last executing test programs: 5.677321559s ago: executing program 0 (id=10340): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x3, 0x6, 0x0, 0x1, 0x101, 0x0}) 5.230680832s ago: executing program 0 (id=10344): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 4.709219165s ago: executing program 3 (id=10346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) nanosleep(&(0x7f0000000300), 0x0) 4.57485678s ago: executing program 0 (id=10348): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="00711a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.390507617s ago: executing program 3 (id=10350): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x8002) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001340)={0x80, 0x6, 0x100, 0x2, 0x0, 0x3, 0x0}) 3.886642509s ago: executing program 4 (id=10355): openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.581454946s ago: executing program 4 (id=10358): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 3.387881192s ago: executing program 5 (id=10359): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) 3.290562412s ago: executing program 4 (id=10361): setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) getitimer(0x2, &(0x7f00000001c0)) 2.894610477s ago: executing program 5 (id=10363): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) write$FUSE_WRITE(r0, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) 2.865821608s ago: executing program 2 (id=10364): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x280d0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.806481118s ago: executing program 1 (id=10365): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.726466115s ago: executing program 3 (id=10366): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.56208406s ago: executing program 5 (id=10367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x50}}, 0x0) 2.452936696s ago: executing program 2 (id=10368): r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x80186e82, &(0x7f00000002c0)={@id={0x20000000, 0xefffffff, @auto="660000002800a73e1baeff79da3b89f5"}}) 2.118584132s ago: executing program 5 (id=10369): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES8], 0x11, 0x1d6, &(0x7f0000000bc0)="$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") rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') 2.117896633s ago: executing program 1 (id=10381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x104) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.972020228s ago: executing program 3 (id=10370): r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 1.83062733s ago: executing program 1 (id=10371): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 1.738519828s ago: executing program 0 (id=10372): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.615875916s ago: executing program 2 (id=10373): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) 1.608692272s ago: executing program 5 (id=10374): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0xaf, 0x80}) 1.378456011s ago: executing program 1 (id=10375): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26, 0x0, 0x0, @void, @value}, 0x10) 1.164589147s ago: executing program 4 (id=10376): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x11501}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x54, 0x0, 0xf, 0x0, 0x18) 1.13442416s ago: executing program 2 (id=10377): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4066, 0x100c}], 0x1}, 0x10040) 1.098195824s ago: executing program 5 (id=10378): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000003c0)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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") truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) 1.070081906s ago: executing program 1 (id=10379): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8}, {@keep_last_dots}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x401}}, {@umask={'umask', 0x3d, 0xb35e}}, {@utf8}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 930.474097ms ago: executing program 0 (id=10380): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) 767.742673ms ago: executing program 2 (id=10382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 733.520205ms ago: executing program 4 (id=10383): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 478.342602ms ago: executing program 3 (id=10384): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000000dc0)=""/158, 0x9e}], 0x2}, 0x9}], 0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 341.706444ms ago: executing program 4 (id=10385): syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011024278096086b1d01"], 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x48, &(0x7f00000002c0)='cache=none') 248.444361ms ago: executing program 1 (id=10386): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) 227.824105ms ago: executing program 0 (id=10387): r0 = syz_usbip_server_init(0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink={{0x4, 0x9, 0x0, 0x1, 0xedc4}, {0x23d}}, 0x30) 70.887561ms ago: executing program 3 (id=10388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=10389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): change from 0 to 32768 [ 807.096094][ T1702] openvswitch: netlink: Actions may not be safe on all matching packets [ 807.129131][ T1696] loop3: detected capacity change from 0 to 4096 [ 807.160040][ T1705] xt_l2tp: v2 sid > 0xffff: 262144 [ 807.165929][ T1696] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 807.166190][ T1645] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8470 (1645) [ 807.332976][ T1645] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 807.381082][ T1645] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 807.451810][ T1645] BTRFS info (device loop5): using free-space-tree [ 807.694116][ T1645] BTRFS info (device loop5): rebuilding free space tree [ 808.337118][ T5841] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 808.358658][ T1760] xt_hashlimit: invalid interval [ 808.766740][ T1778] netlink: 'syz.0.8506': attribute type 21 has an invalid length. [ 808.774736][ T1778] netlink: 'syz.0.8506': attribute type 1 has an invalid length. [ 809.504606][ T1808] netlink: 'syz.5.8517': attribute type 3 has an invalid length. [ 809.512416][ T1808] netlink: 'syz.5.8517': attribute type 1 has an invalid length. [ 809.952922][ T1831] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8524'. [ 810.168642][ T1839] loop3: detected capacity change from 0 to 16 [ 810.232411][ T1839] erofs (device loop3): mounted with root inode @ nid 36. [ 810.320016][ T1839] syz.3.8527: attempt to access beyond end of device [ 810.320016][ T1839] loop3: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 810.429500][ T1839] syz.3.8527: attempt to access beyond end of device [ 810.429500][ T1839] loop3: rw=524288, sector=40, nr_sectors = 64 limit=16 [ 810.511899][ T1839] syz.3.8527: attempt to access beyond end of device [ 810.511899][ T1839] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 810.583030][ T30] audit: type=1800 audit(1750154392.644:278): pid=1839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8527" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 811.248107][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8541'. [ 811.326169][ T1890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8542'. [ 811.974036][ T1916] syz.1.8551: attempt to access beyond end of device [ 811.974036][ T1916] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 812.019821][ T1916] FAT-fs (loop3): unable to read boot sector [ 812.374606][ T1936] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 812.415976][ T1941] loop4: detected capacity change from 0 to 64 [ 812.454123][ T1942] loop3: detected capacity change from 0 to 16 [ 812.535423][ T1942] erofs (device loop3): mounted with root inode @ nid 36. [ 812.636869][ T1942] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 812.660219][ T1942] erofs (device loop3): readahead error at folio 0 @ nid 89 [ 812.683584][ T1936] bond4: entered promiscuous mode [ 812.689265][ T1942] erofs (device loop3): read error -117 @ 0 of nid 89 [ 812.713795][ T1936] bond4: entered allmulticast mode [ 812.724633][ T1936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.747129][ T30] audit: type=1800 audit(1750154394.683:279): pid=1942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8560" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 813.236868][ T2003] loop2: detected capacity change from 0 to 1024 [ 813.413302][ T2003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.477234][ T2019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8570'. [ 813.801942][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.680809][ T2077] loop4: detected capacity change from 0 to 1024 [ 814.762470][ T2077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.958509][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.186596][ T2105] loop5: detected capacity change from 0 to 512 [ 815.280687][ T2105] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 815.319755][ T5934] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 815.377946][ T2116] loop3: detected capacity change from 0 to 256 [ 815.401801][ T2105] EXT4-fs (loop5): 1 truncate cleaned up [ 815.441200][ T2116] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000656c) [ 815.450068][ T2105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.518214][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 815.558233][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 815.583661][ T2105] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.8597: Logical block already allocated [ 815.630300][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 815.674890][ T2105] EXT4-fs (loop5): Remounting filesystem read-only [ 815.683306][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.764087][ T5934] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 815.789992][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.833004][ T5934] usb 1-1: Product: syz [ 815.837269][ T5934] usb 1-1: Manufacturer: syz [ 815.863735][ T5934] usb 1-1: SerialNumber: syz [ 815.899358][ T5934] usb 1-1: config 0 descriptor?? [ 815.939187][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.948032][ T5934] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 816.143294][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 816.455965][ T5973] usb 1-1: USB disconnect, device number 26 [ 816.724466][ T2175] netlink: 'syz.3.8614': attribute type 4 has an invalid length. [ 817.042936][ T2188] netlink: 'syz.5.8617': attribute type 5 has an invalid length. [ 817.201472][ T2191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8619'. [ 817.272653][ T2130] loop4: detected capacity change from 0 to 32768 [ 817.321712][ T2130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8605 (2130) [ 817.406852][ T2130] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 817.455972][ T2130] BTRFS info (device loop4 state S): using crc32c (crc32c-x86_64) checksum algorithm [ 817.534846][ T2130] BTRFS info (device loop4 state S): using free-space-tree [ 817.582788][ T2205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8623'. [ 817.618034][ T2205] netlink: 'syz.1.8623': attribute type 2 has an invalid length. [ 817.741939][ T2218] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 817.752343][T30926] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x3a96e814 level 0, ignored [ 817.851345][ T2130] BTRFS error (device loop4 state S): devid 1 uuid ffe9ff7f-0000-0000-0000-9003f3eadbc4 is missing [ 817.864029][ T2130] BTRFS error (device loop4 state S): failed to read chunk tree: -2 [ 817.963344][ T2130] BTRFS error (device loop4 state S): open_ctree failed: -2 [ 818.184852][ T5934] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 818.268200][ T2181] loop2: detected capacity change from 0 to 32768 [ 818.336411][ T2181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8616 (2181) [ 818.380881][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 818.425269][ T5934] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 818.451459][ T2181] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 818.482574][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.501882][ T2181] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 818.526471][ T5934] usb 2-1: config 0 descriptor?? [ 818.558739][ T2181] BTRFS info (device loop2): using free-space-tree [ 818.569785][ T2232] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 818.810170][ T2181] BTRFS info (device loop2): rebuilding free space tree [ 818.827566][ T5934] usbhid 2-1:0.0: can't add hid device: -71 [ 818.867532][ T5934] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 818.934280][ T5934] usb 2-1: USB disconnect, device number 27 [ 819.004514][ T2289] loop4: detected capacity change from 0 to 512 [ 819.234477][ T2289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.281134][ T2304] loop5: detected capacity change from 0 to 16 [ 819.292470][ T2304] erofs (device loop5): mounted with root inode @ nid 36. [ 819.338130][ T2289] ext4 filesystem being mounted at /1412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.375501][ T2304] syz.5.8641: attempt to access beyond end of device [ 819.375501][ T2304] loop5: rw=0, sector=48, nr_sectors = 16 limit=16 [ 819.416104][ T2304] erofs (device loop5): read error -5 @ 43 of nid 36 [ 819.468454][ T5833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 819.659491][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.814045][ T2319] netlink: 'syz.1.8645': attribute type 21 has an invalid length. [ 820.085401][ T2331] netlink: 'syz.2.8643': attribute type 2 has an invalid length. [ 820.127393][ T2332] kAFS: No cell specified [ 820.128956][ T2331] netlink: 'syz.2.8643': attribute type 1 has an invalid length. [ 820.216107][ T2331] netlink: 'syz.2.8643': attribute type 1 has an invalid length. [ 820.552089][ T2347] netlink: 'syz.3.8653': attribute type 2 has an invalid length. [ 820.566407][ T2345] loop1: detected capacity change from 0 to 128 [ 821.068091][ T2366] loop2: detected capacity change from 0 to 128 [ 821.147853][ T2366] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.189691][ T2366] ext4 filesystem being mounted at /1467/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 821.382135][ T2366] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.8661: bg 0: bad block bitmap checksum [ 821.656879][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.968954][ T2412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8669'. [ 822.357677][ T2427] netlink: set zone limit has 4 unknown bytes [ 822.396119][ T2430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.868508][ T2453] xt_l2tp: invalid flags combination: c [ 823.198331][ T2467] binder: 2466:2467 ioctl 40046205 0 returned -22 [ 823.474790][ T2391] loop5: detected capacity change from 0 to 32768 [ 823.539673][ T2391] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 823.566088][ T2484] loop4: detected capacity change from 0 to 1024 [ 823.794541][ T2391] XFS (loop5): Ending clean mount [ 823.807811][ T5934] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 823.843268][T27903] hfsplus: b-tree write err: -5, ino 4 [ 823.844774][ T2391] XFS (loop5): Quotacheck needed: Please wait. [ 824.011026][ T2391] XFS (loop5): Quotacheck: Done. [ 824.021703][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 824.064455][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 824.085606][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 824.109507][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.172822][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 824.279907][ T5934] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 824.301712][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.313507][ T5841] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 824.323569][ T5934] usb 1-1: Product: syz [ 824.336512][ T5934] usb 1-1: Manufacturer: syz [ 824.382555][ T2532] xt_CT: No such helper "snmp" [ 824.411867][ T5934] usb 1-1: SerialNumber: syz [ 824.439116][ T5934] usb 1-1: config 0 descriptor?? [ 824.656624][ T5934] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input43 [ 824.847255][ T5934] imon:send_packet: packet tx failed (-71) [ 824.876827][ T5934] imon 1-1:0.0: panel buttons/knobs setup failed [ 825.220991][ T5934] rc_core: IR keymap rc-imon-pad not found [ 825.227005][ T5934] Registered IR keymap rc-empty [ 825.300728][ T5934] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 825.314409][ T5934] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 825.332113][ T5934] imon:send_packet: packet tx failed (-71) [ 825.377293][ T2587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8710'. [ 825.404590][ T5934] imon 1-1:0.0: remote input dev register failed [ 825.425052][ T2587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8710'. [ 825.457196][ T5934] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 825.709437][ T5934] imon 1-1:0.0: unable to initialize intf0, err 0 [ 825.731829][ T5934] imon:imon_probe: failed to initialize context! [ 825.738248][ T5934] imon 1-1:0.0: unable to register, err -19 [ 825.792953][ T5934] usb 1-1: USB disconnect, device number 27 [ 825.856166][ T2607] loop1: detected capacity change from 0 to 1024 [ 825.873393][ T2611] JFS: discard option not supported on device [ 825.893063][ T2607] EXT4-fs: Ignoring removed bh option [ 825.912956][ T2611] Mount JFS Failure: -22 [ 825.930675][ T2611] jfs_mount failed w/return code = -22 [ 825.957367][ T2607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 826.343107][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 826.437369][ T5934] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 826.640584][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.663329][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 826.686084][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 826.721870][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 826.817504][ T5934] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 826.872776][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.905209][ T5934] usb 6-1: Product: syz [ 826.915987][ T5934] usb 6-1: Manufacturer: syz [ 826.926764][ T5934] usb 6-1: SerialNumber: syz [ 826.949179][ T2663] loop3: detected capacity change from 0 to 16 [ 826.962584][ T5934] usb 6-1: config 0 descriptor?? [ 827.022564][ T2663] erofs (device loop3): mounted with root inode @ nid 36. [ 827.041015][ T5934] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 827.173379][ T2595] loop2: detected capacity change from 0 to 32768 [ 827.259033][ T2687] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8728'. [ 827.274909][ T2595] syz.2.8712: attempt to access beyond end of device [ 827.274909][ T2595] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 827.294430][ T2595] metapage_write_end_io: I/O error [ 827.301903][ T2595] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 827.301903][ T2595] [ 827.317882][ T2595] ERROR: (device loop2): remounting filesystem as read-only [ 827.341296][ T2687] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8728'. [ 827.376271][ T2595] ERROR: (device loop2): diWrite: ixpxd invalid [ 827.376271][ T2595] [ 827.428460][ T2595] ERROR: (device loop2): txAbort: [ 827.428460][ T2595] [ 827.437864][ T5973] usb 6-1: USB disconnect, device number 29 [ 827.514479][ T2595] blkno = 8f7c0, nblocks = 1 [ 827.540943][ T2595] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 827.540943][ T2595] [ 827.597122][ T2595] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 827.597122][ T2595] [ 827.624149][ T2595] ialloc: diAlloc returned -5! [ 827.729856][ T2711] netlink: 'syz.1.8731': attribute type 3 has an invalid length. [ 827.790180][ T2711] netlink: 'syz.1.8731': attribute type 1 has an invalid length. [ 827.850520][ T2711] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8731'. [ 827.975069][ T5833] syz-executor: attempt to access beyond end of device [ 827.975069][ T5833] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 828.041067][ T5833] metapage_write_end_io: I/O error [ 828.888289][ T2756] loop2: detected capacity change from 0 to 2048 [ 829.007835][ T2756] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 829.074001][ T2771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8747'. [ 829.084800][ T2756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.873323][ T2815] loop5: detected capacity change from 0 to 64 [ 830.303392][ T2839] loop2: detected capacity change from 0 to 128 [ 830.415975][ T2839] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 830.545662][ T2839] ext4 filesystem being mounted at /1481/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 830.579285][ T2863] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.800742][ T5934] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 830.843609][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 831.018364][ T5934] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 831.047506][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.079002][ T5934] usb 2-1: config 0 descriptor?? [ 831.114678][ T5934] gspca_main: spca508-2.14.0 probing 8086:0110 [ 831.562355][ T5934] gspca_spca508: reg_read err -71 [ 831.589232][ T5934] gspca_spca508: reg_read err -71 [ 831.617163][ T5934] gspca_spca508: reg_read err -71 [ 831.632606][ T5934] gspca_spca508: reg_read err -71 [ 831.648751][ T2923] pim6reg: entered allmulticast mode [ 831.654174][ T5934] gspca_spca508: reg write: error -71 [ 831.654266][ T5934] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 831.669982][ T5934] usb 2-1: USB disconnect, device number 28 [ 831.878473][ T2939] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.104681][ T2950] loop5: detected capacity change from 0 to 64 [ 832.845691][ T2982] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 832.931658][ T2988] loop5: detected capacity change from 0 to 128 [ 832.964347][ T2990] netlink: 'syz.1.8805': attribute type 8 has an invalid length. [ 832.985808][ T2988] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 833.205563][ T2997] loop2: detected capacity change from 0 to 1024 [ 833.221333][ T2997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 833.262173][ T2997] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 833.274795][ T3003] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 833.303242][ T2997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 833.339588][ T2997] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.8806: lblock 2 mapped to illegal pblock 2 (length 1) [ 833.377513][ T2997] EXT4-fs (loop2): Remounting filesystem read-only [ 833.394966][ T2997] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 833.435407][ T2997] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 833.530872][ T2997] EXT4-fs (loop2): 1 orphan inode deleted [ 833.601733][ T2997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.676075][ T2997] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.687003][ T3018] loop5: detected capacity change from 0 to 128 [ 833.736317][ T3021] (unnamed net_device) (uninitialized): (slave þ): Device is not bonding slave [ 833.755437][ T3018] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 833.833113][ T3021] (unnamed net_device) (uninitialized): option active_slave: invalid value (þ) [ 833.896693][ T3018] ext4 filesystem being mounted at /1445/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 833.982466][ T3033] loop1: detected capacity change from 0 to 256 [ 833.984083][ T3018] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.8810: No space for directory leaf checksum. Please run e2fsck -D. [ 834.033962][ T3033] exfat: Deprecated parameter 'utf8' [ 834.047234][ T3018] EXT4-fs error (device loop5): __ext4_find_entry:1624: inode #2: comm syz.5.8810: checksumming directory block 0 [ 834.138720][ T3033] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 834.262682][ T5841] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 834.509409][ T3049] loop3: detected capacity change from 0 to 1024 [ 834.512650][ T3056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8822'. [ 834.557005][ T3049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 834.632193][ T3049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.811101][ T3049] EXT4-fs warning (device loop3): empty_inline_dir:1773: bad inline directory (dir #12) - no `..' [ 835.001223][ T5927] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 835.078664][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.208501][ T5927] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 835.235155][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.247394][ T3085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8829'. [ 835.296320][ T5927] usb 2-1: Product: syz [ 835.301039][ T3085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8829'. [ 835.318366][ T5927] usb 2-1: Manufacturer: syz [ 835.340099][ T5927] usb 2-1: SerialNumber: syz [ 835.370475][ T5927] usb 2-1: config 0 descriptor?? [ 835.435797][ T3098] tmpfs: Bad value for 'nr_inodes' [ 835.450134][ T3096] loop3: detected capacity change from 0 to 1024 [ 835.519995][ T3096] EXT4-fs: Ignoring removed mblk_io_submit option [ 835.620763][ T3102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8834'. [ 835.641416][ T5927] mos7840 2-1:0.0: required endpoints missing [ 835.685751][ T3096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.758735][ T3116] syz.2.8838 uses old SIOCAX25GETINFO [ 835.773653][ T3111] xt_NFQUEUE: number of total queues is 0 [ 835.881433][ T5934] usb 2-1: USB disconnect, device number 29 [ 836.030020][ T3127] loop2: detected capacity change from 0 to 256 [ 836.039021][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.874626][ T5934] IPVS: starting estimator thread 0... [ 836.990261][ T3168] IPVS: using max 23 ests per chain, 55200 per kthread [ 837.589422][ T30] audit: type=1326 audit(1750154417.892:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3224 comm="syz.2.8859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 837.681314][ T30] audit: type=1326 audit(1750154417.892:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3224 comm="syz.2.8859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 837.703637][ C1] vkms_vblank_simulate: vblank timer overrun [ 837.800920][ T30] audit: type=1326 audit(1750154417.910:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3224 comm="syz.2.8859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 837.852216][ T30] audit: type=1326 audit(1750154417.920:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3224 comm="syz.2.8859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 837.913380][ T3139] loop5: detected capacity change from 0 to 32768 [ 837.925198][ T30] audit: type=1326 audit(1750154417.920:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3224 comm="syz.2.8859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 838.004138][ T3139] (syz.5.8842,3139,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 838.056387][ T3139] (syz.5.8842,3139,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 838.161323][ T3139] JBD2: Ignoring recovery information on journal [ 838.176723][ T5934] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 838.237685][ T3139] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 838.410135][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 838.429002][ T5934] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 838.455508][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.508673][ T5934] usb 1-1: config 0 has no interface number 0 [ 838.529210][ T5934] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 838.550610][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.597805][ T5934] usb 1-1: Product: syz [ 838.602096][ T5934] usb 1-1: Manufacturer: syz [ 838.634439][ T5934] usb 1-1: SerialNumber: syz [ 838.662417][ T5934] usb 1-1: config 0 descriptor?? [ 838.706690][ T5934] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 838.926670][ T5841] ocfs2: Unmounting device (7,5) on (node local) [ 838.955420][ T5934] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 838.991610][ T5934] quatech2 1-1:0.51: probe with driver quatech2 failed with error -8 [ 839.153530][ T3290] loop2: detected capacity change from 0 to 1764 [ 839.207725][ T5934] usb 1-1: USB disconnect, device number 28 [ 839.208922][ T3291] loop1: detected capacity change from 0 to 2048 [ 839.262150][ T3291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 840.024335][ T5973] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 840.239937][ T5973] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 840.272387][ T5973] usb 3-1: config 0 has no interface number 1 [ 840.292285][ T5973] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 840.331723][ T5973] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.397099][ T5973] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 840.404335][ T3352] xt_NFQUEUE: number of total queues is 0 [ 840.420212][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.438065][ T5973] usb 3-1: SerialNumber: syz [ 840.440521][ T3353] loop1: detected capacity change from 0 to 1024 [ 840.474499][ T5973] usb 3-1: config 0 descriptor?? [ 840.560343][ T3353] hfsplus: filesystem is marked journaled, leaving read-only. [ 840.729254][ T5973] usb 3-1: Found UVC 0.00 device (0002:0000) [ 840.764303][ T5973] usb 3-1: No valid video chain found. [ 840.816191][ T5973] usb 3-1: USB disconnect, device number 22 [ 840.885928][ T3375] loop4: detected capacity change from 0 to 128 [ 841.400131][ T3414] loop4: detected capacity change from 0 to 22 [ 841.420025][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 841.426738][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.451756][ T3414] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 841.467349][ T5973] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 841.512623][ T3414] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 841.638388][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 841.662474][ T5973] usb 4-1: config 165 has too many interfaces: 60, using maximum allowed: 32 [ 841.703363][ T5973] usb 4-1: config 165 has 0 interfaces, different from the descriptor's value: 60 [ 841.785907][ T5973] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 841.809506][ T5973] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 841.817763][ T5973] usb 4-1: Product: syz [ 841.835559][ T5973] usb 4-1: Manufacturer: syz [ 841.840297][ T5973] usb 4-1: SerialNumber: syz [ 842.100706][ T5973] usb 4-1: USB disconnect, device number 32 [ 842.991857][ T3488] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8928'. [ 843.562854][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8936'. [ 843.624510][ T3520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8939'. [ 844.074066][ T3541] loop3: detected capacity change from 0 to 64 [ 844.135452][ T3541] Bad inode number on dev loop3: 6 is out of range [ 844.172246][ T5927] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 844.377308][ T5927] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 844.385477][ T5927] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 844.429061][ T5927] usb 3-1: config 0 has no interface number 0 [ 844.438419][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 844.460613][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.477842][ T5927] usb 3-1: Product: syz [ 844.482406][ T5927] usb 3-1: Manufacturer: syz [ 844.491371][ T5927] usb 3-1: SerialNumber: syz [ 844.516068][ T5927] usb 3-1: config 0 descriptor?? [ 844.926816][ T3515] loop1: detected capacity change from 0 to 32768 [ 845.012877][ T5927] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 845.030197][ T5927] usb 3-1: No valid video chain found. [ 845.091725][ T5927] usb 3-1: USB disconnect, device number 23 [ 845.670066][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 845.894447][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 845.912218][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 845.956732][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 99, changing to 10 [ 846.023921][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24941, setting to 1024 [ 846.093296][ T5934] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 846.124180][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.170912][ T5934] usb 2-1: Product: syz [ 846.175168][ T5934] usb 2-1: Manufacturer: syz [ 846.187946][ T3632] loop3: detected capacity change from 0 to 1024 [ 846.201806][ T5934] usb 2-1: SerialNumber: syz [ 846.266534][ T5934] usb 2-1: config 0 descriptor?? [ 846.351122][ T5934] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 846.485685][ T3647] netlink: 'syz.5.8976': attribute type 4 has an invalid length. [ 846.512625][T30924] hfsplus: b-tree write err: -5, ino 4 [ 846.560879][ T5934] usb 2-1: USB disconnect, device number 30 [ 846.736104][ T3659] netlink: 184 bytes leftover after parsing attributes in process `syz.4.8979'. [ 846.813708][ T3666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8980'. [ 846.848832][ T3663] loop2: detected capacity change from 0 to 2048 [ 846.867990][ T3668] loop5: detected capacity change from 0 to 256 [ 846.892247][ T3663] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 846.903664][ T3668] exfat: Deprecated parameter 'utf8' [ 846.958960][ T3663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.990913][ T3668] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 847.236314][ T3679] loop3: detected capacity change from 0 to 1764 [ 847.383161][ T3689] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 847.841907][ T3705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8991'. [ 847.893677][ T3709] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 848.275486][ T3727] loop5: detected capacity change from 0 to 64 [ 850.440184][ T3830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 851.067626][ T3855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9042'. [ 851.557130][ T3876] loop2: detected capacity change from 0 to 2048 [ 851.584428][ T3874] loop5: detected capacity change from 0 to 4096 [ 851.612619][ T3876] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 851.643891][ T3874] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 851.669477][ T3876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 851.783220][ T3876] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field [ 851.973235][ T3874] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 851.973235][ T3874] [ 852.353340][ T3904] loop3: detected capacity change from 0 to 256 [ 852.772879][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9060'. [ 853.093413][ T30] audit: type=1326 audit(1750154432.410:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3928 comm="syz.2.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 853.194206][ T30] audit: type=1326 audit(1750154432.457:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3928 comm="syz.2.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 853.296082][ T30] audit: type=1326 audit(1750154432.457:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3928 comm="syz.2.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 853.432776][ T30] audit: type=1326 audit(1750154432.457:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3928 comm="syz.2.9063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 853.733986][ T3952] openvswitch: netlink: Unknown key attributes 2 [ 854.325211][ T3977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9079'. [ 854.349033][ T5927] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 854.541623][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 854.595388][ T5927] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 854.604522][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.639312][ T5927] usb 6-1: Product: syz [ 854.675923][ T5927] usb 6-1: Manufacturer: syz [ 854.703119][ T5927] usb 6-1: SerialNumber: syz [ 854.724122][ T5927] usb 6-1: config 0 descriptor?? [ 854.746879][ T5927] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 855.196702][ T5927] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 855.237877][ T5927] usb 6-1: USB disconnect, device number 30 [ 855.847517][ T30] audit: type=1326 audit(1750154435.001:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 855.984326][ T30] audit: type=1326 audit(1750154435.001:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 856.093717][ T30] audit: type=1326 audit(1750154435.048:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 856.132728][ T4069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9105'. [ 856.185904][ T30] audit: type=1326 audit(1750154435.048:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 856.334232][ T4074] xt_connbytes: Forcing CT accounting to be enabled [ 856.367138][ T4074] xt_bpf: check failed: parse error [ 856.514004][ T4083] bridge0: port 3(netdevsim0) entered disabled state [ 857.022007][ T4110] netlink: 'syz.5.9120': attribute type 1 has an invalid length. [ 857.029819][ T4110] netlink: 15 bytes leftover after parsing attributes in process `syz.5.9120'. [ 857.074995][ T4113] tmpfs: Bad value for 'mpol' [ 857.308680][ T4122] netlink: 'syz.2.9124': attribute type 5 has an invalid length. [ 857.456140][ T4128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9126'. [ 858.100112][ T4151] loop3: detected capacity change from 0 to 4096 [ 858.128826][ T4151] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 858.249713][ T4151] ntfs3(loop3): ino=19, mi_enum_attr [ 858.271589][ T4151] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 858.464614][ T4177] netlink: 308 bytes leftover after parsing attributes in process `syz.5.9142'. [ 858.719449][ T4184] Invalid ELF section header size [ 859.086782][ T4199] netlink: 'syz.1.9150': attribute type 10 has an invalid length. [ 859.121691][ T4201] loop5: detected capacity change from 0 to 512 [ 859.129285][ T4199] macvlan0: entered allmulticast mode [ 859.163474][ T4199] veth1_vlan: entered allmulticast mode [ 859.173925][ T4201] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 859.196506][ T4199] team0: Port device macvlan0 added [ 859.239804][ T4201] EXT4-fs (loop5): 1 truncate cleaned up [ 859.263019][ T4201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.374575][ T4201] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.9149: bg 0: block 256: padding at end of block bitmap is not set [ 859.452016][ T4201] EXT4-fs (loop5): Remounting filesystem read-only [ 859.519774][ T4156] loop2: detected capacity change from 0 to 32768 [ 859.540075][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.221926][ T4240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9164'. [ 860.251234][ T4239] loop5: detected capacity change from 0 to 1764 [ 861.327697][ T4294] lo: entered promiscuous mode [ 861.350701][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 861.521742][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 861.568098][ T5927] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 861.616358][ T5927] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 861.639333][ T5927] usb 3-1: config 0 has no interface number 0 [ 861.663136][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 861.679986][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.712006][ T5927] usb 3-1: Product: syz [ 861.724920][ T5927] usb 3-1: Manufacturer: syz [ 861.729586][ T5927] usb 3-1: SerialNumber: syz [ 861.737602][ T4309] loop5: detected capacity change from 0 to 2048 [ 861.814964][ T5927] usb 3-1: config 0 descriptor?? [ 861.835001][ T4309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 861.861591][ T5927] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 861.895944][ T5927] usb 3-1: No valid video chain found. [ 861.916098][ T4309] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 188 with incorrect tag 0 [ 862.076446][ T4325] loop4: detected capacity change from 0 to 1024 [ 862.077714][ T4327] netlink: 'syz.3.9186': attribute type 10 has an invalid length. [ 862.099012][ T5973] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 862.114614][ T4327] veth1_vlan: left allmulticast mode [ 862.156311][ T5927] usb 3-1: USB disconnect, device number 24 [ 862.170588][ T4327] macvlan0: left promiscuous mode [ 862.249568][ T4327] bond0: (slave macvlan0): Releasing backup interface [ 862.293620][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 862.319400][ T5973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 862.345920][ T5973] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 862.375386][ T5973] usb 1-1: config 8 has no interface number 0 [ 862.409488][ T5973] usb 1-1: config 8 interface 255 has no altsetting 0 [ 862.476225][ T5973] usb 1-1: string descriptor 0 read error: -22 [ 862.483647][ T5973] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 862.526587][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.721771][ T4292] loop1: detected capacity change from 0 to 32768 [ 862.786033][ T4351] loop3: detected capacity change from 0 to 4096 [ 862.837448][ T4351] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 862.870513][ T4292] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 863.016364][ T4351] ntfs3(loop3): ino=19, mi_enum_attr [ 863.047791][ T4351] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 863.096372][ T5973] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 863.156213][ T4351] ntfs3(loop3): failed to convert "c46c" to maccyrillic [ 863.213345][ T4351] ntfs3(loop3): ino=20, mi_enum_attr [ 863.229414][ T4292] XFS (loop1): Ending clean mount [ 863.249825][ T5973] usb 1-1: USB disconnect, device number 29 [ 863.286219][ T4292] XFS (loop1): Quotacheck needed: Please wait. [ 863.536100][ T4292] XFS (loop1): Quotacheck: Done. [ 863.769954][ T5835] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 864.483048][ T5934] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 864.683352][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 864.701448][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.718326][ T4449] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9212'. [ 864.755565][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.814277][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 864.847864][ T4455] tmpfs: Bad value for 'mpol' [ 864.857344][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.890823][ T5934] usb 3-1: config 0 descriptor?? [ 864.943298][ T5934] hub 3-1:0.0: USB hub found [ 865.070482][ T4467] 9pnet_fd: Insufficient options for proto=fd [ 865.163663][ T5934] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 865.366563][ T5934] usbhid 3-1:0.0: can't add hid device: -71 [ 865.375083][ T4475] [U] ¹éMÙ­õáq&’Ù Kœ4 [ 865.400030][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 865.512686][ T5934] usb 3-1: USB disconnect, device number 25 [ 866.332278][ T4527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9233'. [ 866.391349][ T4531] netlink: 'syz.5.9235': attribute type 2 has an invalid length. [ 866.444938][ T4531] netlink: 'syz.5.9235': attribute type 1 has an invalid length. [ 866.486483][ T4531] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9235'. [ 868.000632][ T4605] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9257'. [ 868.000688][ T4607] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 868.021890][ T4609] netlink: 'syz.3.9256': attribute type 10 has an invalid length. [ 868.085407][ T4609] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.119820][ T4609] bond0: (slave team0): Enslaving as an active interface with an up link [ 868.285213][ T4615] loop4: detected capacity change from 0 to 2048 [ 868.366938][ T4615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 868.602405][ T4583] loop1: detected capacity change from 0 to 32768 [ 868.695194][ T5934] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 868.735777][ T4583] jfs_strtoUCS: char2uni returned -22. [ 868.790918][ T4583] charset = cp857, char = 0xd5 [ 868.879898][ T5934] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 868.924536][ T5934] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 868.963802][ T5934] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 869.010067][ T5934] usb 1-1: config 220 has no interface number 2 [ 869.060083][ T5934] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 869.158941][ T5934] usb 1-1: config 220 interface 0 has no altsetting 0 [ 869.186923][ T5934] usb 1-1: config 220 interface 76 has no altsetting 0 [ 869.220453][ T5934] usb 1-1: config 220 interface 1 has no altsetting 0 [ 869.244488][ T5934] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 869.293389][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.301977][ T5934] usb 1-1: Product: syz [ 869.336136][ T5934] usb 1-1: Manufacturer: syz [ 869.340830][ T5934] usb 1-1: SerialNumber: syz [ 869.579848][ T30] audit: type=1326 audit(1750154447.845:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.9276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 869.636143][ T5934] usb 1-1: selecting invalid altsetting 0 [ 869.665823][ T5934] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 869.710264][ T5934] usb 1-1: No valid video chain found. [ 869.710325][ T30] audit: type=1326 audit(1750154447.845:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.9276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 869.777572][ T5934] usb 1-1: selecting invalid altsetting 0 [ 869.805185][ T5934] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 869.874154][ T30] audit: type=1326 audit(1750154447.845:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.9276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 869.896473][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.917156][ T5934] usb 1-1: USB disconnect, device number 30 [ 870.008606][ T30] audit: type=1326 audit(1750154447.845:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.9276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 870.022899][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9278'. [ 870.078093][ T4691] new mount options do not match the existing superblock, will be ignored [ 870.149103][ T30] audit: type=1326 audit(1750154447.873:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4664 comm="syz.1.9276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 871.164174][ T4735] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 873.291409][ T5973] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 873.319759][ T4832] loop1: detected capacity change from 0 to 2048 [ 873.419073][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9329'. [ 873.422965][ T4832] NILFS (loop1): invalid segment: Checksum error in segment payload [ 873.494633][ T4832] NILFS (loop1): trying rollback from an earlier position [ 873.505473][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 873.517745][ T5973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.537404][ T30] audit: type=1326 audit(1750154451.549:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 873.563075][ T5973] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 873.608228][ T4832] NILFS (loop1): norecovery option specified, skipping roll-forward recovery [ 873.618215][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.632107][ T30] audit: type=1326 audit(1750154451.549:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 873.666160][ T5973] usb 6-1: Product: syz [ 873.686990][ T5973] usb 6-1: Manufacturer: syz [ 873.691715][ T5973] usb 6-1: SerialNumber: syz [ 873.772948][ T30] audit: type=1326 audit(1750154451.587:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 873.773694][ T5973] usb 6-1: config 0 descriptor?? [ 873.795279][ C0] vkms_vblank_simulate: vblank timer overrun [ 873.815807][ T4832] NILFS (loop1): couldn't remount because the filesystem is in an incomplete recovery state [ 873.839136][ T4856] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 873.893949][ T30] audit: type=1326 audit(1750154451.587:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 873.914861][ T5973] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 873.959120][ T5973] gspca_stv06xx: st6422 sensor detected [ 874.006394][ T30] audit: type=1326 audit(1750154451.587:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4846 comm="syz.4.9330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d5b8e929 code=0x7ffc0000 [ 874.470117][ T5973] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 874.496009][ T5973] usb 6-1: USB disconnect, device number 31 [ 874.796410][ T4904] openvswitch: netlink: IP tunnel dst address not specified [ 874.993717][ T4910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9347'. [ 875.230633][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9351'. [ 875.266959][ T4919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9351'. [ 875.403572][ T4929] loop5: detected capacity change from 0 to 256 [ 875.456912][ T4929] exfat: Deprecated parameter 'utf8' [ 875.572007][ T4929] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 875.648464][ T4942] netlink: 'syz.2.9358': attribute type 2 has an invalid length. [ 876.484028][ T4980] loop1: detected capacity change from 0 to 64 [ 876.610384][ T4979] loop2: detected capacity change from 0 to 2048 [ 876.694715][ T4979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 877.248569][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9379'. [ 877.362722][ T5003] loop5: detected capacity change from 0 to 4096 [ 877.603458][ T5018] loop4: detected capacity change from 0 to 2048 [ 877.789576][ T4975] loop3: detected capacity change from 0 to 32768 [ 878.121438][ T5037] loop5: detected capacity change from 0 to 1024 [ 878.156240][ T5041] tmpfs: Unknown parameter 'no' [ 878.291826][ T5051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9390'. [ 878.339800][ T5051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9390'. [ 878.701261][ T5060] loop4: detected capacity change from 0 to 64 [ 881.042233][ T5160] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 882.309848][ T5226] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.9446' sets config #1 [ 882.799307][ T5242] loop2: detected capacity change from 0 to 164 [ 882.870846][ T5245] loop1: detected capacity change from 0 to 128 [ 882.927387][ T5242] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 882.962844][ T5185] loop4: detected capacity change from 0 to 32768 [ 882.986313][ T5245] FAT-fs (loop1): Directory bread(block 11554) failed [ 883.032120][ T5245] FAT-fs (loop1): Directory bread(block 11555) failed [ 883.042016][ T5245] FAT-fs (loop1): Directory bread(block 11556) failed [ 883.074179][ T5245] FAT-fs (loop1): Directory bread(block 11557) failed [ 883.081073][ T5245] FAT-fs (loop1): Directory bread(block 11558) failed [ 883.119059][ T5185] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 883.136958][ T5245] FAT-fs (loop1): Directory bread(block 11559) failed [ 883.143838][ T5245] FAT-fs (loop1): Directory bread(block 11560) failed [ 883.158326][ T5843] Bluetooth: hci0: command tx timeout [ 883.207468][ T5245] FAT-fs (loop1): Directory bread(block 11561) failed [ 883.207876][ T5245] FAT-fs (loop1): Directory bread(block 11562) failed [ 883.207922][ T5245] FAT-fs (loop1): Directory bread(block 11563) failed [ 883.228748][ T5207] loop5: detected capacity change from 0 to 32768 [ 883.313936][ T5207] (syz.5.9439,5207,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 883.315567][ T5207] (syz.5.9439,5207,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 883.361321][ T5207] (syz.5.9439,5207,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 883.434945][ T5207] JBD2: Ignoring recovery information on journal [ 883.510625][ T5275] nbd: couldn't find a device at index -1605786504 [ 883.562275][ T5207] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 883.586040][ T5185] XFS (loop4): Ending clean mount [ 883.800207][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 884.202751][ T5841] ocfs2: Unmounting device (7,5) on (node local) [ 884.272998][ T5287] loop2: detected capacity change from 0 to 4096 [ 884.371384][ T5287] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 884.528018][ T5305] dlm: non-version read from control device 8192 [ 884.585409][ T5287] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 884.661088][ T5287] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 884.695251][ T5313] loop4: detected capacity change from 0 to 256 [ 884.763628][ T5313] exfat: Deprecated parameter 'utf8' [ 884.769009][ T5313] exfat: Deprecated parameter 'utf8' [ 884.802590][ T30] audit: type=1800 audit(1750154462.064:303): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9460" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 884.892687][ T5313] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 885.021182][ T5313] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 885.788361][ T5355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9482'. [ 885.903653][ T5355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9482'. [ 885.980605][ T5361] loop4: detected capacity change from 0 to 2048 [ 886.101655][ T5361] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.565173][ T5437] loop1: detected capacity change from 0 to 2048 [ 887.619124][ T5437] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 887.712271][ T5942] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 887.721255][ T5453] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.741294][ T5442] loop3: detected capacity change from 0 to 4096 [ 887.807824][ T5442] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 887.876657][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 887.920224][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 887.988727][ T5942] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 888.016993][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.047091][ T5942] usb 3-1: Product: syz [ 888.062210][ T5942] usb 3-1: Manufacturer: syz [ 888.078687][ T5942] usb 3-1: SerialNumber: syz [ 888.111628][ T5942] usb 3-1: config 0 descriptor?? [ 888.493431][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9519'. [ 888.531253][ T5942] usb 3-1: USB disconnect, device number 26 [ 888.533061][ T5485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9519'. [ 889.630278][ T5548] netlink: 'syz.1.9535': attribute type 31 has an invalid length. [ 889.650598][ T5548] netlink: 35 bytes leftover after parsing attributes in process `syz.1.9535'. [ 890.165293][ T5583] netlink: 'syz.1.9543': attribute type 7 has an invalid length. [ 890.231891][ T5586] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 890.664719][ T5610] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 891.889680][ T30] audit: type=1326 audit(1750154468.715:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 891.954852][ T5679] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9572'. [ 891.987608][ T30] audit: type=1326 audit(1750154468.734:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 892.071268][ T30] audit: type=1326 audit(1750154468.752:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 892.102964][ T30] audit: type=1326 audit(1750154468.752:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 892.134755][ T30] audit: type=1326 audit(1750154468.752:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5675 comm="syz.2.9573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 892.176457][ T5685] loop1: detected capacity change from 0 to 164 [ 892.216358][ T5683] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 892.283120][ T5685] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 892.330001][ T5685] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 893.438149][ T5743] loop5: detected capacity change from 0 to 1024 [ 893.460149][ T30] audit: type=1326 audit(1750154470.184:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 893.548999][ T5751] loop1: detected capacity change from 0 to 512 [ 893.591953][ T5751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 893.595442][ T30] audit: type=1326 audit(1750154470.184:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 893.693995][ T5751] EXT4-fs (loop1): 1 truncate cleaned up [ 893.728244][ T30] audit: type=1326 audit(1750154470.212:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e17d8e929 code=0x7ffc0000 [ 893.770683][ T30] audit: type=1326 audit(1750154470.212:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e17d8e963 code=0x7ffc0000 [ 893.789532][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 893.793271][ T30] audit: type=1326 audit(1750154470.212:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5749 comm="syz.1.9596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e17d8d3df code=0x7ffc0000 [ 894.185855][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.189281][ T5777] netlink: 'syz.5.9601': attribute type 2 has an invalid length. [ 894.271812][ T5777] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9601'. [ 894.585269][ T5799] loop4: detected capacity change from 0 to 256 [ 894.591880][ T5973] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 894.630347][ T5799] exfat: Deprecated parameter 'namecase' [ 894.703501][ T5799] exfat: Deprecated parameter 'utf8' [ 894.747956][ T5802] netlink: 'syz.5.9609': attribute type 1 has an invalid length. [ 894.774203][ T5973] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 894.789544][ T5973] usb 4-1: config 0 has no interface number 0 [ 894.799621][ T5802] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9609'. [ 894.810603][ T5973] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.857829][ T5973] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 894.861159][ T5799] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 894.890092][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.919518][ T5973] usb 4-1: Product: syz [ 894.948644][ T5973] usb 4-1: Manufacturer: syz [ 894.965054][ T5973] usb 4-1: SerialNumber: syz [ 895.005352][ T5973] usb 4-1: config 0 descriptor?? [ 895.044699][ T5806] loop2: detected capacity change from 0 to 4096 [ 895.057588][ T5973] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 895.261856][ T5847] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9614'. [ 895.403014][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 895.681283][ T5934] usb 4-1: USB disconnect, device number 33 [ 895.737177][ T5934] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 896.027952][ T5954] xt_TPROXY: Can be used only with -p tcp or -p udp [ 896.122233][ T5961] overlayfs: missing 'lowerdir' [ 896.275154][ T971] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 896.448082][ T971] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 896.468387][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.523277][ T971] usb 2-1: config 0 descriptor?? [ 896.818140][ T5990] netlink: 'syz.3.9634': attribute type 22 has an invalid length. [ 896.915043][ T5995] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 897.000200][ T971] usb 2-1: Cannot read MAC address [ 897.021859][ T971] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 897.101982][ T971] usb 2-1: USB disconnect, device number 31 [ 897.257483][ T6016] loop5: detected capacity change from 0 to 64 [ 897.754022][ T6036] usb usb7: usbfs: process 6036 (syz.5.9646) did not claim interface 0 before use [ 897.786604][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9649'. [ 898.456692][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9657'. [ 898.465706][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9657'. [ 898.519018][ T6071] netlink: 'syz.5.9659': attribute type 2 has an invalid length. [ 898.550664][ T6071] netlink: 'syz.5.9659': attribute type 8 has an invalid length. [ 898.582546][ T6071] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9659'. [ 899.104676][ T6089] loop2: detected capacity change from 0 to 4096 [ 899.176480][ T6089] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 899.300155][ T6089] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 899.338362][ T6047] loop1: detected capacity change from 0 to 32768 [ 899.420243][ T6047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9651 (6047) [ 899.500641][ T6047] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 899.559605][ T6047] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 899.617045][ T6047] BTRFS info (device loop1): disk space caching is enabled [ 899.679574][ T6047] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 899.975741][ T6047] BTRFS info (device loop1): rebuilding free space tree [ 900.011172][ T6047] BTRFS info (device loop1): disabling free space tree [ 900.018775][ T6047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 900.028996][ T6047] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 900.594404][ T5835] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 900.923598][ T6180] netlink: 'syz.4.9688': attribute type 11 has an invalid length. [ 902.133223][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9703'. [ 902.526909][ T6190] loop1: detected capacity change from 0 to 32768 [ 902.602430][ T6190] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9687 (6190) [ 902.669607][ T6190] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 902.688937][ T6240] geneve3: entered promiscuous mode [ 902.701857][ T6190] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 902.750765][ T6190] BTRFS info (device loop1): using free-space-tree [ 903.348994][ T6210] loop3: detected capacity change from 0 to 32768 [ 903.441741][ T6210] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 903.488486][ T6210] gfs2: fsid=syz:syz: unknown hostdata (norecovery) [ 904.089307][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9721'. [ 904.343024][ T5835] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 905.634591][ T6371] loop2: detected capacity change from 0 to 64 [ 905.858936][ T6378] netlink: 'syz.4.9745': attribute type 1 has an invalid length. [ 905.891259][ T6378] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9745'. [ 907.050724][ T6424] loop1: detected capacity change from 0 to 16 [ 907.099673][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.120060][ T6424] erofs (device loop1): mounted with root inode @ nid 36. [ 907.168879][ T6424] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 907.229703][ T6424] erofs (device loop1): failed to decompress -46 in[60, 4036] out[1851] [ 907.257438][ T6424] erofs (device loop1): read error -117 @ 43 of nid 36 [ 907.510460][ T6431] loop3: detected capacity change from 0 to 4096 [ 907.696777][ T6431] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 908.027027][ T5842] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22. [ 908.546089][ T6481] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 908.942024][ T6496] cgroup: name respecified [ 909.329192][ T6508] loop2: detected capacity change from 0 to 4096 [ 909.490648][ T6522] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 909.546925][ T6508] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 909.577544][ T6525] loop4: detected capacity change from 0 to 512 [ 909.692232][ T6525] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 909.778397][ T6525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 909.829999][ T6525] ext4 filesystem being mounted at /1603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.127287][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 910.197660][ T6547] mkiss: ax0: crc mode is auto. [ 910.284199][ T6556] loop2: detected capacity change from 0 to 256 [ 910.578106][ T6573] netlink: 'syz.4.9800': attribute type 49 has an invalid length. [ 910.811378][ T6584] loop1: detected capacity change from 0 to 512 [ 910.916592][ T6584] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 911.221956][ T6603] tmpfs: Group quota inode hardlimit too large. [ 911.277037][ T5835] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 911.305647][ T6609] xt_ecn: cannot match TCP bits for non-tcp packets [ 911.572300][ T6617] dlm: no locking on control device [ 911.708007][ T6630] loop3: detected capacity change from 0 to 8 [ 911.778389][ T6630] SQUASHFS error: Unable to read directory block [629:26] [ 913.703224][ T6681] orangefs_mount: mount request failed with -4 [ 914.057607][ T6726] loop1: detected capacity change from 0 to 2048 [ 914.148639][ T6726] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 914.175891][ T6726] UDF-fs: Scanning with blocksize 512 failed [ 914.305271][ T6726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.364679][ T6736] netlink: 'syz.5.9856': attribute type 5 has an invalid length. [ 914.450864][ T6742] loop2: detected capacity change from 0 to 8 [ 914.516954][ T6744] loop3: detected capacity change from 0 to 64 [ 914.571334][ T6742] SQUASHFS error: Unable to read directory block [629:26] [ 914.808731][ T6757] ip6t_REJECT: ECHOREPLY is not supported [ 915.509930][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 915.509957][ T30] audit: type=1326 audit(1750154490.811:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.5.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 915.598441][ T30] audit: type=1326 audit(1750154490.811:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.5.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 915.675640][ T30] audit: type=1326 audit(1750154490.811:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.5.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 915.752941][ T30] audit: type=1326 audit(1750154490.811:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.5.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 915.805914][ T30] audit: type=1326 audit(1750154490.811:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.5.9870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 916.535916][ T6832] netlink: 'syz.3.9886': attribute type 10 has an invalid length. [ 916.610426][ T6832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 916.646350][ T6829] loop2: detected capacity change from 0 to 4096 [ 916.784389][ T6843] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 916.832936][ T6829] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 917.130988][ T971] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 917.324754][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 917.337622][ T971] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 917.366163][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 917.414035][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 917.442861][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.470367][ T971] usb 2-1: Product: syz [ 917.476284][ T971] usb 2-1: Manufacturer: syz [ 917.480935][ T971] usb 2-1: SerialNumber: syz [ 917.503380][ T6873] loop2: detected capacity change from 0 to 22 [ 917.515386][ T971] usb 2-1: config 0 descriptor?? [ 917.536428][ T6873] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 917.569278][ T6873] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 917.820507][ T971] appledisplay: Apple Cinema Display connected [ 917.887200][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9901'. [ 918.205013][ T971] usb 2-1: USB disconnect, device number 32 [ 918.211198][ C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 918.276242][ T971] appledisplay: Apple Cinema Display disconnected [ 918.300616][ T6905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9905'. [ 919.468832][ T6959] loop3: detected capacity change from 0 to 512 [ 919.588022][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9925'. [ 919.665732][ T6959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.803890][ T6959] ext4 filesystem being mounted at /1654/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.135398][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.459138][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9936'. [ 920.686633][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9939'. [ 920.729751][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9939'. [ 920.816510][ T7017] geneve3: entered promiscuous mode [ 920.827344][ T7017] geneve3: entered allmulticast mode [ 920.926381][ T5973] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 920.987357][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9945'. [ 921.108986][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 921.132751][ T5973] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 921.166595][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.209768][ T5973] usb 2-1: config 0 descriptor?? [ 921.261437][ T5973] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 921.450932][ T7056] Invalid ELF header magic: != ELF [ 921.719308][ T5973] gspca_nw80x: reg_r err -71 [ 921.724079][ T5973] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 921.773752][ T5973] usb 2-1: USB disconnect, device number 33 [ 921.863316][ T7079] loop2: detected capacity change from 0 to 256 [ 921.894719][ T7067] loop4: detected capacity change from 0 to 4096 [ 921.907680][ T7067] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 921.932633][ T7079] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 921.952812][ T5934] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 922.103642][ T7067] ntfs3(loop4): ino=19, mi_enum_attr [ 922.173767][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 922.219827][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.263305][ T7067] ntfs3(loop4): failed to convert "c46c" to cp850 [ 922.272848][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.325683][ T7067] ntfs3(loop4): ino=20, mi_enum_attr [ 922.358220][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.375481][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.433257][ T5934] usb 1-1: Product: syz [ 922.437515][ T5934] usb 1-1: Manufacturer: syz [ 922.477132][ T5934] usb 1-1: SerialNumber: syz [ 922.751573][ T5934] usb 1-1: 0:2 : does not exist [ 922.830564][ T5934] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 922.860543][ T7120] netlink: 'syz.2.9964': attribute type 5 has an invalid length. [ 922.893064][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9964'. [ 922.907966][ T5934] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 922.962318][ T5934] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 923.024580][ T5934] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 923.050248][ T7128] loop3: detected capacity change from 0 to 512 [ 923.087512][ T7128] EXT4-fs: Ignoring removed oldalloc option [ 923.127670][ T5934] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 923.147924][ T7128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 923.202129][ T5934] usb 1-1: USB disconnect, device number 31 [ 923.294733][ T7128] EXT4-fs (loop3): 1 truncate cleaned up [ 923.326029][ T7128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.402443][ T7153] loop5: detected capacity change from 0 to 256 [ 923.493954][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.518058][ T7158] netlink: 'syz.4.9969': attribute type 10 has an invalid length. [ 923.549895][ T7158] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9969'. [ 923.651170][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9973'. [ 923.697203][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9973'. [ 923.743384][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.753720][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9973'. [ 923.855286][ T7165] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9973'. [ 923.904667][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9973'. [ 923.968346][ T7176] netlink: 'syz.1.9977': attribute type 2 has an invalid length. [ 924.088146][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9975'. [ 924.255560][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9979'. [ 924.327828][ T7189] trusted_key: encrypted_key: keyword 'loaecryptfs' not recognized [ 924.760591][ T7210] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9986'. [ 924.808262][ T7210] netlink: 196 bytes leftover after parsing attributes in process `syz.2.9986'. [ 925.212630][ T5934] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 925.290759][ T7236] netlink: 'syz.3.9995': attribute type 8 has an invalid length. [ 925.353305][ T7230] loop4: detected capacity change from 0 to 4096 [ 925.394506][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 925.412699][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 62432, setting to 1024 [ 925.463032][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 925.521437][ T5934] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 925.544567][ T7246] loop2: detected capacity change from 0 to 512 [ 925.553145][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.574228][ T7230] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 925.604207][ T5934] usb 1-1: config 0 descriptor?? [ 925.639862][ T7217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 925.674393][ T5934] hso 1-1:0.0: Can't find BULK OUT endpoint [ 925.732844][ T7246] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.9997: bg 0: block 248: padding at end of block bitmap is not set [ 925.836202][ T5836] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 925.857410][ T7246] Quota error (device loop2): write_blk: dquota write failed [ 925.918722][ T7246] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 925.945882][ T7246] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.9997: Failed to acquire dquot type 1 [ 925.948067][ T5927] usb 1-1: USB disconnect, device number 32 [ 926.072911][ T7246] EXT4-fs (loop2): 1 truncate cleaned up [ 926.112781][ T7246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.152598][ T7246] ext4 filesystem being mounted at /1694/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.183886][ T7278] loop1: detected capacity change from 0 to 64 [ 926.216563][ T7278] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 926.369797][ T7278] minix_free_inode: bit 4 already cleared [ 926.499564][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.568724][ T36] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 926.615567][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6967: comm kworker/u8:2: Failed to release dquot type 1 [ 928.166576][ T7361] loop5: detected capacity change from 0 to 1024 [ 928.235877][ T7361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 928.375299][ T7361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 928.410368][ T7371] syz.4.10033: attempt to access beyond end of device [ 928.410368][ T7371] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 928.534145][ T7328] loop3: detected capacity change from 0 to 32768 [ 928.632486][ T7328] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 928.668765][ T5841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.752627][ T7328] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 928.940734][ T7395] loop1: detected capacity change from 0 to 128 [ 928.988004][ T7395] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 929.051550][ T7395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 929.182537][ T5842] ocfs2: Unmounting device (7,3) on (node local) [ 929.434636][ T7409] loop4: detected capacity change from 0 to 2048 [ 929.489989][ T7409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 931.106608][ T30] audit: type=1326 audit(1750154505.404:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.10066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 931.150573][ T30] audit: type=1326 audit(1750154505.404:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.10066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 931.207054][ T30] audit: type=1326 audit(1750154505.497:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.10066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 931.298939][ T30] audit: type=1326 audit(1750154505.497:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.10066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 931.399355][ T30] audit: type=1326 audit(1750154505.497:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.5.10066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x7ffc0000 [ 931.705295][ T7509] Invalid source name [ 932.353646][ T5934] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 932.545944][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 932.564438][ T5934] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 932.588198][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 932.623490][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 932.665564][ T5934] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 932.675159][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.714530][ T5934] usb 1-1: Product: syz [ 932.734118][ T5934] usb 1-1: Manufacturer: syz [ 932.748988][ T5934] usb 1-1: SerialNumber: syz [ 932.793304][ T5934] usb 1-1: config 0 descriptor?? [ 932.817076][ T30] audit: type=1326 audit(1750154507.003:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb60d8e929 code=0x7ffc0000 [ 932.828666][ T5934] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 932.906051][ T30] audit: type=1326 audit(1750154507.031:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb60d8e929 code=0x7ffc0000 [ 932.983318][ T30] audit: type=1326 audit(1750154507.041:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fbb60d8e929 code=0x7ffc0000 [ 933.078673][ T30] audit: type=1326 audit(1750154507.041:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7554 comm="syz.3.10088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb60d8e929 code=0x7ffc0000 [ 933.084052][ T5934] usb 1-1: USB disconnect, device number 33 [ 933.617423][ T7575] mkiss: ax0: crc mode is auto. [ 933.783103][ T7584] loop3: detected capacity change from 0 to 256 [ 933.793952][ T7551] loop1: detected capacity change from 0 to 32768 [ 933.872902][ T7584] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 933.901830][ T7543] loop4: detected capacity change from 0 to 32768 [ 933.920497][ T7551] find_entry called with index = 0 [ 933.976148][ T7584] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 934.044079][ T7543] ea_get: invalid extended attribute [ 934.069937][ T7584] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x062de574, utbl_chksum : 0xe619d30d) [ 934.203063][ T5927] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 934.385804][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 934.397351][ T7560] loop2: detected capacity change from 0 to 32768 [ 934.417793][ T5927] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.452523][ T5927] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.508982][ T5927] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 934.590316][ T5927] usb 1-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 934.636079][ T5927] usb 1-1: config 7 interface 0 has no altsetting 0 [ 934.656022][ T7611] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 934.662638][ T7611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 934.686010][ T5927] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 934.745698][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.748472][ T7611] vhci_hcd vhci_hcd.0: Device attached [ 934.897828][ T5973] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 935.026014][ T5934] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 935.135527][ T5973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.195321][ T5973] usb 6-1: config 0 has no interfaces? [ 935.227843][ T5973] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 935.268133][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.311862][ T5927] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input52 [ 935.344851][ T5973] usb 6-1: config 0 descriptor?? [ 935.626329][ T7613] vhci_hcd: cannot find a urb of seqnum 64 max seqnum 1 [ 935.627627][T25757] usb 6-1: USB disconnect, device number 32 [ 935.655142][ T36] vhci_hcd: stop threads [ 935.672868][ T36] vhci_hcd: release socket [ 935.684839][ T5927] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 935.699494][ T5942] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 935.708298][ T36] vhci_hcd: disconnect device [ 935.815916][ T7665] __nla_validate_parse: 5 callbacks suppressed [ 935.815944][ T7665] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10105'. [ 935.847997][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10105'. [ 935.878826][ T5927] usb 1-1: USB disconnect, device number 34 [ 935.916683][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 935.962273][ T5942] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 936.005643][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.022623][ T7665] vlan2: entered allmulticast mode [ 936.027850][ T7665] gretap0: entered allmulticast mode [ 936.035595][ T5942] usb 3-1: config 0 descriptor?? [ 936.072561][ T7642] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 936.231850][ T7670] fido_id[7670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 936.551387][ T5942] smartjoyplus 0003:0B43:0003.0002: unknown main item tag 0x0 [ 936.587258][ T5942] smartjoyplus 0003:0B43:0003.0002: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.2-1/input0 [ 936.602726][ T7700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 936.644057][ T5942] smartjoyplus 0003:0B43:0003.0002: no output reports found [ 936.685648][ T7697] loop3: detected capacity change from 0 to 4096 [ 936.767291][ T5942] usb 3-1: USB disconnect, device number 27 [ 936.794205][ T7697] NILFS (loop3): invalid segment: Checksum error in segment payload [ 936.809040][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10111'. [ 936.850361][ T7697] NILFS (loop3): trying rollback from an earlier position [ 936.951515][ T7703] fido_id[7703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 937.065752][ T7697] NILFS (loop3): recovery complete [ 937.118089][ T7729] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 937.216292][ T7730] loop5: detected capacity change from 0 to 2048 [ 937.414703][ T7736] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 937.809440][ T30] audit: type=1326 audit(1750154511.671:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.1.10119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e17d8e929 code=0x0 [ 938.036221][ T7761] loop2: detected capacity change from 0 to 256 [ 938.140898][ T7761] FAT-fs (loop2): Directory bread(block 64) failed [ 938.168539][ T7761] FAT-fs (loop2): Directory bread(block 65) failed [ 938.211096][ T7761] FAT-fs (loop2): Directory bread(block 66) failed [ 938.240436][ T7761] FAT-fs (loop2): Directory bread(block 67) failed [ 938.259566][ T7761] FAT-fs (loop2): Directory bread(block 68) failed [ 938.266375][ T7761] FAT-fs (loop2): Directory bread(block 69) failed [ 938.273199][ T7761] FAT-fs (loop2): Directory bread(block 70) failed [ 938.280025][ T7761] FAT-fs (loop2): Directory bread(block 71) failed [ 938.287982][ T7761] FAT-fs (loop2): Directory bread(block 72) failed [ 938.294865][ T7761] FAT-fs (loop2): Directory bread(block 73) failed [ 938.457545][T25757] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 938.692459][T25757] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 938.701816][T25757] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 938.767500][T25757] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 938.777870][T25757] usb 4-1: config 220 has no interface number 2 [ 938.840209][T25757] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 938.879179][T25757] usb 4-1: config 220 interface 0 has no altsetting 0 [ 938.900763][T25757] usb 4-1: config 220 interface 76 has no altsetting 0 [ 938.918214][T25757] usb 4-1: config 220 interface 1 has no altsetting 0 [ 938.949856][T25757] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 938.959050][T25757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.988631][ T7793] loop5: detected capacity change from 0 to 8 [ 939.012276][T25757] usb 4-1: Product: syz [ 939.032439][ T7793] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 939.045232][T25757] usb 4-1: Manufacturer: syz [ 939.058937][T25757] usb 4-1: SerialNumber: syz [ 939.094683][ T5848] udevd[5848]: incorrect cramfs checksum on /dev/loop5 [ 939.378281][T25757] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 939.384749][T25757] usb 4-1: No valid video chain found. [ 939.420062][T25757] usb 4-1: selecting invalid altsetting 0 [ 939.494723][T25757] usb 4-1: selecting invalid altsetting 0 [ 939.506752][T25757] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 939.551505][T25757] usb 4-1: USB disconnect, device number 34 [ 939.917176][ T7828] loop4: detected capacity change from 0 to 4096 [ 939.976473][ T7828] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 940.521082][ T5934] vhci_hcd: vhci_device speed not set [ 940.795445][ T7876] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 941.131918][ T5927] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 941.183477][T25757] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 941.299923][ T30] audit: type=1326 audit(1750154514.927:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.5.10156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfa538e929 code=0x0 [ 941.322759][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 941.344380][ T5927] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 941.357772][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.364573][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 941.374556][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.376009][T25757] usb 2-1: Using ep0 maxpacket: 16 [ 941.398149][ T5927] usb 3-1: config 0 descriptor?? [ 941.415078][T25757] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.432053][T25757] usb 2-1: config 0 interface 0 altsetting 203 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.464477][T25757] usb 2-1: config 0 interface 0 altsetting 203 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.497315][T25757] usb 2-1: config 0 interface 0 has no altsetting 0 [ 941.525067][T25757] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 941.549128][T25757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.591123][T25757] usb 2-1: config 0 descriptor?? [ 941.901136][ T5927] logitech 0003:046D:C50C.0003: hidraw0: USB HID vff.fc Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 942.053894][T25757] microsoft 0003:045E:00F9.0004: item fetching failed at offset 0/3 [ 942.068459][ T5934] usb 3-1: USB disconnect, device number 28 [ 942.097081][T25757] microsoft 0003:045E:00F9.0004: parse failed [ 942.110694][T25757] microsoft 0003:045E:00F9.0004: probe with driver microsoft failed with error -22 [ 942.195187][ T7909] fido_id[7909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.267545][T25757] usb 2-1: USB disconnect, device number 34 [ 942.648137][T25757] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 942.845580][T25757] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 942.854726][T25757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 20, changing to 4 [ 942.884465][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10165'. [ 942.901856][T25757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 39844, setting to 1023 [ 942.904544][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10165'. [ 942.969806][T25757] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 942.994211][T25757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.021435][T25757] usb 1-1: Product: syz [ 943.042667][T25757] usb 1-1: Manufacturer: syz [ 943.085594][T25757] usb 1-1: SerialNumber: syz [ 943.104908][T25757] usb 1-1: config 0 descriptor?? [ 943.124000][T25757] hub 1-1:0.0: bad descriptor, ignoring hub [ 943.153489][T25757] hub 1-1:0.0: probe with driver hub failed with error -5 [ 943.253580][T25757] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input53 [ 943.333067][T25757] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 943.506498][T25757] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 943.642300][T25757] usb 1-1: USB disconnect, device number 35 [ 943.909604][ T5973] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 943.920829][ T8011] loop1: detected capacity change from 0 to 2048 [ 943.943333][ T8011] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 944.077037][ T8026] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 944.147042][ T5973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.164653][ T8021] loop4: detected capacity change from 0 to 4096 [ 944.172433][ T8011] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 944.188720][ T5973] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 944.210630][ T8021] ntfs3: Bad value for 'fmask' [ 944.228798][ T8011] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 944.242571][ T5973] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 944.286066][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 944.336632][ T5973] usb 6-1: SerialNumber: syz [ 944.389185][ T8011] Remounting filesystem read-only [ 944.408177][ T8011] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 944.463517][ T8011] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16) [ 944.516252][ T8011] NILFS (loop1): error -5 truncating bmap (ino=16) [ 944.572628][ T5927] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 944.640746][ T5973] usb 6-1: 0:2 : does not exist [ 944.733447][ T5973] usb 6-1: USB disconnect, device number 33 [ 944.742779][ T8049] loop3: detected capacity change from 0 to 64 [ 944.752710][ T5835] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 944.808420][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.855138][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 944.911988][ T5927] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 944.947264][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.984486][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 945.029435][ T5927] usb 1-1: config 0 descriptor?? [ 945.203159][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10186'. [ 945.330440][ T8086] loop4: detected capacity change from 0 to 256 [ 945.378667][ T8086] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 945.527707][ T8091] loop3: detected capacity change from 0 to 256 [ 945.551273][ T5927] corsair-psu 0003:1B1C:1C07.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.0-1/input0 [ 945.583819][ T8096] loop1: detected capacity change from 0 to 128 [ 945.607046][ T8091] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 945.626489][ T8096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 945.640242][ T8096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 945.685828][ T5927] corsair-psu 0003:1B1C:1C07.0005: unable to initialize device (-38) [ 945.703295][ T8096] EXT4-fs (loop1): Test dummy encryption mode enabled [ 945.746416][ T5927] corsair-psu 0003:1B1C:1C07.0005: probe with driver corsair-psu failed with error -38 [ 945.876178][ T8096] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 945.916206][ T5927] usb 1-1: USB disconnect, device number 36 [ 945.930247][ T8096] ext4 filesystem being mounted at /1685/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 945.975929][ T8101] loop5: detected capacity change from 0 to 4096 [ 946.008853][ T8096] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 946.073485][ T8102] fido_id[8102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 946.098970][ T30] audit: type=1800 audit(1750154519.407:342): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10191" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 946.166438][ T8101] NILFS (loop5): invalid segment: Checksum error in segment payload [ 946.205913][ T8101] NILFS (loop5): trying rollback from an earlier position [ 946.334223][ T8101] NILFS (loop5): recovery complete [ 946.401711][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 946.446614][ T8136] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 946.833606][ T8153] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10201'. [ 946.873200][ T8153] nbd: illegal input index 327744 [ 947.350591][ T8181] loop5: detected capacity change from 0 to 22 [ 947.381085][ T8181] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 947.394854][ T8181] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 947.869994][ T8208] loop5: detected capacity change from 0 to 64 [ 948.437428][ T8235] loop4: detected capacity change from 0 to 512 [ 948.527629][ T8235] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 948.535820][ T8235] System zones: 0-2, 18-18, 34-35 [ 948.707418][ T8235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 948.862397][ T8248] loop3: detected capacity change from 0 to 2048 [ 948.949305][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.994156][ T8248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.098892][ T8248] EXT4-fs error (device loop3): empty_inline_dir:1784: inode #12: block 9: comm syz.3.10226: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 949.119303][ T8260] loop2: detected capacity change from 0 to 512 [ 949.155206][ T8260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 949.176875][ T8248] EXT4-fs (loop3): Remounting filesystem read-only [ 949.201440][ T8248] EXT4-fs warning (device loop3): empty_inline_dir:1787: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 949.292544][ T8264] loop4: detected capacity change from 0 to 1024 [ 949.299415][ T8260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 949.362720][ T8264] EXT4-fs: inline encryption not supported [ 949.402097][ T8260] System zones: 1-12 [ 949.406671][ T8264] EXT4-fs: Ignoring removed i_version option [ 949.465861][ T8264] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 949.480538][ T8260] EXT4-fs (loop2): 1 truncate cleaned up [ 949.515721][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 949.535217][ T8242] loop1: detected capacity change from 0 to 32768 [ 949.545570][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.585792][ T8264] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.10231: lblock 2 mapped to illegal pblock 2 (length 1) [ 949.601784][ T8260] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 949.706938][ T30] audit: type=1326 audit(1750154522.803:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 949.730692][ T8264] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 949.763493][ T8264] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.10231: lblock 0 mapped to illegal pblock 48 (length 1) [ 949.813602][ T8264] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 949.844469][ T30] audit: type=1326 audit(1750154522.841:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 949.884910][ T8264] EXT4-fs error (device loop4): ext4_acquire_dquot:6931: comm syz.4.10231: Failed to acquire dquot type 0 [ 949.933288][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.949299][ T30] audit: type=1326 audit(1750154522.841:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 949.997813][ T8264] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 950.060051][ T8264] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.10231: mark_inode_dirty error [ 950.092750][ T30] audit: type=1326 audit(1750154522.841:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 950.124701][ T8264] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 950.143766][ T8292] loop5: detected capacity change from 0 to 16 [ 950.161035][ T8264] EXT4-fs (loop4): 1 orphan inode deleted [ 950.185707][T30924] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 950.210426][ T8264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 950.258255][ T30] audit: type=1326 audit(1750154522.850:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 950.327249][T30924] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 950.366495][T30924] EXT4-fs error (device loop4): ext4_release_dquot:6967: comm kworker/u8:5: Failed to release dquot type 0 [ 950.387467][ T30] audit: type=1326 audit(1750154522.850:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8275 comm="syz.0.10234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b938e929 code=0x7ffc0000 [ 950.396219][ T8287] loop3: detected capacity change from 0 to 2048 [ 950.441573][ T8264] EXT4-fs error (device loop4): __ext4_get_inode_loc:4791: comm syz.4.10231: Invalid inode table block 1 in block_group 0 [ 950.515770][ T8264] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 950.636015][ T8287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 950.729919][ T8284] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 512 extent 56+512 [ 950.796073][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.899823][ T5836] EXT4-fs error (device loop4): __ext4_get_inode_loc:4791: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 950.966658][ T5836] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 950.998025][ T5836] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 951.048430][ T8313] loop1: detected capacity change from 0 to 4096 [ 951.293784][ T8313] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 951.381842][ T8313] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 952.189004][ T8363] loop2: detected capacity change from 0 to 256 [ 952.259258][ T8363] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 952.461324][T25757] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 952.655452][T25757] usb 4-1: Using ep0 maxpacket: 32 [ 952.687582][T25757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.710100][T25757] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.744605][T25757] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 952.787830][T25757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.845670][T25757] usb 4-1: config 0 descriptor?? [ 952.847754][ T8380] loop2: detected capacity change from 0 to 64 [ 952.941135][ T8331] loop4: detected capacity change from 0 to 40427 [ 952.998241][ T8331] F2FS-fs (loop4): build fault injection rate: 16 [ 953.030550][ T8331] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 953.064381][ T8331] F2FS-fs (loop4): invalid crc value [ 953.104754][ T8331] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_segment_manager+0x4b2a/0xa540 [ 953.216889][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x70d/0x850 [ 953.471406][T25757] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0006/input/input54 [ 953.708135][T25757] sony 0003:054C:03D5.0006: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 953.841401][T25757] usb 4-1: USB disconnect, device number 35 [ 953.904808][ T8331] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 954.035533][ T8331] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x143/0x570 [ 954.182490][ T5934] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 954.338569][ T8441] fido_id[8441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 954.409992][ T5934] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 954.461403][ T5934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 954.505468][ T5934] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 954.545007][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.563166][ T8471] loop2: detected capacity change from 0 to 256 [ 954.606268][ T5934] usb 6-1: Product: syz [ 954.622912][ T5934] usb 6-1: Manufacturer: syz [ 954.641136][ T5934] usb 6-1: SerialNumber: syz [ 954.642443][ T8471] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 954.655683][ T8474] loop1: detected capacity change from 0 to 164 [ 954.691030][ T5934] usb 6-1: config 0 descriptor?? [ 954.739305][ T8471] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 954.786540][ T5934] usb 6-1: selecting invalid altsetting 0 [ 954.816285][ T8474] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 954.827481][ T8471] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 955.065346][ T5973] usb 6-1: USB disconnect, device number 34 [ 955.248400][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.334700][ T8516] loop3: detected capacity change from 0 to 16 [ 955.533948][ T8516] erofs (device loop3): mounted with root inode @ nid 36. [ 956.617553][ T8568] loop1: detected capacity change from 0 to 128 [ 956.719680][ T30] audit: type=1800 audit(1750154529.361:349): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10299" name="file2" dev="loop1" ino=1048746 res=0 errno=0 [ 956.738490][ T8568] syz.1.10299: attempt to access beyond end of device [ 956.738490][ T8568] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 956.800995][ T8577] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 957.197051][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10307'. [ 957.242965][ T8593] loop1: detected capacity change from 0 to 256 [ 957.250756][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.410405][ T8593] FAT-fs (loop1): Directory bread(block 64) failed [ 957.432030][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10310'. [ 957.450754][ T8593] FAT-fs (loop1): Directory bread(block 65) failed [ 957.477565][ T8593] FAT-fs (loop1): Directory bread(block 66) failed [ 957.529261][ T8593] FAT-fs (loop1): Directory bread(block 67) failed [ 957.535988][ T8593] FAT-fs (loop1): Directory bread(block 68) failed [ 957.585109][ T8593] FAT-fs (loop1): Directory bread(block 69) failed [ 957.614235][ T8593] FAT-fs (loop1): Directory bread(block 70) failed [ 957.647842][ T8593] FAT-fs (loop1): Directory bread(block 71) failed [ 957.678105][ T8593] FAT-fs (loop1): Directory bread(block 72) failed [ 957.696543][ T8593] FAT-fs (loop1): Directory bread(block 73) failed [ 957.841711][ T8609] loop5: detected capacity change from 0 to 1024 [ 958.038926][ T9711] hfsplus: b-tree write err: -5, ino 4 [ 958.074100][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10315'. [ 958.695038][ T8642] loop5: detected capacity change from 0 to 512 [ 958.742004][ T8642] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 958.749171][ T8648] loop1: detected capacity change from 0 to 512 [ 958.765506][ T30] audit: type=1326 audit(1750154531.278:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.10324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 958.812417][ T8648] EXT4-fs: Ignoring removed bh option [ 958.828368][ T30] audit: type=1326 audit(1750154531.297:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.10324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 958.852812][ T30] audit: type=1326 audit(1750154531.306:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.10324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 958.875596][ T30] audit: type=1326 audit(1750154531.306:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.2.10324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b818e929 code=0x7ffc0000 [ 958.879627][ T8648] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 958.898125][ T8642] EXT4-fs (loop5): 1 truncate cleaned up [ 958.920437][ T8642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.016691][ T8642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.058730][ T8648] EXT4-fs (loop1): 1 truncate cleaned up [ 959.072880][ T8648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.346013][ T5927] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 959.385070][ T8675] pimreg: entered allmulticast mode [ 959.469982][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.542871][ T5927] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 959.572264][ T5927] usb 3-1: config 0 has no interface number 0 [ 959.597542][ T5927] usb 3-1: config 0 interface 98 has no altsetting 0 [ 959.635362][ T5927] usb 3-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 959.664781][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.709185][ T5927] usb 3-1: Product: syz [ 959.713459][ T5927] usb 3-1: Manufacturer: syz [ 959.742018][ T5927] usb 3-1: SerialNumber: syz [ 959.804805][ T5927] usb 3-1: config 0 descriptor?? [ 960.054159][ T5927] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 960.312790][ T8710] loop4: detected capacity change from 0 to 512 [ 960.377019][ T8710] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 960.406793][ T8710] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 960.451889][ T8710] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 960.532644][ T8710] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 960.541868][ T8679] loop5: detected capacity change from 0 to 32768 [ 960.600562][ T8710] System zones: 0-2, 18-18, 34-34 [ 960.607121][ T5934] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 960.642405][ T8710] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.10337: iget: bad i_size value: 360287970189639680 [ 960.649961][ T5927] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 960.701363][ T8679] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 960.712893][ T8710] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10337: couldn't read orphan inode 15 (err -117) [ 960.781061][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 960.791127][ T5934] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.805241][ T8710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.818987][ T5934] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.839270][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 960.859192][ T5934] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 960.903618][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.950375][ T5934] usb 2-1: config 0 descriptor?? [ 961.028729][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.051058][ T5841] (syz-executor,5841,1):ocfs2_inode_is_valid_to_delete:885 ERROR: Skipping delete of system file 76 [ 961.117386][ T5841] ocfs2: Unmounting device (7,5) on (node local) [ 961.197845][ T5927] usb 3-1: failed to restore interface 98 altsetting 4 (error=-71) [ 961.252935][ T5927] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 961.290251][ T5927] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 961.300207][ T5973] usb 3-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 961.334252][ T5973] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 961.351738][ T8753] loop4: detected capacity change from 0 to 1024 [ 961.361304][ T5927] usb 3-1: USB disconnect, device number 29 [ 961.477079][ T5934] elecom 0003:056E:00E6.0007: item fetching failed at offset 0/2 [ 961.511201][ T5934] elecom 0003:056E:00E6.0007: probe with driver elecom failed with error -22 [ 961.679618][ T5934] usb 2-1: USB disconnect, device number 35 [ 961.945959][ T8788] loop5: detected capacity change from 0 to 64 [ 962.041198][ T30] audit: type=1800 audit(1750154534.337:354): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10349" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 962.342204][ T8808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10352'. [ 962.435483][ T5927] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 962.611248][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 962.647151][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 962.661339][ T8817] loop1: detected capacity change from 0 to 512 [ 962.690277][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 962.753207][ T5927] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 962.764887][ T8817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.788884][ T8817] ext4 filesystem being mounted at /1711/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.796564][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.810226][ T5927] usb 1-1: Product: syz [ 962.814454][ T5927] usb 1-1: Manufacturer: syz [ 962.819447][ T5927] usb 1-1: SerialNumber: syz [ 962.828873][ T5927] usb 1-1: config 0 descriptor?? [ 962.835524][ T8798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 962.843703][ T8798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 962.875489][ T5927] usb 1-1: ucan: probing device on interface #0 [ 963.057879][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.223341][ T8843] loop2: detected capacity change from 0 to 64 [ 963.243442][ T8843] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 963.383220][ T5927] usb 1-1: ucan: device reported invalid tx-fifo size [ 963.409530][ T5927] usb 1-1: ucan: probe failed; try to update the device firmware [ 963.708282][ T5927] usb 1-1: USB disconnect, device number 37 [ 963.864821][ T8869] loop3: detected capacity change from 0 to 512 [ 963.949251][ T8869] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 964.046816][ T8869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 964.150344][ T8869] ext4 filesystem being mounted at /1726/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.369509][ T8879] loop2: detected capacity change from 0 to 4096 [ 964.383902][ T8884] loop5: detected capacity change from 0 to 64 [ 964.428333][ T8884] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 964.465860][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 964.504422][ T8889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 964.542478][ T8884] minix_free_inode: bit 4 already cleared [ 965.027025][ T8905] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.10372'. [ 965.082873][ T5934] IPVS: starting estimator thread 0... [ 965.182551][ T8910] IPVS: using max 25 ests per chain, 60000 per kthread [ 965.542513][ T8927] loop1: detected capacity change from 0 to 256 [ 965.582205][ T8927] exfat: Deprecated parameter 'utf8' [ 965.614384][ T8927] exfat: Deprecated parameter 'utf8' [ 965.716329][ T8927] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 965.833963][ T8935] loop2: detected capacity change from 0 to 512 [ 965.874595][ T8935] EXT4-fs: Ignoring removed i_version option [ 965.904936][ T8935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 966.037828][ T8935] EXT4-fs (loop2): 1 truncate cleaned up [ 966.045676][ T8935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.405754][ T5833] EXT4-fs warning (device loop2): ext4_xattr_inode_create:1468: refuse to create EA inode when umounting [ 966.465718][ T5833] ------------[ cut here ]------------ [ 966.471278][ T5833] WARNING: CPU: 1 PID: 5833 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 966.482132][ T5833] Modules linked in: [ 966.486918][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 966.499196][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.509354][ T5833] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 966.516457][ T5833] Code: f8 9f 97 ff e9 4e f6 ff ff e8 8e bd 31 ff 48 c7 c1 00 fb c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 c0 02 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 63 bd 31 ff 48 8b 95 08 ff ff ff [ 966.536531][ T5833] RSP: 0018:ffffc900041af468 EFLAGS: 00010286 [ 966.543091][ T5833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00b9 [ 966.551187][ T5833] RDX: ffff88802b2ebc00 RSI: ffffffff82883c41 RDI: 0000000000000005 [ 966.559217][ T5833] RBP: ffffc900041af5c8 R08: 0000000000000005 R09: 0000000000000000 [ 966.567338][ T5833] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807a360000 [ 966.575498][ T5833] R13: ffff88805190e2a4 R14: ffff8880498f4f18 R15: ffff8880498f4f18 [ 966.583585][ T5833] FS: 0000555556648500(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 966.592583][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.599611][ T5833] CR2: 00007f47e23fdbc0 CR3: 000000005e152000 CR4: 0000000000350ef0 [ 966.607844][ T5833] Call Trace: [ 966.611160][ T5833] [ 966.614114][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.622152][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.627999][ T5833] ? find_held_lock+0x2b/0x80 [ 966.632752][ T5833] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 966.639491][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.645192][ T5833] ? const_folio_flags+0x5b/0x100 [ 966.650328][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.656034][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.661817][ T5833] ? __lock_acquire+0xb8a/0x1c90 [ 966.666843][ T5833] ext4_xattr_block_set+0x818/0x3650 [ 966.672261][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.677989][ T5833] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 966.683850][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.689557][ T5833] ? check_xattrs+0x10a/0xba0 [ 966.694349][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.700048][ T5833] ? xattr_find_entry+0x2c9/0x3a0 [ 966.705271][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.711023][ T5833] ? ext4_xattr_block_find+0x59/0x430 [ 966.716489][ T5833] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 966.722619][ T5833] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 966.728942][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.734717][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.740422][ T5833] ? dquot_initialize_needed+0x183/0x2a0 [ 966.746216][ T5833] __ext4_expand_extra_isize+0x346/0x480 [ 966.751944][ T5833] __ext4_mark_inode_dirty+0x544/0x870 [ 966.757591][ T5833] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 966.763660][ T5833] ? __pfx___might_resched+0x10/0x10 [ 966.769088][ T5833] ? ext4_journal_check_start+0x22b/0x340 [ 966.774900][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.780738][ T5833] ? __ext4_journal_start_sb+0x19e/0x690 [ 966.786480][ T5833] ? ext4_dirty_inode+0xa1/0x130 [ 966.791482][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.797228][ T5833] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 966.802664][ T5833] ext4_dirty_inode+0xd9/0x130 [ 966.807540][ T5833] ? rcu_is_watching+0x12/0xc0 [ 966.812385][ T5833] __mark_inode_dirty+0x1ee/0xe50 [ 966.817507][ T5833] iput+0xb7/0x880 [ 966.821370][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.827070][ T5833] dentry_unlink_inode+0x29c/0x480 [ 966.831680][ T8959] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 966.832319][ T5833] __dentry_kill+0x1d0/0x600 [ 966.838747][ T8959] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.843389][ T5833] ? shrink_dentry_list+0x11a/0x5d0 [ 966.856183][ T5833] shrink_dentry_list+0x140/0x5d0 [ 966.861432][ T5833] ? shrink_dcache_parent+0x22/0x530 [ 966.866802][ T5833] shrink_dcache_parent+0xe1/0x530 [ 966.868416][ T8959] vhci_hcd vhci_hcd.0: Device attached [ 966.872026][ T5833] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 966.872110][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.872176][ T5833] shrink_dcache_for_umount+0xa5/0x3e0 [ 966.872213][ T5833] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.872283][ T5833] generic_shutdown_super+0x6c/0x390 [ 966.872348][ T5833] kill_block_super+0x3b/0x90 [ 966.910188][ T5833] ext4_kill_sb+0x6a/0xb0 [ 966.914629][ T5833] deactivate_locked_super+0xc1/0x1a0 [ 966.919837][ T8964] vhci_hcd: connection closed [ 966.920027][ T5833] deactivate_super+0xde/0x100 [ 966.920698][ T1164] vhci_hcd: stop threads [ 966.924746][ T5833] cleanup_mnt+0x225/0x450 [ 966.924881][ T5833] task_work_run+0x150/0x240 [ 966.924927][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 966.924965][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 966.925018][ T5833] ? __pfx___x64_sys_umount+0x10/0x10 [ 966.938221][ T1164] vhci_hcd: release socket [ 966.938540][ T5833] exit_to_user_mode_loop+0xeb/0x110 [ 966.957708][ T1164] vhci_hcd: disconnect device [ 966.959312][ T5833] do_syscall_64+0x3f6/0x4c0 [ 966.975287][ T8924] loop5: detected capacity change from 0 to 32768 [ 966.978334][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.978383][ T5833] RIP: 0033:0x7ff2b818fc57 [ 966.978415][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 966.978454][ T5833] RSP: 002b:00007ffe2ac19e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 966.978494][ T5833] RAX: 0000000000000000 RBX: 00007ff2b8210925 RCX: 00007ff2b818fc57 [ 966.978521][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2ac19f00 [ 966.978548][ T5833] RBP: 00007ffe2ac19f00 R08: 0000000000000000 R09: 0000000000000000 [ 966.978574][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2ac1af90 [ 966.978601][ T5833] R13: 00007ff2b8210925 R14: 00000000000e4467 R15: 00007ffe2ac1afd0 [ 966.978654][ T5833] [ 967.067029][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 967.074366][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 967.086581][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 967.096687][ T5833] Call Trace: [ 967.099995][ T5833] [ 967.102956][ T5833] dump_stack_lvl+0x3d/0x1f0 [ 967.107627][ T5833] panic+0x71c/0x800 [ 967.111595][ T5833] ? __pfx_panic+0x10/0x10 [ 967.116081][ T5833] ? show_trace_log_lvl+0x29b/0x3e0 [ 967.121371][ T5833] ? check_panic_on_warn+0x1f/0xb0 [ 967.126599][ T5833] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 967.133093][ T5833] check_panic_on_warn+0xab/0xb0 [ 967.138114][ T5833] __warn+0xf6/0x3c0 [ 967.142085][ T5833] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 967.148585][ T5833] report_bug+0x3c3/0x580 [ 967.152983][ T5833] ? ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 967.159481][ T5833] handle_bug+0x184/0x210 [ 967.163871][ T5833] exc_invalid_op+0x17/0x50 [ 967.168428][ T5833] asm_exc_invalid_op+0x1a/0x20 [ 967.173325][ T5833] RIP: 0010:ext4_xattr_inode_lookup_create+0x118e/0x1950 [ 967.180425][ T5833] Code: f8 9f 97 ff e9 4e f6 ff ff e8 8e bd 31 ff 48 c7 c1 00 fb c7 8b ba bc 05 00 00 4c 89 e7 48 c7 c6 c0 02 c8 8b e8 d3 dc fd ff 90 <0f> 0b 90 48 c7 c3 ea ff ff ff e8 63 bd 31 ff 48 8b 95 08 ff ff ff [ 967.200088][ T5833] RSP: 0018:ffffc900041af468 EFLAGS: 00010286 [ 967.206199][ T5833] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff819b00b9 [ 967.214208][ T5833] RDX: ffff88802b2ebc00 RSI: ffffffff82883c41 RDI: 0000000000000005 [ 967.222205][ T5833] RBP: ffffc900041af5c8 R08: 0000000000000005 R09: 0000000000000000 [ 967.230210][ T5833] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807a360000 [ 967.238210][ T5833] R13: ffff88805190e2a4 R14: ffff8880498f4f18 R15: ffff8880498f4f18 [ 967.246227][ T5833] ? __wake_up_klogd.part.0+0x99/0xf0 [ 967.251641][ T5833] ? __ext4_warning+0x1a1/0x210 [ 967.256541][ T5833] ? ext4_xattr_inode_lookup_create+0x118d/0x1950 [ 967.263010][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.268698][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.274366][ T5833] ? find_held_lock+0x2b/0x80 [ 967.279080][ T5833] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 967.285730][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.291398][ T5833] ? const_folio_flags+0x5b/0x100 [ 967.296452][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.302131][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.307802][ T5833] ? __lock_acquire+0xb8a/0x1c90 [ 967.312799][ T5833] ext4_xattr_block_set+0x818/0x3650 [ 967.318138][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.323834][ T5833] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 967.329611][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.335280][ T5833] ? check_xattrs+0x10a/0xba0 [ 967.340007][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.345676][ T5833] ? xattr_find_entry+0x2c9/0x3a0 [ 967.350755][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.356423][ T5833] ? ext4_xattr_block_find+0x59/0x430 [ 967.361850][ T5833] ext4_expand_extra_isize_ea+0x143d/0x1ab0 [ 967.367807][ T5833] ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10 [ 967.374093][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.379764][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.385432][ T5833] ? dquot_initialize_needed+0x183/0x2a0 [ 967.391102][ T5833] __ext4_expand_extra_isize+0x346/0x480 [ 967.396798][ T5833] __ext4_mark_inode_dirty+0x544/0x870 [ 967.402303][ T5833] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 967.408337][ T5833] ? __pfx___might_resched+0x10/0x10 [ 967.413670][ T5833] ? ext4_journal_check_start+0x22b/0x340 [ 967.419428][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.425113][ T5833] ? __ext4_journal_start_sb+0x19e/0x690 [ 967.430788][ T5833] ? ext4_dirty_inode+0xa1/0x130 [ 967.435775][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.441461][ T5833] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 967.446882][ T5833] ext4_dirty_inode+0xd9/0x130 [ 967.451693][ T5833] ? rcu_is_watching+0x12/0xc0 [ 967.456495][ T5833] __mark_inode_dirty+0x1ee/0xe50 [ 967.461574][ T5833] iput+0xb7/0x880 [ 967.465344][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.471023][ T5833] dentry_unlink_inode+0x29c/0x480 [ 967.476228][ T5833] __dentry_kill+0x1d0/0x600 [ 967.480865][ T5833] ? shrink_dentry_list+0x11a/0x5d0 [ 967.486122][ T5833] shrink_dentry_list+0x140/0x5d0 [ 967.491211][ T5833] ? shrink_dcache_parent+0x22/0x530 [ 967.496556][ T5833] shrink_dcache_parent+0xe1/0x530 [ 967.501733][ T5833] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 967.507524][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.513217][ T5833] shrink_dcache_for_umount+0xa5/0x3e0 [ 967.518705][ T5833] ? lockdep_hardirqs_on+0x7c/0x110 [ 967.523956][ T5833] generic_shutdown_super+0x6c/0x390 [ 967.529300][ T5833] kill_block_super+0x3b/0x90 [ 967.534024][ T5833] ext4_kill_sb+0x6a/0xb0 [ 967.538387][ T5833] deactivate_locked_super+0xc1/0x1a0 [ 967.543793][ T5833] deactivate_super+0xde/0x100 [ 967.548590][ T5833] cleanup_mnt+0x225/0x450 [ 967.553038][ T5833] task_work_run+0x150/0x240 [ 967.557659][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 967.562823][ T5833] ? srso_alias_return_thunk+0x5/0xfbef5 [ 967.568493][ T5833] ? __pfx___x64_sys_umount+0x10/0x10 [ 967.573907][ T5833] exit_to_user_mode_loop+0xeb/0x110 [ 967.579223][ T5833] do_syscall_64+0x3f6/0x4c0 [ 967.583933][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.589861][ T5833] RIP: 0033:0x7ff2b818fc57 [ 967.594297][ T5833] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 967.613946][ T5833] RSP: 002b:00007ffe2ac19e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 967.622398][ T5833] RAX: 0000000000000000 RBX: 00007ff2b8210925 RCX: 00007ff2b818fc57 [ 967.630397][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2ac19f00 [ 967.638388][ T5833] RBP: 00007ffe2ac19f00 R08: 0000000000000000 R09: 0000000000000000 [ 967.646387][ T5833] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2ac1af90 [ 967.654382][ T5833] R13: 00007ff2b8210925 R14: 00000000000e4467 R15: 00007ffe2ac1afd0 [ 967.662396][ T5833] [ 967.665653][ T5833] Kernel Offset: disabled [ 967.669998][ T5833] Rebooting in 86400 seconds..