last executing test programs: 3m55.897171659s ago: executing program 1 (id=1876): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000640)=""/176, 0xffffffffffffff1b, 0x0, 0x0, 0x2}}, 0x48) 3m55.700429232s ago: executing program 1 (id=1879): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4442, &(0x7f0000004480)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0) lseek(r0, 0x0, 0x1) 3m53.523917328s ago: executing program 1 (id=1892): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x47, &(0x7f0000001640)=""/71}) 3m51.811069804s ago: executing program 1 (id=1902): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e2, &(0x7f0000000900)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0xee01) 3m51.377861414s ago: executing program 1 (id=1906): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x240, 0x40}, 0x18) 3m51.001974078s ago: executing program 1 (id=1908): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af10, &(0x7f0000000580)={0x0, 0x7, 0x5}) 3m35.716588502s ago: executing program 32 (id=1908): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0x4008af10, &(0x7f0000000580)={0x0, 0x7, 0x5}) 2m51.185793634s ago: executing program 5 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m50.502147804s ago: executing program 5 (id=2140): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) statfs(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000)) 2m49.634043096s ago: executing program 5 (id=2146): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000001980)='\xc9$#\xf1\xfe\xb8V\x00\xe9Ps\xfe\xf7\x80\xa2\xb2\xec\';iId\xd2\x1e\xe2g/\xc9\xba\x1d\xc9o9\x89]\xfe \x04\x13\xf0^Kc\rQQ\xf6\x81\'\xf6VM%\x9a\xb3\xeb\xcd;\x99{\xa4\x89/\x80j\x8d\x94\xb7\x89\x11\xc2\b\xb2\xc2\xa1\xaa\x1fQ\xb8\xc9\xc0\xbf\x9f\xf0\a\x04xb;\xc4dQ\x01S\xab\x95H\xadIK\xde\xd7\xaf\xcf\x11\xc2\x0eH\ni\xc1_\xf0\x91_1Z\xca\x7f\xcdn\x85\x83K\xac\xae0Q\x7fr\xe6v\xa2|\xcc\xf1(\xf0\xc1\xa6o\xa2\x87#F\x9d\xb2\x0f\x90\xa6!\x99\x0e\xd9\xa8U\xa5\xe1\x85\xcd&B\x90\xfb\x83\xa1\x1a\xd4[\x05S\xebm\xb3\xef\x19K\x16Gp,\xf2\x82D=', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\xfd\xf9E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) 2m48.933106557s ago: executing program 5 (id=2149): getpid() prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 2m48.261736628s ago: executing program 5 (id=2153): r0 = syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000680)={[{@gid}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a6e43c, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES8=r0, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64, @ANYRES8], 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m47.644672348s ago: executing program 5 (id=2155): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) 2m32.482988397s ago: executing program 33 (id=2155): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) 1m23.777794779s ago: executing program 3 (id=2454): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4a23, @empty}}, 0x800, 0x31, 0xffff1891, 0x0, 0xb23be0fbe66397b6, 0x9, 0x1b}, 0x98) 1m23.685897231s ago: executing program 6 (id=2455): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @main=@item_012={0x2, 0x0, 0x8, "8678"}, @global=@item_012={0x2, 0x1, 0x9, ')\x00'}]}}, 0x0}, 0x0) 1m23.515857921s ago: executing program 2 (id=2456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x2000c050) 1m23.164366313s ago: executing program 3 (id=2457): setresuid(0xee01, 0x0, 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0xee01, 0x4007) 1m22.985596192s ago: executing program 2 (id=2458): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 1m22.255886425s ago: executing program 0 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '^'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) 1m22.2112966s ago: executing program 2 (id=2461): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x51, 0x0, 0xffffffffffffffff}) 1m21.545580861s ago: executing program 0 (id=2463): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') exit(0xffffffffffffffa9) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x8, 0x103) 1m21.31605624s ago: executing program 2 (id=2464): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x200002, &(0x7f0000000040), 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x800000) 1m21.224452466s ago: executing program 4 (id=2465): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0xffffff36) 1m20.87195334s ago: executing program 6 (id=2466): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 1m20.321758005s ago: executing program 6 (id=2467): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1m20.212535772s ago: executing program 0 (id=2468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x77}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) 1m20.206525411s ago: executing program 4 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m19.866580484s ago: executing program 6 (id=2470): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) 1m19.62000602s ago: executing program 0 (id=2471): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1b}, 0x0) 1m19.619007379s ago: executing program 4 (id=2472): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m19.417762601s ago: executing program 6 (id=2473): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x3, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x4, 0x800, '\x00', 0x1}, 0x1, [0x1, 0x9, 0x70, 0x2, 0x6, 0x1, 0x9, 0x53f3, 0x3, 0x3, 0x10, 0x2000, 0xa9, 0x7, 0x8, 0x9, 0x6, 0x1ff, 0x4, 0x7, 0x800, 0x4, 0x0, 0x9, 0x7, 0x7a61, 0x40e, 0x3, 0x0, 0x3, 0x1, 0x7, 0x9, 0x7fff, 0x8, 0x4000000000000, 0xf36, 0x8000000, 0x9, 0xd, 0x4, 0x2, 0x1000, 0x7, 0x41bc, 0x5, 0x0, 0x7, 0x194b, 0x1, 0x3, 0x100, 0xcc5, 0x8, 0x8, 0x1, 0x6, 0x6, 0x7c4, 0x100000001, 0x10001, 0x8, 0x4, 0x1, 0xd69f, 0x100000000000101, 0x8001, 0x264, 0x4, 0x1, 0x8000000000000001, 0x7fffffffffffffff, 0x8, 0x1000, 0xc20, 0x4, 0xffffffffffffff7f, 0x5, 0x0, 0x5, 0x2, 0x200, 0x2, 0x1, 0x400, 0x1ff, 0x3, 0x4, 0x8000000000000001, 0x55d475ed, 0x5, 0x4, 0x8000000000b, 0x8, 0x8, 0x250, 0x7, 0x0, 0xa, 0x3, 0x6, 0x7, 0x5, 0x9, 0x80, 0x2, 0x3ff, 0x0, 0x9, 0x7, 0xc1, 0x7, 0x5, 0x1, 0x2, 0x588c, 0xc, 0x21, 0x40, 0xe, 0x401, 0x7fffffff, 0x2, 0x1, 0x70, 0x7, 0xe2, 0xe3]}) 1m19.251864152s ago: executing program 4 (id=2474): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x20, 0xde, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010101}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', r1, 0x7, 0x16, 0xfffffff1, 0x0, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xec, 0x29, 0x0, @multicast1, @rand_addr=0x64010102}}}}) 1m19.232216461s ago: executing program 0 (id=2475): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x40, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m18.947168201s ago: executing program 6 (id=2476): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000509000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="810002000003000008001b00000000000500100006"], 0x30}, 0x1, 0xffffa888}, 0x0) 1m18.590217105s ago: executing program 0 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000780)) 1m18.53471281s ago: executing program 3 (id=2478): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x2, 0x29, 0x13, 0x14, 0xa, 0xf1, 0x4, 0x82}) 1m18.18075144s ago: executing program 4 (id=2479): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x10000, r1, r1, 0x3e6157, 0x1, 0x4, 0x1028f1}) 1m18.033777248s ago: executing program 3 (id=2480): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001000)={0xf, {"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", 0x1000}}, 0x1006) 1m17.733344895s ago: executing program 4 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1m17.378746655s ago: executing program 2 (id=2482): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) 1m17.046403118s ago: executing program 3 (id=2483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x60}}, 0x8004) 1m16.967235377s ago: executing program 2 (id=2484): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 1m11.339796782s ago: executing program 3 (id=2485): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x61d0, &(0x7f000000cb40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 0s ago: executing program 34 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000780)) kernel console output (not intermixed with test programs): 81] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.035818][ T9978] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1630 (9978) [ 232.085450][ T9978] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 232.094648][ T5881] usb 2-1: config 220 interface 0 has no altsetting 0 [ 232.119365][ T5881] usb 2-1: config 220 interface 76 has no altsetting 0 [ 232.119461][ T9978] BTRFS info (device loop0): using blake2b checksum algorithm [ 232.153634][ T5881] usb 2-1: config 220 interface 1 has no altsetting 0 [ 232.184247][ T5881] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.193444][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.246480][ T5881] usb 2-1: Product: syz [ 232.250743][ T5881] usb 2-1: Manufacturer: syz [ 232.300530][ T5881] usb 2-1: SerialNumber: syz [ 232.356230][ T5902] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 232.369560][ T9978] BTRFS info (device loop0): enabling ssd optimizations [ 232.384713][ T9978] BTRFS info (device loop0): turning on async discard [ 232.394224][ T9978] BTRFS info (device loop0): enabling free space tree [ 232.535777][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 232.548620][T10021] loop3: detected capacity change from 0 to 256 [ 232.574728][ T5902] usb 3-1: config 0 has an invalid interface number: 136 but max is 0 [ 232.585225][ T5881] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 232.592849][ T5881] uvcvideo 2-1:220.0: No valid video chain found. [ 232.595863][T10021] exfat: Deprecated parameter 'namecase' [ 232.604027][ T5902] usb 3-1: config 0 has no interface number 0 [ 232.635106][ T5881] usb 2-1: selecting invalid altsetting 0 [ 232.648443][ T5902] usb 3-1: New USB device found, idVendor=06a5, idProduct=d001, bcdDevice=fe.bb [ 232.659260][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.682816][ T5902] usb 3-1: Product: syz [ 232.689780][ T5902] usb 3-1: Manufacturer: syz [ 232.720985][ T5881] usb 2-1: selecting invalid altsetting 0 [ 232.732029][ T5902] usb 3-1: SerialNumber: syz [ 232.737995][T10021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 232.741848][ T5818] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 232.760894][ T5881] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 232.812441][ T5902] usb 3-1: config 0 descriptor?? [ 232.843028][ T5902] gspca_main: nw80x-2.14.0 probing 06a5:d001 [ 232.852480][ T5881] usb 2-1: USB disconnect, device number 12 [ 233.457037][T10034] syz.4.1642 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.468102][ T5902] gspca_nw80x: reg_w err -71 [ 233.472828][ T5902] nw80x 3-1:0.136: probe with driver nw80x failed with error -71 [ 233.518824][ T5902] usb 3-1: USB disconnect, device number 9 [ 234.015221][T10051] loop4: detected capacity change from 0 to 512 [ 234.069349][T10051] EXT4-fs: inline encryption not supported [ 234.084078][T10051] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.268158][T10063] loop2: detected capacity change from 0 to 4096 [ 234.357513][T10051] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.1654: inode #13: comm syz.4.1654: iget: illegal inode # [ 234.473785][T10051] loop4: lost filesystem error report for type 5 error -117 [ 234.474029][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 234.487905][ C0] EXT4-fs (loop4): initial error at time 1770067542: ext4_orphan_get:1391 [ 234.496512][ C0] EXT4-fs (loop4): last error at time 1770067542: ext4_orphan_get:1391 [ 234.506255][T10051] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1654: couldn't read orphan inode 13 (err -117) [ 234.607005][T10051] loop4: lost filesystem error report for type 5 error -117 [ 234.609577][T10051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.855237][T10079] loop2: detected capacity change from 0 to 1024 [ 234.869160][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 234.950138][T10079] hfsplus: bad catalog entry type [ 234.981816][T10051] EXT4-fs: Cannot specify journal on remount [ 235.145052][ T1005] hfsplus: b-tree write err: -5, ino 4 [ 235.203842][T10087] loop1: detected capacity change from 0 to 4096 [ 235.302263][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.752452][T10105] tipc: Started in network mode [ 235.814187][T10105] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 235.885829][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 236.153327][T10112] loop1: detected capacity change from 0 to 2048 [ 236.186397][T10112] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 236.231888][T10112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.393711][T10093] loop2: detected capacity change from 0 to 32768 [ 236.480842][T10093] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1673 (10093) [ 236.530969][T10125] program syz.0.1690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.546587][T10126] syz.1.1689 uses old SIOCAX25GETINFO [ 236.573158][T10093] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.636870][T10093] BTRFS info (device loop2): using sha256 checksum algorithm [ 236.863316][T10093] BTRFS info (device loop2): rebuilding free space tree [ 236.925468][T10153] overlay: Unknown parameter '\' [ 237.036291][T10093] BTRFS info (device loop2): disabling free space tree [ 237.072870][T10093] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.124076][T10093] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.197293][T10093] BTRFS info (device loop2): enabling ssd optimizations [ 237.239586][T10093] BTRFS info (device loop2): turning on sync discard [ 237.299231][T10093] BTRFS info (device loop2): force clearing of disk cache [ 237.333525][T10164] rtc_cmos 00:00: Alarms can be up to one day in the future [ 237.341524][T10093] BTRFS info (device loop2): enabling auto defrag [ 237.362703][T10093] BTRFS info (device loop2): max_inline set to 0 [ 237.702985][ T5817] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.157378][ T5881] rtc_cmos 00:00: Alarms can be up to one day in the future [ 238.202984][ T5881] rtc_cmos 00:00: Alarms can be up to one day in the future [ 238.232197][ T5881] rtc_cmos 00:00: Alarms can be up to one day in the future [ 238.271193][ T5881] rtc_cmos 00:00: Alarms can be up to one day in the future [ 238.287684][ T5881] rtc rtc0: __rtc_set_alarm: err=-22 [ 238.634454][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.817132][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 238.864705][ T9] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 238.926826][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 238.947713][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.968617][ T9] usb 4-1: Product: syz [ 238.972846][ T9] usb 4-1: Manufacturer: syz [ 238.990491][ T9] usb 4-1: SerialNumber: syz [ 239.020947][ T9] usb 4-1: config 0 descriptor?? [ 239.050297][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 239.089835][ T9] usb 4-1: setting power ON [ 239.110256][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 239.152413][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.193516][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 239.203859][ T9] usb 4-1: media controller created [ 239.228847][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.251474][T10198] dvb-usb: bulk message failed: -22 (3/0) [ 239.280128][ T9] usb 4-1: selecting invalid altsetting 6 [ 239.294727][ T9] usb 4-1: digital interface selection failed (-22) [ 239.311882][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 239.355040][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 239.369634][ T9] usb 4-1: setting power OFF [ 239.388711][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 239.408914][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 239.440360][ T9] (NULL device *): no alternate interface [ 239.537224][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 239.543713][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 239.592030][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 239.603645][ T9] usb 4-1: USB disconnect, device number 14 [ 239.634365][ T5881] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 239.643642][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.669962][T10234] loop4: detected capacity change from 0 to 128 [ 239.716402][T10234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 239.748719][ T5881] usb 1-1: config 0 descriptor?? [ 239.775497][T10234] hpfs: filesystem error: improperly stopped [ 239.791967][T10234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 239.876377][T10234] hpfs: You really don't want any checks? You are crazy... [ 239.932040][T10234] hpfs: hpfs_map_sector(): read error [ 239.987934][T10234] hpfs: code page support is disabled [ 239.993509][T10234] hpfs: hpfs_map_4sectors(): unaligned read [ 240.020232][T10234] hpfs: hpfs_map_4sectors(): unaligned read [ 240.040894][T10234] hpfs: filesystem error: unable to find root dir [ 240.192229][ T5881] lenovo 0003:17EF:6009.000B: hidraw0: USB HID v0.f4 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 240.376997][ T5881] usb 1-1: USB disconnect, device number 8 [ 240.431238][T10250] fido_id[10250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 240.601606][T10257] loop4: detected capacity change from 0 to 64 [ 240.770539][T10237] loop2: detected capacity change from 0 to 32768 [ 240.910070][T10237] JBD2: Ignoring recovery information on journal [ 240.965602][T10237] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 241.091209][T10237] (syz.2.1721,10237,0):ocfs2_group_extend:314 ERROR: The disk is too old and small. Force to do offline resize. [ 241.112348][T10268] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1729'. [ 241.308456][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 241.596013][T10280] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 241.645353][T10280] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1734'. [ 241.712853][T10286] loop3: detected capacity change from 0 to 512 [ 241.729700][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 241.782237][T10285] openvswitch: netlink: Unknown nsh attribute 0 [ 241.785781][T10286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.848884][T10286] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.972243][T10295] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1740'. [ 242.192163][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.292479][T10307] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 242.317346][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 242.513393][ T9] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 242.548454][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 242.565550][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.576137][ T9] usb 3-1: Product: syz [ 242.580355][ T9] usb 3-1: Manufacturer: syz [ 242.585210][ T9] usb 3-1: SerialNumber: syz [ 242.596936][T10315] [U] ")g-ClB:>NCf㴹L[detaʰ~ 6t]mU;~Ƕ3s#|^R1@u6L8Pcݘlh5b~$Ɠ݈şbzֺz8W!a [ 242.613671][T10315] [U] [ 242.616588][T10315] [U] ^[nvyw D@yj%x [ 242.622091][T10315] [U] *ajCS-OPM`akZr*$CcŬaɾ#ZW5&_ɵ*9ڽ@3Pb [ 242.630839][T10315] [U] ğIP}zzwQ93M!jwqa٬c7Pl [ 242.637896][T10315] [U] M $~`wcMiN b`Rw;q9>wMz C~1xj[ԭjqm@/W\FtjHEoټ)RqvMZ&:\~5g@p XCu)X?DRWrY[8L ]JNJ [ 242.656692][T10315] [U] D@+AV4*S\F(g- [ 242.662225][T10315] [U] k}4藼nä\DC38pE'96JZ(0y!p3\Mx.noB+ [ 242.671796][T10315] [U] Pjy[ `Xw [ 242.675826][T10315] [U] ~91{fA뚊ѴT[k@! QydhfQ*T.Q>:2DPm"xlRMsU50?8ۢͻړ/7/QF.M_ޞ-xv‡]a`!L3T< o'Ay؍CzW-ox>j'>94~,d~i{F1SE ۠Nc91=կh}JĞLJrȻuU $v; [ 242.700870][T10315] [U]  ʼn凇S]8(#F1@V#VLx)-7uYe5HYMv%Y>6i4Kΰ23\lyMe(3>2vh&;/oe,0iuX#v- ũ= 504) [ 249.409852][ T5819] loop4: lost filesystem error report for type 5 error -117 [ 249.410554][ T5819] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 249.436567][ T5819] loop4: lost filesystem error report for type 5 error -117 [ 249.436753][T10453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 249.452690][ T5819] EXT4-fs error (device loop4): ext4_quota_off:7290: inode #3: comm syz-executor: mark_inode_dirty error [ 249.464550][ T5819] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 249.482544][T10453] F2FS-fs (loop0): invalid crc value [ 249.573722][T10498] tipc: Started in network mode [ 249.587254][T10498] tipc: Node identity ac141441, cluster identity 4711 [ 249.607250][T10498] tipc: Enabled bearer , priority 10 [ 249.782767][T10453] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 249.838195][T10453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 249.857641][T10453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 249.866331][T10503] syz_tun: entered promiscuous mode [ 249.872330][T10503] macvtap1: entered promiscuous mode [ 249.891623][T10503] macvtap1: entered allmulticast mode [ 249.904388][T10503] syz_tun: entered allmulticast mode [ 249.936390][T10503] syz_tun: left allmulticast mode [ 249.941814][T10503] syz_tun: left promiscuous mode [ 250.020119][ T5818] syz-executor: attempt to access beyond end of device [ 250.020119][ T5818] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.041332][T10490] loop2: detected capacity change from 0 to 32768 [ 250.064954][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 250.064984][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 250.064996][ T5818] Call Trace: [ 250.065005][ T5818] [ 250.065014][ T5818] dump_stack_lvl+0xe8/0x150 [ 250.065046][ T5818] f2fs_handle_critical_error+0x37c/0x540 [ 250.065079][ T5818] f2fs_write_end_io+0xcdb/0xff0 [ 250.065127][ T5818] __submit_merged_bio+0x256/0x700 [ 250.065160][ T5818] __submit_merged_write_cond+0x3c3/0x4e0 [ 250.065194][ T5818] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 250.065245][ T5818] f2fs_write_data_pages+0x2970/0x35e0 [ 250.065314][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.065354][ T5818] ? unwind_get_return_address+0x4d/0x90 [ 250.065381][ T5818] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.065432][ T5818] ? check_noncircular+0xda/0x150 [ 250.065470][ T5818] ? lockdep_unlock+0x5d/0xd0 [ 250.065490][ T5818] ? __lock_acquire+0x146e/0x2cf0 [ 250.065542][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.065575][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 250.065596][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.065633][ T5818] do_writepages+0x32e/0x550 [ 250.065672][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 250.065698][ T5818] filemap_fdatawrite+0x1e9/0x2f0 [ 250.065730][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 250.065809][ T5818] ? do_raw_spin_unlock+0xf5/0x210 [ 250.065835][ T5818] f2fs_sync_dirty_inodes+0x30e/0x860 [ 250.065881][ T5818] f2fs_write_checkpoint+0x9cf/0x2680 [ 250.065947][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 250.066037][ T5818] kill_f2fs_super+0x314/0x720 [ 250.066072][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 250.066114][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.066151][ T5818] deactivate_locked_super+0xbc/0x130 [ 250.066182][ T5818] cleanup_mnt+0x437/0x4d0 [ 250.066201][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.066225][ T5818] task_work_run+0x1d9/0x270 [ 250.066250][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 250.066284][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 250.066305][ T5818] ? rcu_is_watching+0x15/0xb0 [ 250.066336][ T5818] do_syscall_64+0x32d/0xf80 [ 250.066357][ T5818] ? trace_irq_disable+0x3b/0x150 [ 250.066383][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.066402][ T5818] ? clear_bhb_loop+0x40/0x90 [ 250.066428][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.066447][ T5818] RIP: 0033:0x7fd67a59c117 [ 250.066467][ T5818] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 250.066484][ T5818] RSP: 002b:00007ffc85e974f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 250.066507][ T5818] RAX: 0000000000000000 RBX: 00007fd67a60471f RCX: 00007fd67a59c117 [ 250.066520][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc85e975b0 [ 250.066532][ T5818] RBP: 00007ffc85e975b0 R08: 00007ffc85e985b0 R09: 00000000ffffffff [ 250.066545][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc85e98640 [ 250.066557][ T5818] R13: 00007fd67a60471f R14: 000000000003d060 R15: 00007ffc85e98680 [ 250.066592][ T5818] [ 250.066601][ T5818] F2FS-fs (loop0): Remounting filesystem read-only [ 250.084322][T10490] [ 250.084322][T10490] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.084322][T10490] [ 250.555160][T10490] read_mapping_page failed! [ 250.560113][T10490] ERROR: (device loop2): txCommit: [ 250.560113][T10490] [ 250.585717][T10490] jfs_rmdir: dtDelete returned -2 [ 250.614331][ T5881] tipc: Node number set to 2886997057 [ 250.674954][ T1005] ERROR: (device loop2): diWrite: ixpxd invalid [ 250.674954][ T1005] [ 250.683454][ T1005] ERROR: (device loop2): txCommit: [ 250.683454][ T1005] [ 250.745363][ T1005] jfs_write_inode: jfs_commit_inode failed! [ 250.756886][ T5817] [ 250.756886][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.756886][ T5817] [ 250.804279][ T5817] [ 250.804279][ T5817] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 250.804279][ T5817] [ 251.493020][T10519] loop1: detected capacity change from 0 to 32768 [ 251.521652][T10534] loop0: detected capacity change from 0 to 4096 [ 251.551745][T10517] loop3: detected capacity change from 0 to 32768 [ 251.639473][T10534] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 251.752572][T10534] ntfs3(loop0): ino=1a, mi_enum_attr [ 251.784238][T10534] ntfs3(loop0): ino=1a, mi_enum_attr [ 251.808278][T10534] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 251.889534][T10543] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 251.889534][T10543] program syz.3.1834 not setting count and/or reply_len properly [ 251.985237][ T29] audit: type=1800 audit(1770067559.764:81): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1829" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 252.014858][T10533] ntfs3(loop0): ino=1e, "file1" attr_set_size [ 252.655475][ T795] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 252.849158][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.866685][T10577] binder: 10576:10577 ioctl c018620c 200000000380 returned -22 [ 252.883065][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.903586][ T795] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.919346][ T795] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 252.939742][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.971090][ T795] usb 4-1: config 0 descriptor?? [ 253.026303][T10582] loop0: detected capacity change from 0 to 64 [ 253.431556][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.454420][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.464552][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.471681][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.521315][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.541566][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.561842][ T795] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0 [ 253.602808][ T795] cypress 0003:04B4:07B1.000C: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 253.651696][ T795] usb 4-1: USB disconnect, device number 16 [ 253.691788][T10574] loop4: detected capacity change from 0 to 32768 [ 253.738520][T10574] (syz.4.1847,10574,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.796275][T10574] (syz.4.1847,10574,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 253.812400][T10599] tmpfs: Cannot disable swap on remount [ 253.838486][T10597] fido_id[10597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 253.880370][T10580] loop1: detected capacity change from 0 to 32768 [ 253.934323][T10574] JBD2: Ignoring recovery information on journal [ 253.995436][T10574] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 254.282184][T10611] netlink: 'syz.0.1861': attribute type 2 has an invalid length. [ 254.318182][T10611] netlink: 'syz.0.1861': attribute type 2 has an invalid length. [ 254.380423][ T5819] ocfs2: Unmounting device (7,4) on (node local) [ 254.500553][T10617] netlink: 'syz.0.1867': attribute type 4 has an invalid length. [ 254.574099][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 254.727197][T10621] loop2: detected capacity change from 0 to 1024 [ 254.774099][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 254.790323][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.820367][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.835090][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 254.864144][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.897794][ T10] usb 4-1: config 0 descriptor?? [ 254.950643][T10621] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 254.959063][T10621] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 255.066573][ T35] hfsplus: b-tree write err: -5, ino 4 [ 255.211406][T10634] loop0: detected capacity change from 0 to 1024 [ 255.248578][T10634] EXT4-fs: Ignoring removed bh option [ 255.326327][T10634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.341966][ T10] waltop 0003:172F:0038.000D: unknown main item tag 0x0 [ 255.356518][ T10] waltop 0003:172F:0038.000D: unknown main item tag 0x0 [ 255.363782][ T10] waltop 0003:172F:0038.000D: unknown main item tag 0x0 [ 255.381055][ T10] waltop 0003:172F:0038.000D: hidraw0: USB HID v0.02 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 255.536063][ T10] usb 4-1: USB disconnect, device number 17 [ 255.591128][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.649306][T10644] fido_id[10644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 255.799822][T10625] loop4: detected capacity change from 0 to 32768 [ 255.822154][T10648] loop2: detected capacity change from 0 to 4096 [ 255.822263][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.837297][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.860801][T10625] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 255.936706][T10661] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.971458][T10625] XFS (loop4): Ending clean mount [ 256.013279][T10625] XFS (loop4): Quotacheck needed: Please wait. [ 256.072197][T10625] XFS (loop4): Quotacheck: Done. [ 256.246561][ T5819] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.334759][ T5881] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 256.490805][T10650] loop1: detected capacity change from 0 to 32768 [ 256.524139][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 256.540334][ T5881] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 256.542834][T10650] JBD2: Ignoring recovery information on journal [ 256.604261][ T5881] usb 1-1: config 2 has no interface number 0 [ 256.610462][ T5881] usb 1-1: config 2 interface 88 has no altsetting 0 [ 256.766225][T10650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 256.801608][ T5881] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 256.874105][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.882163][ T5881] usb 1-1: Product: syz [ 256.979593][ T5881] usb 1-1: Manufacturer: syz [ 257.036650][ T5881] usb 1-1: SerialNumber: syz [ 257.780955][ T5881] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 257.821608][ T5881] asix 1-1:2.88: probe with driver asix failed with error -71 [ 257.913215][ T5881] usb 1-1: USB disconnect, device number 10 [ 257.956796][T10692] PKCS8: Unsupported PKCS#8 version [ 258.124352][ T5830] ocfs2: Unmounting device (7,1) on (node local) [ 258.856122][T10699] loop3: detected capacity change from 0 to 4096 [ 258.912148][T10699] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 259.116061][T10699] ntfs3(loop3): ino=1a, mi_enum_attr [ 259.121521][T10699] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 259.202309][T10699] ntfs3(loop3): ino=1a, mi_enum_attr [ 259.234286][T10699] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 259.424168][T10699] ntfs3(loop3): ino=1b, mi_enum_attr [ 259.468442][T10699] ntfs3(loop3): ino=1b, mi_enum_attr [ 259.636086][T10715] loop1: detected capacity change from 0 to 64 [ 261.177907][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 262.121356][T10751] loop0: detected capacity change from 0 to 512 [ 262.261722][T10721] loop2: detected capacity change from 0 to 32768 [ 262.555968][T10721] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 262.733774][T10721] XFS (loop2): Ending clean mount [ 262.807625][T10721] XFS (loop2): Quotacheck needed: Please wait. [ 263.003411][T10721] XFS (loop2): Quotacheck: Done. [ 263.265806][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.166639][T10743] loop3: detected capacity change from 0 to 40427 [ 264.356579][T10743] F2FS-fs (loop3): invalid crc value [ 264.398360][T10743] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 264.531727][T10780] loop2: detected capacity change from 0 to 512 [ 264.711403][T10780] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1926: inode has both inline data and extents flags [ 264.829346][T10780] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.834012][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 264.850506][ C1] EXT4-fs (loop2): initial error at time 1770067572: ext4_orphan_get:1391: inode 15 [ 264.860045][ C1] EXT4-fs (loop2): last error at time 1770067572: ext4_orphan_get:1391: inode 15 [ 264.884428][T10780] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1926: couldn't read orphan inode 15 (err -117) [ 265.024886][T10780] loop2: lost filesystem error report for type 5 error -117 [ 265.036242][T10780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.234515][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'. [ 265.370684][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.554161][ T5881] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 265.784209][ T5881] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 265.856944][ T5881] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.936372][ T5881] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 266.059951][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 266.126749][ T5881] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 266.191042][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.245204][ T5881] usb 4-1: config 0 descriptor?? [ 266.735739][ T5881] hid-alps 0003:044E:120C.000E: unbalanced collection at end of report description [ 266.790536][ T5881] hid-alps 0003:044E:120C.000E: parse failed [ 266.831479][ T5881] hid-alps 0003:044E:120C.000E: probe with driver hid-alps failed with error -22 [ 266.963281][ T5881] usb 4-1: USB disconnect, device number 18 [ 267.561993][T10810] loop0: detected capacity change from 0 to 512 [ 267.665174][T10810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.728580][T10810] EXT4-fs: Ignoring removed bh option [ 267.775321][T10794] loop4: detected capacity change from 0 to 32768 [ 267.792356][T10810] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 267.938990][T10810] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 267.964021][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 267.970623][ C1] EXT4-fs (loop0): initial error at time 1770067575: mb_free_blocks:2047: inode 11: block 64 [ 267.981222][ C1] EXT4-fs (loop0): last error at time 1770067575: mb_free_blocks:2047: inode 11: block 64 [ 268.047101][T10794] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 268.143269][T10810] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #11: comm syz.0.1943: corrupted inode contents [ 268.222175][T10794] XFS (loop4): Ending clean mount [ 268.246898][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.259202][T10794] XFS (loop4): Quotacheck needed: Please wait. [ 268.358534][T10810] EXT4-fs error (device loop0): ext4_dirty_inode:6477: inode #11: comm syz.0.1943: mark_inode_dirty error [ 268.476753][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.482954][T10810] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1943: invalid indirect mapped block 1 (level 1) [ 268.574593][T10794] XFS (loop4): Quotacheck: Done. [ 268.646773][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.682588][T10810] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #11: comm syz.0.1943: corrupted inode contents [ 268.864951][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 268.871256][T10810] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 268.939436][ T5819] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 269.001222][T10810] loop0: lost filesystem error report for type 5 error -117 [ 269.006483][T10810] EXT4-fs error (device loop0): ext4_do_update_inode:5596: inode #11: comm syz.0.1943: corrupted inode contents [ 269.130006][T10829] loop3: detected capacity change from 0 to 8192 [ 269.184241][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 269.204151][T10810] EXT4-fs error (device loop0): ext4_truncate:4614: inode #11: comm syz.0.1943: mark_inode_dirty error [ 269.380129][T10810] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 269.380904][T10810] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 269.557657][T10810] loop0: lost filesystem error report for type 5 error -117 [ 269.560750][T10810] EXT4-fs (loop0): 1 truncate cleaned up [ 269.678104][T10810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.408197][T10839] loop2: detected capacity change from 0 to 1024 [ 270.510691][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.886747][T10849] loop4: detected capacity change from 0 to 40427 [ 272.944665][T10849] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 273.012937][T10849] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 273.102072][T10849] F2FS-fs (loop4): invalid crc value [ 273.278220][T10863] loop3: detected capacity change from 0 to 512 [ 273.368823][T10863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.511235][T10863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.708088][T10869] loop0: detected capacity change from 0 to 128 [ 273.740611][T10863] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.806097][T10849] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 273.922552][T10849] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 273.982716][T10849] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 274.024154][ T5881] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 274.181179][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.204522][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 274.250102][ T5881] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 274.304283][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.312333][ T5881] usb 3-1: Product: syz [ 274.328345][T10873] loop0: detected capacity change from 0 to 512 [ 274.381710][ T5881] usb 3-1: Manufacturer: syz [ 274.387040][T10873] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.416891][ T5881] usb 3-1: SerialNumber: syz [ 274.474553][T10873] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 274.514583][ T5881] r8152-cfgselector 3-1: Unknown version 0x0000 [ 274.520985][ T5881] r8152-cfgselector 3-1: config 0 descriptor?? [ 274.601419][T10873] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 274.671847][T10873] System zones: 0-2, 18-18, 34-34 [ 274.720175][T10873] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.1965: inode #15: comm syz.0.1965: iget: illegal inode # [ 274.812866][T10873] loop0: lost filesystem error report for type 5 error -117 [ 274.814675][ C1] EXT4-fs (loop0): initial error at time 1770067582: ext4_orphan_get:1391 [ 274.830829][ C1] EXT4-fs (loop0): last error at time 1770067582: ext4_orphan_get:1391 [ 274.914691][T10873] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1965: couldn't read orphan inode 15 (err -117) [ 274.997747][T10873] loop0: lost filesystem error report for type 5 error -117 [ 275.001829][T10873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.153269][ T5881] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 275.298635][T10873] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 13: comm syz.0.1965: path /403/file0/file0: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=12, rec_len=4096, size=4096 fake=1 [ 275.631123][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.839663][T10878] loop3: detected capacity change from 0 to 4096 [ 275.947410][T10878] ntfs3(loop3): ino=3, Correct links count -> 2. [ 276.112618][T10886] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 276.112618][T10886] The task syz.4.1967 (10886) triggered the difference, watch for misbehavior. [ 276.611747][T10888] loop2: detected capacity change from 0 to 1024 [ 276.760224][T10888] hfsplus: bad catalog entry type [ 277.109522][ T49] hfsplus: b-tree write err: -5, ino 4 [ 277.203896][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.206543][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.207502][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.209991][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.210693][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.394844][ T5881] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 278.642255][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 278.671523][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.730811][T10917] devpts: Bad value for 'max' [ 278.736636][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.767699][T10919] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 278.792482][T10915] loop3: detected capacity change from 0 to 4096 [ 278.799855][ T5881] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 278.841215][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.955727][ T5881] usb 5-1: config 0 descriptor?? [ 279.097702][T10915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.245176][ T5138] Bluetooth: hci5: command tx timeout [ 279.462529][T10893] chnl_net:caif_netlink_parms(): no params data found [ 279.471622][ T5881] hid_parser_main: 2 callbacks suppressed [ 279.471648][ T5881] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 279.471696][ T5881] zydacron 0003:13EC:0006.000F: unknown main item tag 0x0 [ 279.529101][ T5881] zydacron 0003:13EC:0006.000F: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 279.655298][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.737109][ T5881] usb 5-1: USB disconnect, device number 13 [ 280.057519][T10929] fido_id[10929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 280.478801][T10893] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.544190][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.604668][T10893] bridge_slave_0: entered allmulticast mode [ 280.690913][T10893] bridge_slave_0: entered promiscuous mode [ 280.723654][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1991'. [ 280.851596][T10893] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.896974][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.965091][T10893] bridge_slave_1: entered allmulticast mode [ 281.064889][T10893] bridge_slave_1: entered promiscuous mode [ 281.198873][T10950] loop0: detected capacity change from 0 to 256 [ 281.325146][ T5138] Bluetooth: hci5: command tx timeout [ 281.390837][T10951] loop4: detected capacity change from 0 to 2048 [ 281.481065][T10951] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 281.545100][T10951] NILFS (loop4): mounting unchecked fs [ 281.735354][T10951] NILFS (loop4): recovery complete [ 281.767646][T10953] loop3: detected capacity change from 0 to 8192 [ 281.794770][T10954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.874049][T10953] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.444458][ T1005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.757820][T10893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.871760][T10893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.021178][T10966] loop3: detected capacity change from 0 to 512 [ 283.089975][T10966] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 283.231035][T10966] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2004: Invalid block bitmap block 0 in block_group 0 [ 283.347938][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.349549][T10893] team0: Port device team_slave_0 added [ 283.357228][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 283.357253][ C1] EXT4-fs (loop3): initial error at time 1770067591: ext4_read_block_bitmap_nowait:483 [ 283.357280][ C1] EXT4-fs (loop3): last error at time 1770067591: ext4_read_block_bitmap_nowait:483 [ 283.398590][T10966] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 283.422824][ T5138] Bluetooth: hci5: command tx timeout [ 283.451338][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.464259][T10966] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2004: attempt to clear invalid blocks 983261 len 1 [ 283.560258][T10973] mkiss: ax0: crc mode is auto. [ 283.572382][T10893] team0: Port device team_slave_1 added [ 283.645452][T10966] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 283.646792][T10966] EXT4-fs error (device loop3): __ext4_get_inode_loc:4809: comm syz.3.2004: Invalid inode table block 0 in block_group 0 [ 283.734414][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.745454][T10966] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 283.807919][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.808405][T10966] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 283.861396][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.861876][T10966] EXT4-fs error (device loop3): __ext4_get_inode_loc:4809: comm syz.3.2004: Invalid inode table block 0 in block_group 0 [ 283.938772][T10966] loop3: lost filesystem error report for type 5 error -117 [ 283.939255][T10966] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 284.017494][T10966] loop3: lost filesystem error report for type 5 error -117 [ 284.017957][T10966] EXT4-fs error (device loop3): ext4_truncate:4614: inode #11: comm syz.3.2004: mark_inode_dirty error [ 284.093139][T10966] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 284.093620][T10966] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 284.162479][T10966] loop3: lost filesystem error report for type 5 error -117 [ 284.162980][T10966] EXT4-fs error (device loop3): __ext4_get_inode_loc:4809: comm syz.3.2004: Invalid inode table block 0 in block_group 0 [ 284.225382][T10966] loop3: lost filesystem error report for type 5 error -117 [ 284.225908][T10966] EXT4-fs (loop3): 1 truncate cleaned up [ 284.286483][T10966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.332552][T10893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.355080][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.443691][T10893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.454929][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 284.515616][T10893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.522814][T10893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.575309][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.654250][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.684294][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 284.693429][T10893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.734486][ T5888] usb 3-1: config 1 has no interface number 0 [ 284.764193][ T5888] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.850218][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.869624][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 284.888344][T10976] loop0: detected capacity change from 0 to 32768 [ 284.908376][ T5888] usb 3-1: Product: syz [ 284.933306][ T5888] usb 3-1: SerialNumber: syz [ 284.945079][T10976] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2007 (10976) [ 284.992990][ T5888] usb 3-1: selecting invalid altsetting 1 [ 285.046277][T10982] loop3: detected capacity change from 0 to 4096 [ 285.079371][T10976] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 285.170420][T10976] BTRFS info (device loop0): using sha256 checksum algorithm [ 285.209436][T10893] hsr_slave_0: entered promiscuous mode [ 285.217797][T10983] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.269196][T10893] hsr_slave_1: entered promiscuous mode [ 285.312027][T10893] debugfs: 'hsr0' already exists in 'hsr' [ 285.354207][T10893] Cannot create hsr debugfs directory [ 285.484409][ T5138] Bluetooth: hci5: command tx timeout [ 285.662890][ T5888] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 285.693698][ T1005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.708530][ T5888] usb 3-1: selecting invalid altsetting 1 [ 285.718711][ T5888] cdc_ncm 3-1:1.1: bind() failure [ 285.814459][ T5888] usb 3-1: USB disconnect, device number 12 [ 286.055836][T10976] BTRFS info (device loop0): allowing degraded mounts [ 286.087667][T10976] BTRFS info (device loop0): enabling ssd optimizations [ 286.114636][T10976] BTRFS info (device loop0): turning on async discard [ 286.124563][T10976] BTRFS info (device loop0): enabling free space tree [ 286.142341][T10976] BTRFS info (device loop0): force lzo compression, level 1 [ 286.172524][T10976] BTRFS info (device loop0): max_inline set to 4096 [ 286.333328][ T29] audit: type=1800 audit(1770067594.114:82): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2007" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 286.491213][T11003] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2012'. [ 286.556761][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 286.685938][ T5818] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 287.015208][T10893] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.097129][T10893] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.172199][T10893] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.257756][T10893] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.320863][T10893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.460074][T10893] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.542915][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.550263][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.633448][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.640966][ T9230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.557316][T11047] loop2: detected capacity change from 0 to 256 [ 289.579859][T11047] exfat: Deprecated parameter 'utf8' [ 289.638677][T11047] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 290.218057][T11035] loop0: detected capacity change from 0 to 32768 [ 290.289083][T11035] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2024 (11035) [ 290.492327][T11035] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 290.581281][T11035] BTRFS info (device loop0): using blake2b checksum algorithm [ 290.826421][T11035] BTRFS info (device loop0): enabling ssd optimizations [ 290.884216][T11035] BTRFS info (device loop0): turning on async discard [ 290.894184][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 290.912088][T11035] BTRFS info (device loop0): enabling free space tree [ 290.960511][T11035] BTRFS info (device loop0): use zstd compression, level 3 [ 290.977384][ T1005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.093102][ T5888] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 291.148877][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.224726][ T5888] usb 5-1: Product: syz [ 291.230134][ T5888] usb 5-1: Manufacturer: syz [ 291.316192][T11078] loop3: detected capacity change from 0 to 256 [ 291.326456][ T5888] usb 5-1: SerialNumber: syz [ 291.377523][ T5888] usb 5-1: config 0 descriptor?? [ 291.426883][T11078] exfat: Deprecated parameter 'namecase' [ 291.447104][ T5888] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 291.463040][T10893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.515177][T11078] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 291.542937][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.627972][ T5888] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 291.643478][T11078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 291.703878][ T5888] usb 5-1: media controller created [ 291.832221][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.983158][ T5818] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 292.171875][ T5888] DVB: Unable to find symbol mt352_attach() [ 292.600296][ T5888] DVB: Unable to find symbol nxt6000_attach() [ 292.641827][ T5888] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 292.777035][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 292.917141][ T5888] dvb-usb: schedule remote query interval to 1000 msecs. [ 292.986161][ T5888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 293.096118][ T5888] dvb-usb: bulk message failed: -22 (7/0) [ 293.150728][ T5888] dvb-usb: bulk message failed: -22 (7/0) [ 293.207400][T11100] /dev/nullb0: Can't open blockdev [ 293.275811][ T5888] usb 5-1: USB disconnect, device number 14 [ 293.382572][T11101] loop4: detected capacity change from 0 to 2048 [ 293.764221][T11104] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.833062][ T7502] udevd[7502]: incorrect nilfs2 checksum on /dev/loop4 [ 293.847449][ T5888] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 294.165497][ T1005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.357016][T11101] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 294.449216][T11101] Remounting filesystem read-only [ 294.683134][ T5819] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 294.747063][T11113] syz.0.2047 uses obsolete (PF_INET,SOCK_PACKET) [ 294.793711][T11086] loop2: detected capacity change from 0 to 32768 [ 294.956008][T10893] veth0_vlan: entered promiscuous mode [ 295.141295][T10893] veth1_vlan: entered promiscuous mode [ 295.558678][T10893] veth0_macvtap: entered promiscuous mode [ 295.653210][T10893] veth1_macvtap: entered promiscuous mode [ 296.028320][T10893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.121247][T10893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.318378][ T9230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.364493][T11109] loop3: detected capacity change from 0 to 32768 [ 296.394626][ T9230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.403717][ T9230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.556249][T11109] JBD2: Ignoring recovery information on journal [ 296.704504][ T9230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.838243][T11109] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 297.001091][ T5881] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 297.244959][ T5881] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 297.261273][ T5816] ocfs2: Unmounting device (7,3) on (node local) [ 297.309882][ T5881] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 297.402602][ T5881] usb 5-1: Product: syz [ 297.452668][ T5881] usb 5-1: Manufacturer: syz [ 297.501298][ T5881] usb 5-1: SerialNumber: syz [ 297.565824][ T5881] usb 5-1: config 0 descriptor?? [ 297.639370][ T5881] ch341 5-1:0.0: ch341-uart converter detected [ 297.930412][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.018685][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.307215][ T5881] usb 5-1: failed to send control message: -71 [ 298.313536][ T5881] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 298.484244][ T5881] usb 5-1: USB disconnect, device number 15 [ 298.567963][ T5881] ch341 5-1:0.0: device disconnected [ 298.744234][T11142] loop3: detected capacity change from 0 to 256 [ 298.802683][T11142] exfat: Deprecated parameter 'utf8' [ 298.960855][T11142] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 299.314857][T11133] loop0: detected capacity change from 0 to 32768 [ 299.356489][T11133] (syz.0.2055,11133,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 299.474439][T11133] (syz.0.2055,11133,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 299.702537][T11133] JBD2: Ignoring recovery information on journal [ 300.024228][T11133] JBD2: journal reset failed [ 300.028973][T11133] (syz.0.2055,11133,1):ocfs2_journal_load:1160 ERROR: Failed to load journal! [ 300.161794][T11133] (syz.0.2055,11133,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 300.819965][T11168] loop3: detected capacity change from 0 to 1024 [ 300.894372][T11168] EXT4-fs: inline encryption not supported [ 300.984134][T11168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.087619][T11168] EXT4-fs (loop3): Test dummy encryption mode enabled [ 301.224757][T11168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.568938][T11168] EXT4-fs: Ignoring removed orlov option [ 301.624414][T11168] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 301.666507][T11168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.767033][T11168] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 302.013680][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.331152][ C0] sched: DL replenish lagged too much [ 302.658946][T11185] loop4: detected capacity change from 0 to 32768 [ 302.674466][T11185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2071 (11185) [ 303.140866][T11185] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.196534][T11185] BTRFS info (device loop4): using crc32c checksum algorithm [ 303.534267][T11185] BTRFS info (device loop4): enabling ssd optimizations [ 303.544450][T11185] BTRFS info (device loop4): turning on async discard [ 303.560195][T11185] BTRFS info (device loop4): enabling free space tree [ 303.647159][ T5819] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.811852][ T1005] bond0 (unregistering): Released all slaves [ 304.996144][ T9230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.054191][ T9230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.455906][T11216] loop3: detected capacity change from 0 to 512 [ 305.540538][T11216] EXT4-fs: Ignoring removed oldalloc option [ 305.731626][T11218] loop2: detected capacity change from 0 to 4096 [ 305.785034][T11216] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2076: Parent and EA inode have the same ino 15 [ 305.831873][T11223] loop5: detected capacity change from 0 to 512 [ 305.924286][T11216] loop3: lost filesystem error report for type 5 error -117 [ 305.934176][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 305.948213][ C1] EXT4-fs (loop3): initial error at time 1770067613: ext4_xattr_inode_iget:437 [ 305.957356][ C1] EXT4-fs (loop3): last error at time 1770067613: ext4_xattr_inode_iget:437 [ 305.979676][T11216] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2076: Parent and EA inode have the same ino 15 [ 306.024221][T11223] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.101288][T11216] loop3: lost filesystem error report for type 5 error -117 [ 306.125753][T11216] EXT4-fs (loop3): 1 orphan inode deleted [ 306.189884][T11230] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.267117][T11223] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 306.298788][T11216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.504001][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 306.510722][ C1] EXT4-fs (loop5): initial error at time 1770067614: ext4_mb_generate_buddy:1315 [ 306.520011][ C1] EXT4-fs (loop5): last error at time 1770067614: ext4_mb_generate_buddy:1315 [ 306.557641][T11223] EXT4-fs (loop5): Remounting filesystem read-only [ 306.614531][T11223] Quota error (device loop5): write_blk: dquota write failed [ 306.703323][T11223] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 306.797847][T11223] Quota error (device loop5): write_blk: dquota write failed [ 306.874109][T11223] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 306.967096][T11223] EXT4-fs (loop5): 1 truncate cleaned up [ 306.985013][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.031853][T11223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.175470][T11233] loop4: detected capacity change from 0 to 8192 [ 307.290681][T11233] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 307.368380][T11233] UDF-fs: Scanning with blocksize 512 failed [ 307.471241][T11233] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 307.524943][T10893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.566590][T11233] UDF-fs: Scanning with blocksize 1024 failed [ 307.614631][T11233] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 307.704481][T11233] UDF-fs: Scanning with blocksize 2048 failed [ 307.884460][T11233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.202623][T11253] loop3: detected capacity change from 0 to 256 [ 308.244179][ T29] audit: type=1800 audit(1770067616.004:83): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2079" name="bus" dev="loop4" ino=824 res=0 errno=0 [ 308.313373][T11253] exfat: Deprecated parameter 'utf8' [ 308.385115][T11253] exfat: Deprecated parameter 'namecase' [ 308.494416][T11253] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 309.149362][T11262] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2090'. [ 309.220530][T11262] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 309.552289][ T5138] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 309.861897][T11272] macvlan0: entered promiscuous mode [ 310.392831][T11280] overlayfs: failed to resolve '/ 0';anM>~fݻ4*JяN&K': -2 [ 310.466943][ T1005] tipc: Left network mode [ 310.589683][ T1005] IPVS: stopping backup sync thread 8712 ... [ 311.097795][T11292] loop5: detected capacity change from 0 to 1024 [ 311.934311][ T5881] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 312.140737][ T5881] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 312.234491][ T5881] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 312.299636][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.377141][ T5881] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 312.854419][T11312] can0: slcan on ttyS3. [ 313.090870][T11287] loop0: detected capacity change from 0 to 32768 [ 313.386721][T11287] [ 313.386721][T11287] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.386721][T11287] [ 313.485791][ T5881] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 313.516141][ T5881] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 313.572192][ T5881] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 313.856715][ T5902] usb 4-1: USB disconnect, device number 19 [ 313.938127][ T5818] [ 313.938127][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.938127][ T5818] [ 313.981168][ T5818] [ 313.981168][ T5818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 313.981168][ T5818] [ 314.037114][T11300] loop5: detected capacity change from 0 to 32768 [ 314.108276][T11300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2103 (11300) [ 314.338043][T11300] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.444131][T11300] BTRFS info (device loop5): using sha256 checksum algorithm [ 315.016875][T11300] BTRFS error (device loop5): open_ctree failed: -4 [ 315.505745][T11356] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2115'. [ 315.578039][T11356] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2115'. [ 315.824802][T11359] netlink: zone id is out of range [ 315.876496][T11359] netlink: zone id is out of range [ 315.891177][T11359] netlink: zone id is out of range [ 315.964238][T11359] netlink: zone id is out of range [ 316.004093][T11359] netlink: zone id is out of range [ 316.055485][T11359] netlink: zone id is out of range [ 316.072757][T11361] loop3: detected capacity change from 0 to 64 [ 316.105948][T11359] netlink: zone id is out of range [ 316.123291][T11359] netlink: zone id is out of range [ 316.172099][T11359] netlink: zone id is out of range [ 316.226828][T11359] netlink: zone id is out of range [ 316.772389][T11363] loop5: detected capacity change from 0 to 64 [ 316.978336][T11363] syz.5.2118: attempt to access beyond end of device [ 316.978336][T11363] loop5: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 317.068078][T11363] Buffer I/O error on dev loop5, logical block 512, async page read [ 317.100808][T11363] syz.5.2118: attempt to access beyond end of device [ 317.100808][T11363] loop5: rw=8388608, sector=113152, nr_sectors = 2 limit=64 [ 317.252493][T11363] Buffer I/O error on dev loop5, logical block 56576, async page read [ 317.276169][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.282715][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.418206][T11370] loop3: detected capacity change from 0 to 1024 [ 317.634937][T11370] hfsplus: bad catalog entry type [ 317.923710][T10691] hfsplus: b-tree write err: -5, ino 4 [ 318.106547][T11312] can0 (unregistered): slcan off ttyS3. [ 319.099410][T11389] loop2: detected capacity change from 0 to 4096 [ 319.206097][T11389] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 319.497209][T11400] loop0: detected capacity change from 0 to 64 [ 319.582098][T11389] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 319.990182][T11403] loop4: detected capacity change from 0 to 2048 [ 320.175140][T11403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.177044][T11420] loop5: detected capacity change from 0 to 64 [ 321.374278][ T1005] hsr_slave_0: left promiscuous mode [ 321.487482][ T1005] hsr_slave_1: left promiscuous mode [ 321.858468][ T1005] veth0_macvtap: left promiscuous mode [ 321.955612][ T1005] veth1_vlan: left promiscuous mode [ 321.961325][ T1005] veth0_vlan: left promiscuous mode [ 322.247223][T11436] loop3: detected capacity change from 0 to 16 [ 323.304006][T11447] loop5: detected capacity change from 0 to 64 [ 323.698977][T11416] loop0: detected capacity change from 0 to 32768 [ 325.327807][T11460] loop0: detected capacity change from 0 to 128 [ 325.398539][T11460] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 325.439775][T11443] loop3: detected capacity change from 0 to 32768 [ 325.506477][T11460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.526432][T11443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2151 (11443) [ 325.663601][T11443] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 325.761818][T11443] BTRFS info (device loop3): using sha256 checksum algorithm [ 325.971129][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 325.971567][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 326.027583][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 326.103663][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 326.199400][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 326.253139][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 326.302884][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 326.313042][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 326.329287][T11443] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 326.346162][T11443] BTRFS error (device loop3): open_ctree failed: -12 [ 326.798555][T11483] loop0: detected capacity change from 0 to 128 [ 327.244884][T11454] loop2: detected capacity change from 0 to 40427 [ 329.449176][T11487] loop4: detected capacity change from 0 to 32768 [ 329.541333][T11487] JBD2: Ignoring recovery information on journal [ 329.801123][T11487] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 329.968729][T11487] (syz.4.2164,11487,1):ocfs2_reconfigure:634 ERROR: Cannot change data mode on remount [ 330.357420][ T5819] ocfs2: Unmounting device (7,4) on (node local) [ 330.505952][T11496] loop3: detected capacity change from 0 to 32768 [ 330.721371][T11496] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 330.820596][T11496] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 330.912474][T11496] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 331.020204][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.049825][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.335579][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 285ms [ 331.393567][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.433055][T11496] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 331.680264][T11509] loop0: detected capacity change from 0 to 32768 [ 331.688080][T11496] gfs2: fsid=syz:syz.0: found 1 quota changes [ 331.878347][T11509] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 331.907274][ T5816] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 331.991915][ T5816] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 332.028626][T11509] XFS (loop0): Ending clean mount [ 332.055862][ T5816] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5816 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 332.072471][T11509] XFS (loop0): Quotacheck needed: Please wait. [ 332.126271][ T5816] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 332.172448][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 332.172479][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 332.172491][ T5816] Call Trace: [ 332.172499][ T5816] [ 332.172509][ T5816] dump_stack_lvl+0xe8/0x150 [ 332.172543][ T5816] gfs2_withdraw+0xc3/0x1b0 [ 332.172568][ T5816] inode_go_instantiate+0xdd8/0x1220 [ 332.172592][ T5816] ? preempt_schedule_common+0x82/0xd0 [ 332.172620][ T5816] ? __pfx_inode_go_instantiate+0x10/0x10 [ 332.172655][ T5816] gfs2_instantiate+0x168/0x220 [ 332.172681][ T5816] gfs2_glock_wait+0x1d4/0x2a0 [ 332.172709][ T5816] do_sync+0x49a/0xcb0 [ 332.172734][ T5816] ? _raw_spin_unlock+0x28/0x50 [ 332.172752][ T5816] ? gfs2_quota_sync+0x370/0x470 [ 332.172789][ T5816] ? __pfx_do_sync+0x10/0x10 [ 332.172838][ T5816] ? gfs2_quota_sync+0x370/0x470 [ 332.172869][ T5816] ? do_raw_spin_unlock+0xf5/0x210 [ 332.172895][ T5816] gfs2_quota_sync+0x370/0x470 [ 332.172935][ T5816] gfs2_sync_fs+0x4c/0xb0 [ 332.172962][ T5816] sync_filesystem+0xee/0x230 [ 332.172995][ T5816] generic_shutdown_super+0x77/0x2d0 [ 332.173028][ T5816] kill_block_super+0x44/0x90 [ 332.173050][ T5816] deactivate_locked_super+0xbc/0x130 [ 332.173079][ T5816] cleanup_mnt+0x437/0x4d0 [ 332.173099][ T5816] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.173122][ T5816] task_work_run+0x1d9/0x270 [ 332.173148][ T5816] ? __pfx_task_work_run+0x10/0x10 [ 332.173182][ T5816] exit_to_user_mode_loop+0xed/0x480 [ 332.173205][ T5816] ? rcu_is_watching+0x15/0xb0 [ 332.173237][ T5816] do_syscall_64+0x32d/0xf80 [ 332.173259][ T5816] ? trace_irq_disable+0x3b/0x150 [ 332.173286][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.173306][ T5816] ? clear_bhb_loop+0x40/0x90 [ 332.173332][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.173352][ T5816] RIP: 0033:0x7fbed779c117 [ 332.173372][ T5816] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 332.173389][ T5816] RSP: 002b:00007ffd4bef2738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 332.173411][ T5816] RAX: 0000000000000000 RBX: 00007fbed780471f RCX: 00007fbed779c117 [ 332.173425][ T5816] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4bef27f0 [ 332.173437][ T5816] RBP: 00007ffd4bef27f0 R08: 00007ffd4bef37f0 R09: 00000000ffffffff [ 332.173450][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4bef3880 [ 332.173462][ T5816] R13: 00007fbed780471f R14: 000000000005010b R15: 00007ffd4bef38c0 [ 332.173497][ T5816] [ 332.173505][ T5816] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 332.671444][T11509] XFS (loop0): Quotacheck: Done. [ 332.953503][ T5818] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 334.662678][T11537] xt_hashlimit: size too large, truncated to 1048576 [ 336.130918][T11545] loop4: detected capacity change from 0 to 512 [ 336.387976][T11545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.509167][T11545] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.576538][T11550] macsec1: entered allmulticast mode [ 336.599436][T11550] macsec0: entered allmulticast mode [ 336.614064][T11550] veth1_macvtap: entered allmulticast mode [ 336.707754][T11545] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.2183: No space for directory leaf checksum. Please run e2fsck -D. [ 336.911555][T11545] EXT4-fs error (device loop4): ext4_readdir:225: inode #2: comm syz.4.2183: path /387/file0: directory fails checksum at offset 0 [ 337.429152][T11559] usb usb8: usbfs: process 11559 (syz.0.2188) did not claim interface 1 before use [ 337.472306][ T5819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.577415][T11561] vlan2: entered promiscuous mode [ 337.610697][T11561] syz_tun: entered promiscuous mode [ 337.881148][T11563] loop0: detected capacity change from 0 to 512 [ 337.935947][T11563] EXT4-fs: Ignoring removed oldalloc option [ 338.050776][T11563] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2191: Parent and EA inode have the same ino 15 [ 338.154657][T11563] loop0: lost filesystem error report for type 5 error -117 [ 338.163976][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 338.178229][ C1] EXT4-fs (loop0): initial error at time 1770067645: ext4_xattr_inode_iget:437 [ 338.187409][ C1] EXT4-fs (loop0): last error at time 1770067645: ext4_xattr_inode_iget:437 [ 338.212963][T11563] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2191: Parent and EA inode have the same ino 15 [ 338.283265][T11563] loop0: lost filesystem error report for type 5 error -117 [ 338.299227][T11563] EXT4-fs (loop0): 1 orphan inode deleted [ 338.340848][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 338.393156][T11563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.660407][T11563] EXT4-fs warning (device loop0): __ext4_unlink:3276: inode #15: comm syz.0.2191: Deleting file 'file1' with no links [ 338.823206][T11574] loop2: detected capacity change from 0 to 1024 [ 338.947051][T11574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.058293][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.084424][ T5138] Bluetooth: hci5: command tx timeout [ 339.312089][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.346222][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.355506][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.386669][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.419385][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.663022][T11587] loop0: detected capacity change from 0 to 256 [ 340.098173][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.565298][ T5835] Bluetooth: hci4: command tx timeout [ 341.832412][T11607] loop4: detected capacity change from 0 to 256 [ 342.523768][T11615] loop2: detected capacity change from 0 to 128 [ 342.656057][ T29] audit: type=1800 audit(1770067650.444:84): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2208" name="file1" dev="loop2" ino=1048731 res=0 errno=0 [ 343.043547][T11623] loop2: detected capacity change from 0 to 256 [ 343.078825][T11623] exfat: Deprecated parameter 'utf8' [ 343.173523][T11623] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 343.314568][T11580] chnl_net:caif_netlink_parms(): no params data found [ 343.644766][ T5835] Bluetooth: hci4: command tx timeout [ 344.294074][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.318910][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.338386][T11580] bridge_slave_0: entered allmulticast mode [ 344.362855][T11580] bridge_slave_0: entered promiscuous mode [ 344.422209][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.467594][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.518696][T11580] bridge_slave_1: entered allmulticast mode [ 344.562091][T11580] bridge_slave_1: entered promiscuous mode [ 344.861478][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.930673][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.089447][T11626] loop0: detected capacity change from 0 to 32768 [ 345.223394][T11580] team0: Port device team_slave_0 added [ 345.307513][T11580] team0: Port device team_slave_1 added [ 345.409611][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 345.522315][T11626] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 345.666609][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.710178][T11626] XFS (loop0): Ending clean mount [ 345.724441][ T5835] Bluetooth: hci4: command tx timeout [ 345.730135][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.813078][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.914832][T11626] XFS (loop0): Quotacheck needed: Please wait. [ 346.069353][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.087902][T11626] XFS (loop0): Quotacheck: Done. [ 346.107772][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.234256][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.251479][ T5818] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 346.728382][T11580] hsr_slave_0: entered promiscuous mode [ 346.780766][T11580] hsr_slave_1: entered promiscuous mode [ 347.816107][ T5835] Bluetooth: hci4: command tx timeout [ 347.924969][T11677] loop0: detected capacity change from 0 to 128 [ 347.955111][T11677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.962115][T11677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.013774][T11656] loop3: detected capacity change from 0 to 32768 [ 348.106150][T11677] EXT4-fs (loop0): Test dummy encryption mode enabled [ 348.159556][T11656] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 348.210354][T11677] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.359104][T11677] ext4 filesystem being mounted at /475/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.574265][T11656] XFS (loop3): Ending clean mount [ 348.580598][T11677] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 348.649197][T11656] XFS (loop3): Quotacheck needed: Please wait. [ 348.934692][T11656] XFS (loop3): Quotacheck: Done. [ 349.155004][ T5818] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.233809][ T5816] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 349.299637][T11580] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.460974][T11580] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.596663][T11580] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.691928][T11580] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.927517][T11700] loop4: detected capacity change from 0 to 131072 [ 351.017812][T11700] F2FS-fs (loop4): invalid crc value [ 351.023764][T11700] F2FS-fs (loop4): invalid crc value [ 351.034283][T11700] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 352.943775][T11580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.288798][T11580] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.396002][T11729] tc_dump_action: action bad kind [ 353.528342][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.535825][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.827525][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.834836][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.997553][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 354.779333][T11745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2245'. [ 355.217058][T11749] loop2: detected capacity change from 0 to 2048 [ 355.335930][T11749] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.434201][T11749] NILFS (loop2): mounting unchecked fs [ 355.490204][ T6015] udevd[6015]: incorrect nilfs2 checksum on /dev/loop2 [ 355.547341][T11749] NILFS (loop2): recovery complete [ 355.618881][T11756] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.015555][T11725] loop4: detected capacity change from 0 to 32768 [ 356.093058][T11580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.114684][T11725] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR [ 356.538917][T11765] loop2: detected capacity change from 0 to 512 [ 356.899735][T11765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.520123][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.452150][ T1005] IPVS: stop unused estimator thread 0... [ 359.340073][T11580] veth0_vlan: entered promiscuous mode [ 359.556153][T11798] loop2: detected capacity change from 0 to 16 [ 359.637653][T11798] erofs (device loop2): mounted with root inode @ nid 36. [ 359.755293][T11798] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 359.865327][T11798] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 359.959438][T11798] erofs (device loop2): read error -117 @ 1 of nid 89 [ 360.017947][ T29] audit: type=1800 audit(1770067667.794:85): pid=11798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2257" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 360.052893][T11805] loop3: detected capacity change from 0 to 256 [ 360.102761][T11805] exfat: Deprecated parameter 'namecase' [ 360.162328][T11805] exfat: Deprecated parameter 'utf8' [ 360.227362][T11805] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 360.743358][T11580] veth1_vlan: entered promiscuous mode [ 360.890368][T11807] macsec1: entered promiscuous mode [ 360.921507][T11807] macvlan0: entered promiscuous mode [ 360.989338][T11790] loop4: detected capacity change from 0 to 32768 [ 361.030089][T11807] macvlan0: left promiscuous mode [ 361.082961][T11790] (syz.4.2255,11790,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.206288][T11790] (syz.4.2255,11790,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 361.238804][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 361.281880][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'. [ 361.331033][T11790] (syz.4.2255,11790,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 361.367057][T11818] netlink: 'syz.2.2264': attribute type 14 has an invalid length. [ 361.397780][T11818] netlink: 'syz.2.2264': attribute type 13 has an invalid length. [ 361.454351][T11790] JBD2: Ignoring recovery information on journal [ 361.628715][T11790] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 361.843764][T11580] veth0_macvtap: entered promiscuous mode [ 361.950660][T11580] veth1_macvtap: entered promiscuous mode [ 361.999693][ T5819] ocfs2: Unmounting device (7,4) on (node local) [ 362.200515][T11580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.356186][T11580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.464179][T10691] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.519772][T10691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.574006][T10691] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.638225][T10691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.025915][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.078422][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.293798][T10690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.315558][T10690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.034097][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 365.097620][T11867] loop4: detected capacity change from 0 to 4096 [ 365.243960][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 365.280617][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.394378][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.509781][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 365.616128][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.761156][ T24] usb 3-1: config 0 descriptor?? [ 365.860336][ T24] hub 3-1:0.0: USB hub found [ 366.151609][ T24] hub 3-1:0.0: 1 port detected [ 366.348596][ T1005] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.386746][ T24] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 366.393800][ T24] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 366.587242][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 366.593431][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 366.654684][T11887] loop6: detected capacity change from 0 to 512 [ 366.814743][ T24] usb 3-1: USB disconnect, device number 13 [ 366.863441][T11890] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2282'. [ 366.939898][T11887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.124497][T11887] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.764842][T11580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.955070][T11918] loop2: detected capacity change from 0 to 512 [ 369.014365][T11918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.135458][T11918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 369.201160][T11918] System zones: 1-12 [ 369.257006][T11918] EXT4-fs (loop2): 1 truncate cleaned up [ 369.320438][T11918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.490165][T11918] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 369.717958][T11899] loop4: detected capacity change from 0 to 32768 [ 369.748690][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.804889][T11899] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2286 (11899) [ 369.959818][T11896] loop0: detected capacity change from 0 to 40427 [ 369.976734][T11899] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 370.035739][T11899] BTRFS info (device loop4): using sha256 checksum algorithm [ 370.415478][T11899] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 370.415907][T11899] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 370.529795][T11899] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 370.667089][T11899] BTRFS error (device loop4): open_ctree failed: -12 [ 371.310954][T11921] loop6: detected capacity change from 0 to 32768 [ 371.379401][T11921] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2297 (11921) [ 371.451609][ T1005] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.725410][T11921] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.828352][T11921] BTRFS info (device loop6): using sha256 checksum algorithm [ 372.045063][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 372.045386][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 372.176455][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 372.262435][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 372.343029][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 372.507098][T11921] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 372.724638][T11921] BTRFS error (device loop6): open_ctree failed: -12 [ 374.050153][T11999] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 375.042298][T12007] loop4: detected capacity change from 0 to 4096 [ 375.223195][T12014] loop6: detected capacity change from 0 to 16 [ 375.259249][T12017] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.325915][T12014] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 375.785669][ T1005] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.087469][T12023] loop4: detected capacity change from 0 to 128 [ 376.182073][T12023] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 376.317878][T12023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.383530][T12027] loop6: detected capacity change from 0 to 2048 [ 376.691767][T12031] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.499614][ T1005] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.533429][T12021] loop2: detected capacity change from 0 to 32768 [ 378.584156][T12021] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2328 (12021) [ 378.697846][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.704395][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.884249][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 378.959226][T12038] loop3: detected capacity change from 0 to 32768 [ 379.047812][ T5902] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.090339][ T5902] usb 5-1: config 0 has no interface number 0 [ 379.145602][ T5902] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 379.199270][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.250995][ T5902] usb 5-1: Product: syz [ 379.267764][ T5902] usb 5-1: Manufacturer: syz [ 379.288033][ T5902] usb 5-1: SerialNumber: syz [ 379.336435][ T5902] usb 5-1: config 0 descriptor?? [ 379.557147][ T5902] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 379.645987][ T5902] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.700828][ T5902] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 379.757440][ T5902] usb 5-1: media controller created [ 379.852036][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.026893][ T5902] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 380.079066][ T5902] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 380.395375][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 380.426637][ T5902] DVB: Unable to find symbol mxl5005s_attach() [ 380.878333][ T5902] usb 5-1: USB disconnect, device number 16 [ 381.040626][T12072] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2348'. [ 381.112664][T12072] netlink: 'syz.6.2348': attribute type 1 has an invalid length. [ 381.146350][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2348'. [ 382.027455][T12085] loop4: detected capacity change from 0 to 1024 [ 382.489248][ T49] hfsplus: b-tree write err: -5, ino 4 [ 383.230953][T12068] loop3: detected capacity change from 0 to 32768 [ 383.320949][ T1005] bridge_slave_1: left allmulticast mode [ 383.321049][ T1005] bridge_slave_1: left promiscuous mode [ 383.324199][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.498863][T12068] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 383.615680][T12068] XFS (loop3): Ending clean mount [ 383.675426][ T1005] bridge_slave_0: left allmulticast mode [ 383.675457][ T1005] bridge_slave_0: left promiscuous mode [ 383.675734][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.038542][ T5816] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 385.231201][T12135] loop3: detected capacity change from 0 to 512 [ 385.403185][T12135] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 385.544688][T12135] EXT4-fs (loop3): invalid journal inode [ 385.654328][T12135] EXT4-fs (loop3): can't get journal size [ 385.742974][T12135] EXT4-fs (loop3): 1 truncate cleaned up [ 385.764507][T12136] loop0: detected capacity change from 0 to 4096 [ 385.824103][T12135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.048063][T12136] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 386.621544][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.502383][T12173] loop6: detected capacity change from 0 to 64 [ 388.665440][T12162] loop0: detected capacity change from 0 to 40427 [ 388.704706][T12162] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 388.755405][T12162] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 388.790544][T12162] F2FS-fs (loop0): invalid crc value [ 388.822115][T12175] loop6: detected capacity change from 0 to 64 [ 389.265059][T12180] loop6: detected capacity change from 0 to 512 [ 389.311378][T12180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.349768][T12180] EXT4-fs error (device loop6): ext4_readdir:225: inode #12: comm syz.6.2393: path /33/file0/file0: directory fails checksum at offset 0 [ 389.431716][T11580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.517990][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.615323][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.655257][ T1005] bond0 (unregistering): Released all slaves [ 390.082176][T12162] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 390.229321][ T29] audit: type=1326 audit(1770067698.014:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 390.297647][T12162] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 390.323187][T12162] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 390.344680][ T29] audit: type=1326 audit(1770067698.014:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 390.368334][ T29] audit: type=1326 audit(1770067698.014:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 390.393530][ T29] audit: type=1326 audit(1770067698.014:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12187 comm="syz.2.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 390.455827][T12193] can0: slcan on ttynull. [ 391.616179][T12209] netlink: 'syz.3.2402': attribute type 6 has an invalid length. [ 391.720596][T12213] netlink: 'syz.3.2402': attribute type 6 has an invalid length. [ 391.740905][T12212] loop2: detected capacity change from 0 to 512 [ 391.809947][T12185] loop6: detected capacity change from 0 to 32768 [ 391.941948][T12185] JBD2: Ignoring recovery information on journal [ 391.983574][ T5902] Process accounting resumed [ 392.017413][ T5902] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 392.031091][T12185] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 392.115938][ T5902] FAT-fs (loop2): Filesystem has been set read-only [ 392.131031][T12185] JBD2: bad block at offset 32 [ 392.176732][T12190] can0 (unregistered): slcan off ttynull. [ 392.215797][T12185] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 392.538019][T12185] OCFS2: ERROR (device loop6): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 392.772328][T12220] loop3: detected capacity change from 0 to 1024 [ 392.854453][T12185] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 392.913069][T12220] hfsplus: bad catalog entry type [ 393.000980][T12185] OCFS2: File system is now read-only. [ 393.047310][T12185] (syz.6.2394,12185,1):ocfs2_find_leaf:1950 ERROR: status = -30 [ 393.139611][T12185] (syz.6.2394,12185,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 393.256793][T12185] (syz.6.2394,12185,1):ocfs2_fiemap:792 ERROR: status = -30 [ 393.287023][ T63] hfsplus: b-tree write err: -5, ino 4 [ 393.553548][T12231] loop2: detected capacity change from 0 to 1024 [ 393.685801][T12231] EXT4-fs: Ignoring removed bh option [ 393.733386][T12233] loop0: detected capacity change from 0 to 1024 [ 393.826051][T11580] ocfs2: Unmounting device (7,6) on (node local) [ 393.861664][T12231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.876382][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2408'. [ 394.067191][T12233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.349300][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.711587][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.008126][T12249] loop2: detected capacity change from 0 to 128 [ 395.891143][T12265] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2419'. [ 395.988464][T12265] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2419'. [ 396.428228][ T1005] hsr_slave_0: left promiscuous mode [ 396.548206][ T1005] hsr_slave_1: left promiscuous mode [ 396.612666][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.696371][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.841445][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.884067][ T5902] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 396.944066][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.146364][ T5902] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 397.209482][ T1005] veth1_macvtap: left promiscuous mode [ 397.225885][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.272361][ T1005] veth0_macvtap: left promiscuous mode [ 397.310899][ T1005] veth1_vlan: left promiscuous mode [ 397.321585][ T5902] usb 7-1: config 0 descriptor?? [ 397.360465][ T1005] veth0_vlan: left promiscuous mode [ 397.683680][ T5902] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 397.896728][ T5902] [drm:udl_init] *ERROR* Selecting channel failed [ 398.038163][ T5902] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 398.152418][ T5902] [drm] Initialized udl on minor 2 [ 398.224266][ T5902] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.286777][ T5902] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 398.296878][ T42] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.464786][ T42] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.474157][ T5902] usb 7-1: USB disconnect, device number 2 [ 398.565438][ T42] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 398.807649][T12299] loop3: detected capacity change from 0 to 256 [ 402.021369][T12324] loop4: detected capacity change from 0 to 32768 [ 402.049817][T12324] btrfs: Deprecated parameter 'usebackuproot' [ 402.113055][T12324] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 402.161633][T12324] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2440 (12324) [ 402.286291][T12324] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 402.362562][T12324] BTRFS info (device loop4): using blake2b checksum algorithm [ 402.484245][T12324] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 402.738881][T12324] BTRFS info (device loop4): rebuilding free space tree [ 402.809696][T12324] BTRFS info (device loop4): disabling free space tree [ 402.828500][T12324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.864711][T12324] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 402.938230][T12324] BTRFS info (device loop4): allowing degraded mounts [ 402.954392][T12324] BTRFS info (device loop4): enabling ssd optimizations [ 402.990708][T12324] BTRFS info (device loop4): turning off barriers [ 403.010912][T12324] BTRFS info (device loop4): turning on async discard [ 403.044879][T12324] BTRFS info (device loop4): enabling disk space caching [ 403.062844][T12324] BTRFS info (device loop4): force clearing of disk cache [ 403.106072][T12324] BTRFS info (device loop4): trying to use backup root at mount time [ 403.124026][T12324] BTRFS info (device loop4): use zlib compression, level 3 [ 403.313388][T12326] loop6: detected capacity change from 0 to 32768 [ 403.374964][ T5819] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 403.393378][T12326] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2441 (12326) [ 403.575014][T12326] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 403.609035][T12326] BTRFS info (device loop6): using sha256 checksum algorithm [ 403.610998][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 404.030477][T12326] BTRFS info (device loop6): rebuilding free space tree [ 404.142302][T12326] BTRFS info (device loop6): disabling free space tree [ 404.184955][T12326] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.195858][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 404.249369][T12326] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.338455][T12326] BTRFS info (device loop6): enabling ssd optimizations [ 404.386834][T12326] BTRFS info (device loop6): turning on async discard [ 404.393870][T12326] BTRFS info (device loop6): force clearing of disk cache [ 404.434355][T12326] BTRFS info (device loop6): enabling auto defrag [ 404.434383][T12326] BTRFS info (device loop6): max_inline set to 4096 [ 404.806752][T11580] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 407.231320][T12302] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 407.239378][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 407.304072][T12371] dummy0: entered promiscuous mode [ 407.324620][T12371] dummy0: left promiscuous mode [ 407.449680][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 407.513599][ T24] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 407.594431][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 407.678732][ T24] usb 5-1: config 220 has no interface number 2 [ 407.757727][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 407.883551][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 407.945419][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 408.006605][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 408.075399][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 408.089547][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.106156][ T42] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 408.164755][ T24] usb 5-1: Product: syz [ 408.169014][ T24] usb 5-1: Manufacturer: syz [ 408.209877][ T24] usb 5-1: SerialNumber: syz [ 408.348089][ T42] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 408.432343][ T42] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.533629][ T42] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 408.555936][ T24] usb 5-1: selecting invalid altsetting 0 [ 408.562232][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 408.647352][ T42] usb 7-1: config 0 interface 0 has no altsetting 0 [ 408.664010][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 408.682591][T12398] fuse: Invalid rootmode [ 408.704241][ T42] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 408.755457][ T24] usb 5-1: selecting invalid altsetting 0 [ 408.791725][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.831947][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 408.880115][ T42] usb 7-1: config 0 descriptor?? [ 408.901234][ T24] usb 5-1: USB disconnect, device number 17 [ 409.449127][ T42] hid-alps 0003:044E:120C.0010: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 409.675398][ T42] usb 7-1: USB disconnect, device number 3 [ 409.767887][T12411] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2462'. [ 409.904781][T12408] fido_id[12408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 412.401579][T12449] smc: net device wlan0 applied user defined pnetid SYZ0 [ 412.509465][T12419] loop2: detected capacity change from 0 to 32768 [ 412.565660][T12419] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2464 (12419) [ 412.758695][T12419] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 412.824147][T12419] BTRFS info (device loop2): using blake2b checksum algorithm [ 412.880470][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.022038][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.614958][T12419] BTRFS error (device loop2): open_ctree failed: -4 [ 414.111419][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.118898][T12452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.146539][ T29] audit: type=1326 audit(1770067721.924:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 414.353122][ T29] audit: type=1326 audit(1770067721.924:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 414.378863][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.386341][T12452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.506272][ T29] audit: type=1326 audit(1770067721.924:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 416.526772][ T29] audit: type=1326 audit(1770067721.934:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 421.562297][ T29] audit: type=1326 audit(1770067721.934:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 429.219580][ T29] audit: type=1326 audit(1770067721.934:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 440.832323][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.859261][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.023291][ T29] audit: type=1326 audit(1770067721.934:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 466.988048][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 478.754409][ T29] audit: type=1326 audit(1770067721.934:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 497.077839][ T29] audit: type=1326 audit(1770067721.934:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.2.2482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcbfcb9aeb9 code=0x7ffc0000 [ 501.867825][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.682809][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.514734][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.538656][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.388637][ T30] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 573.415303][ T30] Tainted: G L syzkaller #0 [ 573.421871][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.