last executing test programs: 2m59.92773089s ago: executing program 0 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {@disable_ext_identify}, {@background_gc_on}, {@alloc_mode_reuse}, {@discard_unit_section}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@two_active_logs}, {@reserve_root={'reserver_root', 0x3d, 0x7}}]}, 0x2, 0x5514, &(0x7f00000079c0)="$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") 2m58.353311787s ago: executing program 0 (id=633): r0 = syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x7f) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0}) 2m56.961310101s ago: executing program 0 (id=640): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 2m56.137269733s ago: executing program 0 (id=646): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m55.232301498s ago: executing program 0 (id=651): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@srh={0x2e, 0x0, 0x4, 0x0, 0xd, 0x10, 0xff}, 0x8) sendto(r0, &(0x7f00000007c0)="ede40e8bbafb126779da92a47e4c291ce9b5bc2a60373105280b6a14e962f90e936d39f4468e62d3", 0x28, 0x0, &(0x7f00000008c0)=@nl=@unspec, 0x80) 2m54.483997035s ago: executing program 0 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2m52.478518913s ago: executing program 32 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5.776170786s ago: executing program 2 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r1, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 5.262648588s ago: executing program 1 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) 5.17171706s ago: executing program 2 (id=1471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$fuse(0x0, 0x0, 0x2800491, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000400080005400000000d38001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008330001800a00010072616e67650000000400028008000340000001"], 0xc4}, 0x1, 0x0, 0x0, 0x4040070}, 0x44) 4.66043307s ago: executing program 1 (id=1473): setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) setfsgid(0x0) 4.571588183s ago: executing program 4 (id=1475): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/242, 0xf2) 4.40072714s ago: executing program 2 (id=1476): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@dioread_lock}, {@grpquota}, {@nodioread_nolock}]}, 0x26, 0x75b, &(0x7f0000000d40)="$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") r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 4.096076558s ago: executing program 1 (id=1477): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) 3.791573874s ago: executing program 3 (id=1479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070200000000000000000100000008000880bcff07802c000480050003ff800000000100030000000000050003000100000005000300000000000500030080ff000008000100030000000800020001"], 0x58}}, 0x880) 3.584002679s ago: executing program 4 (id=1480): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 3.436389258s ago: executing program 5 (id=1481): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x100}, 0x2f) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.839647307s ago: executing program 2 (id=1482): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.830777452s ago: executing program 1 (id=1483): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) 2.815693349s ago: executing program 3 (id=1484): futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) 2.688229272s ago: executing program 5 (id=1485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000005000700070000000c0009000200aaaaaaaaaaaa06000a000100000005000100090000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 2.561828371s ago: executing program 4 (id=1486): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./bus\x00', 0x4812, &(0x7f00000001c0)=ANY=[], 0x1, 0x68b, &(0x7f0000001900)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) 2.163105377s ago: executing program 3 (id=1487): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x410000, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x88c, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x85, 0x258d, 0xa, 0x19, 0x3, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}}) 1.840418692s ago: executing program 5 (id=1488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010012009d842cbe79880100000008000100030000003400048005000300010000000500030000000000050003000000000005000300800000000500030000000000050503000100000008000200020000"], 0x58}}, 0x0) 1.767288482s ago: executing program 3 (id=1489): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x31, 0xffffffffffffffff, 0x45653000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f00000001c0)) 1.717971878s ago: executing program 2 (id=1490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x8, 0x4, 0x81, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001280), 0xb47, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 1.448409306s ago: executing program 4 (id=1491): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1.367534331s ago: executing program 1 (id=1492): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x8014, 0x10100, 0x0, 0xfe}, &(0x7f0000002000), &(0x7f0000000000)) 1.202909422s ago: executing program 5 (id=1493): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa642, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 1.148408076s ago: executing program 3 (id=1494): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000000), 0x2, 0x57e, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c9002000000000003000100"/65]) 740.400766ms ago: executing program 4 (id=1495): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) setuid(0xee01) keyctl$KEYCTL_WATCH_KEY(0x6, r0, 0xffffffffffffffff, 0xfffffefcfffffffe) 689.371899ms ago: executing program 5 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffd}]}, 0x3c}}, 0x0) 630.788261ms ago: executing program 2 (id=1497): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000003c0)=0xfffffffe, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xffeffffd}, 0x1c) 384.601726ms ago: executing program 1 (id=1498): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x7, 0x1, 0x29e, 0x10000, 0x8}, &(0x7f0000000380)={0x0, 0x2710}) 158.673174ms ago: executing program 4 (id=1499): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x104, r1, 0xe701ac47a3d23ecd, 0x2, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x104}}, 0x84) 34.89188ms ago: executing program 5 (id=1500): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x5d}) 0s ago: executing program 3 (id=1501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x80) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) kernel console output (not intermixed with test programs): ng ep0 maxpacket: 32 [ 281.293332][ T5858] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 281.301827][ T5858] usb 3-1: config 0 has no interface number 0 [ 281.361844][ T5858] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 281.371591][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.380994][ T5858] usb 3-1: Product: syz [ 281.385480][ T5858] usb 3-1: Manufacturer: syz [ 281.394277][ T5858] usb 3-1: SerialNumber: syz [ 281.454670][ T6599] loop1: detected capacity change from 0 to 1024 [ 281.490225][ T5858] usb 3-1: config 0 descriptor?? [ 281.508929][ T5858] smsc95xx v2.0.0 [ 281.703780][ T6599] hfsplus: bad catalog entry type [ 282.161043][ T5858] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 282.161183][ T5858] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 282.161877][ T14] hfsplus: b-tree write err: -5, ino 4 [ 282.162505][ T5858] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 282.163315][ T5858] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 282.199253][ T5858] usb 3-1: USB disconnect, device number 2 [ 282.552295][ T6613] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 282.613841][ T6616] capability: warning: `syz.4.277' uses deprecated v2 capabilities in a way that may be insecure [ 283.168180][ T6621] netlink: 'syz.0.279': attribute type 4 has an invalid length. [ 283.459028][ T6629] Bluetooth: MGMT ver 1.23 [ 283.536958][ T5851] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 283.763395][ T5851] usb 3-1: Using ep0 maxpacket: 16 [ 283.790781][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.802393][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.812682][ T5851] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 283.822118][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.831732][ T6633] loop1: detected capacity change from 0 to 256 [ 283.926932][ T6633] exfat: Deprecated parameter 'namecase' [ 283.933177][ T6633] exfat: Deprecated parameter 'namecase' [ 283.939438][ T6633] exfat: Deprecated parameter 'utf8' [ 284.151593][ T6633] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 284.546477][ T6635] loop3: detected capacity change from 0 to 32768 [ 284.569743][ T5851] usb 3-1: config 0 descriptor?? [ 284.590584][ T6635] (syz.3.286,6635,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 284.599895][ T6635] (syz.3.286,6635,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 284.600063][ T6635] (syz.3.286,6635,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 284.622790][ T6635] (syz.3.286,6635,0):ocfs2_initialize_super:2198 ERROR: status = -22 [ 284.631751][ T6635] (syz.3.286,6635,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 285.219611][ T5851] usb 3-1: USB disconnect, device number 3 [ 285.242425][ T6646] mmap: syz.1.291 (6646) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 286.413244][ T6659] loop2: detected capacity change from 0 to 16 [ 286.439919][ T6661] loop1: detected capacity change from 0 to 256 [ 286.488816][ T6659] erofs (device loop2): mounted with root inode @ nid 36. [ 286.506685][ T6661] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 286.522109][ T6661] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 287.469967][ T6665] loop3: detected capacity change from 0 to 40427 [ 287.557663][ T6665] F2FS-fs (loop3): invalid crc value [ 287.586500][ T6661] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 287.852282][ T6665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.843760][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 288.855155][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 290.397602][ T6705] loop1: detected capacity change from 0 to 64 [ 290.450634][ T6699] loop2: detected capacity change from 0 to 32768 [ 290.482745][ T6699] BTRFS warning: excessive commit interval 2147483647, use with care [ 290.527632][ T6699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.315 (6699) [ 290.558601][ T6699] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.569306][ T6699] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 290.578741][ T6699] BTRFS info (device loop2): disk space caching is enabled [ 290.586331][ T6699] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 290.759869][ T30] audit: type=1800 audit(1750477803.048:14): pid=6705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.318" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 290.773724][ T6705] syz.1.318: attempt to access beyond end of device [ 290.773724][ T6705] loop1: rw=34817, sector=39, nr_sectors = 125 limit=64 [ 290.795137][ T6705] syz.1.318: attempt to access beyond end of device [ 290.795137][ T6705] loop1: rw=34817, sector=167, nr_sectors = 1 limit=64 [ 290.809071][ T6705] syz.1.318: attempt to access beyond end of device [ 290.809071][ T6705] loop1: rw=34817, sector=169, nr_sectors = 1 limit=64 [ 290.827656][ T6705] syz.1.318: attempt to access beyond end of device [ 290.827656][ T6705] loop1: rw=34817, sector=171, nr_sectors = 7 limit=64 [ 290.919936][ T6699] BTRFS info (device loop2): rebuilding free space tree [ 290.948880][ T6699] BTRFS info (device loop2): disabling free space tree [ 290.956983][ T6699] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 290.967039][ T6699] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 290.989487][ T6705] syz.1.318: attempt to access beyond end of device [ 290.989487][ T6705] loop1: rw=34817, sector=179, nr_sectors = 700 limit=64 [ 291.229107][ T5799] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.898769][ T6746] loop0: detected capacity change from 0 to 1764 [ 293.247895][ T6746] block device autoloading is deprecated and will be removed. [ 293.498291][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 293.941967][ T6761] loop4: detected capacity change from 0 to 64 [ 294.678863][ T6770] loop4: detected capacity change from 0 to 256 [ 294.852281][ T6772] loop0: detected capacity change from 0 to 8 [ 294.947353][ T6770] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 294.947486][ T6770] FAT-fs (loop4): Filesystem has been set read-only [ 294.955980][ T30] audit: type=1800 audit(1750477807.228:15): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.342" name="file1" dev="loop4" ino=1048617 res=0 errno=0 [ 295.098684][ T6775] loop2: detected capacity change from 0 to 512 [ 295.102116][ T6775] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.102613][ T6775] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.120553][ T6775] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 295.176311][ T6775] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 295.176794][ T6775] System zones: 1-12 [ 295.270535][ T6775] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.345: corrupted in-inode xattr: e_value size too large [ 295.281039][ T6775] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.345: couldn't read orphan inode 15 (err -117) [ 295.338681][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.917318][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.727328][ T6801] loop4: detected capacity change from 0 to 4096 [ 297.810536][ T6801] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 297.841449][ T6811] loop0: detected capacity change from 0 to 512 [ 297.912501][ T6811] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 298.105907][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 298.190491][ T6816] sp0: Synchronizing with TNC [ 298.258770][ T6818] dummy0: entered promiscuous mode [ 298.282640][ T6815] [U] [ 298.471089][ T6817] dummy0: left promiscuous mode [ 298.827349][ T6823] loop0: detected capacity change from 0 to 512 [ 298.842094][ T6823] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 298.851468][ T6823] EXT4-fs (loop0): failed to open journal device unknown-block(128,0) -6 [ 299.638256][ T6827] loop1: detected capacity change from 0 to 4096 [ 299.716559][ T6827] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 299.908550][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.373'. [ 299.933865][ T6839] netlink: 'syz.2.374': attribute type 2 has an invalid length. [ 299.982261][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.373'. [ 300.139098][ T6827] ntfs3(loop1): failed to convert "076c" to cp932 [ 300.344625][ T6844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.376'. [ 301.317046][ T6858] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.650537][ T6866] loop4: detected capacity change from 0 to 512 [ 301.831325][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.844873][ T6866] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.962108][ T6866] EXT4-fs error (device loop4): ext4_empty_dir:3075: inode #12: comm syz.4.386: invalid size [ 301.996527][ T6866] EXT4-fs (loop4): Remounting filesystem read-only [ 302.317707][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.353831][ T3703] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 302.365085][ T3703] Quota error (device loop4): write_blk: dquota write failed [ 302.372972][ T3703] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 302.957847][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 303.180514][ T5858] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 303.190567][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.208097][ T6892] loop0: detected capacity change from 0 to 256 [ 303.263556][ T6892] exfat: Deprecated parameter 'utf8' [ 303.265944][ T5858] usb 3-1: config 0 descriptor?? [ 303.400778][ T6892] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 303.820051][ T5858] creative-sb0540 0003:041E:3100.000A: item fetching failed at offset 0/5 [ 303.901096][ T5858] creative-sb0540 0003:041E:3100.000A: parse failed [ 303.909958][ T5858] creative-sb0540 0003:041E:3100.000A: probe with driver creative-sb0540 failed with error -22 [ 304.058518][ T5858] usb 3-1: USB disconnect, device number 4 [ 305.038388][ T6907] loop4: detected capacity change from 0 to 32768 [ 305.332099][ T6913] loop3: detected capacity change from 0 to 512 [ 305.435265][ T6915] loop2: detected capacity change from 0 to 1024 [ 305.511459][ T6915] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 305.614429][ T6907] (syz.4.405,6907,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it [ 305.633155][ T6910] loop0: detected capacity change from 0 to 32768 [ 305.643740][ T6907] (syz.4.405,6907,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 305.649121][ T6910] (syz.0.406,6910,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 305.665472][ T6910] (syz.0.406,6910,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 305.674534][ T6910] (syz.0.406,6910,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 305.674695][ T6910] (syz.0.406,6910,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 305.696162][ T6910] (syz.0.406,6910,1):ocfs2_initialize_super:2198 ERROR: status = -22 [ 305.704851][ T6910] (syz.0.406,6910,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 305.814722][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.828206][ T6913] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.859707][ T6915] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.409: Invalid block bitmap block 0 in block_group 0 [ 305.915038][ T6915] EXT4-fs (loop2): Remounting filesystem read-only [ 305.958653][ T6915] Quota error (device loop2): write_blk: dquota write failed [ 305.971906][ T6915] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 305.983773][ T6915] EXT4-fs (loop2): 1 orphan inode deleted [ 305.991868][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.319401][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.450641][ T6915] syz.2.409 (6915) used greatest stack depth: 4048 bytes left [ 306.561437][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.792727][ T30] audit: type=1326 audit(1750477820.078:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.818881][ T30] audit: type=1326 audit(1750477820.078:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.842669][ T30] audit: type=1326 audit(1750477820.108:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.865612][ T30] audit: type=1326 audit(1750477820.108:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.888336][ T30] audit: type=1326 audit(1750477820.108:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.910994][ T30] audit: type=1326 audit(1750477820.138:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 307.937321][ T30] audit: type=1326 audit(1750477820.138:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a6018e929 code=0x7ffc0000 [ 308.159698][ T6946] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 308.159698][ T6946] The task syz.3.421 (6946) triggered the difference, watch for misbehavior. [ 308.832088][ T6955] loop2: detected capacity change from 0 to 1024 [ 308.963028][ T6955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.131943][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.212552][ T6961] ptrace attach of "./syz-executor exec"[5806] was attempted by "\x22"[6961] [ 309.349543][ T30] audit: type=1326 audit(1750477821.608:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7fc00000 [ 310.430235][ T6969] loop1: detected capacity change from 0 to 32768 [ 310.441867][ T6969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.431 (6969) [ 310.510548][ T6969] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 310.521325][ T6969] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 310.530601][ T6969] BTRFS error (device loop1): ignoredatacsums must be used with ro mount option [ 310.539989][ T6969] BTRFS info (device loop1): using free-space-tree [ 310.548364][ T6969] BTRFS error (device loop1): open_ctree failed: -22 [ 313.301908][ T7020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.453'. [ 313.521741][ T7025] loop2: detected capacity change from 0 to 128 [ 313.599162][ T7025] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 313.769344][ T7025] syz.2.456: attempt to access beyond end of device [ 313.769344][ T7025] loop2: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 314.598552][ T5851] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 314.691582][ T5851] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 314.707360][ T7034] loop3: detected capacity change from 0 to 4096 [ 315.283080][ T7044] fido_id[7044]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.397797][ T7034] ntfs3(loop3): failed to convert "0080" to macinuit [ 315.533692][ T7034] ntfs3(loop3): failed to convert name for inode 1e. [ 315.544128][ T7050] loop2: detected capacity change from 0 to 256 [ 315.626656][ T7034] ntfs3(loop3): ino=1f, mi_enum_attr [ 315.666669][ T7050] FAT-fs (loop2): Directory bread(block 1285) failed [ 315.848373][ T7050] FAT-fs (loop2): Directory bread(block 1285) failed [ 316.289371][ T7051] loop0: detected capacity change from 0 to 40427 [ 316.957241][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 317.677682][ T7070] loop4: detected capacity change from 0 to 256 [ 317.815591][ T7070] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 317.916835][ T7070] exFAT-fs (loop4): error, in sector 160, dentry 11 should be unused, but 0xc1 [ 317.927354][ T7070] exFAT-fs (loop4): Filesystem has been set read-only [ 318.745152][ T7085] loop4: detected capacity change from 0 to 2048 [ 318.891290][ T7093] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.451906][ T7101] loop0: detected capacity change from 0 to 1764 [ 319.661790][ T7108] loop2: detected capacity change from 0 to 256 [ 319.977523][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 319.983797][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 319.991137][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.012957][ T7111] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 320.047869][ T7111] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 320.167951][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.176665][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.185144][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.193975][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.208088][ T7111] hsr0 speed is unknown, defaulting to 1000 [ 320.664741][ T7116] loop4: detected capacity change from 0 to 512 [ 320.749598][ T7116] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 320.897173][ T7116] EXT4-fs (loop4): 1 truncate cleaned up [ 320.980740][ T7116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.489958][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.866844][ T7137] loop4: detected capacity change from 0 to 64 [ 322.338665][ T7145] loop0: detected capacity change from 0 to 256 [ 322.551998][ T7139] loop1: detected capacity change from 0 to 4096 [ 322.693842][ T7145] FAT-fs (loop0): Directory bread(block 64) failed [ 322.701338][ T7145] FAT-fs (loop0): Directory bread(block 65) failed [ 322.708466][ T7145] FAT-fs (loop0): Directory bread(block 66) failed [ 322.715224][ T7145] FAT-fs (loop0): Directory bread(block 67) failed [ 322.722408][ T7145] FAT-fs (loop0): Directory bread(block 68) failed [ 322.729438][ T7145] FAT-fs (loop0): Directory bread(block 69) failed [ 322.738354][ T7145] FAT-fs (loop0): Directory bread(block 70) failed [ 322.745118][ T7145] FAT-fs (loop0): Directory bread(block 71) failed [ 322.752175][ T7145] FAT-fs (loop0): Directory bread(block 72) failed [ 322.759043][ T7145] FAT-fs (loop0): Directory bread(block 73) failed [ 322.802367][ T7139] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 322.805497][ T7152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.849979][ T7139] NILFS (loop1): mounting fs with errors [ 323.414346][ T30] audit: type=1800 audit(1750477835.688:24): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.511" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 324.184699][ T30] audit: type=1326 audit(1750477836.458:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.210856][ T30] audit: type=1326 audit(1750477836.458:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.240141][ T30] audit: type=1326 audit(1750477836.528:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.264688][ T30] audit: type=1326 audit(1750477836.528:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.287776][ T30] audit: type=1326 audit(1750477836.528:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.313545][ T30] audit: type=1326 audit(1750477836.528:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.337483][ T30] audit: type=1326 audit(1750477836.528:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7166 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 324.748393][ T7173] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 325.351333][ T7178] netlink: 216 bytes leftover after parsing attributes in process `syz.3.521'. [ 325.360800][ T7178] netlink: 80 bytes leftover after parsing attributes in process `syz.3.521'. [ 326.151411][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 326.161038][ T7196] netlink: 'syz.2.530': attribute type 1 has an invalid length. [ 326.169171][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 326.802849][ T7209] loop2: detected capacity change from 0 to 512 [ 326.975212][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.994807][ T7209] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.317758][ T7209] EXT4-fs: Ignoring removed orlov option [ 327.323433][ T7205] loop0: detected capacity change from 0 to 4096 [ 327.323875][ T7209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.409687][ T7205] ntfs3(loop0): mft corrupted [ 327.414970][ T7205] ntfs3(loop0): Failed to load $MFT. [ 327.439865][ T7209] EXT4-fs (loop2): can't enable nombcache during remount [ 327.516266][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 327.747376][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 327.834936][ T5858] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 327.846838][ T5858] usb 2-1: config 179 has no interface number 0 [ 327.853359][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 327.865033][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 327.876712][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.891304][ T5858] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 327.904357][ T5858] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 327.918147][ T5858] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 327.927583][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.073397][ T7217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.122886][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.339569][ T7217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.354360][ T7217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.763036][ T5858] usb 2-1: USB disconnect, device number 2 [ 328.769227][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 328.769498][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 328.920013][ T7227] loop2: detected capacity change from 0 to 64 [ 329.163409][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 330.096117][ T5851] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 330.282007][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 330.314985][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.327578][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.342036][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.356505][ T5851] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.370770][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.481235][ T7242] loop2: detected capacity change from 0 to 4096 [ 330.573521][ T5851] usb 1-1: config 0 descriptor?? [ 330.670478][ T7252] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.121675][ T5851] microsoft 0003:045E:07DA.000C: No inputs registered, leaving [ 331.172739][ T2157] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 331.222845][ T5851] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 331.236577][ T5851] microsoft 0003:045E:07DA.000C: no inputs found [ 331.243177][ T5851] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 331.368333][ T2157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.385694][ T2157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.397667][ T2157] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 331.407722][ T2157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.446822][ T5851] usb 1-1: USB disconnect, device number 5 [ 331.630620][ T2157] usb 4-1: config 0 descriptor?? [ 331.704762][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 332.002568][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 332.124452][ T2157] thrustmaster 0003:044F:B324.000D: item fetching failed at offset 3/5 [ 332.206743][ T2157] thrustmaster 0003:044F:B324.000D: parse failed [ 332.213651][ T2157] thrustmaster 0003:044F:B324.000D: probe with driver thrustmaster failed with error -22 [ 332.367387][ T2157] usb 4-1: USB disconnect, device number 4 [ 334.391538][ T7300] loop2: detected capacity change from 0 to 64 [ 334.432382][ T7302] loop0: detected capacity change from 0 to 256 [ 334.683316][ T7309] loop4: detected capacity change from 0 to 512 [ 334.708748][ T7309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 334.800173][ T7302] FAT-fs (loop0): Directory bread(block 64) failed [ 334.807826][ T7302] FAT-fs (loop0): Directory bread(block 65) failed [ 334.814918][ T7302] FAT-fs (loop0): Directory bread(block 66) failed [ 334.821886][ T7302] FAT-fs (loop0): Directory bread(block 67) failed [ 334.828892][ T7302] FAT-fs (loop0): Directory bread(block 68) failed [ 334.835849][ T7302] FAT-fs (loop0): Directory bread(block 69) failed [ 334.842724][ T7302] FAT-fs (loop0): Directory bread(block 70) failed [ 334.855035][ T7302] FAT-fs (loop0): Directory bread(block 71) failed [ 334.863469][ T7302] FAT-fs (loop0): Directory bread(block 72) failed [ 334.863712][ T7307] loop1: detected capacity change from 0 to 4096 [ 334.870300][ T7302] FAT-fs (loop0): Directory bread(block 73) failed [ 334.990159][ T7309] EXT4-fs (loop4): 1 truncate cleaned up [ 334.998079][ T7309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.087085][ T7314] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 335.578811][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.079823][ T7325] loop1: detected capacity change from 0 to 512 [ 336.167863][ T7325] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.181466][ T7325] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 336.295463][ T7325] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 336.317367][ T7325] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 336.326280][ T7325] System zones: 0-2, 18-18, 34-34 [ 336.345805][ T7325] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.581: iget: bad i_size value: 360287970189639680 [ 336.393766][ T7325] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.581: couldn't read orphan inode 15 (err -117) [ 336.447551][ T7325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.214571][ T7332] loop2: detected capacity change from 0 to 32768 [ 337.234694][ T7332] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.586 (7332) [ 337.330397][ T7332] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 337.341118][ T7332] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 337.352516][ T7332] BTRFS error (device loop2): ignoresuperflags must be used with ro mount option [ 337.362106][ T7332] BTRFS info (device loop2): using free-space-tree [ 337.374268][ T7332] BTRFS error (device loop2): open_ctree failed: -22 [ 337.561777][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.217760][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 339.223482][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 339.231034][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 339.231474][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 339.384035][ T7356] loop3: detected capacity change from 0 to 4096 [ 339.517319][ T7358] loop4: detected capacity change from 0 to 4096 [ 339.687502][ T7356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.803078][ T7366] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 339.822887][ T7366] batman_adv: batadv0: Adding interface: team0 [ 339.830375][ T7366] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.856087][ T7366] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 339.975956][ T7358] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 340.071917][ T7367] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 340.080187][ T7367] netlink: 2 bytes leftover after parsing attributes in process `syz.2.601'. [ 340.089689][ T7367] team0: entered promiscuous mode [ 340.094964][ T7367] team_slave_0: entered promiscuous mode [ 340.101886][ T7367] team_slave_1: entered promiscuous mode [ 340.114546][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.122339][ T7367] batman_adv: batadv0: Interface activated: team0 [ 340.129280][ T7367] batman_adv: batadv0: Interface deactivated: team0 [ 340.136406][ T7367] batman_adv: batadv0: Removing interface: team0 [ 340.207281][ T7358] ntfs3(loop4): ino=1e, "file1" attr_set_size [ 340.334759][ T7367] bridge0: port 3(team0) entered blocking state [ 340.342796][ T7367] bridge0: port 3(team0) entered disabled state [ 340.350301][ T7367] team0: entered allmulticast mode [ 340.355774][ T7367] team_slave_0: entered allmulticast mode [ 340.361741][ T7367] team_slave_1: entered allmulticast mode [ 340.386800][ T7367] bridge0: port 3(team0) entered blocking state [ 340.393577][ T7367] bridge0: port 3(team0) entered forwarding state [ 340.441446][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.756462][ T7385] loop1: detected capacity change from 0 to 512 [ 341.967519][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.967864][ T7385] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.289178][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.289412][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.568420][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.790180][ T7393] loop3: detected capacity change from 0 to 32768 [ 342.804835][ T7393] Only 4K block size supported! [ 342.804910][ T7393] Mount JFS Failure: -22 [ 342.804963][ T7393] jfs_mount failed w/return code = -22 [ 343.517780][ T7400] loop1: detected capacity change from 0 to 1024 [ 343.596601][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.596939][ T7400] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.157116][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.737572][ T7418] loop1: detected capacity change from 0 to 64 [ 345.160436][ T7413] loop3: detected capacity change from 0 to 32768 [ 345.170621][ T7413] XFS (loop3): sunit and swidth options incompatible with the noalign option [ 345.983864][ T7425] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 346.914625][ T7431] loop0: detected capacity change from 0 to 40427 [ 346.983998][ T7431] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 346.998772][ T7431] F2FS-fs (loop0): invalid crc value [ 347.280447][ T7431] F2FS-fs (loop0): Start checkpoint disabled! [ 347.307376][ T7431] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 349.212635][ T7459] loop1: detected capacity change from 0 to 512 [ 349.313998][ T7459] EXT4-fs (loop1): 1 truncate cleaned up [ 349.361174][ T7459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.402044][ T7467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.642'. [ 349.550545][ T7466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 350.005250][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.053014][ T7475] loop0: detected capacity change from 0 to 256 [ 350.490316][ T5796] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 350.501916][ T5796] FAT-fs (loop0): Filesystem has been set read-only [ 350.576968][ T5796] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 351.282141][ T4115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.293512][ T4115] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 351.629776][ T4115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.645036][ T4115] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 351.882752][ T4115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.893643][ T4115] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 352.139328][ T4115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.154886][ T4115] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 352.488857][ T4115] bridge_slave_1: left allmulticast mode [ 352.494755][ T4115] bridge_slave_1: left promiscuous mode [ 352.522970][ T4115] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.625080][ T4115] bridge_slave_0: left allmulticast mode [ 352.631320][ T4115] bridge_slave_0: left promiscuous mode [ 352.638026][ T4115] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.033338][ T4115] batman_adv: batadv0: Removing interface: geneve2 [ 353.213729][ T4115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.242883][ T4115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.284847][ T4115] bond0 (unregistering): Released all slaves [ 354.331049][ T4115] hsr_slave_0: left promiscuous mode [ 354.382949][ T4115] hsr_slave_1: left promiscuous mode [ 354.391021][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.399853][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.513294][ T4115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.524204][ T4115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.706129][ T4115] veth1_macvtap: left promiscuous mode [ 354.718667][ T4115] veth0_macvtap: left promiscuous mode [ 354.724755][ T4115] veth1_vlan: left promiscuous mode [ 354.730469][ T4115] veth0_vlan: left promiscuous mode [ 354.815711][ T30] audit: type=1326 audit(1750477867.088:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.126658][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.174514][ T30] audit: type=1326 audit(1750477867.138:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.197216][ T30] audit: type=1326 audit(1750477867.138:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.209353][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.221004][ T30] audit: type=1326 audit(1750477867.138:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.234133][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.252852][ T30] audit: type=1326 audit(1750477867.278:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.265730][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.281995][ T30] audit: type=1326 audit(1750477867.278:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.293020][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.313101][ T30] audit: type=1326 audit(1750477867.278:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6557d8e929 code=0x7ffc0000 [ 355.850495][ T7533] netlink: 165 bytes leftover after parsing attributes in process `syz.1.672'. [ 355.865891][ T5851] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 356.096058][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 356.131934][ T4115] team0 (unregistering): Port device team_slave_1 removed [ 356.136773][ T5851] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.151078][ T5851] usb 3-1: config 0 has no interface number 0 [ 356.278790][ T4115] team0 (unregistering): Port device team_slave_0 removed [ 356.281785][ T5851] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 356.295901][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.304229][ T5851] usb 3-1: Product: syz [ 356.308743][ T5851] usb 3-1: Manufacturer: syz [ 356.313650][ T5851] usb 3-1: SerialNumber: syz [ 356.495151][ T5851] usb 3-1: config 0 descriptor?? [ 356.692754][ T5851] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 356.702026][ T5851] usb 3-1: selecting invalid altsetting 1 [ 356.708307][ T5851] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 356.795059][ T5851] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.807799][ T5851] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 356.816834][ T5851] usb 3-1: media controller created [ 356.999498][ T7520] hsr0 speed is unknown, defaulting to 1000 [ 357.086525][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 357.466053][ T5801] Bluetooth: hci0: command tx timeout [ 357.776728][ T7529] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 357.830124][ T5851] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 357.838033][ T5851] zl10353_read_register: readreg error (reg=127, ret==-71) [ 357.906769][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'. [ 357.931367][ T5851] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 358.480036][ T5851] usb 3-1: USB disconnect, device number 5 [ 358.680157][ T7563] loop1: detected capacity change from 0 to 16 [ 358.713804][ T7563] erofs (device loop1): mounted with root inode @ nid 36. [ 359.074247][ T7567] loop3: detected capacity change from 0 to 128 [ 359.094306][ T7520] chnl_net:caif_netlink_parms(): no params data found [ 359.162859][ T7567] FAT-fs (loop3): Directory bread(block 524322) failed [ 359.170281][ T7567] FAT-fs (loop3): Directory bread(block 524323) failed [ 359.177754][ T7567] FAT-fs (loop3): Directory bread(block 524324) failed [ 359.184891][ T7567] FAT-fs (loop3): Directory bread(block 524325) failed [ 359.192330][ T7567] FAT-fs (loop3): Directory bread(block 524326) failed [ 359.199602][ T7567] FAT-fs (loop3): Directory bread(block 524327) failed [ 359.206849][ T7567] FAT-fs (loop3): Directory bread(block 524328) failed [ 359.213967][ T7567] FAT-fs (loop3): Directory bread(block 524329) failed [ 359.493468][ T7572] loop1: detected capacity change from 0 to 64 [ 359.536153][ T5801] Bluetooth: hci0: command tx timeout [ 359.536973][ T7567] FAT-fs (loop3): Directory bread(block 524322) failed [ 359.548980][ T7567] FAT-fs (loop3): Directory bread(block 524323) failed [ 360.126976][ T5806] hfs: node 4:3 still has 1 user(s)! [ 360.567717][ T7587] loop1: detected capacity change from 0 to 512 [ 360.674917][ T7587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.747277][ T7587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.764735][ T7587] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.890614][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.898624][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.908488][ T7520] bridge_slave_0: entered allmulticast mode [ 360.919260][ T7520] bridge_slave_0: entered promiscuous mode [ 360.978172][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.986000][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.993693][ T7520] bridge_slave_1: entered allmulticast mode [ 361.003163][ T7520] bridge_slave_1: entered promiscuous mode [ 361.381458][ T7520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.403794][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.438182][ T7520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.616188][ T5801] Bluetooth: hci0: command tx timeout [ 361.832975][ T7520] team0: Port device team_slave_0 added [ 361.912767][ T7520] team0: Port device team_slave_1 added [ 362.316510][ T7614] netlink: 260 bytes leftover after parsing attributes in process `syz.1.698'. [ 362.322737][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.326124][ T7614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.698'. [ 362.332916][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.368681][ T7520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.619436][ T7520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.627092][ T7520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.653536][ T7520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.852691][ T7619] loop2: detected capacity change from 0 to 1024 [ 363.226017][ T7520] hsr_slave_0: entered promiscuous mode [ 363.241583][ T7520] hsr_slave_1: entered promiscuous mode [ 363.250233][ T7520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.258174][ T7520] Cannot create hsr debugfs directory [ 363.635667][ T30] audit: type=1326 audit(1750477875.888:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 363.696494][ T5801] Bluetooth: hci0: command tx timeout [ 363.755796][ T30] audit: type=1326 audit(1750477875.948:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 363.906237][ T30] audit: type=1326 audit(1750477876.068:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 363.931055][ T30] audit: type=1326 audit(1750477876.068:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 364.525926][ T7645] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 3, id = 0 [ 364.899795][ T7647] netlink: 52 bytes leftover after parsing attributes in process `syz.1.712'. [ 365.029910][ T7520] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.113381][ T7520] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.198646][ T7520] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.316904][ T7520] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.637741][ T7520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.836911][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 366.837690][ T7520] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.945160][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.952838][ T4115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.018755][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 367.076769][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.084434][ T4115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.115059][ T5858] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.126544][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 367.133478][ T5858] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 367.142976][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.487147][ T7520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.858341][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.169668][ T7686] loop3: detected capacity change from 0 to 32768 [ 368.190195][ T5858] usb 2-1: config 0 descriptor?? [ 368.242726][ T7686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 368.251629][ T7686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 368.382602][ T7686] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 368.616148][ T5852] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 368.752078][ T7686] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 368.818018][ T5858] aquacomputer_d5next 0003:0C70:F0BD.000E: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.1-1/input0 [ 368.954930][ T5852] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 368.965072][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.999443][ T5858] usb 2-1: USB disconnect, device number 3 [ 369.092102][ T5852] usb 5-1: config 0 descriptor?? [ 369.623583][ T5852] creative-sb0540 0003:041E:3100.000F: No inputs registered, leaving [ 369.708336][ T5852] creative-sb0540 0003:041E:3100.000F: hidraw0: USB HID v1.01 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 369.823231][ T5852] usb 5-1: USB disconnect, device number 4 [ 369.841799][ T7700] fido_id[7700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 369.906989][ T7704] loop2: detected capacity change from 0 to 1024 [ 370.144641][ T7710] loop1: detected capacity change from 0 to 256 [ 370.332261][ T7710] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 370.437929][ T7520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.815105][ T7717] loop2: detected capacity change from 0 to 16 [ 370.896460][ T7717] erofs (device loop2): mounted with root inode @ nid 36. [ 371.424915][ T7725] loop3: detected capacity change from 0 to 1024 [ 371.691853][ T7722] fido_id[7722]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 371.748037][ T7723] hfsplus: invalid extended attribute record [ 372.021465][ T2157] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 372.080853][ T3609] hfsplus: b-tree write err: -5, ino 4 [ 372.260007][ T2157] usb 3-1: Using ep0 maxpacket: 8 [ 372.386122][ T2157] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 372.396187][ T2157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.404448][ T2157] usb 3-1: Product: syz [ 372.409042][ T2157] usb 3-1: Manufacturer: syz [ 372.413858][ T2157] usb 3-1: SerialNumber: syz [ 372.591935][ T2157] usb 3-1: config 0 descriptor?? [ 372.660326][ T2157] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 373.366994][ T2157] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 373.378378][ T2157] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 373.483056][ T30] audit: type=1326 audit(1750477885.758:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 373.492188][ T2157] usb 3-1: USB disconnect, device number 6 [ 373.666330][ T30] audit: type=1326 audit(1750477885.838:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 373.689022][ T30] audit: type=1326 audit(1750477885.838:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 373.714502][ T30] audit: type=1326 audit(1750477885.838:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 373.737219][ T30] audit: type=1326 audit(1750477885.868:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 373.761943][ T30] audit: type=1326 audit(1750477885.868:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 374.003915][ T7520] veth0_vlan: entered promiscuous mode [ 374.132323][ T7520] veth1_vlan: entered promiscuous mode [ 374.461165][ T7520] veth0_macvtap: entered promiscuous mode [ 374.514289][ T7520] veth1_macvtap: entered promiscuous mode [ 374.768737][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.858643][ T7520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.982752][ T7520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.996491][ T7520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.007208][ T7520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.016500][ T7520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.880465][ T7779] loop3: detected capacity change from 0 to 256 [ 376.809149][ T7789] loop3: detected capacity change from 0 to 764 [ 376.944343][ T7789] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 377.841061][ T7798] loop4: detected capacity change from 0 to 4096 [ 378.086739][ T7809] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.501544][ T7821] loop3: detected capacity change from 0 to 2048 [ 379.675865][ T7821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.137775][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.703554][ T7858] loop4: detected capacity change from 0 to 32768 [ 381.721900][ T7858] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 381.721900][ T7858] clean (size 2912): [ 381.721900][ T7858] flags: 0 [ 381.721900][ T7858] journal_seq: 10 [ 381.721900][ T7858] usage: type=inodes v=8 [ 381.721900][ T7858] usage: type=key_version v=0 [ 381.721900][ T7858] usage: type=reserved v=0 [ 381.721900][ T7858] usage: type=reserved v=0 [ 381.721900][ T7858] usage: type=reserved v=0 [ 381.721900][ T7858] usage: type=reserved v=0 [ 381.721900][ T7858] log: [ 381.721900][ T7858] data_usage: journal: 1/1 [0]=0 [ 381.721900][ T7858] data_usage: user: 1/1 [0]=16 [ 381.721900][ T7858] dev_usage: dev=0 [ 381.721900][ T7858] free: buckets=83 sectors=0 fragmented=0 [ 381.721900][ T7858] sb: buckets=25 sectors=4502500115748872 fragmented=248 [ 381.721900][ T7858] journal: buckets=8 sectors=2048 fragmented=0 [ 381.721900][ T7858] btree: buckets=11 sectors=2816 fragmented=0 [ 381.721900][ T7858] user: buckets=1 sectors=16 fragmented=240 [ 381.721900][ T7858] cached: buckets=0 sectors=0 fragmented=0 [ 381.721900][ T7858] parity: buckets=0 sectors=0 fragmented=0 [ 381.721900][ T7858] stripe: buckets=0 sectors=0 fragmented=0 [ 381.721900][ T7858] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 381.721900][ T7858] need_discard: buckets=0 sectors=0 fragmented=0 [ 381.721900][ T7858] clock: read=0 [ 381.721900][ T7858] clock: write=1280 [ 381.721900][ T7858] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 [ 381.722860][ T7858] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 382.490573][ T7868] [U] ^C [ 383.207124][ T24] kernel write not supported for file /sg0 (pid: 24 comm: kworker/1:0) [ 383.453879][ T3703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.465802][ T3703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.762056][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.773060][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.367836][ T7918] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 385.976829][ T7929] netlink: 'syz.2.802': attribute type 5 has an invalid length. [ 387.155066][ T7939] loop1: detected capacity change from 0 to 4096 [ 387.650997][ T7939] ntfs3(loop1): ino=18, mi_enum_attr [ 387.657632][ T7939] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 389.817934][ T7987] [U]  [ 389.820944][ T7987] [U] K{ [ 389.824178][ T7987] [U] t 1ŠFfˊ`GJgo/mC [ 389.831383][ T7987] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 389.847520][ T7987] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 389.858264][ T7987] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 389.895214][ T7987] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 389.919136][ T7987] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 389.930511][ T7987] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 389.942330][ T7987] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 390.223566][ T7987] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 390.232322][ T7987] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 390.246100][ T7987] [U] 22Ʃx?0;3u [ 390.250514][ T7987] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 390.275829][ T7987] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 390.285411][ T7987] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 390.294191][ T7987] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 390.300707][ T7987] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 390.313221][ T7987] [U] ec [ 390.316505][ T7987] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 390.532921][ T7985] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 390.888421][ T7999] loop4: detected capacity change from 0 to 512 [ 390.927702][ T8000] loop5: detected capacity change from 0 to 256 [ 391.028459][ T7999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.041711][ T7999] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.176336][ T7999] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 391.188814][ T8008] loop2: detected capacity change from 0 to 2048 [ 391.286121][ T8010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.534949][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.560306][ T8011] loop1: detected capacity change from 0 to 2048 [ 391.601961][ T8011] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 391.796151][ T8016] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.456620][ T2157] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 392.666322][ T2157] usb 3-1: Using ep0 maxpacket: 32 [ 392.729899][ T2157] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 392.739328][ T2157] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 392.748435][ T2157] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 392.757866][ T2157] usb 3-1: config 1 has no interface number 0 [ 392.764193][ T2157] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.775953][ T2157] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 392.789279][ T2157] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 392.798804][ T2157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.221868][ T2157] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 393.458165][ T2157] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 393.970829][ T2157] usb 3-1: USB disconnect, device number 7 [ 393.978784][ T2157] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 394.946404][ T8061] loop3: detected capacity change from 0 to 512 [ 395.017785][ T8061] EXT4-fs: Ignoring removed i_version option [ 395.154937][ T8061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.173699][ T8061] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.279454][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.831137][ T8077] loop3: detected capacity change from 0 to 1024 [ 396.017457][ T8077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.711163][ T8093] loop2: detected capacity change from 0 to 1024 [ 396.744187][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.362473][ T8105] loop4: detected capacity change from 0 to 24 [ 397.449101][ T8105] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 399.550049][ T8141] can0: slcan on ttyS3. [ 399.708148][ T8140] can0 (unregistered): slcan off ttyS3. [ 400.738365][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 400.740320][ T8126] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 401.310672][ T8165] loop3: detected capacity change from 0 to 1024 [ 401.453601][ T30] audit: type=1800 audit(1750477913.738:49): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.887" name="file2" dev="loop3" ino=0 res=0 errno=0 [ 401.576168][ T8126] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 401.617468][ T8126] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.624161][ T8126] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 401.668483][ T8126] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.686011][ T8126] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 401.714876][ T8126] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.723557][ T8126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 401.751073][ T8126] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 401.778072][ T8126] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.786459][ T8126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 401.864224][ T8126] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 402.064467][ T8169] loop3: detected capacity change from 0 to 256 [ 402.475112][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.890'. [ 402.705295][ T8169] FAT-fs (loop3): Directory bread(block 64) failed [ 402.712624][ T8169] FAT-fs (loop3): Directory bread(block 65) failed [ 402.719819][ T8169] FAT-fs (loop3): Directory bread(block 66) failed [ 402.726901][ T8169] FAT-fs (loop3): Directory bread(block 67) failed [ 402.733812][ T8169] FAT-fs (loop3): Directory bread(block 68) failed [ 402.745747][ T8169] FAT-fs (loop3): Directory bread(block 69) failed [ 402.752663][ T8169] FAT-fs (loop3): Directory bread(block 70) failed [ 402.761164][ T8169] FAT-fs (loop3): Directory bread(block 71) failed [ 402.768284][ T8169] FAT-fs (loop3): Directory bread(block 72) failed [ 402.775066][ T8169] FAT-fs (loop3): Directory bread(block 73) failed [ 402.825532][ T8178] loop2: detected capacity change from 0 to 256 [ 402.828869][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 403.719922][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 403.730464][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 403.733860][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.743496][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.775970][ T5801] Bluetooth: hci4: command 0x0405 tx timeout [ 403.868205][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 404.962388][ T8206] loop3: detected capacity change from 0 to 1024 [ 405.126013][ T8206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.165133][ T2157] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 405.385913][ T2157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.401589][ T2157] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.413403][ T2157] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.426891][ T2157] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.436339][ T2157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.561740][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 405.721891][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.728312][ T2157] usb 2-1: config 0 descriptor?? [ 405.784581][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 405.784829][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 405.859251][ T5808] Bluetooth: hci4: command 0x0405 tx timeout [ 405.936189][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.199086][ T2157] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 406.277405][ T2157] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 406.464101][ T8221] syz.4.907 (8221) used greatest stack depth: 2472 bytes left [ 407.148104][ T8229] loop5: detected capacity change from 0 to 40427 [ 407.161263][ T8229] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 407.168761][ T8229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 407.179033][ T2157] usb 2-1: USB disconnect, device number 4 [ 407.188259][ T8229] F2FS-fs (loop5): build fault injection rate: 17008 [ 407.195518][ T8229] F2FS-fs (loop5): build fault injection type: 0x1f8 [ 407.202901][ T8229] F2FS-fs (loop5): norecovery requires readonly mount [ 407.937956][ T5808] Bluetooth: hci4: command 0x0405 tx timeout [ 408.009865][ T8236] fido_id[8236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 408.037049][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 408.206008][ T8246] loop2: detected capacity change from 0 to 1024 [ 408.348872][ T8249] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 408.407976][ T8246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.604268][ T8246] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.917: missing EA_INODE flag [ 408.723618][ T8246] EXT4-fs (loop2): Remounting filesystem read-only [ 409.368758][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.454653][ T8266] loop5: detected capacity change from 0 to 512 [ 409.683379][ T5147] udevd[5147]: worker [6139] terminated by signal 33 (Unknown signal 33) [ 409.704028][ T5147] udevd[5147]: worker [6139] failed while handling '/devices/virtual/block/loop2' [ 409.728886][ T5147] udevd[5147]: worker [7219] terminated by signal 33 (Unknown signal 33) [ 409.745855][ T5147] udevd[5147]: worker [7219] failed while handling '/devices/virtual/block/loop5' [ 409.788971][ T8266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.805206][ T8266] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.320028][ T7520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.617815][ T8282] loop2: detected capacity change from 0 to 512 [ 410.687158][ T8282] EXT4-fs: Ignoring removed orlov option [ 410.716366][ T8282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 410.917459][ T8282] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.929: bad orphan inode 458763 [ 410.986574][ T8282] EXT4-fs (loop2): Remounting filesystem read-only [ 410.995772][ T8282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.939807][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.510160][ T8308] loop5: detected capacity change from 0 to 64 [ 414.466139][ T8327] loop1: detected capacity change from 0 to 4096 [ 414.887305][ T2157] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 415.106496][ T2157] usb 6-1: Using ep0 maxpacket: 16 [ 415.176491][ T2157] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 415.188392][ T2157] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 415.200229][ T2157] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 415.213846][ T2157] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.221093][ T2157] usb 6-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 415.234700][ T2157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.348813][ T2157] usb 6-1: config 0 descriptor?? [ 415.864729][ T2157] topre 0003:0853:0148.0011: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.5-1/input0 [ 415.991939][ T2157] usb 6-1: USB disconnect, device number 2 [ 416.718450][ T8358] fido_id[8358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 417.779718][ T8384] netlink: 252 bytes leftover after parsing attributes in process `syz.3.965'. [ 417.800643][ T8385] loop5: detected capacity change from 0 to 128 [ 418.014253][ T8385] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 418.153100][ T8385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.208901][ T8381] loop4: detected capacity change from 0 to 2048 [ 418.221962][ T8389] loop1: detected capacity change from 0 to 512 [ 418.270691][ T8389] EXT4-fs: Ignoring removed orlov option [ 418.377348][ T8381] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 418.393914][ T24] IPVS: starting estimator thread 0... [ 418.495974][ T8389] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.966: corrupted in-inode xattr: invalid ea_ino [ 418.525928][ T8395] IPVS: using max 240 ests per chain, 12000 per kthread [ 418.616260][ T8389] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.966: couldn't read orphan inode 15 (err -117) [ 418.697987][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.828152][ T8381] syz.4.963: attempt to access beyond end of device [ 418.828152][ T8381] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 418.836265][ T8400] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 419.258039][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.515858][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 419.766784][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.780083][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.784299][ T8411] hugetlbfs: Bad value '' for mount option 'nr_inodes' [ 419.784299][ T8411] [ 419.791548][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.810865][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.824191][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.833900][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.968469][ T24] usb 3-1: config 0 descriptor?? [ 419.985933][ T5851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.185919][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 420.254958][ T5851] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 420.264855][ T5851] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 420.273541][ T5851] usb 6-1: Product: syz [ 420.278167][ T5851] usb 6-1: Manufacturer: syz [ 420.282999][ T5851] usb 6-1: SerialNumber: syz [ 420.463751][ T24] plantronics 0003:047F:FFFF.0012: unbalanced delimiter at end of report description [ 420.509352][ T5851] usb 6-1: config 0 descriptor?? [ 420.542821][ T24] plantronics 0003:047F:FFFF.0012: parse failed [ 420.549757][ T24] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 420.569600][ T5851] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 420.729496][ T24] usb 3-1: USB disconnect, device number 8 [ 421.222255][ T5851] gspca_zc3xx: reg_w_i err -71 [ 421.228867][ T5851] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 421.301375][ T5851] usb 6-1: USB disconnect, device number 3 [ 421.999615][ T24] IPVS: starting estimator thread 0... [ 422.138828][ T8433] IPVS: using max 240 ests per chain, 12000 per kthread [ 422.567433][ T8444] loop1: detected capacity change from 0 to 64 [ 422.716786][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 422.809282][ T8444] hfs: small file entry [ 423.448327][ T8456] loop2: detected capacity change from 0 to 512 [ 423.502944][ T8456] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 423.540720][ T8457] loop1: detected capacity change from 0 to 1024 [ 423.564367][ T8456] EXT4-fs (loop2): invalid journal inode [ 423.570643][ T8456] EXT4-fs (loop2): can't get journal size [ 423.717183][ T8456] EXT4-fs (loop2): 1 truncate cleaned up [ 423.724904][ T8456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.087998][ T8464] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 424.458176][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.776693][ T8472] loop1: detected capacity change from 0 to 1024 [ 425.356195][ T8476] loop5: detected capacity change from 0 to 4096 [ 425.535811][ T8487] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.838780][ T8490] loop2: detected capacity change from 0 to 1024 [ 426.000151][ T8472] EXT4-fs (loop1): Test dummy encryption mode enabled [ 426.008092][ T8472] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 426.357567][ T8472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.898357][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.150066][ T8507] gtp0: entered promiscuous mode [ 427.155281][ T8507] gtp0: entered allmulticast mode [ 428.320980][ T8511] loop3: detected capacity change from 0 to 40427 [ 428.331905][ T8511] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 428.343940][ T8511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 429.325838][ T8523] loop1: detected capacity change from 0 to 1024 [ 429.409350][ T8526] loop2: detected capacity change from 0 to 2048 [ 429.518265][ T8526] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 429.568342][ T8532] random: crng reseeded on system resumption [ 430.682798][ T8536] loop5: detected capacity change from 0 to 32768 [ 430.698203][ T8536] btrfs: Deprecated parameter 'usebackuproot' [ 430.704574][ T8536] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 430.741060][ T8536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1014 (8536) [ 430.780097][ T8536] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 430.791004][ T8536] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 430.806685][ T8536] BTRFS error (device loop5): superblock checksum mismatch [ 430.815808][ T8536] BTRFS error (device loop5): open_ctree failed: -22 [ 433.224143][ T8573] loop2: detected capacity change from 0 to 256 [ 433.453432][ T8577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1030'. [ 434.128201][ T8588] loop3: detected capacity change from 0 to 164 [ 434.147038][ T8591] Bluetooth: MGMT ver 1.23 [ 434.823878][ T8600] loop2: detected capacity change from 0 to 64 [ 435.792418][ T8608] loop1: detected capacity change from 0 to 1024 [ 435.863357][ T8608] EXT4-fs: inline encryption not supported [ 435.869691][ T8608] EXT4-fs: Ignoring removed i_version option [ 435.893340][ T8613] loop3: detected capacity change from 0 to 1024 [ 435.936094][ T8608] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 436.011775][ T8611] loop5: detected capacity change from 0 to 2048 [ 436.202815][ T8608] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.1042: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.287095][ T8611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.348757][ T8608] Quota error (device loop1): write_blk: dquota write failed [ 436.357960][ T8608] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 436.368895][ T8608] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1042: Failed to acquire dquot type 0 [ 436.568500][ T8608] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.1042: Freeing blocks not in datazone - block = 0, count = 4096 [ 436.601222][ T8611] EXT4-fs: Ignoring removed orlov option [ 436.608230][ T8611] EXT4-fs: can't change dax mount option while remounting [ 436.677675][ T4115] hfsplus: b-tree write err: -5, ino 8 [ 436.691677][ T8617] loop2: detected capacity change from 0 to 4096 [ 436.746337][ T8608] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1042: Invalid inode bitmap blk 0 in block_group 0 [ 436.767894][ T4115] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.847530][ T8617] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 436.852135][ T8608] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 436.926306][ T4115] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 436.935065][ T4115] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:22: Failed to release dquot type 0 [ 436.946665][ T8608] EXT4-fs (loop1): 1 orphan inode deleted [ 436.954804][ T8608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.211871][ T8608] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm syz.1.1042: lblock 1 mapped to illegal pblock 1 (length 1) [ 437.276876][ T7520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.344111][ T8617] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 437.410435][ T8608] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1 [ 437.420158][ T8608] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 60928 [ 437.430343][ T8608] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1042: Failed to acquire dquot type 0 [ 437.917694][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.448278][ T8647] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1051'. [ 438.451759][ T8648] loop2: detected capacity change from 0 to 64 [ 438.881207][ T5808] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 439.785791][ T8667] loop4: detected capacity change from 0 to 256 [ 440.268394][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 440.506201][ T24] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 440.516595][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.531631][ T24] usb 6-1: Product: syz [ 440.538855][ T24] usb 6-1: Manufacturer: syz [ 440.543718][ T24] usb 6-1: SerialNumber: syz [ 440.687645][ T24] usb 6-1: config 0 descriptor?? [ 440.732512][ T24] ch341 6-1:0.0: ch341-uart converter detected [ 440.906276][ T5852] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 441.149285][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 441.197418][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.207988][ T5852] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 441.217544][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.330812][ T24] usb 6-1: failed to send control message: -71 [ 441.338208][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 441.418765][ T5852] usb 3-1: config 0 descriptor?? [ 441.526209][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 441.652697][ T24] usb 6-1: USB disconnect, device number 4 [ 441.662637][ T24] ch341 6-1:0.0: device disconnected [ 441.727938][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 441.760939][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.772636][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.783053][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.796496][ T5858] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.806196][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.872317][ T5858] usb 2-1: config 0 descriptor?? [ 441.978507][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 441.986796][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 441.994067][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 442.001604][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 442.009233][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 442.016731][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 442.024324][ T5852] waltop 0003:172F:0037.0013: unknown main item tag 0x0 [ 442.306931][ T5852] waltop 0003:172F:0037.0013: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.2-1/input0 [ 442.393411][ T5858] microsoft 0003:045E:07DA.0014: unbalanced collection at end of report description [ 442.421316][ T5852] usb 3-1: USB disconnect, device number 9 [ 442.489463][ T5858] microsoft 0003:045E:07DA.0014: parse failed [ 442.503405][ T5858] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 442.628220][ T5858] usb 2-1: USB disconnect, device number 5 [ 442.665818][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 442.872676][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.887337][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.901564][ T24] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 442.911063][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.098041][ T24] usb 6-1: config 0 descriptor?? [ 443.270933][ T8702] fido_id[8702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 443.516587][ T8708] loop2: detected capacity change from 0 to 1024 [ 443.542335][ T24] ortek 0003:1223:3F07.0015: unknown main item tag 0x6 [ 443.549719][ T24] ortek 0003:1223:3F07.0015: bogus close delimiter [ 443.557209][ T24] ortek 0003:1223:3F07.0015: item 0 0 2 10 parsing failed [ 443.619214][ T24] ortek 0003:1223:3F07.0015: probe with driver ortek failed with error -22 [ 443.771855][ T24] usb 6-1: USB disconnect, device number 5 [ 443.811607][ T8713] pimreg: entered allmulticast mode [ 444.134585][ T4433] hfsplus: b-tree write err: -5, ino 4 [ 444.583959][ T8723] loop3: detected capacity change from 0 to 512 [ 444.744548][ T8723] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 444.839659][ T8723] System zones: 1-12 [ 444.931770][ T8723] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1080: Directory hole found for htree index block 0 [ 445.092220][ T8723] EXT4-fs (loop3): Remounting filesystem read-only [ 445.109234][ T8734] loop5: detected capacity change from 0 to 16 [ 445.133595][ T8723] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 445.185269][ T8723] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 445.196276][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.221192][ T8734] erofs (device loop5): mounted with root inode @ nid 36. [ 445.381089][ T8734] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 445.389828][ T8734] erofs (device loop5): readahead error at folio 0 @ nid 89 [ 445.398042][ T8734] syz.5.1083: attempt to access beyond end of device [ 445.398042][ T8734] loop5: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 445.412687][ T8734] syz.5.1083: attempt to access beyond end of device [ 445.412687][ T8734] loop5: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 445.426713][ T8734] erofs (device loop5): read error -5 @ 0 of nid 89 [ 445.461809][ T8739] sp0: Synchronizing with TNC [ 445.482293][ T30] audit: type=1800 audit(1750477957.718:50): pid=8734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1083" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 445.580404][ T8738] [U] [ 445.770568][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.577990][ T8751] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1089'. [ 448.240063][ T8765] loop1: detected capacity change from 0 to 40427 [ 448.253915][ T8765] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 448.261407][ T8765] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 448.271568][ T8765] F2FS-fs (loop1): build fault injection rate: 6 [ 448.278729][ T8765] F2FS-fs (loop1): inline encryption not supported [ 448.287155][ T8765] F2FS-fs (loop1): inline encryption not supported [ 448.296852][ T8765] F2FS-fs (loop1): invalid crc value [ 448.645962][ T8765] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 448.653289][ T8765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 450.066064][ T8792] loop2: detected capacity change from 0 to 1024 [ 450.461490][ T8792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.474963][ T8792] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.371282][ T8806] loop3: detected capacity change from 0 to 32768 [ 451.616089][ T8806] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 451.616212][ T8806] allowing incompatible features above 0.0: (unknown version) [ 451.616288][ T8806] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 451.654519][ T8806] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 451.664873][ T8806] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], shutting down [ 451.664993][ T8806] error not marked as autofix and not in fsck [ 451.665059][ T8806] run fsck, and forward to devs so error can be marked for self-healing [ 451.665129][ T8806] emergency read only at seq 0 [ 451.708270][ T8806] bcachefs (loop3): error in recovery: fsck_errors_not_fixed [ 451.716148][ T8806] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 451.725973][ T8806] bcachefs (loop3): shutting down [ 451.824310][ T8806] bcachefs (loop3): shutdown complete [ 452.066237][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.614506][ T8806] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 454.167160][ T30] audit: type=1326 audit(1750477966.428:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.2.1111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5da358e929 code=0x0 [ 455.930166][ T8867] loop3: detected capacity change from 0 to 256 [ 456.102382][ T8867] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 458.147007][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1139'. [ 458.525222][ T8896] loop3: detected capacity change from 0 to 4096 [ 458.675281][ T8901] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.024249][ T8906] loop5: detected capacity change from 0 to 1024 [ 459.060582][ T8906] EXT4-fs: Ignoring removed oldalloc option [ 459.067648][ T8906] EXT4-fs: Ignoring removed bh option [ 459.155778][ T8906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.769839][ T7520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.447171][ T8924] No buffer was provided with the request [ 461.223240][ T2157] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 461.456126][ T2157] usb 5-1: Using ep0 maxpacket: 16 [ 461.518470][ T2157] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 461.528023][ T2157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.578620][ T2157] usb 5-1: config 0 descriptor?? [ 461.589762][ T8942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1160'. [ 462.477945][ T8944] loop2: detected capacity change from 0 to 32768 [ 462.531968][ T2157] cherry 0003:046A:0027.0016: item fetching failed at offset 2/5 [ 462.628597][ T2157] cherry 0003:046A:0027.0016: probe with driver cherry failed with error -22 [ 462.698428][ T8944] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 462.698568][ T8944] allowing incompatible features above 0.0: (unknown version) [ 462.698651][ T8944] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 462.748678][ T8944] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 462.758806][ T8944] bcachefs (loop2): initializing new filesystem [ 462.775755][ T8944] bcachefs (loop2): going read-write [ 462.852488][ T8953] loop3: detected capacity change from 0 to 1024 [ 462.906247][ T5852] usb 5-1: USB disconnect, device number 5 [ 462.966078][ T8944] bcachefs (loop2): marking superblocks [ 463.015131][ T8944] bcachefs (loop2): initializing freespace [ 463.024544][ T8953] EXT4-fs: Ignoring removed orlov option [ 463.041348][ T8944] bcachefs (loop2): done initializing freespace [ 463.066559][ T8944] bcachefs (loop2): reading snapshots table [ 463.072943][ T8944] bcachefs (loop2): reading snapshots done [ 463.196130][ T8953] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 463.228168][ T8944] bcachefs (loop2): done starting filesystem [ 463.360083][ T8953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.538653][ T8944] syz.2.1157 (8944) used greatest stack depth: 1280 bytes left [ 463.735756][ T5799] bcachefs (loop2): shutting down [ 463.741107][ T5799] bcachefs (loop2): going read-only [ 463.747473][ T5799] bcachefs (loop2): finished waiting for writes to stop [ 463.799194][ T5799] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 463.952140][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.156199][ T5799] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 464.285873][ T5799] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 464.295079][ T5799] bcachefs (loop2): marking filesystem clean [ 464.634022][ T5799] bcachefs (loop2): shutdown complete [ 465.171303][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.178360][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.255757][ T8985] netlink: 'syz.1.1174': attribute type 8 has an invalid length. [ 465.764255][ T8992] tmpfs: Bad value for 'mpol' [ 466.303494][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 467.481754][ T9014] loop1: detected capacity change from 0 to 256 [ 467.518579][ T9014] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 467.530125][ T9014] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 467.697105][ T9014] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 467.877498][ T30] audit: type=1800 audit(1750477980.138:52): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1187" name="file1" dev="loop1" ino=1048686 res=0 errno=0 [ 467.961239][ T9014] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 467.972889][ T9014] exFAT-fs (loop1): Filesystem has been set read-only [ 468.693771][ T9022] loop5: detected capacity change from 0 to 2048 [ 468.786560][ T5852] kernel write not supported for file /sysvipc/shm (pid: 5852 comm: kworker/1:3) [ 468.902394][ T9022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.496773][ T5852] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 470.560022][ T9044] loop3: detected capacity change from 0 to 512 [ 470.767531][ T9044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.781260][ T9044] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 470.837243][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 470.848583][ T5852] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 470.860629][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 470.997787][ T5852] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 471.007707][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.016187][ T5852] usb 6-1: Product: syz [ 471.020578][ T5852] usb 6-1: Manufacturer: syz [ 471.025606][ T5852] usb 6-1: SerialNumber: syz [ 471.038302][ T5852] usb 6-1: config 0 descriptor?? [ 471.050505][ T9040] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.098252][ T9040] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.144505][ T5852] usb 6-1: ucan: probing device on interface #0 [ 471.462490][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.568293][ T5852] usb 6-1: ucan: device reported invalid tx-fifo size [ 471.575688][ T5852] usb 6-1: ucan: probe failed; try to update the device firmware [ 471.775867][ T5852] usb 6-1: USB disconnect, device number 6 [ 473.534398][ T9076] loop5: detected capacity change from 0 to 2048 [ 473.688127][ T9076] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.979185][ T9095] loop3: detected capacity change from 0 to 2048 [ 475.166542][ T9100] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 475.479193][ T9092] loop4: detected capacity change from 0 to 4096 [ 475.874878][ T9104] loop1: detected capacity change from 0 to 1024 [ 475.993198][ T9104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.181792][ T9104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.881608][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.230897][ T9132] hugetlbfs: Bad value 'e' for mount option 'size' [ 478.230897][ T9132] [ 478.438376][ T9134] loop5: detected capacity change from 0 to 128 [ 478.789622][ T9137] loop4: detected capacity change from 0 to 1024 [ 479.042507][ T9137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 479.184616][ T9137] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 479.358247][ T9137] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 479.421942][ T9137] EXT4-fs (loop4): orphan cleanup on readonly fs [ 479.430276][ T9137] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1234: Freeing blocks not in datazone - block = 0, count = 4096 [ 479.455894][ T9137] EXT4-fs (loop4): Remounting filesystem read-only [ 479.462792][ T9137] EXT4-fs (loop4): 1 orphan inode deleted [ 479.466028][ T2157] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 479.470965][ T9137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.583508][ T9145] loop2: detected capacity change from 0 to 1024 [ 479.716123][ T2157] usb 6-1: Using ep0 maxpacket: 32 [ 479.760745][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.797446][ T2157] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 479.807502][ T2157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.816041][ T2157] usb 6-1: Product: syz [ 479.820519][ T2157] usb 6-1: Manufacturer: syz [ 479.825606][ T2157] usb 6-1: SerialNumber: syz [ 479.902038][ T2157] usb 6-1: config 0 descriptor?? [ 480.358680][ T5852] IPVS: starting estimator thread 0... [ 480.466558][ T9155] IPVS: using max 240 ests per chain, 12000 per kthread [ 480.571092][ T2157] peak_usb 6-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 480.751758][ T2157] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 480.896213][ T3703] hfsplus: b-tree write err: -5, ino 4 [ 480.909200][ T2157] usb 6-1: USB disconnect, device number 7 [ 481.139289][ T9160] loop1: detected capacity change from 0 to 256 [ 481.141264][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 481.155666][ T9161] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1249'. [ 481.251556][ T9160] exfat: Deprecated parameter 'utf8' [ 481.257858][ T9160] exfat: Deprecated parameter 'utf8' [ 481.421537][ T9160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 483.595502][ T9191] loop3: detected capacity change from 0 to 1024 [ 484.207051][ T3781] hfsplus: b-tree write err: -5, ino 4 [ 485.717549][ T30] audit: type=1326 audit(1750477997.998:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 485.740440][ T30] audit: type=1326 audit(1750477997.998:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.2.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da358e929 code=0x7ffc0000 [ 486.729506][ T9239] loop1: detected capacity change from 0 to 128 [ 486.830343][ T9240] loop3: detected capacity change from 0 to 1024 [ 486.892939][ T30] audit: type=1800 audit(1750477999.168:55): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1285" name="file1" dev="loop1" ino=1048687 res=0 errno=0 [ 487.542551][ T5147] udevd[5147]: worker [5979] terminated by signal 33 (Unknown signal 33) [ 487.639932][ T5147] udevd[5147]: worker [5979] failed while handling '/devices/virtual/block/loop1' [ 488.069636][ T5852] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 488.278363][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 488.368674][ T5852] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 488.378574][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.386956][ T5852] usb 6-1: Product: syz [ 488.391336][ T5852] usb 6-1: Manufacturer: syz [ 488.398510][ T5852] usb 6-1: SerialNumber: syz [ 488.489796][ T5852] usb 6-1: config 0 descriptor?? [ 488.540092][ T5852] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 488.554885][ T5852] usb 6-1: setting power ON [ 488.560925][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 488.692861][ T5852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.739631][ T9253] dvb-usb: bulk message failed: -22 (3/0) [ 488.746319][ T9253] cxusb: i2c wr: len=80 is too big! [ 488.746319][ T9253] [ 488.782216][ T5852] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 488.791171][ T5852] usb 6-1: media controller created [ 488.893525][ T5852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.978105][ T9270] loop3: detected capacity change from 0 to 32768 [ 490.002582][ T5852] usb 6-1: selecting invalid altsetting 6 [ 490.008738][ T5852] usb 6-1: digital interface selection failed (-22) [ 490.015776][ T5852] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 490.036663][ T5852] usb 6-1: setting power OFF [ 490.041504][ T5852] dvb-usb: bulk message failed: -22 (2/0) [ 490.049067][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 490.061125][ T5852] (NULL device *): no alternate interface [ 490.120870][ T9270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1300 (9270) [ 490.209471][ T9270] BTRFS info (device loop3 state S): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 490.220831][ T9270] BTRFS info (device loop3 state S): using sha256 (sha256-x86_64) checksum algorithm [ 490.232573][ T9270] BTRFS error (device loop3 state S): nologreplay must be used with ro mount option [ 490.244617][ T9270] BTRFS info (device loop3 state S): using free-space-tree [ 490.256284][ T9270] BTRFS error (device loop3 state S): open_ctree failed: -22 [ 490.763218][ T5852] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 490.831431][ T5852] usb 6-1: USB disconnect, device number 8 [ 491.211105][ T9289] loop1: detected capacity change from 0 to 512 [ 491.252725][ T9289] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1309: corrupted in-inode xattr: invalid ea_ino [ 491.293525][ T9293] loop3: detected capacity change from 0 to 64 [ 491.298514][ T9289] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1309: couldn't read orphan inode 15 (err -117) [ 491.411739][ T9289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.446069][ T5852] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 491.650239][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 491.661781][ T5852] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 491.675541][ T5852] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 491.692327][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.711110][ T5852] usb 6-1: config 0 descriptor?? [ 491.791689][ T9287] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 492.024749][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.145963][ T30] audit: type=1326 audit(1750478004.398:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.168864][ T30] audit: type=1326 audit(1750478004.398:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.279333][ T30] audit: type=1326 audit(1750478004.508:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.303332][ T30] audit: type=1326 audit(1750478004.508:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.326607][ T30] audit: type=1326 audit(1750478004.508:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.354512][ T30] audit: type=1326 audit(1750478004.518:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.377316][ T30] audit: type=1326 audit(1750478004.518:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.400021][ T30] audit: type=1326 audit(1750478004.518:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.3.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f2f8e929 code=0x7ffc0000 [ 492.536526][ T5852] apple 0003:05AC:0264.0017: unbalanced delimiter at end of report description [ 492.771474][ T5852] apple 0003:05AC:0264.0017: parse failed [ 492.778095][ T5852] apple 0003:05AC:0264.0017: probe with driver apple failed with error -22 [ 492.797123][ T5852] usb 6-1: USB disconnect, device number 9 [ 492.983746][ T9306] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1316'. [ 493.244461][ T9301] loop1: detected capacity change from 0 to 4096 [ 493.436283][ T9307] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.418476][ T9319] loop5: detected capacity change from 0 to 8 [ 494.558056][ T9319] SQUASHFS error: lzo decompression failed, data probably corrupt [ 494.566452][ T9319] SQUASHFS error: Failed to read block 0x29b: -5 [ 494.572988][ T9319] SQUASHFS error: Unable to read metadata cache entry [299] [ 495.207226][ T9330] loop4: detected capacity change from 0 to 1024 [ 495.483793][ T9330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.653870][ T9336] loop5: detected capacity change from 0 to 764 [ 495.961246][ T9331] loop1: detected capacity change from 0 to 40427 [ 496.011529][ T9331] F2FS-fs (loop1): invalid crc value [ 496.367895][ T5811] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.372879][ T9331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 497.706419][ T9353] vcan0: MTU too low for tipc bearer [ 497.712033][ T9353] tipc: Enabling of bearer rejected, failed to enable media [ 500.150660][ T9388] loop2: detected capacity change from 0 to 16 [ 500.301185][ T9388] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 500.314543][ T9388] erofs (device loop2): mounted with root inode @ nid 36. [ 500.569679][ T9395] loop4: detected capacity change from 0 to 64 [ 500.597675][ T9388] erofs (device loop2): read error -95 @ 0 of nid 36 [ 500.726164][ T9395] hfs: bad catalog entry type 0 [ 500.737213][ T2157] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 500.941055][ T2157] usb 2-1: Using ep0 maxpacket: 32 [ 500.978134][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.005877][ T2157] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.014286][ T2157] usb 2-1: config 0 has no interface number 0 [ 501.022957][ T2157] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.035478][ T2157] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.049801][ T2157] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 501.061166][ T2157] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.264401][ T9400] loop3: detected capacity change from 0 to 256 [ 501.358342][ T2157] usb 2-1: config 0 descriptor?? [ 501.444382][ T9400] FAT-fs (loop3): Directory bread(block 1285) failed [ 501.871313][ T9402] loop4: detected capacity change from 0 to 1024 [ 502.012453][ T2157] uclogic 0003:28BD:0094.0018: failed retrieving string descriptor #100: -71 [ 502.021865][ T2157] uclogic 0003:28BD:0094.0018: failed retrieving pen parameters: -71 [ 502.030377][ T2157] uclogic 0003:28BD:0094.0018: pen probing failed: -71 [ 502.037640][ T2157] uclogic 0003:28BD:0094.0018: failed probing parameters: -71 [ 502.045819][ T2157] uclogic 0003:28BD:0094.0018: probe with driver uclogic failed with error -71 [ 502.069771][ T9402] hfsplus: bad catalog entry type [ 502.247163][ T2157] usb 2-1: USB disconnect, device number 6 [ 502.409855][ T3609] hfsplus: b-tree write err: -5, ino 4 [ 503.170007][ T9415] Bluetooth: MGMT ver 1.23 [ 503.732307][ T5801] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 505.169393][ T9441] loop3: detected capacity change from 0 to 64 [ 506.402783][ T9459] binder: 9457:9459 ioctl c018620b 0 returned -14 [ 507.775793][ T5801] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 507.784395][ T5801] Bluetooth: hci2: Injecting HCI hardware error event [ 507.801435][ T5801] Bluetooth: hci2: hardware error 0x00 [ 507.926453][ T9485] loop3: detected capacity change from 0 to 128 [ 509.467518][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 509.855858][ T5801] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 510.015747][ T9515] sp0: Synchronizing with TNC [ 510.106582][ T9513] [U] [ 512.058444][ T9544] loop5: detected capacity change from 0 to 164 [ 512.107154][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1423'. [ 512.187518][ T9544] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 513.383754][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1428'. [ 513.549527][ T30] audit: type=1326 audit(1750478025.798:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.572939][ T30] audit: type=1326 audit(1750478025.798:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.575808][ T9554] loop3: detected capacity change from 0 to 4096 [ 513.595358][ C1] vkms_vblank_simulate: vblank timer overrun [ 513.705807][ T9561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.835043][ T30] audit: type=1326 audit(1750478025.928:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.862329][ T30] audit: type=1326 audit(1750478025.938:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.886717][ T30] audit: type=1326 audit(1750478025.938:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.909524][ T30] audit: type=1326 audit(1750478025.938:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.932287][ T30] audit: type=1326 audit(1750478025.938:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.959953][ T30] audit: type=1326 audit(1750478025.938:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.4.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 513.988727][ T5852] IPVS: starting estimator thread 0... [ 514.076165][ T9568] loop2: detected capacity change from 0 to 512 [ 514.096644][ T9568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.133574][ T9567] IPVS: using max 240 ests per chain, 12000 per kthread [ 514.218372][ T9568] EXT4-fs (loop2): 1 truncate cleaned up [ 514.226523][ T9568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.822210][ T9583] loop4: detected capacity change from 0 to 8 [ 514.955002][ T9583] SQUASHFS error: zstd decompression error: 10 [ 514.974745][ T9583] SQUASHFS error: zstd decompression failed, data probably corrupt [ 514.986798][ T9583] SQUASHFS error: Failed to read block 0x60: -5 [ 514.999868][ T9583] SQUASHFS error: zstd decompression error: 10 [ 515.006351][ T9583] SQUASHFS error: zstd decompression failed, data probably corrupt [ 515.014568][ T9583] SQUASHFS error: Failed to read block 0x60: -5 [ 515.052948][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.778493][ T9589] loop3: detected capacity change from 0 to 2048 [ 515.903273][ T9589] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 516.042356][ T9598] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.834894][ T9607] loop1: detected capacity change from 0 to 512 [ 517.038284][ T9607] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.1447: casefold flag without casefold feature [ 517.124760][ T9607] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1447: couldn't read orphan inode 15 (err -117) [ 517.231360][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.323567][ T9614] [U]  [ 517.328103][ T9614] [U] K{ [ 517.331621][ T9614] [U] T 1ŠFFˊ`GJǘGO/MC [ 517.340476][ T9614] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 517.359430][ T9614] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 517.372622][ T9614] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 517.414162][ T9614] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 517.443868][ T9614] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 517.456927][ T9614] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 517.474188][ T9614] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 517.756363][ T9614] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 517.767932][ T9614] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 517.784439][ T9614] [U] 22Ʃ۩X?0;3U [ 517.790445][ T9614] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 517.818640][ T9614] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 517.828827][ T9614] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 517.840486][ T9614] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 517.851024][ T9614] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 517.863776][ T9614] [U] EC [ 517.867830][ T9614] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 517.926652][ T9613] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 518.184142][ T5806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.055795][ T9624] loop5: detected capacity change from 0 to 32768 [ 519.080697][ T9624] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section quota: wrong size (got 24 should be 80) [ 519.080697][ T9624] quota (size 24): [ 519.080697][ T9624] user: flags 104000102000103 space timelimit 0 warnlimit 0 inodes timelimit 364 warnlimit 6 [ 519.080697][ T9624] group: flags 0 space timelimit 10 warnlimit 0 inodes timelimit 65537 warnlimit 5 [ 519.080697][ T9624] project: flags 8 space timelimit 131073 warnlimit 5 inodes timelimit 0 warnlimit 0 [ 519.080697][ T9624] [ 519.129488][ T9624] bcachefs: bch2_fs_get_tree() error: invalid_sb_quota [ 519.582540][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 520.073299][ T9644] random: crng reseeded on system resumption [ 520.203600][ T9644] Unrecognized hibernate image header format! [ 520.210022][ T9644] PM: hibernation: Image mismatch: architecture specific data [ 521.405235][ T9661] loop3: detected capacity change from 0 to 2048 [ 521.539004][ T9661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.659719][ T9667] loop4: detected capacity change from 0 to 1024 [ 521.840009][ T9667] hfsplus: bad catalog entry type [ 521.972693][ T9669] loop2: detected capacity change from 0 to 2048 [ 522.089061][ T9669] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 522.206289][ T3703] hfsplus: b-tree write err: -5, ino 4 [ 522.268455][ T9669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.281837][ T9669] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.296643][ T9671] loop1: detected capacity change from 0 to 2048 [ 522.505932][ T9680] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.918045][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.008923][ T9680] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 523.020296][ T9680] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 523.104365][ T9680] Remounting filesystem read-only [ 523.166089][ T5806] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 523.455780][ T9688] netlink: 'syz.2.1482': attribute type 30 has an invalid length. [ 523.761617][ T9693] loop4: detected capacity change from 0 to 1024 [ 523.801290][ T9697] loop1: detected capacity change from 0 to 256 [ 524.254717][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 525.159696][ T9712] loop3: detected capacity change from 0 to 1024 [ 525.296007][ T9712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.792972][ T3781] ===================================================== [ 525.800322][ T3781] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0 [ 525.809052][ T3781] n_tty_receive_buf_standard+0xafd/0x98a0 [ 525.815068][ T3781] n_tty_receive_buf_common+0x1a68/0x2540 [ 525.826507][ T3781] n_tty_receive_buf2+0x4c/0x60 [ 525.831671][ T3781] tty_ldisc_receive_buf+0xc6/0x2c0 [ 525.838102][ T3781] tty_port_default_receive_buf+0xd7/0x1a0 [ 525.844098][ T3781] flush_to_ldisc+0x49d/0xf00 [ 525.852619][ T3781] process_scheduled_works+0xb91/0x1d80 [ 525.853265][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.858558][ T3781] worker_thread+0xedf/0x1590 [ 525.858702][ T3781] kthread+0xd5c/0xf00 [ 525.858788][ T3781] ret_from_fork+0x1e3/0x310 [ 525.858878][ T3781] ret_from_fork_asm+0x1a/0x30 [ 525.859006][ T3781] [ 525.859027][ T3781] Uninit was stored to memory at: [ 525.859189][ T3781] n_tty_receive_buf_standard+0xaf6/0x98a0 [ 525.859308][ T3781] n_tty_receive_buf_common+0x1a68/0x2540 [ 525.859423][ T3781] n_tty_receive_buf2+0x4c/0x60 [ 525.859528][ T3781] tty_ldisc_receive_buf+0xc6/0x2c0 [ 525.859627][ T3781] tty_port_default_receive_buf+0xd7/0x1a0 [ 525.859727][ T3781] flush_to_ldisc+0x49d/0xf00 [ 525.942086][ T3781] process_scheduled_works+0xb91/0x1d80 [ 525.948205][ T3781] worker_thread+0xedf/0x1590 [ 525.953101][ T3781] kthread+0xd5c/0xf00 [ 525.957413][ T3781] ret_from_fork+0x1e3/0x310 [ 525.962175][ T3781] ret_from_fork_asm+0x1a/0x30 [ 525.969719][ T3781] [ 525.972156][ T3781] Uninit was created at: [ 525.976693][ T3781] __kmalloc_noprof+0x95f/0x1310 [ 525.981815][ T3781] __tty_buffer_request_room+0x3d4/0x7a0 [ 525.987787][ T3781] __tty_insert_flip_string_flags+0x157/0x6f0 [ 525.994057][ T3781] uart_insert_char+0x368/0x930 [ 526.001537][ T3781] serial8250_read_char+0x1ba/0x670 [ 526.008085][ T3781] serial8250_handle_irq+0x930/0x1110 [ 526.013762][ T3781] serial8250_default_handle_irq+0x116/0x2b0 [ 526.020214][ T3781] serial8250_interrupt+0xc8/0x400 [ 526.031899][ T3781] __handle_irq_event_percpu+0x11c/0xbf0 [ 526.038838][ T3781] handle_irq_event+0xe0/0x2a0 [ 526.043799][ T3781] handle_edge_irq+0x31c/0xc80 [ 526.048829][ T3781] __common_interrupt+0xa2/0x220 [ 526.053977][ T3781] common_interrupt+0x94/0xb0 [ 526.061304][ T3781] asm_common_interrupt+0x2b/0x40 [ 526.066582][ T3781] [ 526.069133][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: kworker/u8:18 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 526.081767][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.094526][ T3781] Workqueue: events_unbound flush_to_ldisc [ 526.100638][ T3781] ===================================================== [ 526.107869][ T3781] Disabling lock debugging due to kernel taint [ 526.114157][ T3781] Kernel panic - not syncing: kmsan.panic set ... [ 526.120724][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: kworker/u8:18 Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 526.134860][ T3781] Tainted: [B]=BAD_PAGE [ 526.139128][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.149373][ T3781] Workqueue: events_unbound flush_to_ldisc [ 526.155416][ T3781] Call Trace: [ 526.158839][ T3781] [ 526.161886][ T3781] __dump_stack+0x26/0x30 [ 526.166410][ T3781] dump_stack_lvl+0x53/0x270 [ 526.171193][ T3781] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.177215][ T3781] dump_stack+0x1e/0x25 [ 526.181636][ T3781] panic+0x4bd/0xd50 [ 526.185845][ T3781] kmsan_report+0x31c/0x320 [ 526.190531][ T3781] ? kmsan_get_metadata+0xfb/0x160 [ 526.195835][ T3781] ? __msan_warning+0x1b/0x30 [ 526.200860][ T3781] ? n_tty_receive_buf_standard+0xafd/0x98a0 [ 526.207108][ T3781] ? n_tty_receive_buf_common+0x1a68/0x2540 [ 526.213179][ T3781] ? n_tty_receive_buf2+0x4c/0x60 [ 526.218364][ T3781] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 526.223881][ T3781] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 526.230027][ T3781] ? flush_to_ldisc+0x49d/0xf00 [ 526.235028][ T3781] ? process_scheduled_works+0xb91/0x1d80 [ 526.240954][ T3781] ? worker_thread+0xedf/0x1590 [ 526.245991][ T3781] ? kthread+0xd5c/0xf00 [ 526.250409][ T3781] ? ret_from_fork+0x1e3/0x310 [ 526.255332][ T3781] ? ret_from_fork_asm+0x1a/0x30 [ 526.260452][ T3781] ? ret_from_fork_asm+0x1a/0x30 [ 526.265574][ T3781] ? irqentry_enter+0x2e/0x50 [ 526.270389][ T3781] ? kmsan_get_metadata+0xfb/0x160 [ 526.276036][ T3781] ? kmsan_get_metadata+0x150/0x160 [ 526.281422][ T3781] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 526.287933][ T3781] ? kmsan_get_metadata+0x150/0x160 [ 526.293314][ T3781] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.299315][ T3781] ? n_tty_receive_char+0xfae/0x1440 [ 526.304779][ T3781] ? kmsan_get_metadata+0xfb/0x160 [ 526.310090][ T3781] __msan_warning+0x1b/0x30 [ 526.314758][ T3781] n_tty_receive_buf_standard+0xafd/0x98a0 [ 526.320780][ T3781] ? update_misfit_status+0x32/0xaa0 [ 526.326253][ T3781] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 526.332282][ T3781] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 526.338822][ T3781] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 526.345099][ T3781] n_tty_receive_buf_common+0x1a68/0x2540 [ 526.351082][ T3781] n_tty_receive_buf2+0x4c/0x60 [ 526.356100][ T3781] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 526.361817][ T3781] tty_ldisc_receive_buf+0xc6/0x2c0 [ 526.367189][ T3781] tty_port_default_receive_buf+0xd7/0x1a0 [ 526.373164][ T3781] flush_to_ldisc+0x49d/0xf00 [ 526.378017][ T3781] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 526.384614][ T3781] ? __pfx_flush_to_ldisc+0x10/0x10 [ 526.389982][ T3781] process_scheduled_works+0xb91/0x1d80 [ 526.396296][ T3781] worker_thread+0xedf/0x1590 [ 526.401190][ T3781] kthread+0xd5c/0xf00 [ 526.405409][ T3781] ? __pfx_worker_thread+0x10/0x10 [ 526.410733][ T3781] ? __pfx_kthread+0x10/0x10 [ 526.415483][ T3781] ret_from_fork+0x1e3/0x310 [ 526.420225][ T3781] ? __pfx_kthread+0x10/0x10 [ 526.424961][ T3781] ret_from_fork_asm+0x1a/0x30 [ 526.429931][ T3781] [ 526.433376][ T3781] Kernel Offset: disabled [ 526.437758][ T3781] Rebooting in 86400 seconds..