last executing test programs: 59.698914972s ago: executing program 5 (id=1022): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x15006d, 0x0) 58.59369439s ago: executing program 5 (id=1033): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee01) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) 58.201906298s ago: executing program 5 (id=1036): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000004ec0)={0xa, 0x4e20, 0x2, @mcast1, 0x4}, 0x1c) 57.865364719s ago: executing program 5 (id=1040): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001a00)=ANY=[@ANYBLOB='allow_utime=00000000000000000000302,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=iso8859-14,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030000000002c646973636172642c7569643d020331dcd7706de469da08a27f989c2c8492e71601372cb14bdcaee57b93e3d030470bd060999c22775e7b5ed20cdc0d19238d47a5ad1a7e4bb598f5658bf54b4ca97cce85a6296d1725", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000020000002,defcontext=user_u,obj_user=iocharset,\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 57.363337961s ago: executing program 5 (id=1046): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xfffffffffffffdb5) 56.446369475s ago: executing program 5 (id=1058): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000000980)={[{@part={'part', 0x3d, 0x9}}, {@type={'type', 0x3d, "52355dbd"}}, {@nls={'nls', 0x3d, 'cp932'}}, {@barrier}, {@barrier}, {}]}, 0x3, 0x6ae, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 55.605575581s ago: executing program 32 (id=1058): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000000980)={[{@part={'part', 0x3d, 0x9}}, {@type={'type', 0x3d, "52355dbd"}}, {@nls={'nls', 0x3d, 'cp932'}}, {@barrier}, {@barrier}, {}]}, 0x3, 0x6ae, &(0x7f0000000280)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 4.063108365s ago: executing program 2 (id=1541): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) keyctl$get_persistent(0x16, 0x0, r0) 3.690700706s ago: executing program 4 (id=1545): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 3.573924612s ago: executing program 2 (id=1546): r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x4, 0x69f, &(0x7f0000000580)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r0, 0x0, 0x8) 3.288264138s ago: executing program 2 (id=1549): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ppoll(&(0x7f00000001c0)=[{r0, 0x2002}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xd}}, 0x18) 3.272204391s ago: executing program 1 (id=1550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.252993488s ago: executing program 4 (id=1552): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xbb83}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00012000000000ffdbdf2502f8"], 0x1c}}, 0x4000) 2.857215153s ago: executing program 4 (id=1556): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x5ee7, &(0x7f0000006580)="$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") setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x0, 0x0, 0x3) 2.777355988s ago: executing program 1 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c00250327bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80008e040a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x240448c1}, 0x14) 2.673087916s ago: executing program 2 (id=1558): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") socket$igmp(0x2, 0x3, 0x2) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x400000, 0x9f, 0x8c60000000000000, 0xa, 0x7, 0x2000000000002, 0x95, 0x80000001, 0x9}) 2.532690762s ago: executing program 6 (id=1559): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 2.496346062s ago: executing program 0 (id=1560): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x10, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x5], 0x0, [0x1, 0x7fffffff]}, 0xa, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000) 2.387929016s ago: executing program 1 (id=1561): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file2\x00', 0x40, &(0x7f0000000340), 0x1, 0x57e, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x42, 0x46) fallocate(r0, 0x10, 0x6, 0xad3) 2.205185843s ago: executing program 6 (id=1562): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@secondary) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 2.164115556s ago: executing program 3 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}}, 0x0) 2.069786603s ago: executing program 0 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0) 1.809511694s ago: executing program 6 (id=1565): r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000480)="ba", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="ba305a4550bba8977d59d29e8ae45898ed4b3cba97cea2007d716178d189b78f2078e58bcb1cfe09487fd16787fcbc77b5529ce5c68e9ad5a4d599fc40a069498778f6f0c9ad8c3913bed7cad6caae708f3c0326180b069dee6ef7a4c2ef9bb640fae9c28a07948e891ebe98f9a7a51f8307fee83af8a8f2f71752471a192ff4d3aa9cb96cd90f4c42b8ecf326e4c9d204361b42b3906eb8519bcd25915dc9378522f102eeeec1f2281088b99f216b8ab0aa271bea1a3bc7f32c57b4404db397", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, &(0x7f000001f600)=""/94, 0x5e, &(0x7f0000000240)={&(0x7f000001f680)={'sha512-generic\x00'}}) 1.808399009s ago: executing program 3 (id=1566): r0 = msgget$private(0x0, 0x790) msgsnd(r0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) 1.692596027s ago: executing program 0 (id=1567): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000000c0)='io_uring_create\x00', r0}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 1.691513471s ago: executing program 1 (id=1568): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1.567633434s ago: executing program 6 (id=1569): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 1.488770908s ago: executing program 3 (id=1570): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.280286077s ago: executing program 0 (id=1571): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffdec, 0x1, 0x0}, &(0x7f00000005c0)=0x48) 1.23806184s ago: executing program 6 (id=1572): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x3, 0x4) 1.215955344s ago: executing program 2 (id=1573): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r0}) 1.035262327s ago: executing program 3 (id=1574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) 989.809099ms ago: executing program 0 (id=1575): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$eJzs3c1rHGUYAPBnZrPWttFU/EA9FbRUKd2kTYvk1hw8VqrBo8Sw2YaQSTZkN7UJObTgXUFBUQT15N2riPgHeBbRf0ARGyytt5XJ7qY1X6616Wrm94PZfT+GPO+b2edlZ5hhAyis4/lLGvFMRFxKIobu6huITufx9n631teqt9fXqkm0WhO/JZFExM31tWp3/6TzfjQirkXE0xHxbTniVLo9bmNldW4qy2pLnfpwc35xuLGyenp2fmqmNlNbGB07PzY69tLYudH7NteJybFXT/zwSvJ1Mv7yzU/euJHEhRjs9N09j/up/T8px4Ut7ef2I1gfJf0eAPek1MnzckQ8GUNR6mQ9cPC1DkW0gIJK5D8UVPd7QH7+290e5PePX8fbJyB53Fudrd0z0L42EQ9vnJsc+T35y5lJfr557EEOlAPp2vWIGBkY2P75Tzqfv3s3cj8GyL76Zrx9oLYf/3Rz/Ykd1p/B7rXTf6m7/t3atv7diV/aZf271GOMhbHvnto1/vWIZ3eMn2zGT3aIn0bEmz3Gn/jyl89362t9FnEydo7flex9fXj48mxWG2m/7hjjnddGvthr/kd2iX9hj/nnbYs9zj9ef/zHa3vEf+G5vY//TvEPR8S7PYb/6aP33t6tL48/vcv894qft33aY/wTL3413uOuAAAAAAAAAADAP5Bu3MuWpJXNcppWKu1neJ+II2lWbzRPXa4vL0y373k7FuW0e6fVULue5PUznftxu/WzW+qjEfFYRLxfOrxRr1Tr2XS/Jw8AAAAAAAAAAAAAAAAAAAD/EUe3PP9/s9R+/h8oCD/5DcUl/6G45D8Ul/yH4pL/UFzyH4pL/kNxyX8oLvkPxSX/objkPwAAAAAAAAAAAAAAAAAAAAAAAAAA7ItLFy/mW+v2+lo1r09fWVmeq185PV1rzFXml6uVan1psTJTr89ktUq1Pv93fy+r1xfPx8Ly1eFmrdEcbqysTs7Xlxeak7PzUzO1yVr5gcwKAAAAAAAAAAAAAAAAAAAA/l8GN7YkrUREulFO00ol4pGIOBbl5PJsVhuJiEcj4vtS+VBeP9PvQQMAAAAAAAAAAAAAAAAAAMAB01hZnZvKstqSgoKCwmah3ysTAAAAAAAAAAAAAAAAAAAUz52Hfvs9EgAAAAAAAAAAAAAAAAAAACiy9OdWq9VKIuLk0PODW3sfSv4obbxHxFsfT3xwdarZXDqTt9/YbG9+2Gk/24/xA73q5mk3jwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA7Giurc1NZVlvax0K/5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwL/4MAAD//7HA27Q=") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/file1\x00', &(0x7f0000000140), &(0x7f0000000240)={'U-', 0x4}, 0xa5a0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0) 986.789448ms ago: executing program 4 (id=1576): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) 960.994642ms ago: executing program 1 (id=1577): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6}]}, 0x10) 902.029932ms ago: executing program 6 (id=1578): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 731.503235ms ago: executing program 3 (id=1579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8e06000000000000003295b739617d2de53ae3", 0x21) 530.939401ms ago: executing program 1 (id=1580): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) 425.221796ms ago: executing program 4 (id=1581): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 418.028713ms ago: executing program 0 (id=1582): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "fede60e0"}]}}, 0x0}, 0x0) 262.268896ms ago: executing program 2 (id=1583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000280)={0xf, {"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", 0x1000}}, 0x1006) 97.951962ms ago: executing program 4 (id=1584): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0xcc) rmdir(&(0x7f0000000140)='./file0/file0/..\x00') 0s ago: executing program 3 (id=1585): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b 0xffff: 262144 [ 167.730141][ T7692] netlink: 10 bytes leftover after parsing attributes in process `syz.2.763'. [ 167.964088][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 167.972492][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 167.980515][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 167.988512][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 167.996521][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 168.004481][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 168.012481][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 168.020465][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 168.028438][ T7699] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 168.411036][ T7705] loop5: detected capacity change from 0 to 8192 [ 168.529563][ T7705] syz.5.768: attempt to access beyond end of device [ 168.529563][ T7705] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 168.639321][ T7722] loop4: detected capacity change from 0 to 128 [ 168.655939][ T7705] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 168.663832][ T7705] FAT-fs (loop5): Filesystem has been set read-only [ 168.699898][ T7722] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 168.770428][ T7705] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 168.810432][ T7705] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 168.934877][ T5911] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 169.143148][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 169.192597][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 169.219401][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 169.315048][ T5911] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 169.387147][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.442868][ T5911] usb 4-1: Product: syz [ 169.468021][ T5911] usb 4-1: Manufacturer: syz [ 169.472709][ T5911] usb 4-1: SerialNumber: syz [ 169.555343][ T5911] usb 4-1: config 0 descriptor?? [ 169.563449][ T7725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.586449][ T7725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.626483][ T5911] usb 4-1: ucan: probing device on interface #0 [ 170.024371][ T5911] usb 4-1: ucan: device reported invalid tx-fifo size [ 170.031209][ T5911] usb 4-1: ucan: probe failed; try to update the device firmware [ 170.209198][ T7769] capability: warning: `syz.0.799' uses 32-bit capabilities (legacy support in use) [ 170.229292][ T10] usb 4-1: USB disconnect, device number 6 [ 170.487896][ T7776] loop5: detected capacity change from 0 to 1024 [ 170.574138][ T7776] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 170.907721][ T43] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 170.946328][ T43] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 170.953780][ T43] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 171.020599][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 171.032700][ T7752] loop1: detected capacity change from 0 to 32768 [ 171.041614][ T43] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 171.052137][ T7786] loop4: detected capacity change from 0 to 4096 [ 171.077020][ T7786] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 171.097899][ T7752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.792 (7752) [ 171.191134][ T7752] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.252726][ T7752] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 171.277035][ T7786] ntfs3(loop4): ino=19, mi_enum_attr [ 171.321442][ T7795] gfs2: path_lookup on c::: returned error -2 [ 171.332739][ T7752] BTRFS info (device loop1): using free-space-tree [ 171.433918][ T7786] ntfs3(loop4): ino=5, "/" indx_read [ 171.477165][ T7793] fido_id[7793]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.489641][ T7786] ntfs3(loop4): ino=5, ntfs_readdir [ 171.522939][ T7808] syz.5.813 uses obsolete (PF_INET,SOCK_PACKET) [ 171.688351][ T7779] loop0: detected capacity change from 0 to 32768 [ 171.699311][ T7779] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.804 (7779) [ 171.719069][ T7779] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.823886][ T7779] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm [ 171.883650][ T7779] BTRFS info (device loop0): using free-space-tree [ 171.909815][ T7818] loop2: detected capacity change from 0 to 1024 [ 171.948053][ T5855] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.023510][ T7818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.374770][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 172.565597][ T7849] smc: net device bond0 applied user defined pnetid SYZ2 [ 172.565900][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.801099][ T5845] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.196855][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.434258][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 173.481785][ T5911] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 173.510883][ T5911] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 173.546793][ T7877] netlink: 'syz.5.834': attribute type 1 has an invalid length. [ 173.571966][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.598154][ T5911] usb 2-1: Product: syz [ 173.616879][ T5911] usb 2-1: Manufacturer: syz [ 173.643370][ T5911] usb 2-1: SerialNumber: syz [ 173.669487][ T5911] usb 2-1: config 0 descriptor?? [ 173.722834][ T5911] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 173.771392][ T5911] usb 2-1: setting power ON [ 173.824553][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 173.922311][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.950556][ T7885] loop3: detected capacity change from 0 to 128 [ 173.996587][ T5911] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 174.047271][ T5911] usb 2-1: media controller created [ 174.172190][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.240478][ T5911] usb 2-1: selecting invalid altsetting 6 [ 174.243763][ T7885] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.259997][ T5911] usb 2-1: digital interface selection failed (-22) [ 174.290060][ T5911] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 174.310793][ T7885] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.361038][ T5911] usb 2-1: setting power OFF [ 174.381257][ T5911] dvb-usb: bulk message failed: -22 (2/0) [ 174.424535][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 174.466045][ T5911] (NULL device *): no alternate interface [ 174.627112][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.701512][ T5911] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 174.757630][ T5911] usb 2-1: USB disconnect, device number 5 [ 175.254346][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.399228][ T7923] loop4: detected capacity change from 0 to 64 [ 175.456961][ T10] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 175.487129][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.524776][ T10] usb 1-1: Product: syz [ 175.528959][ T30] audit: type=1800 audit(1752809749.832:19): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.855" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 175.532770][ T7923] syz.4.855: attempt to access beyond end of device [ 175.532770][ T7923] loop4: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 175.584778][ T10] usb 1-1: Manufacturer: syz [ 175.590058][ T7923] syz.4.855: attempt to access beyond end of device [ 175.590058][ T7923] loop4: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 175.590166][ T7923] syz.4.855: attempt to access beyond end of device [ 175.590166][ T7923] loop4: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 175.590395][ T7923] syz.4.855: attempt to access beyond end of device [ 175.590395][ T7923] loop4: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 175.627579][ T7923] syz.4.855: attempt to access beyond end of device [ 175.627579][ T7923] loop4: rw=34817, sector=179, nr_sectors = 371 limit=64 [ 175.752753][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 175.769155][ T10] usb 1-1: SerialNumber: syz [ 175.799379][ T10] usb 1-1: config 0 descriptor?? [ 175.845921][ T10] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 175.899468][ T10] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5 [ 175.942691][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 176.015787][ T10] usb-storage 1-1:0.0: device ignored [ 176.137028][ T10] usb 1-1: USB disconnect, device number 7 [ 176.212262][ T7941] loop5: detected capacity change from 0 to 1764 [ 176.315573][ T7941] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 176.737642][ T7963] loop3: detected capacity change from 0 to 128 [ 176.790866][ T7963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.883601][ T7963] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.974681][ T7969] loop1: detected capacity change from 0 to 256 [ 177.026807][ T7969] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 177.096551][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.286882][ T7979] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.881'. [ 177.296385][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.428816][ T7987] binder_alloc: binder_alloc_mmap_handler: 7986 200000ffc000-200000ffd000 already mapped failed -16 [ 177.504418][ T5937] usb 5-1: Using ep0 maxpacket: 16 [ 177.543271][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.569168][ T5937] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 177.605935][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.630285][ T7991] CUSE: unknown device info "ÿ" [ 177.649000][ T5937] usb 5-1: config 0 descriptor?? [ 177.654904][ T7991] CUSE: zero length info key specified [ 177.858933][ T7994] xt_CT: No such helper "pptp" [ 178.098512][ T5937] apple 0003:05AC:024B.0002: item fetching failed at offset 2/69 [ 178.149346][ T5937] apple 0003:05AC:024B.0002: parse failed [ 178.163581][ T5937] apple 0003:05AC:024B.0002: probe with driver apple failed with error -22 [ 178.308451][ T5937] usb 5-1: USB disconnect, device number 6 [ 178.316082][ T8004] loop1: detected capacity change from 0 to 4096 [ 178.409803][ T8004] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 178.454817][ T8004] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 178.727540][ T8023] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.762871][ T8023] overlayfs: missing 'lowerdir' [ 178.785369][ T8021] loop0: detected capacity change from 0 to 4096 [ 178.886627][ T8021] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 179.018429][ T8021] ntfs3(loop0): Failed to load $Extend (-22). [ 179.062737][ T8021] ntfs3(loop0): Failed to initialize $Extend. [ 179.084664][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.132332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 179.172136][ T30] audit: type=1800 audit(1752809753.492:20): pid=8021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.899" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 179.284518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.324452][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 179.351473][ T5911] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 179.381592][ T5911] usb 2-1: config 0 has no interface number 0 [ 179.410883][ T5911] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 179.456008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.464981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.481010][ T5911] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x69, changing to 0x9 [ 179.506958][ T5911] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 179.520138][ T8034] team_slave_0: entered promiscuous mode [ 179.526405][ T8034] team_slave_1: entered promiscuous mode [ 179.534866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.543715][ T5911] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 179.569565][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.588707][ T5911] usb 2-1: Product: syz [ 179.607803][ T8005] loop2: detected capacity change from 0 to 32768 [ 179.613500][ T5911] usb 2-1: Manufacturer: syz [ 179.614731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.648718][ T8005] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.891 (8005) [ 179.696803][ T5911] usb 2-1: SerialNumber: syz [ 179.727378][ T8005] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 179.749267][ T5911] usb 2-1: config 0 descriptor?? [ 179.767868][ T8005] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.791220][ T8025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.828422][ T8005] BTRFS info (device loop2): disk space caching is enabled [ 179.879711][ T8005] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 180.010337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 180.114807][ T5911] usb 2-1: USB disconnect, device number 6 [ 180.280989][ T8060] loop0: detected capacity change from 0 to 512 [ 180.286312][ T8005] BTRFS info (device loop2): rebuilding free space tree [ 180.289610][ T49] wlan1: Trigger new scan to find an IBSS to join [ 180.307601][ T8060] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.383444][ T8060] EXT4-fs (loop0): 1 truncate cleaned up [ 180.389708][ T8005] BTRFS info (device loop2): disabling free space tree [ 180.411681][ T8005] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 180.428724][ T8005] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 180.446047][ T8060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.757413][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.778389][ T5857] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 181.078454][ T8081] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 181.131935][ T8085] loop4: detected capacity change from 0 to 256 [ 181.149035][ T8081] NCSI netlink: No device for ifindex 0 [ 181.404785][ T5918] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 181.624888][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.661475][ T5918] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 181.702346][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.761724][ T8098] loop1: detected capacity change from 0 to 1024 [ 181.772773][ T5918] usb 4-1: config 0 descriptor?? [ 181.797486][ T8087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 181.846255][ T8098] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 181.857160][ T8103] loop2: detected capacity change from 0 to 8 [ 181.896009][ T8103] SQUASHFS error: lzo decompression failed, data probably corrupt [ 181.904052][ T8098] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 181.921569][ T8103] SQUASHFS error: Failed to read block 0x91: -5 [ 181.934509][ T8103] SQUASHFS error: Unable to read metadata cache entry [8f] [ 181.962222][ T8103] SQUASHFS error: Unable to read inode 0x11f [ 181.978800][ T8098] EXT4-fs (loop1): invalid journal inode [ 181.996879][ T8098] EXT4-fs (loop1): can't get journal size [ 182.024501][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 182.068876][ T8098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.221895][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.262094][ T5911] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 182.277601][ T5918] belkin 0003:050D:3201.0003: item fetching failed at offset 0/3 [ 182.324368][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.335120][ T5918] belkin 0003:050D:3201.0003: parse failed [ 182.357116][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.378873][ T5918] belkin 0003:050D:3201.0003: probe with driver belkin failed with error -22 [ 182.389331][ T5911] usb 6-1: config 0 descriptor?? [ 182.491003][ T5918] usb 4-1: USB disconnect, device number 7 [ 182.593378][ T8120] loop1: detected capacity change from 0 to 16 [ 182.655416][ T8120] erofs (device loop1): mounted with root inode @ nid 36. [ 182.853046][ T5911] dragonrise 0003:0079:0006.0004: item fetching failed at offset 3/5 [ 182.895174][ T5911] dragonrise 0003:0079:0006.0004: parse failed [ 182.915562][ T5911] dragonrise 0003:0079:0006.0004: probe with driver dragonrise failed with error -22 [ 183.002820][ T8130] loop0: detected capacity change from 0 to 256 [ 183.015444][ T8130] exfat: Deprecated parameter 'namecase' [ 183.067395][ T10] usb 6-1: USB disconnect, device number 6 [ 183.144445][ T8130] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 183.349464][ T8138] loop3: detected capacity change from 0 to 1024 [ 183.454913][ T6034] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.578673][ T49] hfsplus: b-tree write err: -5, ino 4 [ 183.634867][ T6034] usb 3-1: Using ep0 maxpacket: 8 [ 183.685292][ T6034] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 183.712406][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.744274][ T6034] usb 3-1: Product: syz [ 183.748501][ T6034] usb 3-1: Manufacturer: syz [ 183.787847][ T6034] usb 3-1: SerialNumber: syz [ 183.809660][ T6034] usb 3-1: config 0 descriptor?? [ 183.851848][ T6034] gspca_main: se401-2.14.0 probing 047d:5003 [ 184.084957][ T8159] netlink: 'syz.4.955': attribute type 11 has an invalid length. [ 184.163546][ T8164] loop3: detected capacity change from 0 to 256 [ 184.190561][ T8165] loop0: detected capacity change from 0 to 256 [ 184.201477][ T8164] exfat: Deprecated parameter 'namecase' [ 184.228784][ T8165] exfat: Deprecated parameter 'utf8' [ 184.268862][ T6034] gspca_se401: Wrong descriptor type [ 184.302156][ T8165] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 184.302262][ T8167] loop1: detected capacity change from 0 to 1024 [ 184.344232][ T5918] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 184.382669][ T8164] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 184.494403][ T6034] usb 3-1: USB disconnect, device number 10 [ 184.498132][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 184.548915][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.577834][ T13] hfsplus: b-tree write err: -5, ino 4 [ 184.583960][ T5918] usb 6-1: config index 0 descriptor too short (expected 274, got 18) [ 184.623507][ T5918] usb 6-1: config 4 interface 0 has no altsetting 0 [ 184.674452][ T5911] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.696733][ T5918] usb 6-1: string descriptor 0 read error: -22 [ 184.703438][ T5918] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 184.734233][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.757720][ T5918] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 184.780045][ T8176] netlink: 'syz.0.963': attribute type 29 has an invalid length. [ 184.821337][ T5918] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 184.843397][ T8176] netlink: 'syz.0.963': attribute type 29 has an invalid length. [ 184.853004][ T5918] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 184.861459][ T5918] usb 6-1: media controller created [ 184.887184][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 184.902545][ T5911] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 184.930895][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.939501][ T5911] usb 4-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 184.953804][ T5911] usb 4-1: config 0 has no interface number 0 [ 184.996899][ T5911] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 185.033141][ T5918] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.044262][ T5911] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 185.084839][ T5911] usb 4-1: config 0 interface 122 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 185.142082][ T5911] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 30788, setting to 64 [ 185.204312][ T5911] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 185.243681][ T5911] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 185.248041][ T994] wlan1: Trigger new scan to find an IBSS to join [ 185.267302][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.291108][ T5918] usb 6-1: USB disconnect, device number 7 [ 185.306317][ T5911] usb 4-1: Product: syz [ 185.352540][ T5911] usb 4-1: Manufacturer: syz [ 185.361466][ T5911] usb 4-1: SerialNumber: syz [ 185.377580][ T5911] usb 4-1: config 0 descriptor?? [ 185.396365][ T8164] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 185.644403][ T5911] usb 4-1: NFC: intf ffff88802faa0000 id ffffffff8eb517e0 [ 185.716534][ T5911] usb 4-1: USB disconnect, device number 8 [ 185.804286][ T5918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.994347][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 186.011577][ T5918] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.034800][ T5918] usb 3-1: config 0 has no interface number 0 [ 186.054287][ T5918] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.075370][ T5918] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.119523][ T5918] usb 3-1: config 0 interface 8 has no altsetting 0 [ 186.151488][ T5918] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 186.187653][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.227458][ T5918] usb 3-1: config 0 descriptor?? [ 186.258325][ T69] wlan1: Creating new IBSS network, BSSID 46:89:0a:16:b6:cc [ 186.313696][ T8211] loop5: detected capacity change from 0 to 2048 [ 186.389172][ T8211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.699991][ T5918] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 186.724233][ T5918] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 186.758287][ T5918] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 186.802694][ T5918] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 186.833228][ T5918] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 186.879242][ T5918] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input8 [ 186.958929][ T5918] usb 3-1: USB disconnect, device number 11 [ 187.072434][ T8224] loop5: detected capacity change from 0 to 256 [ 187.118031][ T8222] fido_id[8222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 187.139868][ T8206] loop4: detected capacity change from 0 to 32768 [ 187.201407][ T8224] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 187.247522][ T8206] JBD2: Ignoring recovery information on journal [ 187.443885][ T8206] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 187.852480][ T5859] ocfs2: Unmounting device (7,4) on (node local) [ 188.060275][ T8241] loop4: detected capacity change from 0 to 1024 [ 188.139215][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.281193][ T8241] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #11: block 32: comm syz.4.992: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=65526, size=1024 fake=1 [ 188.451394][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.647557][ T8259] netlink: 'syz.4.999': attribute type 29 has an invalid length. [ 188.697505][ T8259] netlink: 'syz.4.999': attribute type 29 has an invalid length. [ 189.397148][ T8284] Bluetooth: MGMT ver 1.23 [ 189.717917][ T8285] loop0: detected capacity change from 0 to 32768 [ 189.782078][ T8285] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.857660][ T8285] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 189.915714][ T8285] XFS (loop0): Starting recovery (logdev: internal) [ 189.937499][ T8311] /dev/loop0: Can't open blockdev [ 189.964321][ T5861] Bluetooth: hci4: command tx timeout [ 189.972181][ T8285] XFS (loop0): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:48). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 189.990155][ T8285] XFS (loop0): Metadata corruption detected at xfs_agf_verify+0x18b/0x8f0, xfs_agf block 0x1 [ 190.000625][ T8285] XFS (loop0): Unmount and run xfs_repair [ 190.006394][ T8285] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 190.013796][ T8285] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 190.024238][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 190.032015][ T8285] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01 ................ [ 190.042386][ T8285] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 190.051439][ T8285] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 190.060463][ T8285] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 190.069512][ T8285] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 190.078594][ T8285] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 190.087498][ T8285] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 190.096714][ T8285] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_buf_submit+0x356/0xc10 (fs/xfs/xfs_buf.c:1463). Shutting down filesystem. [ 190.111169][ T8285] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 190.124631][ T8285] XFS (loop0): log mount/recovery failed: error -117 [ 190.139256][ T8285] XFS (loop0): log mount failed [ 190.174414][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 190.224832][ T5844] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.248511][ T5844] usb 3-1: config 0 has no interface number 0 [ 190.272271][ T5844] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.299852][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.323571][ T5844] usb 3-1: Product: syz [ 190.342807][ T5844] usb 3-1: Manufacturer: syz [ 190.352790][ T5844] usb 3-1: SerialNumber: syz [ 190.377692][ T5844] usb 3-1: config 0 descriptor?? [ 190.402851][ T5844] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 190.639077][ T5844] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.664807][ T5844] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.850865][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 191.052263][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.061311][ T5844] usb 3-1: USB disconnect, device number 12 [ 191.121316][ T5844] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.210295][ T8334] loop0: detected capacity change from 0 to 4096 [ 191.235112][ T5844] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.303490][ T5844] quatech2 3-1:0.51: device disconnected [ 191.379069][ T8342] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.504858][ T5945] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.695322][ T5945] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 191.717594][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.804513][ T8353] vivid-008: disconnect [ 191.810465][ T8351] vivid-008: reconnect [ 191.816233][ T5945] usb 2-1: config 0 descriptor?? [ 191.895066][ T5945] cp210x 2-1:0.0: cp210x converter detected [ 192.059034][ T8358] loop5: detected capacity change from 0 to 256 [ 192.107874][ T8358] exfat: Deprecated parameter 'namecase' [ 192.160500][ T8358] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 192.489379][ T8338] loop3: detected capacity change from 0 to 32768 [ 192.509676][ T5945] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 192.532578][ T5945] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 192.560729][ T5945] usb 2-1: cp210x converter now attached to ttyUSB0 [ 192.636454][ T8338] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 192.648804][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.658097][ T8380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'. [ 192.671829][ T5945] usb 2-1: USB disconnect, device number 7 [ 192.753288][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 192.834840][ T8338] XFS (loop3): Ending clean mount [ 192.842723][ T5945] cp210x 2-1:0.0: device disconnected [ 193.140063][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 193.650270][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.657567][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.702901][ T8401] loop4: detected capacity change from 0 to 4096 [ 193.747965][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.977190][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.138119][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.327295][ T8414] loop4: detected capacity change from 0 to 1024 [ 194.413567][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.548887][ T8415] loop3: detected capacity change from 0 to 4096 [ 194.598630][ T36] hfsplus: b-tree write err: -5, ino 4 [ 194.622663][ T8421] loop1: detected capacity change from 0 to 256 [ 195.126510][ T69] bridge_slave_1: left allmulticast mode [ 195.132426][ T69] bridge_slave_1: left promiscuous mode [ 195.193295][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.365109][ T69] bridge_slave_0: left allmulticast mode [ 195.396567][ T69] bridge_slave_0: left promiscuous mode [ 195.431920][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.739038][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.750727][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.763836][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.776394][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.785890][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.861237][ T8445] loop3: detected capacity change from 0 to 1764 [ 195.920176][ T8450] loop4: detected capacity change from 0 to 4096 [ 195.987882][ T8450] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 196.098919][ T8450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.299787][ T8450] fs-verity: sha512 using implementation "sha512-avx2" [ 196.595445][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.920982][ T8474] loop4: detected capacity change from 0 to 1024 [ 197.126025][ T8478] loop0: detected capacity change from 0 to 1024 [ 197.168926][ T1328] hfsplus: b-tree write err: -5, ino 4 [ 197.355014][ T8451] loop2: detected capacity change from 0 to 32768 [ 197.516270][ T8451] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 197.516270][ T8451] [ 197.608798][ T8451] ERROR: (device loop2): remounting filesystem as read-only [ 197.742466][ T8487] Bluetooth: MGMT ver 1.23 [ 197.895947][ T5861] Bluetooth: hci2: command tx timeout [ 198.062394][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.116210][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.142508][ T69] bond0 (unregistering): Released all slaves [ 198.228509][ T69] bond1 (unregistering): Released all slaves [ 198.375860][ T8501] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1097'. [ 198.552266][ T30] audit: type=1326 audit(1752809772.872:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8506 comm="syz.3.1099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x0 [ 198.573984][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.612960][ T8504] loop2: detected capacity change from 0 to 4096 [ 198.720151][ T8504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.955410][ T8504] EXT4-fs error (device loop2): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.2.1098: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 198.975869][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.017140][ T8516] loop0: detected capacity change from 0 to 1024 [ 199.050039][ T8504] EXT4-fs (loop2): Remounting filesystem read-only [ 199.076566][ T8516] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 199.112544][ T8516] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 199.182782][ T8516] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 199.253875][ T8516] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.1102: unexpected bad inode w/o EXT4_IGET_BAD [ 199.270104][ T8516] EXT4-fs (loop0): no journal found [ 199.294067][ T8516] EXT4-fs (loop0): can't get journal size [ 199.312172][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.351920][ T8516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.544280][ T6034] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 199.754782][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.791863][ T6034] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.823242][ T6034] usb 5-1: config 0 has no interface number 0 [ 199.824004][ T6034] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 199.879076][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.900890][ T6034] usb 5-1: config 0 descriptor?? [ 199.957053][ T6034] usb 5-1: selecting invalid altsetting 1 [ 199.958049][ T6034] dvb_ttusb_budget: ttusb_init_controller: error [ 199.958068][ T6034] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 199.974283][ T5861] Bluetooth: hci2: command tx timeout [ 200.002522][ T8536] vlan2: entered promiscuous mode [ 200.002550][ T8536] macvtap0: entered promiscuous mode [ 200.250857][ T6034] DVB: Unable to find symbol cx22700_attach() [ 200.351911][ T8548] loop2: detected capacity change from 0 to 8 [ 200.405473][ T8548] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 200.491614][ T6628] udevd[6628]: incorrect cramfs checksum on /dev/loop2 [ 200.516250][ T8548] cramfs: Error -3 while decompressing! [ 200.535783][ T6034] DVB: Unable to find symbol tda10046_attach() [ 200.552757][ T8548] cramfs: ffffffff99be36d8(16)->ffff88806f090000(4096) [ 200.564476][ T69] hsr_slave_0: left promiscuous mode [ 200.572086][ T6034] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 200.579222][ T6628] udevd[6628]: incorrect cramfs checksum on /dev/loop2 [ 200.593793][ T69] hsr_slave_1: left promiscuous mode [ 200.595481][ T8548] cramfs: Error -3 while decompressing! [ 200.622319][ T6034] usb 5-1: USB disconnect, device number 7 [ 200.636568][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.644512][ T8548] cramfs: ffffffff99be36d8(16)->ffff88806f090000(4096) [ 200.681480][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.689510][ T30] audit: type=1800 audit(1752809774.992:22): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1109" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 200.728781][ T8521] loop1: detected capacity change from 0 to 32768 [ 200.759828][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.767684][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 200.791838][ T8521] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1103 (8521) [ 200.807916][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.887786][ T8521] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.914632][ T8521] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 200.937935][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 200.949301][ T69] veth1_macvtap: left promiscuous mode [ 200.963181][ T8556] loop0: detected capacity change from 0 to 512 [ 200.971592][ T10] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 200.988751][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.992343][ T8521] BTRFS info (device loop1): using free-space-tree [ 201.002073][ T69] veth0_macvtap: left promiscuous mode [ 201.027955][ T69] veth1_vlan: left promiscuous mode [ 201.049971][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.072604][ T69] veth0_vlan: left promiscuous mode [ 201.080832][ T8556] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.1112: casefold flag without casefold feature [ 201.089498][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 201.121867][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.134291][ T10] usb 4-1: config 0 descriptor?? [ 201.162828][ T8556] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1112: couldn't read orphan inode 15 (err -117) [ 201.201119][ T8556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.525768][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.568370][ T10] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 201.671270][ T10] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 201.684381][ T10] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 201.691575][ T10] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 201.760221][ T5855] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.766302][ T10] logitech 0003:046D:C29C.0006: unknown main item tag 0x0 [ 201.879135][ T10] logitech 0003:046D:C29C.0006: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 201.914634][ T10] logitech 0003:046D:C29C.0006: no inputs found [ 201.985749][ T10] usb 4-1: USB disconnect, device number 9 [ 202.054384][ T5861] Bluetooth: hci2: command tx timeout [ 202.094368][ T8590] loop0: detected capacity change from 0 to 256 [ 202.124970][ T8590] exfat: Deprecated parameter 'namecase' [ 202.183218][ T8590] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 202.193807][ T8589] fido_id[8589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 202.249771][ T8590] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 202.457528][ T30] audit: type=1800 audit(1752809776.782:23): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1120" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 202.799855][ T8599] loop2: detected capacity change from 0 to 4096 [ 202.833528][ T8599] NILFS (loop2): invalid segment: Checksum error in segment payload [ 202.860666][ T8599] NILFS (loop2): trying rollback from an earlier position [ 202.983715][ T8599] NILFS (loop2): recovery complete [ 203.058707][ T8612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.320552][ T5945] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 203.495790][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 203.525679][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.559973][ T5945] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.616769][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.650280][ T5945] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 203.682109][ T5945] usb 4-1: Product: syz [ 203.692143][ T5945] usb 4-1: Manufacturer: syz [ 203.748350][ T5945] hub 4-1:4.0: USB hub found [ 203.929957][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.961597][ T5945] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 204.106710][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.123040][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.132239][ T5861] Bluetooth: hci2: command tx timeout [ 204.145189][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.156428][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.166318][ T10] usb 5-1: SerialNumber: syz [ 204.178459][ T69] team0 (unregistering): Port device team_slave_1 removed [ 204.266457][ T69] team0 (unregistering): Port device team_slave_0 removed [ 204.298581][ T6034] usb 4-1: USB disconnect, device number 10 [ 204.390805][ T10] usb 5-1: 0:2 : does not exist [ 204.440750][ T10] usb 5-1: USB disconnect, device number 8 [ 204.507941][ T6628] udevd[6628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.028578][ T8631] kthread_run failed with err -4 [ 205.043295][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 205.246820][ T6034] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 205.414279][ T6034] usb 5-1: Using ep0 maxpacket: 16 [ 205.440873][ T6034] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.484436][ T6034] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.492213][ T6034] usb 5-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 205.503133][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.625080][ T6034] usb 5-1: config 0 descriptor?? [ 205.760518][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.791090][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.826731][ T8447] bridge_slave_0: entered allmulticast mode [ 205.876281][ T8447] bridge_slave_0: entered promiscuous mode [ 205.903752][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.923748][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.932299][ T8447] bridge_slave_1: entered allmulticast mode [ 205.946803][ T8447] bridge_slave_1: entered promiscuous mode [ 206.091316][ T6034] hid_mf 0003:0079:1844.0007: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.4-1/input0 [ 206.144323][ T6034] hid_mf 0003:0079:1844.0007: Invalid report, this should never happen! [ 206.204954][ T6034] hid_mf 0003:0079:1844.0007: Force feedback init failed. [ 206.259149][ T6034] usb 5-1: USB disconnect, device number 9 [ 206.485479][ T8673] fido_id[8673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 206.502726][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.563152][ T8679] netlink: 'syz.3.1154': attribute type 4 has an invalid length. [ 206.616969][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.019614][ T8447] team0: Port device team_slave_0 added [ 207.092636][ T8447] team0: Port device team_slave_1 added [ 207.448903][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.473425][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.580475][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.635044][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 207.680321][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.708305][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.788421][ T8712] loop3: detected capacity change from 0 to 764 [ 207.810390][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.827466][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.875024][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.927996][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 207.980648][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.047669][ T10] usb 2-1: config 0 descriptor?? [ 208.342277][ T8447] hsr_slave_0: entered promiscuous mode [ 208.391213][ T8447] hsr_slave_1: entered promiscuous mode [ 208.410591][ T8447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.435537][ T8447] Cannot create hsr debugfs directory [ 208.523210][ T30] audit: type=1326 audit(1752809782.842:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 208.565515][ T10] hid-steam 0003:28DE:1142.0008: unbalanced delimiter at end of report description [ 208.575641][ T8694] loop2: detected capacity change from 0 to 32768 [ 208.601901][ T10] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 208.623874][ T30] audit: type=1326 audit(1752809782.902:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 208.653270][ T10] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 208.678114][ T30] audit: type=1326 audit(1752809782.902:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 208.750531][ T8694] non-latin1 character 0x230 found in JFS file name [ 208.752331][ T30] audit: type=1326 audit(1752809782.902:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 208.777046][ T10] usb 2-1: USB disconnect, device number 8 [ 208.820068][ T8694] mount with iocharset=utf8 to access [ 208.873262][ T30] audit: type=1326 audit(1752809782.902:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 208.955233][ T30] audit: type=1326 audit(1752809782.902:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 209.089666][ T30] audit: type=1326 audit(1752809782.902:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8728 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1bd8e929 code=0x7ffc0000 [ 209.777401][ T8752] netlink: 'syz.0.1185': attribute type 3 has an invalid length. [ 209.957367][ T8447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.098318][ T8447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.188369][ T8764] sctp: [Deprecated]: syz.0.1189 (pid 8764) Use of int in max_burst socket option. [ 210.188369][ T8764] Use struct sctp_assoc_value instead [ 210.239719][ T8447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.308798][ T8447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.936669][ T6034] kernel write not supported for file /media2 (pid: 6034 comm: kworker/1:6) [ 211.000662][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.146544][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.258170][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.266987][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.373679][ T8808] loop4: detected capacity change from 0 to 512 [ 211.412503][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.414730][ T8808] EXT4-fs: Ignoring removed nobh option [ 211.419760][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.575414][ T8447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.586096][ T8447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.771224][ T8808] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.1204: corrupted inode contents [ 211.879477][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 211.888615][ T8808] EXT4-fs (loop4): Remounting filesystem read-only [ 211.936384][ T8808] EXT4-fs (loop4): 1 truncate cleaned up [ 211.959099][ T13] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.988091][ T8808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.018890][ T13] Quota error (device loop4): write_blk: dquota write failed [ 212.027128][ T8808] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.064227][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 212.064796][ T13] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 212.095720][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 212.122880][ T13] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.145457][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.194402][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.206020][ T13] Quota error (device loop4): write_blk: dquota write failed [ 212.206144][ T13] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.252773][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.279859][ T8830] bridge0: entered promiscuous mode [ 212.295197][ T8833] loop1: detected capacity change from 0 to 64 [ 212.319531][ T8830] macvlan2: entered promiscuous mode [ 212.343062][ T43] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 212.363780][ T8830] bridge0: port 3(macvlan2) entered blocking state [ 212.388539][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.397878][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.418311][ T8830] bridge0: port 3(macvlan2) entered disabled state [ 212.433483][ T43] usb 4-1: Product: syz [ 212.443131][ T8830] macvlan2: entered allmulticast mode [ 212.471413][ T43] usb 4-1: Manufacturer: syz [ 212.483690][ T8830] bridge0: entered allmulticast mode [ 212.489417][ T43] usb 4-1: SerialNumber: syz [ 212.543025][ T43] usb 4-1: config 0 descriptor?? [ 212.571150][ T8816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 212.589223][ T8830] macvlan2: left allmulticast mode [ 212.609995][ T8830] bridge0: left allmulticast mode [ 212.650893][ T8830] bridge0: left promiscuous mode [ 212.662827][ T8839] loop0: detected capacity change from 0 to 164 [ 212.762553][ T8843] loop4: detected capacity change from 0 to 16 [ 212.808246][ T8843] erofs (device loop4): algorithm 1 isn't enabled on this kernel [ 212.859037][ T43] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 212.950257][ T43] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 212.984865][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.342545][ C1] powermate: config urb returned -71 [ 213.348208][ C1] powermate: config urb returned -71 [ 213.353733][ C1] powermate: config urb returned -71 [ 213.354294][ T5911] usb 4-1: USB disconnect, device number 11 [ 213.359087][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 213.406686][ T8855] loop4: detected capacity change from 0 to 1024 [ 214.224116][ T8869] loop4: detected capacity change from 0 to 4096 [ 214.598148][ T8447] veth0_vlan: entered promiscuous mode [ 214.642461][ T8447] veth1_vlan: entered promiscuous mode [ 214.796949][ T8447] veth0_macvtap: entered promiscuous mode [ 214.846065][ T8888] loop4: detected capacity change from 0 to 16 [ 214.859829][ T8447] veth1_macvtap: entered promiscuous mode [ 214.943001][ T8888] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 214.986931][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.006770][ T6628] udevd[6628]: incorrect cramfs checksum on /dev/loop4 [ 215.083561][ T6628] udevd[6628]: incorrect cramfs checksum on /dev/loop4 [ 215.096321][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.153494][ T8447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.190000][ T8447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.204768][ T6628] udevd[6628]: incorrect cramfs checksum on /dev/loop4 [ 215.245577][ T8447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.284899][ T8447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.286583][ T8858] loop1: detected capacity change from 0 to 32768 [ 215.323976][ T8864] loop2: detected capacity change from 0 to 32768 [ 215.545242][ T8864] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.842910][ T8882] syz.3.1226: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.922980][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.943332][ T8882] CPU: 1 UID: 0 PID: 8882 Comm: syz.3.1226 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 215.943369][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.943386][ T8882] Call Trace: [ 215.943395][ T8882] [ 215.943406][ T8882] dump_stack_lvl+0x189/0x250 [ 215.943447][ T8882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.943479][ T8882] ? __pfx__printk+0x10/0x10 [ 215.943516][ T8882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.943553][ T8882] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.943589][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.943620][ T8882] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 215.943659][ T8882] warn_alloc+0x214/0x310 [ 215.943691][ T8882] ? __pfx_warn_alloc+0x10/0x10 [ 215.943724][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.943755][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.943783][ T8882] ? __get_vm_area_node+0x28f/0x300 [ 215.943824][ T8882] ? packet_set_ring+0x6f4/0x2380 [ 215.943869][ T8882] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 215.943950][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.943985][ T8882] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.944028][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944057][ T8882] ? alloc_pages_mpol+0x3cd/0x4a0 [ 215.944101][ T8882] ? packet_set_ring+0x6f4/0x2380 [ 215.944144][ T8882] vzalloc_noprof+0xb2/0xf0 [ 215.944184][ T8882] ? packet_set_ring+0x6f4/0x2380 [ 215.944223][ T8882] packet_set_ring+0x6f4/0x2380 [ 215.944286][ T8882] ? __pfx_packet_set_ring+0x10/0x10 [ 215.944333][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944374][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944403][ T8882] ? _copy_from_user+0x94/0xb0 [ 215.944445][ T8882] packet_setsockopt+0xc5a/0x12c0 [ 215.944487][ T8882] ? __pfx_packet_setsockopt+0x10/0x10 [ 215.944532][ T8882] ? __lock_acquire+0xab9/0xd20 [ 215.944565][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944594][ T8882] ? aa_sk_perm+0x81e/0x950 [ 215.944626][ T8882] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.944648][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944681][ T8882] ? __fget_files+0x2a/0x420 [ 215.944703][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944732][ T8882] ? aa_sock_opt_perm+0x74/0x110 [ 215.944761][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944790][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.944818][ T8882] ? __pfx_packet_setsockopt+0x10/0x10 [ 215.944859][ T8882] do_sock_setsockopt+0x17c/0x1b0 [ 215.944905][ T8882] __x64_sys_setsockopt+0x13f/0x1b0 [ 215.944959][ T8882] do_syscall_64+0xfa/0x3b0 [ 215.944987][ T8882] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.945014][ T8882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.945039][ T8882] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.945068][ T8882] ? exc_page_fault+0x9f/0xf0 [ 215.945095][ T8882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.945120][ T8882] RIP: 0033:0x7f3b1bd8e929 [ 215.945143][ T8882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.945164][ T8882] RSP: 002b:00007f3b1cb36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.945191][ T8882] RAX: ffffffffffffffda RBX: 00007f3b1bfb5fa0 RCX: 00007f3b1bd8e929 [ 215.945211][ T8882] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 215.945227][ T8882] RBP: 00007f3b1be10ca1 R08: 000000000000001c R09: 0000000000000000 [ 215.945244][ T8882] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 215.945261][ T8882] R13: 0000000000000000 R14: 00007f3b1bfb5fa0 R15: 00007ffd0e7336c8 [ 215.945300][ T8882] [ 216.301714][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.341536][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.341904][ T8882] Mem-Info: [ 216.404251][ T8882] active_anon:19666 inactive_anon:0 isolated_anon:0 [ 216.404251][ T8882] active_file:1485 inactive_file:40370 isolated_file:0 [ 216.404251][ T8882] unevictable:768 dirty:228 writeback:0 [ 216.404251][ T8882] slab_reclaimable:10413 slab_unreclaimable:115032 [ 216.404251][ T8882] mapped:35400 shmem:13670 pagetables:1384 [ 216.404251][ T8882] sec_pagetables:0 bounce:0 [ 216.404251][ T8882] kernel_misc_reclaimable:0 [ 216.404251][ T8882] free:1276720 free_pcp:12248 free_cma:0 [ 216.491961][ T8884] loop0: detected capacity change from 0 to 32768 [ 216.522411][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.538396][ T8864] XFS (loop2): Ending clean mount [ 216.550902][ T8864] XFS (loop2): Quotacheck needed: Please wait. [ 216.591093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.664733][ T8882] Node 0 active_anon:75264kB inactive_anon:0kB active_file:5940kB inactive_file:160972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141600kB dirty:908kB writeback:0kB shmem:51644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12648kB pagetables:5384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.770735][ T8864] XFS (loop2): Quotacheck: Done. [ 216.824323][ T8882] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.992732][ T8882] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.080665][ T8919] loop6: detected capacity change from 0 to 512 [ 217.124340][ T8882] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 217.149551][ T8919] EXT4-fs: Ignoring removed i_version option [ 217.161627][ T5857] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.170736][ T8882] Node 0 DMA32 free:1182892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63620kB inactive_anon:0kB active_file:5940kB inactive_file:159388kB unevictable:1536kB writepending:908kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:52964kB local_pcp:33920kB free_cma:0kB [ 217.247296][ T8919] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 217.279224][ T8882] lowmem_reserve[]: 0 0 1 1 1 [ 217.289925][ T8882] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1584kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 217.300925][ T8922] loop0: detected capacity change from 0 to 1024 [ 217.334042][ T8882] lowmem_reserve[]: 0 0 0 0 0 [ 217.338892][ T8882] Node 1 Normal free:3903860kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16352kB local_pcp:6272kB free_cma:0kB [ 217.394927][ T8882] lowmem_reserve[]: 0 0 0 0 0 [ 217.399725][ T8882] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.464595][ T8919] EXT4-fs (loop6): 1 truncate cleaned up [ 217.514425][ T8882] Node 0 DMA32: 2*4kB (UE) 0*8kB 0*16kB 1*32kB (U) 4*64kB (UM) 2*128kB (U) 3*256kB (UME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (ME) 287*4096kB (M) = 1183016kB [ 217.532446][ T8919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.612094][ T8882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 217.734740][ T8882] Node 1 Normal: 207*4kB (UME) 57*8kB (UME) 43*16kB (UME) 140*32kB (UME) 49*64kB (UME) 4*128kB (UME) 4*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 949*4096kB (UM) = 3903860kB [ 217.854195][ T8882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.863810][ T8882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.954363][ T8882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.963988][ T8882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.049892][ T8882] 44173 total pagecache pages [ 218.067184][ T8882] 0 pages in swap cache [ 218.078283][ T8882] Free swap = 124996kB [ 218.082496][ T8882] Total swap = 124996kB [ 218.084488][ T8447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.135466][ T8882] 2097051 pages RAM [ 218.139346][ T8882] 0 pages HighMem/MovableOnly [ 218.204561][ T8882] 425384 pages reserved [ 218.208801][ T8882] 0 pages cma reserved [ 220.174337][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 220.264279][ T8957] mmap: syz.2.1247 (8957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.378531][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.410655][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.454397][ T5945] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 220.463499][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.567334][ T5945] usb 7-1: config 0 descriptor?? [ 220.842356][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 220.912697][ T9015] tipc: Started in network mode [ 220.932980][ T9015] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 220.977500][ T9015] tipc: Enabling of bearer rejected, failed to enable media [ 221.006237][ T5945] elo 0003:04E7:0030.0009: item fetching failed at offset 5/7 [ 221.041905][ T5945] elo 0003:04E7:0030.0009: parse failed [ 221.071100][ T9021] loop3: detected capacity change from 0 to 256 [ 221.091271][ T5945] elo 0003:04E7:0030.0009: probe with driver elo failed with error -22 [ 221.224286][ T5945] usb 7-1: USB disconnect, device number 2 [ 221.324397][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 221.330550][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 221.330597][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 221.338175][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 221.344116][ T5937] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 221.403354][ T9030] loop4: detected capacity change from 0 to 64 [ 221.587402][ T5937] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 221.604581][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.624091][ T5937] usb 2-1: config 0 descriptor?? [ 221.651322][ T5937] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 221.844344][ T5196] bcm5974 2-1:0.0: could not read from device [ 221.905779][ T5196] bcm5974 2-1:0.0: could not read from device [ 221.934260][ T5937] usb 2-1: USB disconnect, device number 9 [ 222.174520][ T9046] loop4: detected capacity change from 0 to 1024 [ 222.181935][ T9046] EXT4-fs: Ignoring removed oldalloc option [ 222.224361][ T9046] EXT4-fs: Ignoring removed orlov option [ 222.268971][ T9046] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 222.370793][ T9046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.499852][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 222.765771][ T5859] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.807950][ T9075] loop2: detected capacity change from 0 to 256 [ 222.837760][ T9078] loop0: detected capacity change from 0 to 128 [ 222.852297][ T9075] exfat: Deprecated parameter 'utf8' [ 222.880351][ T9078] EXT4-fs: Ignoring removed nobh option [ 222.945529][ T9075] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 223.029967][ T9078] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.184467][ T9078] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.269407][ T9088] loop3: detected capacity change from 0 to 1024 [ 223.333984][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 223.334004][ T30] audit: type=1800 audit(1752809797.652:32): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1293" name="mnt" dev="loop0" ino=12 res=0 errno=0 [ 223.421133][ T9094] loop6: detected capacity change from 0 to 1024 [ 223.429945][ T9088] hfsplus: bad catalog entry type [ 223.613315][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.641749][ T49] hfsplus: b-tree write err: -5, ino 4 [ 223.909441][ T69] hfsplus: b-tree write err: -5, ino 4 [ 223.955021][ T9109] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9109] [ 224.116081][ T9114] net_ratelimit: 45 callbacks suppressed [ 224.116104][ T9114] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 224.355865][ T9121] netlink: 'syz.4.1310': attribute type 5 has an invalid length. [ 224.648991][ T9128] loop6: detected capacity change from 0 to 2048 [ 224.721006][ T9128] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 224.840733][ T9128] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 224.965026][ T9128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.119715][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1319'. [ 225.149810][ T9143] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 225.277658][ T9143] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 225.528263][ T9155] loop0: detected capacity change from 0 to 1024 [ 225.528473][ T9153] : entered promiscuous mode [ 225.817799][ T994] hfsplus: b-tree write err: -5, ino 4 [ 225.920181][ T9167] loop3: detected capacity change from 0 to 64 [ 226.324331][ T5945] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.546322][ T5945] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 226.592167][ T5945] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 226.627464][ T5945] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 226.714435][ T5945] usb 5-1: config 220 has no interface number 2 [ 226.720870][ T5945] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 226.766297][ T5945] usb 5-1: config 220 interface 0 has no altsetting 0 [ 226.773324][ T5945] usb 5-1: config 220 interface 76 has no altsetting 0 [ 226.788751][ T5945] usb 5-1: config 220 interface 1 has no altsetting 0 [ 226.800209][ T5945] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 226.811481][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.832513][ T5945] usb 5-1: Product: syz [ 226.847056][ T5945] usb 5-1: Manufacturer: syz [ 226.851727][ T5945] usb 5-1: SerialNumber: syz [ 227.142774][ T5945] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 227.172403][ T5945] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 227.214263][ T5945] usb 5-1: No valid video chain found. [ 227.230285][ T5945] usb 5-1: selecting invalid altsetting 0 [ 227.296045][ T5945] usb 5-1: selecting invalid altsetting 0 [ 227.301862][ T5945] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 227.381091][ T5945] usb 5-1: USB disconnect, device number 10 [ 227.483345][ T9165] loop2: detected capacity change from 0 to 32768 [ 227.614111][ T9165] [ 227.614111][ T9165] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.614111][ T9165] [ 227.685369][ T9165] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 227.685369][ T9165] [ 227.760565][ T9165] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 227.990890][ T5857] [ 227.990890][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 227.990890][ T5857] [ 228.028926][ T5857] [ 228.028926][ T5857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 228.028926][ T5857] [ 228.233535][ T9225] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 228.282508][ T9225] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1352'. [ 228.283174][ T9194] loop1: detected capacity change from 0 to 32768 [ 228.424806][ T9194] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.483671][ T9238] loop6: detected capacity change from 0 to 1024 [ 228.502823][ T9238] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.594608][ T9194] XFS (loop1): Ending clean mount [ 228.604318][ T9238] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 228.624892][ T9238] EXT4-fs (loop6): orphan cleanup on readonly fs [ 228.637960][ T9238] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 228.723265][ T9238] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 228.773606][ T9238] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1356: Freeing blocks not in datazone - block = 0, count = 4096 [ 228.858744][ T9238] EXT4-fs (loop6): Remounting filesystem read-only [ 228.873144][ T9242] loop3: detected capacity change from 0 to 4096 [ 228.910712][ T9238] EXT4-fs (loop6): 1 orphan inode deleted [ 228.952583][ T9242] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 228.974118][ T9238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.994446][ T5855] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.046689][ T9242] ntfs3(loop3): Failed to load $Extend (-22). [ 229.061568][ T9242] ntfs3(loop3): Failed to initialize $Extend. [ 229.239990][ T9253] netlink: 'syz.0.1361': attribute type 1 has an invalid length. [ 229.277213][ T9253] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1361'. [ 229.302533][ T8447] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.374258][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1361'. [ 229.838443][ T9268] loop4: detected capacity change from 0 to 256 [ 230.059059][ T9277] loop1: detected capacity change from 0 to 128 [ 230.189170][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 231.007924][ T9308] loop3: detected capacity change from 0 to 512 [ 231.050002][ T30] audit: type=1326 audit(1752809805.372:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.6.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4038e929 code=0x7ffc0000 [ 231.095429][ T30] audit: type=1326 audit(1752809805.372:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.6.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4038e929 code=0x7ffc0000 [ 231.119138][ T9308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.131624][ T30] audit: type=1326 audit(1752809805.402:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.6.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6e4038e929 code=0x7ffc0000 [ 231.155838][ T30] audit: type=1326 audit(1752809805.402:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.6.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4038e929 code=0x7ffc0000 [ 231.214846][ T43] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 231.367869][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.395021][ T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 231.403447][ T43] usb 3-1: config 0 has no interface number 0 [ 231.449335][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.499869][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 231.573355][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 231.614276][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 231.638440][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 231.700264][ T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.773762][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 231.784520][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.822103][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.871380][ T43] usb 3-1: config 0 descriptor?? [ 231.908425][ T9307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.917231][ T9307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.969539][ T9338] loop3: detected capacity change from 0 to 256 [ 231.985014][ T43] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 231.998947][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 232.047867][ T10] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 232.085315][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.110022][ T9338] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 232.134657][ T10] usb 2-1: Product: syz [ 232.138891][ T10] usb 2-1: Manufacturer: syz [ 232.143508][ T10] usb 2-1: SerialNumber: syz [ 232.179986][ T9338] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 232.196673][ T10] usb 2-1: config 0 descriptor?? [ 232.237632][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 232.251253][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 232.279435][ T43] usb 3-1: USB disconnect, device number 13 [ 232.312317][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 232.326078][ T43] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 232.365283][ T9343] netlink: 'syz.0.1397': attribute type 12 has an invalid length. [ 232.421249][ T9343] netlink: 'syz.0.1397': attribute type 14 has an invalid length. [ 232.611566][ T9351] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1400'. [ 232.861357][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 232.884285][ T10] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 232.954437][ T10] usb 2-1: USB disconnect, device number 10 [ 233.387194][ T9380] loop2: detected capacity change from 0 to 256 [ 233.409954][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.637898][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 233.677231][ T5918] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 233.716488][ T5918] usb 1-1: config 0 has no interface number 0 [ 233.741977][ T9391] loop1: detected capacity change from 0 to 256 [ 233.784387][ T5918] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 233.824433][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.832520][ T5918] usb 1-1: Product: syz [ 233.894951][ T5918] usb 1-1: Manufacturer: syz [ 233.912335][ T5918] usb 1-1: SerialNumber: syz [ 233.958678][ T5918] usb 1-1: config 0 descriptor?? [ 233.987870][ T5918] usb_ehset_test 1-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 234.185519][ T5918] usb 1-1: USB disconnect, device number 8 [ 234.644522][ T9363] loop3: detected capacity change from 0 to 32768 [ 234.756032][ T9420] loop1: detected capacity change from 0 to 1024 [ 234.783872][ T9363] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.906701][ T9420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.947870][ T9429] loop4: detected capacity change from 0 to 4096 [ 235.005156][ T9363] XFS (loop3): Ending clean mount [ 235.052658][ T9363] XFS (loop3): Quotacheck needed: Please wait. [ 235.085462][ T9435] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.167010][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.233174][ T9363] XFS (loop3): Quotacheck: Done. [ 235.522071][ T5842] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.644357][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 235.873934][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 235.938238][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.951469][ T9455] ptrace attach of "./syz-executor exec"[5859] was attempted by "\x09   Àÿ Àÿ Ðÿ 0 ðÿ °ÿ Àÿ ÿÿÿÿ"[9455] [ 235.994850][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.034408][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.107871][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.152677][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.235474][ T43] usb 1-1: config 0 descriptor?? [ 236.324325][ T9461] netlink: 'syz.1.1443': attribute type 2 has an invalid length. [ 236.598040][ T9469] hub 9-0:1.0: USB hub found [ 236.634371][ T9469] hub 9-0:1.0: 1 port detected [ 236.699427][ T43] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 236.752061][ T43] microsoft 0003:045E:07DA.000A: no inputs found [ 236.790529][ T43] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 236.910744][ T43] usb 1-1: USB disconnect, device number 9 [ 236.926161][ T9480] loop4: detected capacity change from 0 to 1024 [ 237.007394][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1453'. [ 237.065638][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 237.108988][ T9474] fido_id[9474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 237.243720][ T9488] netlink: 'syz.6.1454': attribute type 11 has an invalid length. [ 237.316129][ T9490] loop2: detected capacity change from 0 to 1764 [ 237.663236][ T9502] program syz.3.1458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.039860][ T9518] loop2: detected capacity change from 0 to 512 [ 238.151043][ T9518] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.1466: bad orphan inode 11862016 [ 238.285056][ T9518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 238.313139][ T9518] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.353422][ T9532] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 238.583666][ T9536] loop1: detected capacity change from 0 to 512 [ 238.641802][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1472'. [ 238.668833][ T9540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1473'. [ 238.700275][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 238.716650][ T9536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.731858][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 239.157395][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.354284][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 239.475141][ T9563] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 239.561842][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.615233][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.649133][ T43] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 239.717739][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.805599][ T43] usb 7-1: config 0 descriptor?? [ 239.844255][ T9567] loop3: detected capacity change from 0 to 4096 [ 239.886128][ T9567] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 240.040800][ T9567] ntfs3(loop3): ino=19, mi_enum_attr [ 240.061490][ T9567] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 240.236249][ T43] arvo 0003:1E7D:30D4.000B: unknown main item tag 0x0 [ 240.266636][ T9585] loop4: detected capacity change from 0 to 1764 [ 240.274105][ T9586] loop1: detected capacity change from 0 to 1024 [ 240.285500][ T43] arvo 0003:1E7D:30D4.000B: item fetching failed at offset 5/7 [ 240.367390][ T9586] hfsplus: bad catalog entry type [ 240.384089][ T43] arvo 0003:1E7D:30D4.000B: parse failed [ 240.390224][ T43] arvo 0003:1E7D:30D4.000B: probe with driver arvo failed with error -22 [ 240.491493][ T43] usb 7-1: USB disconnect, device number 3 [ 240.560532][ T994] hfsplus: b-tree write err: -5, ino 4 [ 240.865943][ T9602] loop4: detected capacity change from 0 to 128 [ 240.948385][ T9602] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.019308][ T9600] loop1: detected capacity change from 0 to 2048 [ 241.043433][ T9602] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.155591][ T9607] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.486520][ T5859] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.953569][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 242.013392][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 242.507951][ T9634] loop2: detected capacity change from 0 to 164 [ 242.707009][ T9636] loop6: detected capacity change from 0 to 4096 [ 242.764556][ T9636] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 243.116101][ T9611] loop3: detected capacity change from 0 to 32768 [ 243.211788][ T9611] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1496 (9611) [ 243.321014][ T9654] Bluetooth: MGMT ver 1.23 [ 243.378309][ T9611] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.443228][ T9611] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 243.483456][ T9611] BTRFS info (device loop3): using free-space-tree [ 243.785098][ T9681] program syz.2.1518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.169539][ T9696] loop2: detected capacity change from 0 to 256 [ 244.515912][ T5842] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.034979][ T9717] tipc: Started in network mode [ 245.054343][ T9717] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711 [ 245.124307][ T9717] tipc: Enabling of bearer rejected, failed to enable media [ 245.338626][ T10] IPVS: starting estimator thread 0... [ 245.404603][ T5161] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 245.413228][ T5161] Bluetooth: hci2: command 0x0401 tx timeout [ 245.514331][ T9728] IPVS: using max 27 ests per chain, 64800 per kthread [ 245.547327][ T9734] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 246.011618][ T9755] loop1: detected capacity change from 0 to 128 [ 246.123286][ T9755] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.205148][ T9755] ext4 filesystem being mounted at /266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.247012][ T9761] loop4: detected capacity change from 0 to 47 [ 246.272311][ T9763] loop2: detected capacity change from 0 to 1024 [ 246.555081][ T5855] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.193981][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 247.309773][ T9795] loop2: detected capacity change from 0 to 1024 [ 247.391793][ T9795] EXT4-fs: Ignoring removed bh option [ 247.405186][ T9795] EXT4-fs: inline encryption not supported [ 247.445350][ T9795] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 247.554303][ T9795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 247.570510][ T9804] loop1: detected capacity change from 0 to 1024 [ 247.574936][ T1328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.608650][ T9795] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.1558: lblock 2 mapped to illegal pblock 2 (length 1) [ 247.696360][ T9804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.794442][ T9804] ext4 filesystem being mounted at /269/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.811034][ T9795] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 247.889592][ T9795] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.1558: lblock 0 mapped to illegal pblock 48 (length 1) [ 247.964620][ T9795] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 247.984377][ T9795] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1558: Failed to acquire dquot type 0 [ 248.043758][ T9795] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 248.129022][ T9795] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1558: mark_inode_dirty error [ 248.137009][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.184762][ T9795] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 248.205219][ T9795] EXT4-fs (loop2): 1 orphan inode deleted [ 248.229300][ T1141] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.240750][ T9795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.304655][ T1141] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 248.334287][ T1141] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 248.466966][ T36] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm kworker/u8:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 248.510636][ T9790] loop4: detected capacity change from 0 to 32768 [ 248.557645][ T36] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 248.632511][ T36] EXT4-fs error (device loop2): ext4_write_dquot:6913: comm kworker/u8:2: Failed to commit dquot type 0 [ 248.697373][ T36] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 248.794092][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.883136][ T5857] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 248.954423][ T5857] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 249.009096][ T5857] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 249.314443][ T5937] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 249.516206][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 249.548368][ T5937] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.578505][ T5937] usb 7-1: config 0 has no interface number 0 [ 249.617723][ T5937] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.671197][ T5937] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.733964][ T5937] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.734003][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.734030][ T5937] usb 7-1: Product: syz [ 249.734049][ T5937] usb 7-1: SerialNumber: syz [ 249.791666][ T5937] usb 7-1: config 0 descriptor?? [ 249.815044][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 249.833768][ T5937] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input13 [ 249.856142][ T5937] ------------[ cut here ]------------ [ 249.856842][ T5937] URB ffff888028f47e00 submitted while active [ 249.857795][ T5937] WARNING: CPU: 1 PID: 5937 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff3/0x1890 [ 249.857844][ T5937] Modules linked in: [ 249.857907][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: kworker/1:5 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 249.857948][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.857968][ T5937] Workqueue: usb_hub_wq hub_event [ 249.858006][ T5937] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 249.858037][ T5937] Code: 00 eb 5c e8 9f 5f a0 fa e9 be f0 ff ff e8 95 5f a0 fa c6 05 4e 01 6c 08 01 90 48 c7 c7 20 2e 34 8c 48 89 de e8 ce 4c 64 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 6f 5f a0 fa eb 11 e8 68 5f a0 fa bd [ 249.858062][ T5937] RSP: 0018:ffffc90004d2eb38 EFLAGS: 00010246 [ 249.858088][ T5937] RAX: c942e73f8f99e400 RBX: ffff888028f47e00 RCX: 0000000000100000 [ 249.858110][ T5937] RDX: ffffc9001dfd5000 RSI: 0000000000028801 RDI: 0000000000028802 [ 249.858130][ T5937] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 249.858150][ T5937] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff1100486180a [ 249.858171][ T5937] R13: dffffc0000000000 R14: ffff888028f47e08 R15: 0000000000000cc0 [ 249.858196][ T5937] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 249.858219][ T5937] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.858239][ T5937] CR2: 0000200000000040 CR3: 000000001f76e000 CR4: 0000000000350ef0 [ 249.858269][ T5937] Call Trace: [ 249.858281][ T5937] [ 249.858299][ T5937] ? __pm_runtime_resume+0x129/0x180 [ 249.858349][ T5937] cm109_input_open+0x1fb/0x460 [ 249.858399][ T5937] input_open_device+0x1c5/0x360 [ 249.858443][ T5937] kbd_connect+0xed/0x140 [ 249.858488][ T5937] input_register_device+0xcee/0x10b0 [ 249.858540][ T5937] cm109_usb_probe+0x118c/0x1690 [ 249.858609][ T5937] usb_probe_interface+0x644/0xbc0 [ 249.858673][ T5937] ? __pfx_usb_probe_interface+0x10/0x10 [ 249.858711][ T5937] really_probe+0x26d/0x9a0 [ 249.858748][ T5937] __driver_probe_device+0x18c/0x2f0 [ 249.858795][ T5937] driver_probe_device+0x4f/0x430 [ 249.858828][ T5937] __device_attach_driver+0x2ce/0x530 [ 249.858863][ T5937] bus_for_each_drv+0x251/0x2e0 [ 249.858899][ T5937] ? __pfx___device_attach_driver+0x10/0x10 [ 249.858927][ T5937] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.858983][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.859022][ T5937] __device_attach+0x2b8/0x400 [ 249.859067][ T5937] ? __pfx___device_attach+0x10/0x10 [ 249.859112][ T5937] ? do_raw_spin_unlock+0x122/0x240 [ 249.859159][ T5937] bus_probe_device+0x185/0x260 [ 249.859197][ T5937] device_add+0x7b6/0xb50 [ 249.859243][ T5937] usb_set_configuration+0x1a87/0x20e0 [ 249.859318][ T5937] usb_generic_driver_probe+0x8d/0x150 [ 249.859358][ T5937] usb_probe_device+0x1c4/0x390 [ 249.859403][ T5937] ? __pfx_usb_probe_device+0x10/0x10 [ 249.859440][ T5937] really_probe+0x26d/0x9a0 [ 249.859477][ T5937] __driver_probe_device+0x18c/0x2f0 [ 249.859524][ T5937] driver_probe_device+0x4f/0x430 [ 249.859556][ T5937] __device_attach_driver+0x2ce/0x530 [ 249.859589][ T5937] bus_for_each_drv+0x251/0x2e0 [ 249.859625][ T5937] ? __pfx___device_attach_driver+0x10/0x10 [ 249.859653][ T5937] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.859695][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.859733][ T5937] __device_attach+0x2b8/0x400 [ 249.859778][ T5937] ? __pfx___device_attach+0x10/0x10 [ 249.859826][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.859857][ T5937] ? do_raw_spin_unlock+0x122/0x240 [ 249.859902][ T5937] bus_probe_device+0x185/0x260 [ 249.859947][ T5937] device_add+0x7b6/0xb50 [ 249.859994][ T5937] usb_new_device+0xa39/0x16c0 [ 249.860043][ T5937] ? __pfx_usb_new_device+0x10/0x10 [ 249.860078][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.860120][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.860151][ T5937] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.860184][ T5937] hub_event+0x2941/0x4a00 [ 249.860288][ T5937] ? __pfx_hub_event+0x10/0x10 [ 249.860325][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.860360][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.860396][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.860438][ T5937] ? process_scheduled_works+0x9ef/0x17b0 [ 249.860469][ T5937] ? process_scheduled_works+0x9ef/0x17b0 [ 249.860504][ T5937] process_scheduled_works+0xae1/0x17b0 [ 249.860576][ T5937] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.860619][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.860661][ T5937] worker_thread+0x8a0/0xda0 [ 249.860699][ T5937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.860753][ T5937] ? __kthread_parkme+0x7b/0x200 [ 249.860800][ T5937] kthread+0x711/0x8a0 [ 249.860843][ T5937] ? __pfx_worker_thread+0x10/0x10 [ 249.860876][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.860911][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.860955][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.861000][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.861030][ T5937] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.861057][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.861097][ T5937] ret_from_fork+0x3fc/0x770 [ 249.861131][ T5937] ? __pfx_ret_from_fork+0x10/0x10 [ 249.861169][ T5937] ? __switch_to_asm+0x39/0x70 [ 249.861204][ T5937] ? __switch_to_asm+0x33/0x70 [ 249.861238][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.861279][ T5937] ret_from_fork_asm+0x1a/0x30 [ 249.861336][ T5937] [ 249.861351][ T5937] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.861369][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: kworker/1:5 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 249.861400][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.861418][ T5937] Workqueue: usb_hub_wq hub_event [ 249.861452][ T5937] Call Trace: [ 249.861463][ T5937] [ 249.861474][ T5937] dump_stack_lvl+0x99/0x250 [ 249.861506][ T5937] ? __asan_memcpy+0x40/0x70 [ 249.861538][ T5937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.861570][ T5937] ? __pfx__printk+0x10/0x10 [ 249.861617][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.861655][ T5937] panic+0x2db/0x790 [ 249.861683][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.861719][ T5937] ? __pfx_panic+0x10/0x10 [ 249.861765][ T5937] ? ret_from_fork_asm+0x1a/0x30 [ 249.861814][ T5937] __warn+0x31b/0x4b0 [ 249.861841][ T5937] ? usb_submit_urb+0xff3/0x1890 [ 249.861873][ T5937] ? usb_submit_urb+0xff3/0x1890 [ 249.861902][ T5937] report_bug+0x2be/0x4f0 [ 249.861939][ T5937] ? usb_submit_urb+0xff3/0x1890 [ 249.861968][ T5937] ? usb_submit_urb+0xff3/0x1890 [ 249.861996][ T5937] ? usb_submit_urb+0xff5/0x1890 [ 249.862025][ T5937] handle_bug+0x84/0x160 [ 249.862060][ T5937] exc_invalid_op+0x1a/0x50 [ 249.862092][ T5937] asm_exc_invalid_op+0x1a/0x20 [ 249.862117][ T5937] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 249.862146][ T5937] Code: 00 eb 5c e8 9f 5f a0 fa e9 be f0 ff ff e8 95 5f a0 fa c6 05 4e 01 6c 08 01 90 48 c7 c7 20 2e 34 8c 48 89 de e8 ce 4c 64 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 6f 5f a0 fa eb 11 e8 68 5f a0 fa bd [ 249.862170][ T5937] RSP: 0018:ffffc90004d2eb38 EFLAGS: 00010246 [ 249.862193][ T5937] RAX: c942e73f8f99e400 RBX: ffff888028f47e00 RCX: 0000000000100000 [ 249.862214][ T5937] RDX: ffffc9001dfd5000 RSI: 0000000000028801 RDI: 0000000000028802 [ 249.862233][ T5937] RBP: 000000000000000f R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 249.862252][ T5937] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff1100486180a [ 249.862272][ T5937] R13: dffffc0000000000 R14: ffff888028f47e08 R15: 0000000000000cc0 [ 249.862314][ T5937] ? usb_submit_urb+0xff2/0x1890 [ 249.862348][ T5937] ? __pm_runtime_resume+0x129/0x180 [ 249.862394][ T5937] cm109_input_open+0x1fb/0x460 [ 249.862442][ T5937] input_open_device+0x1c5/0x360 [ 249.862484][ T5937] kbd_connect+0xed/0x140 [ 249.862527][ T5937] input_register_device+0xcee/0x10b0 [ 249.862578][ T5937] cm109_usb_probe+0x118c/0x1690 [ 249.862646][ T5937] usb_probe_interface+0x644/0xbc0 [ 249.862699][ T5937] ? __pfx_usb_probe_interface+0x10/0x10 [ 249.862736][ T5937] really_probe+0x26d/0x9a0 [ 249.862772][ T5937] __driver_probe_device+0x18c/0x2f0 [ 249.862817][ T5937] driver_probe_device+0x4f/0x430 [ 249.862846][ T5937] __device_attach_driver+0x2ce/0x530 [ 249.862879][ T5937] bus_for_each_drv+0x251/0x2e0 [ 249.862913][ T5937] ? __pfx___device_attach_driver+0x10/0x10 [ 249.862946][ T5937] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.862985][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.863020][ T5937] __device_attach+0x2b8/0x400 [ 249.863064][ T5937] ? __pfx___device_attach+0x10/0x10 [ 249.863107][ T5937] ? do_raw_spin_unlock+0x122/0x240 [ 249.863151][ T5937] bus_probe_device+0x185/0x260 [ 249.863189][ T5937] device_add+0x7b6/0xb50 [ 249.863232][ T5937] usb_set_configuration+0x1a87/0x20e0 [ 249.863306][ T5937] usb_generic_driver_probe+0x8d/0x150 [ 249.863345][ T5937] usb_probe_device+0x1c4/0x390 [ 249.863387][ T5937] ? __pfx_usb_probe_device+0x10/0x10 [ 249.863421][ T5937] really_probe+0x26d/0x9a0 [ 249.863457][ T5937] __driver_probe_device+0x18c/0x2f0 [ 249.863500][ T5937] driver_probe_device+0x4f/0x430 [ 249.863530][ T5937] __device_attach_driver+0x2ce/0x530 [ 249.863562][ T5937] bus_for_each_drv+0x251/0x2e0 [ 249.863597][ T5937] ? __pfx___device_attach_driver+0x10/0x10 [ 249.863624][ T5937] ? __pfx_bus_for_each_drv+0x10/0x10 [ 249.863663][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.863699][ T5937] __device_attach+0x2b8/0x400 [ 249.863743][ T5937] ? __pfx___device_attach+0x10/0x10 [ 249.863790][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.863820][ T5937] ? do_raw_spin_unlock+0x122/0x240 [ 249.863865][ T5937] bus_probe_device+0x185/0x260 [ 249.863902][ T5937] device_add+0x7b6/0xb50 [ 249.863957][ T5937] usb_new_device+0xa39/0x16c0 [ 249.864005][ T5937] ? __pfx_usb_new_device+0x10/0x10 [ 249.864039][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.864078][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864107][ T5937] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.864142][ T5937] hub_event+0x2941/0x4a00 [ 249.864244][ T5937] ? __pfx_hub_event+0x10/0x10 [ 249.864279][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864313][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864347][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.864388][ T5937] ? process_scheduled_works+0x9ef/0x17b0 [ 249.864418][ T5937] ? process_scheduled_works+0x9ef/0x17b0 [ 249.864451][ T5937] process_scheduled_works+0xae1/0x17b0 [ 249.864520][ T5937] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.864560][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864602][ T5937] worker_thread+0x8a0/0xda0 [ 249.864637][ T5937] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.864690][ T5937] ? __kthread_parkme+0x7b/0x200 [ 249.864742][ T5937] kthread+0x711/0x8a0 [ 249.864787][ T5937] ? __pfx_worker_thread+0x10/0x10 [ 249.864818][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.864852][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864888][ T5937] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.864929][ T5937] ? srso_alias_return_thunk+0x5/0xfbef5 [ 249.864968][ T5937] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.864993][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.865033][ T5937] ret_from_fork+0x3fc/0x770 [ 249.865064][ T5937] ? __pfx_ret_from_fork+0x10/0x10 [ 249.865096][ T5937] ? __switch_to_asm+0x39/0x70 [ 249.865126][ T5937] ? __switch_to_asm+0x33/0x70 [ 249.865157][ T5937] ? __pfx_kthread+0x10/0x10 [ 249.865190][ T5937] ret_from_fork_asm+0x1a/0x30 [ 249.865247][ T5937] [ 249.865457][ T5937] Kernel Offset: disabled