166] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.662: inode #11: comm syz.3.662: iget: illegal inode # [ 327.008535][ T8166] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.662: couldn't read orphan inode 11 (err -117) [ 327.033771][ T8166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.209266][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.211521][ T8144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.490963][ T5840] cdc_mbim 1-1:1.0: bind() failure [ 327.534452][ T5840] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 327.574548][ T5840] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 327.618449][ T5840] usbtest: probe of 1-1:1.1 failed with error -71 [ 327.861853][ T8173] syz.3.664[8173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.862010][ T8173] syz.3.664[8173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.940550][ T8174] syz.2.663: attempt to access beyond end of device [ 327.940550][ T8174] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 327.964778][ T8174] hpfs: hpfs_map_sector(): read error [ 328.275291][ T5840] usb 1-1: USB disconnect, device number 16 [ 329.437211][ T8159] loop1: detected capacity change from 0 to 40427 [ 330.047132][ T8189] CIFS mount error: No usable UNC path provided in device string! [ 330.047132][ T8189] [ 330.057883][ T8189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.073849][ T8192] loop2: detected capacity change from 0 to 512 [ 330.107141][ T8192] EXT4-fs: Ignoring removed oldalloc option [ 330.135610][ T8192] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.180510][ T8192] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.672: inode #11: comm syz.2.672: iget: illegal inode # [ 330.208796][ T8192] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.672: couldn't read orphan inode 11 (err -117) [ 330.240602][ T8192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.397192][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.474944][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 330.738908][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.755114][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.767585][ T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 330.779323][ T23] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 330.797026][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.814461][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.832848][ T23] usb 4-1: Product: syz [ 330.839175][ T8200] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 330.843016][ T23] usb 4-1: Manufacturer: syz [ 330.860922][ T23] usb 4-1: SerialNumber: syz [ 331.050978][ T8190] loop1: detected capacity change from 0 to 40427 [ 331.104627][ T8190] F2FS-fs (loop1): invalid crc value [ 331.118606][ T23] cdc_mbim 4-1:1.0: skipping garbage [ 331.140489][ T8190] F2FS-fs (loop1): Found nat_bits in checkpoint [ 331.248819][ T8205] netlink: 76 bytes leftover after parsing attributes in process `syz.0.675'. [ 331.944770][ T8196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.065611][ T8198] loop2: detected capacity change from 0 to 32768 [ 332.094679][ T8198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.674 (8198) [ 332.132822][ T8190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 332.133138][ T8205] loop0: detected capacity change from 0 to 32768 [ 332.153894][ T8205] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.675 (8205) [ 332.177119][ T8198] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.191574][ T8198] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 332.200634][ T8198] BTRFS info (device loop2): using free space tree [ 332.450156][ T8198] BTRFS info (device loop2): enabling ssd optimizations [ 332.484260][ T8198] BTRFS info (device loop2): auto enabling async discard [ 332.492287][ T6591] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (6591) [ 332.606616][ T8196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.737114][ T5768] syz-executor: attempt to access beyond end of device [ 332.737114][ T5768] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 332.752509][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 332.759871][ T5768] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 332.859488][ T8226] syz.0.676[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.859942][ T8226] syz.0.676[8226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.107229][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 334.107246][ T28] audit: type=1800 audit(1751277739.813:146): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.674" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 334.259994][ T6966] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 334.694428][ T23] cdc_mbim 4-1:1.0: bind() failure [ 334.785640][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.886406][ T23] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 334.904297][ T23] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 334.915195][ T23] usbtest: probe of 4-1:1.1 failed with error -71 [ 334.935362][ T23] usb 4-1: USB disconnect, device number 20 [ 335.537791][ T8241] CIFS mount error: No usable UNC path provided in device string! [ 335.537791][ T8241] [ 335.548445][ T8241] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.693199][ T8236] loop0: detected capacity change from 0 to 4096 [ 335.723316][ T8236] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 336.015750][ T8236] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 336.076366][ T8236] ntfs3: loop0: Failed to load $Extend (-22). [ 336.091435][ T8246] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 336.231718][ T8236] ntfs3: loop0: Failed to initialize $Extend. [ 336.367129][ T8251] loop1: detected capacity change from 0 to 64 [ 336.439062][ T8252] netlink: 76 bytes leftover after parsing attributes in process `syz.2.685'. [ 337.252421][ T8251] hfs: unable to locate alternate MDB [ 337.269336][ T8251] hfs: continuing without an alternate MDB [ 337.354720][ T5811] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 337.385021][ T8253] loop2: detected capacity change from 0 to 32768 [ 337.396386][ T8253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.685 (8253) [ 337.434402][ T8253] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.444680][ T8253] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 337.453364][ T8253] BTRFS info (device loop2): using free space tree [ 337.608671][ T8253] BTRFS info (device loop2): enabling ssd optimizations [ 337.616239][ T8253] BTRFS info (device loop2): auto enabling async discard [ 337.627703][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.673913][ T5811] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 337.729486][ T5811] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 337.755218][ T5811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.772051][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.903706][ T5811] usb 4-1: Product: syz [ 337.908041][ T5811] usb 4-1: Manufacturer: syz [ 337.912701][ T5811] usb 4-1: SerialNumber: syz [ 337.919152][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 337.949249][ T5811] cdc_mbim 4-1:1.0: skipping garbage [ 338.177119][ T8250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.658619][ T8283] syz.2.690[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.659396][ T8283] syz.2.690[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.682852][ T5811] cdc_mbim 4-1:1.0: bind() failure [ 340.810838][ T5811] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 340.861330][ T5811] cdc_ncm 4-1:1.1: bind() failure [ 340.904081][ T5811] usb 4-1: USB disconnect, device number 21 [ 341.030944][ T8290] loop0: detected capacity change from 0 to 4096 [ 341.067631][ T8292] loop3: detected capacity change from 0 to 64 [ 341.116960][ T8290] ntfs3: loop0: ino=3, Correct links count -> 2. [ 341.126776][ T8292] hfs: unable to locate alternate MDB [ 341.155163][ T8292] hfs: continuing without an alternate MDB [ 341.956543][ T8299] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 342.614680][ T8305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.699'. [ 343.690183][ T8304] loop1: detected capacity change from 0 to 32768 [ 344.241732][ T8304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.699 (8304) [ 344.273356][ T8304] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.283647][ T8304] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 344.292436][ T8304] BTRFS info (device loop1): using free space tree [ 344.596949][ T8304] BTRFS info (device loop1): enabling ssd optimizations [ 344.603977][ T8304] BTRFS info (device loop1): auto enabling async discard [ 344.665663][ T8329] syz.0.701[8329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.666221][ T8329] syz.0.701[8329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.694590][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 346.351555][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 346.459086][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.510071][ T23] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 346.551352][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.571310][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.601064][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.620794][ T23] usb 4-1: Product: syz [ 346.630956][ T23] usb 4-1: Manufacturer: syz [ 346.644352][ T23] usb 4-1: SerialNumber: syz [ 346.685826][ T23] cdc_mbim 4-1:1.0: skipping garbage [ 347.132270][ T8310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.359533][ T8341] loop0: detected capacity change from 0 to 1024 [ 347.700163][ T8343] loop2: detected capacity change from 0 to 64 [ 347.757449][ T8343] hfs: unable to locate alternate MDB [ 347.794273][ T8343] hfs: continuing without an alternate MDB [ 347.907254][ T6966] hfsplus: b-tree write err: -5, ino 8 [ 348.029483][ T8310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.250834][ T23] cdc_mbim 4-1:1.0: bind() failure [ 348.337234][ T23] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 348.507506][ T23] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 348.661635][ T23] usbtest: probe of 4-1:1.1 failed with error -71 [ 348.939601][ T23] usb 4-1: USB disconnect, device number 22 [ 348.973117][ T8352] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 349.265040][ T8354] netlink: 76 bytes leftover after parsing attributes in process `syz.0.712'. [ 349.410710][ T8355] CIFS mount error: No usable UNC path provided in device string! [ 349.410710][ T8355] [ 349.421073][ T8355] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.426937][ T8354] loop0: detected capacity change from 0 to 32768 [ 350.437348][ T8354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.712 (8354) [ 350.514219][ T8361] syz.3.714[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.514809][ T8361] syz.3.714[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.545070][ T8370] loop3: detected capacity change from 0 to 64 [ 352.610366][ T8370] hfs: unable to locate alternate MDB [ 352.616439][ T8370] hfs: continuing without an alternate MDB [ 353.620000][ T8377] CIFS mount error: No usable UNC path provided in device string! [ 353.620000][ T8377] [ 353.630404][ T8377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 354.334311][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 354.469291][ T8386] syz.0.722: attempt to access beyond end of device [ 354.469291][ T8386] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 354.482337][ T8386] hpfs: hpfs_map_sector(): read error [ 355.457139][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.632798][ T8393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 355.694615][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 355.705289][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.959535][ T8394] CIFS mount error: No usable UNC path provided in device string! [ 355.959535][ T8394] [ 355.970428][ T8394] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 356.119045][ T8395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.725'. [ 356.596766][ T8396] loop1: detected capacity change from 0 to 32768 [ 356.633290][ T8396] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.646660][ T8396] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 356.655739][ T8396] BTRFS info (device loop1): using free space tree [ 356.664978][ T8397] fuse: Bad value for 'fd' [ 357.586701][ T9] usb 3-1: string descriptor 0 read error: -71 [ 357.593354][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.989720][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.038395][ T9] usb 3-1: can't set config #1, error -71 [ 358.055865][ T9] usb 3-1: USB disconnect, device number 32 [ 358.141797][ T8396] BTRFS info (device loop1): enabling ssd optimizations [ 358.148887][ T8396] BTRFS info (device loop1): auto enabling async discard [ 358.152755][ T8420] loop3: detected capacity change from 0 to 64 [ 358.384769][ T8420] hfs: unable to locate alternate MDB [ 358.393546][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.431513][ T8420] hfs: continuing without an alternate MDB [ 359.389028][ T8429] CIFS mount error: No usable UNC path provided in device string! [ 359.389028][ T8429] [ 359.399366][ T8429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 360.450107][ T8431] loop1: detected capacity change from 0 to 4096 [ 360.505829][ T8431] ntfs3: loop1: ino=3, Correct links count -> 2. [ 360.538664][ T8433] loop0: detected capacity change from 0 to 4096 [ 360.596910][ T8433] ntfs3: loop0: ino=3, Correct links count -> 2. [ 360.760888][ T8439] syz.3.733: attempt to access beyond end of device [ 360.760888][ T8439] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 360.773877][ T8439] hpfs: hpfs_map_sector(): read error [ 361.143098][ T5840] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 361.420612][ T8444] fuse: Bad value for 'fd' [ 361.437134][ T5840] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.669412][ T5840] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.679592][ T5840] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.690334][ T5840] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 362.703092][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.713089][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.721380][ T5840] usb 3-1: Product: syz [ 362.725784][ T5840] usb 3-1: Manufacturer: syz [ 362.730414][ T5840] usb 3-1: SerialNumber: syz [ 362.745698][ T5840] cdc_mbim 3-1:1.0: skipping garbage [ 363.069551][ T8436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.091267][ T8451] syz.0.747: attempt to access beyond end of device [ 363.091267][ T8451] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 363.104043][ T8451] hpfs: hpfs_map_sector(): read error [ 363.833357][ T8436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.156434][ T8461] CIFS mount error: No usable UNC path provided in device string! [ 364.156434][ T8461] [ 364.166593][ T8461] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.279869][ T5840] cdc_mbim 3-1:1.0: bind() failure [ 364.354190][ T5840] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 364.399148][ T5840] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 364.454213][ T5840] usbtest: probe of 3-1:1.1 failed with error -71 [ 364.624238][ T5840] usb 3-1: USB disconnect, device number 33 [ 365.680052][ T8472] loop2: detected capacity change from 0 to 512 [ 365.693568][ T8466] loop0: detected capacity change from 0 to 4096 [ 365.776264][ T8466] ntfs3: loop0: ino=3, Correct links count -> 2. [ 365.863728][ T8472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.906260][ T8470] loop1: detected capacity change from 0 to 4096 [ 365.934692][ T8472] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.948569][ T8470] ntfs3: loop1: ino=3, Correct links count -> 2. [ 367.109947][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.100562][ T8491] syz.2.759: attempt to access beyond end of device [ 368.100562][ T8491] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 368.114331][ T8491] hpfs: hpfs_map_sector(): read error [ 370.224570][ T1194] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 370.591915][ T1194] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.771603][ T1194] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 370.836697][ T1194] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.852074][ T1194] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 370.905107][ T1194] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.959906][ T1194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.015151][ T1194] usb 1-1: Product: syz [ 371.039929][ T1194] usb 1-1: Manufacturer: syz [ 371.060426][ T1194] usb 1-1: SerialNumber: syz [ 371.096465][ T8511] CIFS mount error: No usable UNC path provided in device string! [ 371.096465][ T8511] [ 371.101627][ T1194] cdc_mbim 1-1:1.0: skipping garbage [ 371.122299][ T8511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.587744][ T8503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.186824][ T8518] loop3: detected capacity change from 0 to 4096 [ 372.214977][ T8518] ntfs3: loop3: ino=3, Correct links count -> 2. [ 372.240233][ T8520] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 372.411072][ T8503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.620060][ T8523] netlink: 76 bytes leftover after parsing attributes in process `syz.2.763'. [ 373.668894][ T8524] loop2: detected capacity change from 0 to 32768 [ 373.678511][ T8524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.763 (8524) [ 373.791062][ T8527] syz.3.764: attempt to access beyond end of device [ 373.791062][ T8527] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 373.803920][ T8527] hpfs: hpfs_map_sector(): read error [ 373.871338][ T1194] cdc_mbim 1-1:1.0: bind() failure [ 373.959457][ T1194] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 374.030890][ T1194] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 374.095811][ T1194] usbtest: probe of 1-1:1.1 failed with error -71 [ 374.206408][ T8524] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.216733][ T8524] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 374.225633][ T8524] BTRFS info (device loop2): using free space tree [ 374.250937][ T1194] usb 1-1: USB disconnect, device number 17 [ 374.335849][ T8524] BTRFS info (device loop2): enabling ssd optimizations [ 374.343013][ T8524] BTRFS info (device loop2): auto enabling async discard [ 375.207479][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.385478][ T8551] loop0: detected capacity change from 0 to 1024 [ 376.302254][ T11] hfsplus: b-tree write err: -5, ino 8 [ 376.405648][ T8557] CIFS mount error: No usable UNC path provided in device string! [ 376.405648][ T8557] [ 376.469224][ T8557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.377484][ T8569] loop0: detected capacity change from 0 to 4096 [ 378.415688][ T8569] ntfs3: loop0: ino=3, Correct links count -> 2. [ 378.554653][ T5840] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 378.920432][ T5840] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.040220][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.093046][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.135436][ T5840] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 379.266335][ T5840] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 379.357374][ T5840] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 379.424859][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.477794][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.560903][ T5840] usb 2-1: Product: syz [ 379.600506][ T5840] usb 2-1: Manufacturer: syz [ 379.640346][ T5840] usb 2-1: SerialNumber: syz [ 379.871545][ T5840] cdc_mbim 2-1:1.0: skipping garbage [ 380.328423][ T8570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.161516][ T8570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 381.287307][ T8588] loop3: detected capacity change from 0 to 512 [ 381.361774][ T8588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.501852][ T5840] cdc_mbim 2-1:1.0: bind() failure [ 381.641336][ T8588] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.781826][ T5840] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 381.916848][ T5840] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 382.098847][ T5840] usbtest: probe of 2-1:1.1 failed with error -71 [ 382.454500][ T5840] usb 2-1: USB disconnect, device number 26 [ 383.301592][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.844305][ T8608] CIFS mount error: No usable UNC path provided in device string! [ 383.844305][ T8608] [ 383.854698][ T8608] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.645236][ T8614] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 386.072112][ T8614] netlink: 76 bytes leftover after parsing attributes in process `syz.1.784'. [ 386.373908][ T8614] loop1: detected capacity change from 0 to 32768 [ 386.436235][ T8614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.784 (8614) [ 386.515704][ T8614] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.526691][ T8614] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 386.535519][ T8614] BTRFS info (device loop1): using free space tree [ 386.778985][ T8614] BTRFS info (device loop1): enabling ssd optimizations [ 386.786198][ T8614] BTRFS info (device loop1): auto enabling async discard [ 386.924393][ T5827] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 387.559022][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.590911][ T5827] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 388.266974][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.440367][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.483421][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.492744][ T5827] usb 3-1: Product: syz [ 388.497131][ T5827] usb 3-1: Manufacturer: syz [ 388.501764][ T5827] usb 3-1: SerialNumber: syz [ 388.529065][ T5827] cdc_mbim 3-1:1.0: skipping garbage [ 388.716622][ T5770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5770) [ 388.764913][ T8635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.195641][ T5827] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 389.296939][ T5827] cdc_mbim 3-1:1.0: bind() failure [ 389.541634][ T5827] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 389.664231][ T5827] cdc_ncm 3-1:1.1: bind() failure [ 389.942401][ T8649] loop3: detected capacity change from 0 to 32768 [ 390.303245][ T5827] usb 3-1: USB disconnect, device number 34 [ 390.958657][ T8662] CIFS mount error: No usable UNC path provided in device string! [ 390.958657][ T8662] [ 390.968969][ T8662] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 392.601568][ T8671] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 392.626204][ T8655] loop1: detected capacity change from 0 to 40427 [ 392.669107][ T8655] F2FS-fs (loop1): invalid crc value [ 392.757005][ T8655] F2FS-fs (loop1): Found nat_bits in checkpoint [ 392.977639][ T8680] loop3: detected capacity change from 0 to 1024 [ 392.994790][ T8655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 393.003981][ T8678] netlink: 76 bytes leftover after parsing attributes in process `syz.2.799'. [ 393.366622][ T8678] loop2: detected capacity change from 0 to 32768 [ 393.386344][ T8678] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 393.443022][ T8685] CIFS mount error: No usable UNC path provided in device string! [ 393.443022][ T8685] [ 393.453398][ T8685] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 394.247825][ T11] hfsplus: b-tree write err: -5, ino 8 [ 394.522849][ T8691] CIFS mount error: No usable UNC path provided in device string! [ 394.522849][ T8691] [ 394.534317][ T8691] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.734642][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 396.012308][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.035118][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 396.076286][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.086561][ T8687] loop0: detected capacity change from 0 to 32768 [ 396.110839][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.203546][ T9] usb 2-1: Product: syz [ 396.261534][ T9] usb 2-1: Manufacturer: syz [ 396.323073][ T9] usb 2-1: SerialNumber: syz [ 396.629548][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 397.075109][ T8698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 397.496738][ T9] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 397.502954][ T9] cdc_mbim 2-1:1.0: bind() failure [ 397.520729][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 397.551790][ T9] cdc_ncm 2-1:1.1: bind() failure [ 397.881394][ T8714] loop0: detected capacity change from 0 to 1024 [ 398.033935][ T6989] hfsplus: b-tree write err: -5, ino 8 [ 398.145348][ T8708] loop2: detected capacity change from 0 to 40427 [ 398.179605][ T8716] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 398.181360][ T8708] F2FS-fs (loop2): invalid crc value [ 398.349907][ T8708] F2FS-fs (loop2): Found nat_bits in checkpoint [ 398.471908][ T8720] netlink: 76 bytes leftover after parsing attributes in process `syz.0.814'. [ 398.572896][ T5859] usb 2-1: USB disconnect, device number 27 [ 398.652135][ T8708] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 398.816275][ T8720] loop0: detected capacity change from 0 to 32768 [ 398.914753][ T8720] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 399.122348][ T5770] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 399.240703][ T8728] CIFS mount error: No usable UNC path provided in device string! [ 399.240703][ T8728] [ 399.251056][ T8728] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 399.412361][ T8730] loop3: detected capacity change from 0 to 512 [ 399.644065][ T8730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.818801][ T8730] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.894223][ T28] audit: type=1800 audit(1751277806.543:147): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.819" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 401.216788][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.326922][ T8741] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 401.570390][ T8743] loop0: detected capacity change from 0 to 4096 [ 401.620670][ T8743] ntfs3: loop0: ino=3, Correct links count -> 2. [ 401.641763][ T8745] netlink: 76 bytes leftover after parsing attributes in process `syz.2.817'. [ 402.019970][ T8745] loop2: detected capacity change from 0 to 32768 [ 402.035754][ T8745] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 402.072822][ T8748] loop3: detected capacity change from 0 to 1024 [ 402.376164][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 402.519519][ T6000] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 402.768681][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 402.988276][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.103673][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 403.353476][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.490125][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.534292][ T9] usb 3-1: Product: syz [ 403.549633][ T9] usb 3-1: Manufacturer: syz [ 403.574317][ T9] usb 3-1: SerialNumber: syz [ 403.666129][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 403.799979][ T8758] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 403.869378][ T8750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.120028][ T8761] netlink: 76 bytes leftover after parsing attributes in process `syz.3.826'. [ 404.197345][ T8752] loop0: detected capacity change from 0 to 40427 [ 404.213415][ T8763] loop1: detected capacity change from 0 to 512 [ 404.258506][ T8752] F2FS-fs (loop0): invalid crc value [ 404.291263][ T8752] F2FS-fs (loop0): Found nat_bits in checkpoint [ 404.411827][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.483738][ T8763] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.511021][ T8761] loop3: detected capacity change from 0 to 32768 [ 404.519523][ T8761] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 404.531058][ T9] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 404.541852][ T9] cdc_mbim 3-1:1.0: bind() failure [ 404.550882][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 404.558379][ T9] cdc_ncm 3-1:1.1: bind() failure [ 404.683484][ T8752] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 404.815624][ T5960] blk_print_req_error: 17 callbacks suppressed [ 404.815644][ T5960] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.523835][ T5859] usb 3-1: USB disconnect, device number 35 [ 405.692527][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.125067][ T8778] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 406.756483][ T8781] netlink: 76 bytes leftover after parsing attributes in process `syz.2.831'. [ 406.850212][ T8784] loop0: detected capacity change from 0 to 4096 [ 407.025237][ T8781] loop2: detected capacity change from 0 to 32768 [ 407.059457][ T8781] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 407.082038][ T8784] ntfs3: loop0: ino=3, Correct links count -> 2. [ 407.105474][ T8787] loop1: detected capacity change from 0 to 1024 [ 407.421712][ T6000] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 407.491347][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 408.545219][ T8800] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 408.791988][ T8805] CIFS mount error: No usable UNC path provided in device string! [ 408.791988][ T8805] [ 408.802280][ T8805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 408.894335][ T5816] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 409.111966][ T5816] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.154365][ T5816] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 409.187094][ T8800] netlink: 76 bytes leftover after parsing attributes in process `syz.2.838'. [ 409.195366][ T5816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.221508][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.240031][ T5816] usb 1-1: Product: syz [ 409.254562][ T5816] usb 1-1: Manufacturer: syz [ 409.259239][ T5816] usb 1-1: SerialNumber: syz [ 409.342756][ T5816] cdc_mbim 1-1:1.0: skipping garbage [ 409.554886][ T8802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 409.579132][ T8800] loop2: detected capacity change from 0 to 32768 [ 409.593395][ T8800] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 409.750208][ T6000] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.021181][ T5816] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 410.037266][ T5816] cdc_mbim 1-1:1.0: bind() failure [ 410.073364][ T5816] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 410.096019][ T5816] cdc_ncm 1-1:1.1: bind() failure [ 410.848508][ T8804] loop3: detected capacity change from 0 to 40427 [ 411.094918][ T8804] F2FS-fs (loop3): invalid crc value [ 411.126307][ T8813] loop2: detected capacity change from 0 to 1024 [ 411.131743][ T8804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 411.208220][ T8804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 411.265450][ T5767] syz-executor: attempt to access beyond end of device [ 411.265450][ T5767] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 411.284395][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.291512][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.376019][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 411.734640][ T5827] usb 1-1: USB disconnect, device number 18 [ 411.806447][ T8823] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 412.621933][ T8823] netlink: 76 bytes leftover after parsing attributes in process `syz.1.847'. [ 412.715123][ T8827] loop0: detected capacity change from 0 to 512 [ 412.800151][ T8827] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 412.997849][ T8829] loop2: detected capacity change from 0 to 4096 [ 413.010744][ T8823] loop1: detected capacity change from 0 to 32768 [ 413.028208][ T8823] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.038661][ T8823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 413.047690][ T8823] BTRFS info (device loop1): using free space tree [ 413.047722][ T8829] ntfs3: loop2: ino=3, Correct links count -> 2. [ 413.153344][ T8823] BTRFS info (device loop1): enabling ssd optimizations [ 413.160478][ T8823] BTRFS info (device loop1): auto enabling async discard [ 413.320255][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 413.431016][ T8844] loop3: detected capacity change from 0 to 4096 [ 413.459194][ T8844] ntfs3: loop3: ino=3, Correct links count -> 2. [ 413.552125][ T8849] Bluetooth: MGMT ver 1.22 [ 413.574945][ T5770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5770) [ 413.723682][ T8852] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 414.379880][ T8858] CIFS mount error: No usable UNC path provided in device string! [ 414.379880][ T8858] [ 414.390014][ T8858] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 414.425679][ T8852] netlink: 76 bytes leftover after parsing attributes in process `syz.1.849'. [ 416.259224][ T8866] loop1: detected capacity change from 0 to 1024 [ 416.524052][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 417.004277][ T5816] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 417.014638][ T8872] CIFS mount error: No usable UNC path provided in device string! [ 417.014638][ T8872] [ 417.024852][ T8872] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 417.206326][ T5816] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.226527][ T5816] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 417.261558][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.284341][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.307297][ T5816] usb 4-1: Product: syz [ 417.311534][ T5816] usb 4-1: Manufacturer: syz [ 417.332370][ T5816] usb 4-1: SerialNumber: syz [ 417.389275][ T8861] loop2: detected capacity change from 0 to 40427 [ 417.441762][ T5816] cdc_mbim 4-1:1.0: skipping garbage [ 417.482474][ T8861] F2FS-fs (loop2): invalid crc value [ 417.534143][ T8861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 418.039610][ T8868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.517748][ T8884] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 418.575670][ T5816] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS [ 418.581898][ T5816] cdc_mbim 4-1:1.0: bind() failure [ 418.638965][ T5816] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 418.664303][ T5816] cdc_ncm 4-1:1.1: bind() failure [ 419.171814][ T8884] netlink: 76 bytes leftover after parsing attributes in process `syz.0.857'. [ 419.528251][ T8884] loop0: detected capacity change from 0 to 32768 [ 419.539093][ T8884] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 419.692244][ T8892] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 419.824575][ T5816] usb 4-1: USB disconnect, device number 23 [ 419.841781][ T8893] CIFS mount error: No usable UNC path provided in device string! [ 419.841781][ T8893] [ 419.851982][ T8893] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 419.931477][ T6000] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.302813][ T8892] netlink: 76 bytes leftover after parsing attributes in process `syz.1.861'. [ 420.673602][ T8894] loop1: detected capacity change from 0 to 32768 [ 420.774668][ T8894] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 420.785471][ T8894] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 420.794523][ T8894] BTRFS info (device loop1): using free space tree [ 420.968060][ T8909] loop3: detected capacity change from 0 to 1024 [ 420.998638][ T8894] BTRFS info (device loop1): enabling ssd optimizations [ 421.005798][ T8894] BTRFS info (device loop1): auto enabling async discard [ 421.068832][ T8920] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 421.087488][ T8920] CPU: 0 PID: 8920 Comm: syz.0.871 Not tainted 6.6.95-syzkaller #0 [ 421.095473][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.105595][ T8920] Call Trace: [ 421.108909][ T8920] [ 421.111877][ T8920] dump_stack_lvl+0x16c/0x230 [ 421.116621][ T8920] ? show_regs_print_info+0x20/0x20 [ 421.121887][ T8920] ? load_image+0x3b0/0x3b0 [ 421.126463][ T8920] sysfs_create_dir_ns+0x256/0x280 [ 421.131619][ T8920] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.137744][ T8920] ? sysfs_warn_dup+0xa0/0xa0 [ 421.142475][ T8920] ? do_raw_spin_unlock+0x121/0x230 [ 421.147727][ T8920] kobject_add_internal+0x6b8/0xc70 [ 421.152984][ T8920] kobject_add+0x156/0x220 [ 421.157453][ T8920] ? kobject_init+0x1e0/0x1e0 [ 421.162211][ T8920] ? bus_get_dev_root+0x127/0x150 [ 421.167286][ T8920] ? get_device_parent+0x387/0x390 [ 421.172491][ T8920] ? dev_attr_store+0x90/0x90 [ 421.177219][ T8920] device_add+0x408/0xc20 [ 421.181606][ T8920] ? device_initialize+0x24b/0x440 [ 421.187319][ T8920] iommufd_test+0x11de/0x29d0 [ 421.192240][ T8920] ? iommufd_selftest_destroy+0xf0/0xf0 [ 421.197926][ T8920] ? __lock_acquire+0x7c80/0x7c80 [ 421.202997][ T8920] ? __lock_acquire+0x7c80/0x7c80 [ 421.208068][ T8920] ? __might_fault+0xaa/0x120 [ 421.212789][ T8920] ? __might_fault+0xaa/0x120 [ 421.217519][ T8920] iommufd_fops_ioctl+0x42f/0x4e0 [ 421.222611][ T8920] ? iommufd_ctx_put+0x40/0x40 [ 421.227408][ T8920] ? __fget_files+0x28/0x4d0 [ 421.232039][ T8920] ? bpf_lsm_file_ioctl+0x9/0x10 [ 421.237012][ T8920] ? security_file_ioctl+0x80/0xa0 [ 421.242142][ T8920] ? iommufd_ctx_put+0x40/0x40 [ 421.246931][ T8920] __se_sys_ioctl+0xfd/0x170 [ 421.251549][ T8920] do_syscall_64+0x55/0xb0 [ 421.256003][ T8920] ? clear_bhb_loop+0x40/0x90 [ 421.260700][ T8920] ? clear_bhb_loop+0x40/0x90 [ 421.265398][ T8920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.271322][ T8920] RIP: 0033:0x7f813bf8e929 [ 421.275769][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.295413][ T8920] RSP: 002b:00007f813ce42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.303881][ T8920] RAX: ffffffffffffffda RBX: 00007f813c1b5fa0 RCX: 00007f813bf8e929 [ 421.311884][ T8920] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 421.319898][ T8920] RBP: 00007f813c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 421.327918][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.335934][ T8920] R13: 0000000000000000 R14: 00007f813c1b5fa0 R15: 00007ffecd0f7dc8 [ 421.343990][ T8920] [ 421.354379][ T138] hfsplus: b-tree write err: -5, ino 8 [ 421.374756][ T8920] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 421.392783][ T5768] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.914735][ T8921] netlink: 76 bytes leftover after parsing attributes in process `syz.0.871'. [ 422.811381][ T8928] loop2: detected capacity change from 0 to 4096 [ 422.861476][ T8928] ntfs3: loop2: ino=3, Correct links count -> 2. [ 423.233217][ T8921] loop0: detected capacity change from 0 to 32768 [ 423.275418][ T8921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.871 (8921) [ 423.307818][ T8921] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 423.318148][ T8921] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 423.326910][ T8921] BTRFS info (device loop0): using free space tree [ 423.409400][ T8940] CIFS mount error: No usable UNC path provided in device string! [ 423.409400][ T8940] [ 423.419606][ T8940] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 423.507643][ T8921] BTRFS info (device loop0): enabling ssd optimizations [ 423.514729][ T8921] BTRFS info (device loop0): auto enabling async discard [ 423.696366][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.085812][ T1194] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 424.291047][ T1194] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.334762][ T1194] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 424.372450][ T8956] CIFS mount error: No usable UNC path provided in device string! [ 424.372450][ T8956] [ 424.382674][ T8956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 424.425038][ T1194] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.459222][ T1194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.514762][ T1194] usb 3-1: Product: syz [ 424.534336][ T1194] usb 3-1: Manufacturer: syz [ 424.551427][ T1194] usb 3-1: SerialNumber: syz [ 424.578363][ T1194] cdc_mbim 3-1:1.0: skipping garbage [ 424.815327][ T8954] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.375335][ T1194] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 425.505086][ T1194] cdc_mbim 3-1:1.0: bind() failure [ 425.513675][ T8932] loop1: detected capacity change from 0 to 40427 [ 425.514790][ T1194] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 425.528335][ T1194] cdc_ncm 3-1:1.1: bind() failure [ 425.581723][ T8932] F2FS-fs (loop1): invalid crc value [ 425.643692][ T8932] F2FS-fs (loop1): Found nat_bits in checkpoint [ 425.990619][ T8966] loop1: detected capacity change from 0 to 1024 [ 426.058864][ T11] hfsplus: b-tree write err: -5, ino 8 [ 426.386450][ T8970] loop3: detected capacity change from 0 to 512 [ 426.574054][ T8970] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 427.934499][ T1194] usb 3-1: USB disconnect, device number 36 [ 429.169765][ T8999] syz.1.883[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.169922][ T8999] syz.1.883[8999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.293826][ T8998] CIFS mount error: No usable UNC path provided in device string! [ 429.293826][ T8998] [ 429.315194][ T8998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 430.347885][ T9012] CIFS mount error: No usable UNC path provided in device string! [ 430.347885][ T9012] [ 430.358339][ T9012] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 432.259337][ T9004] loop0: detected capacity change from 0 to 40427 [ 432.297962][ T9004] F2FS-fs (loop0): invalid crc value [ 432.368808][ T9004] F2FS-fs (loop0): Found nat_bits in checkpoint [ 432.420159][ T9024] loop1: detected capacity change from 0 to 1024 [ 432.545938][ T6966] hfsplus: b-tree write err: -5, ino 8 [ 432.744437][ T9028] loop3: detected capacity change from 0 to 4096 [ 432.911106][ T9032] CIFS mount error: No usable UNC path provided in device string! [ 432.911106][ T9032] [ 432.921805][ T9032] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.726882][ T9040] xt_hashlimit: max too large, truncated to 1048576 [ 434.479768][ T9044] syz.1.896[9044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.479914][ T9044] syz.1.896[9044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.068060][ T9039] loop2: detected capacity change from 0 to 32768 [ 435.262884][ T9039] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.584381][ T5759] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 435.824326][ T5759] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 435.841574][ T5759] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.887144][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 435.959436][ T5759] usb 2-1: SerialNumber: syz [ 436.245802][ T9039] XFS (loop2): Ending clean mount [ 436.287769][ T9046] loop0: detected capacity change from 0 to 40427 [ 436.326091][ T9039] XFS (loop2): Quotacheck needed: Please wait. [ 436.356412][ T9046] F2FS-fs (loop0): invalid crc value [ 436.413485][ T9046] F2FS-fs (loop0): Found nat_bits in checkpoint [ 436.452635][ T9039] XFS (loop2): Quotacheck: Done. [ 436.529346][ T9046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 436.541713][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.605974][ T9070] CIFS mount error: No usable UNC path provided in device string! [ 436.605974][ T9070] [ 436.617009][ T9070] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 436.679376][ T5759] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 436.717194][ T5759] usb 2-1: USB disconnect, device number 28 [ 436.728498][ T5778] syz-executor: attempt to access beyond end of device [ 436.728498][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 436.765015][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 437.152793][ T9072] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 437.404839][ T9072] netlink: 76 bytes leftover after parsing attributes in process `syz.2.902'. [ 437.570069][ T9075] CIFS mount error: No usable UNC path provided in device string! [ 437.570069][ T9075] [ 437.581039][ T9075] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 437.763482][ T9072] loop2: detected capacity change from 0 to 32768 [ 437.775413][ T9072] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.902 (9072) [ 437.854248][ T9072] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 437.864575][ T9072] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 437.873166][ T9077] loop1: detected capacity change from 0 to 1024 [ 437.879769][ T9072] BTRFS info (device loop2): using free space tree [ 438.014474][ T9072] BTRFS info (device loop2): enabling ssd optimizations [ 438.021588][ T9072] BTRFS info (device loop2): auto enabling async discard [ 438.191684][ T138] hfsplus: b-tree write err: -5, ino 8 [ 438.217087][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 438.282287][ T9095] loop0: detected capacity change from 0 to 1024 [ 438.593497][ T11] hfsplus: b-tree write err: -5, ino 8 [ 438.877825][ T5770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5770) [ 439.266749][ T9110] syz.0.910[9110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.266896][ T9110] syz.0.910[9110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.277423][ T9107] syz.1.908: attempt to access beyond end of device [ 439.277423][ T9107] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 439.302738][ T9107] hpfs: hpfs_map_sector(): read error [ 440.054932][ T9120] CIFS mount error: No usable UNC path provided in device string! [ 440.054932][ T9120] [ 440.065166][ T9120] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 440.174256][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 440.377261][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 440.418757][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.434346][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 440.452737][ T9] usb 4-1: SerialNumber: syz [ 440.479157][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.492099][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.523251][ T9113] loop2: detected capacity change from 0 to 40427 [ 440.534539][ T9113] F2FS-fs (loop2): invalid crc value [ 440.599514][ T9113] F2FS-fs (loop2): Found nat_bits in checkpoint [ 440.728125][ T9113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 440.791497][ T9130] loop1: detected capacity change from 0 to 1024 [ 440.946685][ T5774] syz-executor: attempt to access beyond end of device [ 440.946685][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 440.964938][ T6966] hfsplus: b-tree write err: -5, ino 8 [ 440.969054][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 441.045061][ T9133] CIFS mount error: No usable UNC path provided in device string! [ 441.045061][ T9133] [ 441.055271][ T9133] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 441.110599][ T9134] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 441.260887][ T9135] netlink: 76 bytes leftover after parsing attributes in process `syz.1.918'. [ 441.535577][ T9] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 441.581236][ T9] usb 4-1: USB disconnect, device number 24 [ 442.083191][ T9135] loop1: detected capacity change from 0 to 32768 [ 442.099272][ T9135] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 442.278068][ T5770] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 442.515424][ T9151] CIFS mount error: No usable UNC path provided in device string! [ 442.515424][ T9151] [ 442.525773][ T9151] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 442.535543][ T9149] syz.3.922[9149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.535685][ T9149] syz.3.922[9149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.743835][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 444.934380][ T5759] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 445.147243][ T5759] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.171014][ T5759] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.190510][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 445.200636][ T5759] usb 1-1: SerialNumber: syz [ 445.264519][ T9175] CIFS mount error: No usable UNC path provided in device string! [ 445.264519][ T9175] [ 445.274768][ T9175] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 445.479283][ T9177] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 445.537595][ T9164] loop3: detected capacity change from 0 to 40427 [ 445.557138][ T9164] F2FS-fs (loop3): invalid crc value [ 445.635981][ T9181] netlink: 76 bytes leftover after parsing attributes in process `syz.2.931'. [ 445.751718][ T9164] F2FS-fs (loop3): Found nat_bits in checkpoint [ 446.004851][ T9181] loop2: detected capacity change from 0 to 32768 [ 446.108451][ T9164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 446.125654][ T9181] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.137374][ T9181] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 446.146271][ T9181] BTRFS info (device loop2): using free space tree [ 446.228472][ T9181] BTRFS info (device loop2): enabling ssd optimizations [ 446.235750][ T9181] BTRFS info (device loop2): auto enabling async discard [ 446.321958][ T5759] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 446.337649][ T5767] syz-executor: attempt to access beyond end of device [ 446.337649][ T5767] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 446.349922][ T5759] usb 1-1: USB disconnect, device number 19 [ 446.389480][ T5767] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 446.405725][ T5774] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.909956][ T9204] syz.2.934[9204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.910109][ T9204] syz.2.934[9204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.675857][ T9223] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 448.761573][ T9225] CIFS mount error: No usable UNC path provided in device string! [ 448.761573][ T9225] [ 448.772098][ T9225] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.796305][ T9226] netlink: 76 bytes leftover after parsing attributes in process `syz.0.942'. [ 449.030986][ T9228] loop3: detected capacity change from 0 to 1024 [ 449.122721][ T9226] loop0: detected capacity change from 0 to 32768 [ 449.131128][ T9226] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.942 (9226) [ 449.157753][ T9226] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 449.168286][ T9226] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 449.177261][ T9226] BTRFS info (device loop0): using free space tree [ 449.197905][ T9232] CIFS mount error: No usable UNC path provided in device string! [ 449.197905][ T9232] [ 449.208838][ T9232] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.289770][ T9226] BTRFS info (device loop0): enabling ssd optimizations [ 449.296969][ T9226] BTRFS info (device loop0): auto enabling async discard [ 449.361469][ T7256] hfsplus: b-tree write err: -5, ino 8 [ 449.365912][ T9213] loop2: detected capacity change from 0 to 32768 [ 449.419955][ T9213] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 449.572684][ T5778] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 449.781387][ T9213] XFS (loop2): Ending clean mount [ 449.848620][ T9213] XFS (loop2): Quotacheck needed: Please wait. [ 450.041252][ T9213] XFS (loop2): Quotacheck: Done. [ 450.556995][ T9262] syz.0.945[9262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.557141][ T9262] syz.0.945[9262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.019082][ T5774] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 451.188259][ T9264] loop3: detected capacity change from 0 to 512 [ 451.361921][ T9264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.459682][ T9264] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.772325][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.034811][ T9282] CIFS mount error: No usable UNC path provided in device string! [ 453.034811][ T9282] [ 453.064461][ T9282] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 453.111722][ T9281] loop0: detected capacity change from 0 to 1024 [ 453.947313][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 454.819643][ T9288] loop3: detected capacity change from 0 to 4096 [ 455.190321][ T9301] loop1: detected capacity change from 0 to 512 [ 455.251028][ T9302] syz.0.956[9302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.251180][ T9302] syz.0.956[9302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.666559][ T9301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.842237][ T9301] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.060340][ T9315] CIFS mount error: No usable UNC path provided in device string! [ 459.060340][ T9315] [ 459.077585][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.114786][ T9315] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 459.338146][ T9322] loop1: detected capacity change from 0 to 1024 [ 460.502923][ T6957] hfsplus: b-tree write err: -5, ino 8 [ 460.806309][ T9335] syz.2.968[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.806451][ T9335] syz.2.968[9335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.193365][ T9336] loop0: detected capacity change from 0 to 1024 [ 462.649276][ T9343] loop1: detected capacity change from 0 to 512 [ 462.796701][ T9343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.907195][ T9343] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.016235][ T9349] loop2: detected capacity change from 0 to 4096 [ 463.903704][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.303089][ T9351] CIFS mount error: No usable UNC path provided in device string! [ 464.303089][ T9351] [ 464.315667][ T9351] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 464.899714][ T9367] syz.3.978[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.899865][ T9367] syz.3.978[9367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.512111][ T9383] loop2: detected capacity change from 0 to 512 [ 466.692462][ T9383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.727102][ T9383] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.106174][ T9396] syz.3.988[9396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.106339][ T9396] syz.3.988[9396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.286736][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.438983][ T9401] syz.1.989: attempt to access beyond end of device [ 468.438983][ T9401] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 468.452097][ T9401] hpfs: hpfs_map_sector(): read error [ 470.554567][ T9424] syz.3.999[9424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.554716][ T9424] syz.3.999[9424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.246756][ T9422] loop2: detected capacity change from 0 to 512 [ 471.359962][ T9422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.390142][ T9422] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.750155][ T9439] syz.3.1001: attempt to access beyond end of device [ 471.750155][ T9439] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 471.763220][ T9439] hpfs: hpfs_map_sector(): read error [ 472.948675][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.062433][ T9457] syz.1.1009[9457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.062586][ T9457] syz.1.1009[9457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.751386][ T9464] CIFS mount error: No usable UNC path provided in device string! [ 475.751386][ T9464] [ 475.775801][ T9464] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 476.583233][ T9468] loop2: detected capacity change from 0 to 1024 [ 476.693683][ T9473] loop1: detected capacity change from 0 to 512 [ 477.015382][ T9479] syz.0.1013: attempt to access beyond end of device [ 477.015382][ T9479] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 477.028403][ T9479] hpfs: hpfs_map_sector(): read error [ 477.628135][ T9473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.692961][ T9473] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.529004][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.582022][ T6984] hfsplus: b-tree write err: -5, ino 8 [ 478.855718][ T9490] syz.2.1018[9490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.855864][ T9490] syz.2.1018[9490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.536244][ T9494] loop1: detected capacity change from 0 to 128 [ 479.667770][ T9494] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 479.752389][ T9494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.671572][ T9515] loop1: detected capacity change from 0 to 1024 [ 483.003190][ T9520] loop3: detected capacity change from 0 to 512 [ 483.067564][ T9521] syz.2.1025: attempt to access beyond end of device [ 483.067564][ T9521] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 483.080417][ T9521] hpfs: hpfs_map_sector(): read error [ 483.381992][ T9525] loop0: detected capacity change from 0 to 16 [ 483.396599][ T6957] hfsplus: b-tree write err: -5, ino 8 [ 483.405977][ T9520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.420749][ T9520] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.466909][ T9525] erofs: (device loop0): mounted with root inode @ nid 36. [ 483.602285][ T9525] syz.0.1031: attempt to access beyond end of device [ 483.602285][ T9525] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 484.760710][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.545406][ T9533] syz.0.1031: attempt to access beyond end of device [ 486.545406][ T9533] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 487.564807][ T9538] syz.0.1031 (9538): drop_caches: 2 [ 491.658759][ T9577] loop1: detected capacity change from 0 to 16 [ 491.705376][ T9577] erofs: (device loop1): mounted with root inode @ nid 36. [ 491.776922][ T9577] syz.1.1045: attempt to access beyond end of device [ 491.776922][ T9577] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 493.736237][ T9597] CIFS mount error: No usable UNC path provided in device string! [ 493.736237][ T9597] [ 493.746443][ T9597] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 494.929869][ T9609] loop3: detected capacity change from 0 to 1024 [ 496.998950][ T138] hfsplus: b-tree write err: -5, ino 8 [ 497.964796][ T9635] CIFS mount error: No usable UNC path provided in device string! [ 497.964796][ T9635] [ 497.984246][ T9635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 498.117982][ T9637] syz.3.1063: attempt to access beyond end of device [ 498.117982][ T9637] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 498.130900][ T9637] hpfs: hpfs_map_sector(): read error [ 499.699831][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 501.044261][ T9657] loop1: detected capacity change from 0 to 1024 [ 501.628723][ T6957] hfsplus: b-tree write err: -5, ino 8 [ 501.653670][ T9669] CIFS mount error: No usable UNC path provided in device string! [ 501.653670][ T9669] [ 501.664192][ T9669] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 501.948636][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.955480][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.165988][ T9683] loop3: detected capacity change from 0 to 32768 [ 504.216144][ T9683] [ 504.216144][ T9683] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 504.216144][ T9683] [ 504.255840][ T9700] syz.0.1084: attempt to access beyond end of device [ 504.255840][ T9700] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 504.319281][ T9700] hpfs: hpfs_map_sector(): read error [ 504.336014][ T9683] read_mapping_page failed! [ 504.346931][ T9683] ERROR: (device loop3): txCommit: [ 504.346931][ T9683] [ 504.493702][ T9683] read_mapping_page failed! [ 504.522581][ T9683] ERROR: (device loop3): txCommit: [ 504.522581][ T9683] [ 504.548447][ T9683] ================================================================== [ 504.556589][ T9683] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12ca/0x3b10 [ 504.564206][ T9683] Read of size 1 at addr ffff88805a4677d5 by task syz.3.1083/9683 [ 504.572330][ T9683] [ 504.574685][ T9683] CPU: 1 PID: 9683 Comm: syz.3.1083 Not tainted 6.6.95-syzkaller #0 [ 504.582691][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.592780][ T9683] Call Trace: [ 504.596107][ T9683] [ 504.599105][ T9683] dump_stack_lvl+0x16c/0x230 [ 504.603833][ T9683] ? read_lock_is_recursive+0x20/0x20 [ 504.609237][ T9683] ? show_regs_print_info+0x20/0x20 [ 504.614467][ T9683] ? load_image+0x3b0/0x3b0 [ 504.619009][ T9683] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 504.624425][ T9683] ? __virt_addr_valid+0x18c/0x540 [ 504.629579][ T9683] ? __virt_addr_valid+0x469/0x540 [ 504.634725][ T9683] print_report+0xac/0x230 [ 504.639169][ T9683] ? dtSplitPage+0x12ca/0x3b10 [ 504.643958][ T9683] kasan_report+0x117/0x150 [ 504.648587][ T9683] ? dtSplitPage+0x12ca/0x3b10 [ 504.653383][ T9683] dtSplitPage+0x12ca/0x3b10 [ 504.658012][ T9683] ? __lock_acquire+0x7c80/0x7c80 [ 504.663077][ T9683] dtInsert+0x108f/0x5f40 [ 504.667451][ T9683] ? kasan_quarantine_put+0xd8/0x220 [ 504.672793][ T9683] ? slab_free_freelist_hook+0x130/0x1b0 [ 504.678633][ T9683] ? UniStrupr+0x2e0/0x2e0 [ 504.683080][ T9683] ? dtSearch+0x1d20/0x21b0 [ 504.687763][ T9683] jfs_symlink+0x719/0xe50 [ 504.692223][ T9683] ? jfs_unlink+0xa60/0xa60 [ 504.696764][ T9683] ? make_vfsuid+0x51/0xb0 [ 504.701230][ T9683] ? inode_permission+0xf3/0x480 [ 504.706186][ T9683] ? bpf_lsm_inode_symlink+0x9/0x10 [ 504.711409][ T9683] ? security_inode_symlink+0xb6/0x100 [ 504.716913][ T9683] vfs_symlink+0x138/0x2b0 [ 504.721369][ T9683] do_symlinkat+0x1b2/0x3f0 [ 504.725991][ T9683] ? vfs_symlink+0x2b0/0x2b0 [ 504.730608][ T9683] ? getname_flags+0x20a/0x500 [ 504.735387][ T9683] __x64_sys_symlink+0x7e/0x90 [ 504.740201][ T9683] do_syscall_64+0x55/0xb0 [ 504.744675][ T9683] ? clear_bhb_loop+0x40/0x90 [ 504.749395][ T9683] ? clear_bhb_loop+0x40/0x90 [ 504.754104][ T9683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.760042][ T9683] RIP: 0033:0x7fa10df8e929 [ 504.764476][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.784123][ T9683] RSP: 002b:00007fa10ee32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 504.792570][ T9683] RAX: ffffffffffffffda RBX: 00007fa10e1b5fa0 RCX: 00007fa10df8e929 [ 504.800562][ T9683] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000ac0 [ 504.808593][ T9683] RBP: 00007fa10e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 504.816587][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.824578][ T9683] R13: 0000000000000000 R14: 00007fa10e1b5fa0 R15: 00007fffb7714348 [ 504.832571][ T9683] [ 504.835604][ T9683] [ 504.837949][ T9683] Allocated by task 9683: [ 504.842324][ T9683] kasan_set_track+0x4e/0x70 [ 504.846975][ T9683] __kasan_slab_alloc+0x6c/0x80 [ 504.851848][ T9683] slab_post_alloc_hook+0x6e/0x4d0 [ 504.856988][ T9683] kmem_cache_alloc_lru+0x115/0x2e0 [ 504.862216][ T9683] jfs_alloc_inode+0x28/0x60 [ 504.866856][ T9683] iget_locked+0x1ad/0x840 [ 504.871302][ T9683] jfs_iget+0x24/0x3c0 [ 504.875394][ T9683] jfs_lookup+0x1c6/0x380 [ 504.879744][ T9683] __lookup_slow+0x281/0x3b0 [ 504.884349][ T9683] lookup_slow+0x53/0x70 [ 504.888607][ T9683] walk_component+0x2be/0x3f0 [ 504.893297][ T9683] path_lookupat+0x169/0x440 [ 504.897900][ T9683] do_o_path+0x98/0x1f0 [ 504.902080][ T9683] path_openat+0x2a31/0x3190 [ 504.906691][ T9683] do_filp_open+0x1c5/0x3d0 [ 504.911209][ T9683] do_sys_openat2+0x12c/0x1c0 [ 504.915907][ T9683] __x64_sys_open+0x11f/0x140 [ 504.920617][ T9683] do_syscall_64+0x55/0xb0 [ 504.925054][ T9683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.930974][ T9683] [ 504.933312][ T9683] Last potentially related work creation: [ 504.939038][ T9683] kasan_save_stack+0x3e/0x60 [ 504.943735][ T9683] __kasan_record_aux_stack+0xaf/0xc0 [ 504.949223][ T9683] call_rcu+0x14f/0x920 [ 504.953400][ T9683] evict+0x7db/0x870 [ 504.957312][ T9683] jfs_umount+0x199/0x3c0 [ 504.961669][ T9683] jfs_put_super+0x8c/0x190 [ 504.966207][ T9683] generic_shutdown_super+0x134/0x2b0 [ 504.971596][ T9683] kill_block_super+0x44/0x90 [ 504.976288][ T9683] deactivate_locked_super+0x97/0x100 [ 504.981714][ T9683] cleanup_mnt+0x429/0x4c0 [ 504.986177][ T9683] task_work_run+0x1ce/0x250 [ 504.990784][ T9683] exit_to_user_mode_loop+0xe6/0x110 [ 504.996090][ T9683] exit_to_user_mode_prepare+0xb1/0x140 [ 505.001656][ T9683] syscall_exit_to_user_mode+0x1a/0x50 [ 505.007138][ T9683] do_syscall_64+0x61/0xb0 [ 505.011583][ T9683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.017502][ T9683] [ 505.019841][ T9683] The buggy address belongs to the object at ffff88805a466f00 [ 505.019841][ T9683] which belongs to the cache jfs_ip of size 2240 [ 505.033569][ T9683] The buggy address is located 21 bytes to the right of [ 505.033569][ T9683] allocated 2240-byte region [ffff88805a466f00, ffff88805a4677c0) [ 505.048259][ T9683] [ 505.050601][ T9683] The buggy address belongs to the physical page: [ 505.057130][ T9683] page:ffffea0001691800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a460 [ 505.067298][ T9683] head:ffffea0001691800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 505.076249][ T9683] memcg:ffff8880244c5901 [ 505.080500][ T9683] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 505.088497][ T9683] page_type: 0xffffffff() [ 505.092847][ T9683] raw: 00fff00000000840 ffff8881436c73c0 dead000000000122 0000000000000000 [ 505.101543][ T9683] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff8880244c5901 [ 505.110138][ T9683] page dumped because: kasan: bad access detected [ 505.116569][ T9683] page_owner tracks the page as allocated [ 505.122379][ T9683] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5895, tgid 5894 (syz.2.8), ts 98806899374, free_ts 28047384448 [ 505.145674][ T9683] post_alloc_hook+0x1cd/0x210 [ 505.150455][ T9683] get_page_from_freelist+0x195c/0x19f0 [ 505.156015][ T9683] __alloc_pages+0x1e3/0x460 [ 505.160621][ T9683] alloc_slab_page+0x5d/0x170 [ 505.165310][ T9683] new_slab+0x87/0x2e0 [ 505.169402][ T9683] ___slab_alloc+0xc6d/0x12f0 [ 505.174093][ T9683] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 505.179396][ T9683] jfs_alloc_inode+0x28/0x60 [ 505.184012][ T9683] new_inode_pseudo+0x63/0x1d0 [ 505.188799][ T9683] new_inode+0x22/0x1b0 [ 505.192970][ T9683] jfs_fill_super+0x396/0xac0 [ 505.197689][ T9683] mount_bdev+0x22b/0x2d0 [ 505.202035][ T9683] legacy_get_tree+0xea/0x180 [ 505.206727][ T9683] vfs_get_tree+0x8c/0x280 [ 505.211158][ T9683] do_new_mount+0x24b/0xa40 [ 505.216047][ T9683] __se_sys_mount+0x2da/0x3c0 [ 505.220756][ T9683] page last free stack trace: [ 505.225898][ T9683] free_unref_page_prepare+0x7ce/0x8e0 [ 505.231401][ T9683] free_unref_page+0x32/0x2e0 [ 505.236097][ T9683] free_contig_range+0xa1/0x160 [ 505.240966][ T9683] destroy_args+0x87/0x770 [ 505.245402][ T9683] debug_vm_pgtable+0x3cc/0x410 [ 505.250394][ T9683] do_one_initcall+0x1fd/0x750 [ 505.255450][ T9683] do_initcall_level+0x137/0x1f0 [ 505.260411][ T9683] do_initcalls+0x69/0xd0 [ 505.264844][ T9683] kernel_init_freeable+0x3d2/0x570 [ 505.270067][ T9683] kernel_init+0x1d/0x1c0 [ 505.274420][ T9683] ret_from_fork+0x48/0x80 [ 505.278903][ T9683] ret_from_fork_asm+0x11/0x20 [ 505.283694][ T9683] [ 505.286037][ T9683] Memory state around the buggy address: [ 505.291678][ T9683] ffff88805a467680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.299838][ T9683] ffff88805a467700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 505.307926][ T9683] >ffff88805a467780: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 505.316008][ T9683] ^ [ 505.322693][ T9683] ffff88805a467800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 505.330776][ T9683] ffff88805a467880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 505.338862][ T9683] ================================================================== [ 505.410742][ T9683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 505.418036][ T9683] CPU: 0 PID: 9683 Comm: syz.3.1083 Not tainted 6.6.95-syzkaller #0 [ 505.426066][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.436159][ T9683] Call Trace: [ 505.439641][ T9683] [ 505.442588][ T9683] dump_stack_lvl+0x16c/0x230 [ 505.447479][ T9683] ? show_regs_print_info+0x20/0x20 [ 505.452698][ T9683] ? load_image+0x3b0/0x3b0 [ 505.457234][ T9683] panic+0x2c0/0x710 [ 505.461150][ T9683] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 505.467338][ T9683] ? bpf_jit_dump+0xd0/0xd0 [ 505.471910][ T9683] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 505.477832][ T9683] ? _raw_spin_unlock+0x40/0x40 [ 505.482762][ T9683] ? dtSplitPage+0x12ca/0x3b10 [ 505.487545][ T9683] check_panic_on_warn+0x84/0xa0 [ 505.492504][ T9683] ? dtSplitPage+0x12ca/0x3b10 [ 505.497291][ T9683] end_report+0x6f/0x140 [ 505.501555][ T9683] kasan_report+0x128/0x150 [ 505.506177][ T9683] ? dtSplitPage+0x12ca/0x3b10 [ 505.511067][ T9683] dtSplitPage+0x12ca/0x3b10 [ 505.515714][ T9683] ? __lock_acquire+0x7c80/0x7c80 [ 505.520851][ T9683] dtInsert+0x108f/0x5f40 [ 505.525311][ T9683] ? kasan_quarantine_put+0xd8/0x220 [ 505.530626][ T9683] ? slab_free_freelist_hook+0x130/0x1b0 [ 505.536298][ T9683] ? UniStrupr+0x2e0/0x2e0 [ 505.540732][ T9683] ? dtSearch+0x1d20/0x21b0 [ 505.545456][ T9683] jfs_symlink+0x719/0xe50 [ 505.549905][ T9683] ? jfs_unlink+0xa60/0xa60 [ 505.554443][ T9683] ? make_vfsuid+0x51/0xb0 [ 505.558886][ T9683] ? inode_permission+0xf3/0x480 [ 505.563838][ T9683] ? bpf_lsm_inode_symlink+0x9/0x10 [ 505.569057][ T9683] ? security_inode_symlink+0xb6/0x100 [ 505.574547][ T9683] vfs_symlink+0x138/0x2b0 [ 505.579028][ T9683] do_symlinkat+0x1b2/0x3f0 [ 505.583556][ T9683] ? vfs_symlink+0x2b0/0x2b0 [ 505.588168][ T9683] ? getname_flags+0x20a/0x500 [ 505.592992][ T9683] __x64_sys_symlink+0x7e/0x90 [ 505.597804][ T9683] do_syscall_64+0x55/0xb0 [ 505.602309][ T9683] ? clear_bhb_loop+0x40/0x90 [ 505.607194][ T9683] ? clear_bhb_loop+0x40/0x90 [ 505.612519][ T9683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.618449][ T9683] RIP: 0033:0x7fa10df8e929 [ 505.622976][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.642879][ T9683] RSP: 002b:00007fa10ee32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 505.651668][ T9683] RAX: ffffffffffffffda RBX: 00007fa10e1b5fa0 RCX: 00007fa10df8e929 [ 505.659674][ T9683] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000ac0 [ 505.667666][ T9683] RBP: 00007fa10e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 505.675654][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.683674][ T9683] R13: 0000000000000000 R14: 00007fa10e1b5fa0 R15: 00007fffb7714348 [ 505.691677][ T9683] [ 505.695102][ T9683] Kernel Offset: disabled [ 505.699481][ T9683] Rebooting in 86400 seconds..