last executing test programs: 5m2.514883538s ago: executing program 32 (id=56): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0) ppoll(&(0x7f0000000240)=[{r0, 0x2}], 0x1, &(0x7f0000000300), 0x0, 0x0) 5m0.136353202s ago: executing program 33 (id=70): r0 = socket$kcm(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) 4m45.700690409s ago: executing program 5 (id=150): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc"], 0x18}, 0x20043480) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc40) 4m45.292377918s ago: executing program 5 (id=154): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) 4m44.983199489s ago: executing program 5 (id=158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x2}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m44.570587089s ago: executing program 5 (id=163): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 4m43.64715395s ago: executing program 5 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x598926993abf2dc4, &(0x7f00000002c0)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xf, 0x6, @l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x40080) 4m42.896102394s ago: executing program 5 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4m42.204749872s ago: executing program 34 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4m24.202203958s ago: executing program 6 (id=275): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 4m23.552761742s ago: executing program 6 (id=279): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000000040)) 4m23.038770112s ago: executing program 6 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000100001002cbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="38280400230000005c0012800b00010062726964676500004c00028005002a000000000005001900020000000c002100000000000000000005002b"], 0xc4}, 0x1, 0x0, 0x0, 0x8090}, 0x4048004) 4m22.529459313s ago: executing program 6 (id=289): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 4m21.926171062s ago: executing program 6 (id=296): r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10) 4m20.271044194s ago: executing program 6 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000010002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4m19.823491978s ago: executing program 35 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000010002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3m30.969992591s ago: executing program 7 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000dc0008804c0000800400098024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e210000000700000000000000000000000000000001d20600003c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e230a01010100000000000000005000008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000ee0ef749d259ddff0000000000000000000000000003000000060005000400000024000300b08073e8d44e7ff0bfca0f771dbe44bb885c69e269c8e9d835b114293a4ddc6e14000200776732"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) 3m30.660367271s ago: executing program 7 (id=696): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x9, 0x0, 0x9}, {0x6, 0x9, 0x0, 0xfffffffa}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m30.040983831s ago: executing program 7 (id=700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) 3m29.672560847s ago: executing program 7 (id=704): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m28.894545683s ago: executing program 7 (id=714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 3m28.587233554s ago: executing program 3 (id=726): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 3m28.275042264s ago: executing program 7 (id=719): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f87000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 3m27.621265798s ago: executing program 36 (id=719): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f87000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) 3m27.5972627s ago: executing program 3 (id=723): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 3m27.293646819s ago: executing program 3 (id=728): r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/mcfilter6\x00') read(r0, &(0x7f0000000300)=""/135, 0x69) preadv(r0, &(0x7f0000001640)=[{&(0x7f00000013c0)=""/177, 0xb1}], 0x1, 0xb4, 0x21a) 3m26.97974448s ago: executing program 3 (id=731): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m26.301414206s ago: executing program 3 (id=733): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) 3m25.762534709s ago: executing program 0 (id=745): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 3m25.567060758s ago: executing program 3 (id=737): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) 3m25.495326755s ago: executing program 0 (id=738): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) 3m24.912664722s ago: executing program 37 (id=737): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) 3m23.815774569s ago: executing program 0 (id=746): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000012009703000000000000000007000000", @ANYRES64=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 3m23.09229436s ago: executing program 0 (id=759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m22.575984881s ago: executing program 0 (id=753): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@checkpoint_diasble}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@nogc_merge}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@jqfmt_vfsold}, {@compress_cache}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x0, 0x44000000}) 3m18.786291791s ago: executing program 0 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) 3m18.174321791s ago: executing program 38 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) 5.154131867s ago: executing program 9 (id=1910): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.07109113s ago: executing program 9 (id=1921): r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 2.922610444s ago: executing program 2 (id=1923): r0 = socket$kcm(0xa, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x902057, 0x0, 0xfd, 0x0, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 2.678909298s ago: executing program 2 (id=1925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 2.467079289s ago: executing program 9 (id=1927): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100003000000000020"], 0x24, 0x0) llistxattr(&(0x7f0000001400)='./file0/../file0\x00', &(0x7f00000002c0)=""/12, 0xc) 2.416042614s ago: executing program 2 (id=1928): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbc15b601ffcf34e"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.170320778s ago: executing program 2 (id=1931): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 2.15049501s ago: executing program 9 (id=1932): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x20000000000004}}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) 2.127395412s ago: executing program 8 (id=1933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000180)=0x8) 1.94477795s ago: executing program 4 (id=1935): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0xabf, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xb, 0x4) 1.865621358s ago: executing program 8 (id=1936): syz_usb_disconnect(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 1.800100214s ago: executing program 9 (id=1937): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e042107259c010203010902"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x80085502, 0x0) 1.743257949s ago: executing program 1 (id=1938): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) close_range(r0, r0, 0x0) 1.677956206s ago: executing program 4 (id=1939): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2000c12, &(0x7f0000000000)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@hide}, {@nocompress}, {@map_off}, {@nocompress}, {@mode={'mode', 0x3d, 0xd2}}, {@map_acorn}, {@map_normal}, {@sbsector}, {@showassoc}, {@showassoc}]}, 0x8, 0xa33, &(0x7f0000004cc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 1.464851027s ago: executing program 1 (id=1940): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x7) ioctl$KDDELIO(r0, 0x8924, 0xfffffffffffffff9) 1.215880371s ago: executing program 1 (id=1941): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03006043778cff9e14f086dd", 0x0, 0x209, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.144675118s ago: executing program 4 (id=1942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) 925.10218ms ago: executing program 1 (id=1943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a0000000000000004"], 0x50}}, 0x4000850) r0 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x8804) 843.710237ms ago: executing program 2 (id=1944): mlockall(0x7) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) io_setup(0xfb, &(0x7f0000000140)) 838.415628ms ago: executing program 8 (id=1945): r0 = syz_open_dev$media(&(0x7f00000005c0), 0x6, 0x40100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f0000000640)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000019c0)={r1}) 835.231228ms ago: executing program 4 (id=1946): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3fbf, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 658.916915ms ago: executing program 1 (id=1947): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000b40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @dccp_packet={0xc, 0x6, "d3c665", 0x10, 0x21, 0xfe, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {[], {{0x4e22, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0x0, 0x4, 0x3, "59dfd0", 0x6d, "fa6d9e"}}}}}}}, 0x0) 547.504677ms ago: executing program 8 (id=1948): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 472.570304ms ago: executing program 4 (id=1949): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000340)={0x27, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) 309.38085ms ago: executing program 1 (id=1950): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$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") mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) 267.496054ms ago: executing program 8 (id=1951): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0xd0) 102.93118ms ago: executing program 8 (id=1952): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000500000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000eaffffff850000008600000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 90.499531ms ago: executing program 4 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.46112ms ago: executing program 2 (id=1954): unshare(0x20000400) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) 0s ago: executing program 9 (id=1955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): ed: 2066844985; already mounted read-only [ 267.705892][ T8043] hpfs: filesystem error: improperly stopped [ 267.726877][ T8043] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 267.748619][ T8043] hpfs: You really don't want any checks? You are crazy... [ 267.765016][ T8043] hpfs: hpfs_map_sector(): read error [ 267.780183][ T8043] hpfs: code page support is disabled [ 267.795456][ T8043] hpfs: hpfs_map_4sectors(): unaligned read [ 267.834025][ T8043] hpfs: hpfs_map_4sectors(): unaligned read [ 267.846923][ T8043] hpfs: filesystem error: unable to find root dir [ 267.981979][ T4390] logitech 0003:046D:C623.0012: unexpected long global item [ 268.008122][ T4390] logitech 0003:046D:C623.0012: parse failed [ 268.018715][ T4390] logitech: probe of 0003:046D:C623.0012 failed with error -22 [ 268.179891][ T4626] usb 10-1: USB disconnect, device number 4 [ 268.201475][ T8053] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1075'. [ 268.253143][ T8034] loop2: detected capacity change from 0 to 32768 [ 268.388461][ T8034] XFS (loop2): Mounting V5 Filesystem [ 268.529115][ T8034] XFS (loop2): Ending clean mount [ 268.566005][ T8034] XFS (loop2): Quotacheck needed: Please wait. [ 268.650486][ T5466] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.714182][ T8034] XFS (loop2): Quotacheck: Done. [ 268.788689][ T8078] sp0: Synchronizing with TNC [ 268.865579][ T5466] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.883809][ T5466] usb 2-1: config 0 has no interface number 0 [ 268.915217][ T5466] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 268.957410][ T5466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.977835][ T5466] usb 2-1: Product: syz [ 269.001453][ T5466] usb 2-1: Manufacturer: syz [ 269.017999][ T5466] usb 2-1: SerialNumber: syz [ 269.045368][ T5466] usb 2-1: config 0 descriptor?? [ 269.097200][ T6918] XFS (loop2): Unmounting Filesystem [ 269.279785][ T5466] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 269.317166][ T5466] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.348199][ T5466] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 269.378826][ T5466] usb 2-1: media controller created [ 269.426243][ T8091] CUSE: unknown device info "€" [ 269.453883][ T8091] CUSE: unknown device info "" [ 269.468287][ T5466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.487478][ T8091] CUSE: unknown device info "" [ 269.505152][ T8091] CUSE: unknown device info "" [ 269.510370][ T8091] CUSE: zero length info key specified [ 269.700402][ T4626] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 269.760092][ T126] usb 2-1: USB disconnect, device number 7 [ 269.913024][ T4626] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 269.930602][ T4626] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 269.955633][ T4626] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 269.989264][ T4626] usb 9-1: config 220 has no interface number 2 [ 270.009622][ T4626] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 270.065036][ T4626] usb 9-1: config 220 interface 0 has no altsetting 0 [ 270.100609][ T4626] usb 9-1: config 220 interface 76 has no altsetting 0 [ 270.107905][ T4626] usb 9-1: config 220 interface 1 has no altsetting 0 [ 270.128429][ T8084] loop9: detected capacity change from 0 to 40427 [ 270.159489][ T4626] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 270.174512][ T8084] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 270.198807][ T4626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.213785][ T8084] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 270.227085][ T4626] usb 9-1: Product: syz [ 270.241543][ T4626] usb 9-1: Manufacturer: syz [ 270.252234][ T4626] usb 9-1: SerialNumber: syz [ 270.330540][ T8084] F2FS-fs (loop9): Found nat_bits in checkpoint [ 270.501821][ T8084] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 270.509059][ T8084] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 270.512343][ T4626] usb 9-1: selecting invalid altsetting 0 [ 270.586916][ T4626] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 270.612783][ T4626] usb 9-1: No valid video chain found. [ 270.724704][ T4626] usb 9-1: selecting invalid altsetting 0 [ 270.758335][ T4626] usbtest: probe of 9-1:220.1 failed with error -22 [ 270.798860][ T4626] usb 9-1: USB disconnect, device number 5 [ 271.005062][ T8095] loop4: detected capacity change from 0 to 32768 [ 271.298427][ T8127] netlink: 'syz.8.1095': attribute type 1 has an invalid length. [ 272.104793][ T8150] loop9: detected capacity change from 0 to 256 [ 272.182851][ T8150] exfat: Deprecated parameter 'utf8' [ 272.242237][ T8150] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 272.968879][ T8170] loop2: detected capacity change from 0 to 4096 [ 273.008976][ T8170] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 273.264865][ T8185] xt_hashlimit: max too large, truncated to 1048576 [ 274.001493][ T8198] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1120'. [ 274.146356][ T8174] loop1: detected capacity change from 0 to 40427 [ 274.161196][ T8200] loop4: detected capacity change from 0 to 4096 [ 274.221823][ T8200] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.249685][ T8174] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x3ffff [ 274.279721][ T8200] EXT4-fs (loop4): Test dummy encryption mode enabled [ 274.320061][ T8174] F2FS-fs (loop1): invalid crc value [ 274.382516][ T8200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.410240][ T8174] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.553572][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 274.700725][ T8174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 274.813583][ T8174] syz.1.1114: attempt to access beyond end of device [ 274.813583][ T8174] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 275.018396][ T8174] syz.1.1114: attempt to access beyond end of device [ 275.018396][ T8174] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 275.322742][ T8197] loop8: detected capacity change from 0 to 32768 [ 275.755791][ T8243] sp0: Synchronizing with TNC [ 275.961899][ T8247] tipc: Enabling of bearer <}dp:s> rejected, media not registered [ 276.942432][ T8240] loop9: detected capacity change from 0 to 32768 [ 277.090331][ T8240] ialloc: diAlloc returned -5! [ 277.146416][ T27] audit: type=1326 audit(1760891905.596:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 277.237775][ T27] audit: type=1326 audit(1760891905.636:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 277.260813][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.284767][ T106] ERROR: (device loop9): diUpdatePMap: the iag is outside the map [ 277.284767][ T106] [ 277.315423][ T106] ERROR: (device loop9): remounting filesystem as read-only [ 277.361495][ T8253] loop4: detected capacity change from 0 to 32768 [ 277.414292][ T8253] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1140 (8253) [ 277.499848][ T8253] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 277.543577][ T8253] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 277.590800][ T8253] BTRFS info (device loop4): using free space tree [ 277.820685][ T8253] BTRFS info (device loop4): enabling ssd optimizations [ 277.879812][ T27] audit: type=1800 audit(1760891906.326:34): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1140" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 278.116581][ T7002] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 278.439071][ T8323] loop9: detected capacity change from 0 to 512 [ 278.480827][ T8323] EXT4-fs (loop9): Test dummy encryption mode enabled [ 278.571760][ T8323] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 278.681327][ T8323] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 278.735081][ T8323] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.062312][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 279.544257][ T8315] loop8: detected capacity change from 0 to 32768 [ 279.575899][ T8344] loop9: detected capacity change from 0 to 256 [ 279.649222][ T27] audit: type=1326 audit(1760891908.096:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.1164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd91fd8efc9 code=0x0 [ 280.444880][ T8363] loop9: detected capacity change from 0 to 4096 [ 280.656315][ T8363] ntfs3: loop9: ino=21, "bus" fiemap is not supported for compressed file (cp -r) [ 280.846543][ T6883] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 280.860448][ T6883] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 280.880826][ T4390] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 281.057503][ T8380] device dummy0 entered promiscuous mode [ 281.110782][ T8380] device macsec1 entered promiscuous mode [ 281.114246][ T4390] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 281.150220][ T4390] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 281.195541][ T8380] device dummy0 left promiscuous mode [ 281.200387][ T4390] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.243967][ T4390] usb 9-1: config 0 interface 0 has no altsetting 0 [ 281.283586][ T4390] usb 9-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 281.319107][ T4390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.391665][ T4390] usb 9-1: config 0 descriptor?? [ 281.397447][ T8373] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 281.593125][ T8361] loop4: detected capacity change from 0 to 40427 [ 281.618416][ T8361] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 281.643903][ T8361] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 281.705919][ T8361] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 281.751413][ T8361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 281.845955][ T4390] elecom 0003:056E:010D.0013: item fetching failed at offset 0/3 [ 281.881382][ T4390] elecom: probe of 0003:056E:010D.0013 failed with error -22 [ 281.951170][ T8361] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 281.959018][ T8361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 282.049507][ T4390] usb 9-1: USB disconnect, device number 6 [ 282.485010][ T8407] loop1: detected capacity change from 0 to 4096 [ 282.635854][ T8412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.907839][ T8393] loop9: detected capacity change from 0 to 40427 [ 282.968872][ T8393] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 283.016981][ T8393] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 283.070472][ T8393] F2FS-fs (loop9): invalid crc value [ 283.150873][ T8393] F2FS-fs (loop9): Found nat_bits in checkpoint [ 283.350983][ T8393] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 283.378983][ T8393] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 284.165587][ T8420] loop8: detected capacity change from 0 to 32768 [ 284.276996][ T8418] loop2: detected capacity change from 0 to 40427 [ 284.289065][ T8418] F2FS-fs (loop2): invalid crc value [ 284.329726][ T8420] XFS (loop8): Mounting V5 Filesystem [ 284.340874][ T8418] F2FS-fs (loop2): Found nat_bits in checkpoint [ 284.514694][ T5466] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 284.519793][ T8420] XFS (loop8): Ending clean mount [ 284.550480][ T4346] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 284.586683][ T8420] XFS (loop8): Quotacheck needed: Please wait. [ 284.604176][ T8418] F2FS-fs (loop2): Start checkpoint disabled! [ 284.644585][ T8418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 284.738572][ T8420] XFS (loop8): Quotacheck: Done. [ 284.750495][ T4346] usb 5-1: Using ep0 maxpacket: 16 [ 284.759609][ T4346] usb 5-1: config 28 has an invalid interface number: 169 but max is 0 [ 284.791263][ T5466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.811704][ T4346] usb 5-1: config 28 has no interface number 0 [ 284.811899][ T5466] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 284.830454][ T4346] usb 5-1: config 28 interface 169 has no altsetting 0 [ 284.859318][ T4346] usb 5-1: string descriptor 0 read error: -71 [ 284.889614][ T4346] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 284.931376][ T5466] usb 2-1: string descriptor 0 read error: -22 [ 284.937984][ T5466] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 284.958717][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.988595][ T5466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.015571][ T4346] r8152-cfgselector 5-1: rejected 1 configuration due to insufficient available bus power [ 285.036911][ T5613] XFS (loop8): Unmounting Filesystem [ 285.049909][ T4346] r8152-cfgselector 5-1: no configuration chosen from 1 choice [ 285.078194][ T4372] kworker/u4:7: attempt to access beyond end of device [ 285.078194][ T4372] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 285.085041][ T4346] r8152-cfgselector 5-1: Unknown version 0x0000 [ 285.122354][ T4346] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 285.190472][ T5466] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 285.891603][ T8459] loop9: detected capacity change from 0 to 32768 [ 285.960373][ T5466] usb 2-1: device descriptor read/64, error -71 [ 286.006717][ T8459] XFS (loop9): Mounting V5 Filesystem [ 286.064994][ T8481] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 286.181729][ T8459] XFS (loop9): Ending clean mount [ 286.189441][ T8459] XFS (loop9): Quotacheck needed: Please wait. [ 286.240435][ T5466] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 286.322401][ T27] audit: type=1400 audit(1760891914.776:36): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8486 comm="syz.4.1201" [ 286.346335][ T8459] XFS (loop9): Quotacheck: Done. [ 286.513616][ T5466] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.550694][ T5466] usb 2-1: device firmware changed [ 286.611341][ T5466] usb 2-1: USB disconnect, device number 8 [ 286.683623][ T6883] XFS (loop9): Unmounting Filesystem [ 287.371118][ T8479] loop8: detected capacity change from 0 to 32768 [ 287.399866][ T8479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1198 (8479) [ 287.475896][ T8479] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.548412][ T8479] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 287.634319][ T8479] BTRFS info (device loop8): setting nodatacow, compression disabled [ 287.669071][ T8479] BTRFS info (device loop8): turning on flush-on-commit [ 287.671079][ T8511] sp0: Synchronizing with TNC [ 287.700649][ T4390] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 287.712207][ T8479] BTRFS info (device loop8): trying to use backup root at mount time [ 287.738953][ T8479] BTRFS info (device loop8): turning on async discard [ 287.807541][ T8479] BTRFS info (device loop8): turning off flush-on-commit [ 287.815270][ T8479] BTRFS info (device loop8): using free space tree [ 287.890368][ T4390] usb 3-1: Using ep0 maxpacket: 16 [ 287.944399][ T4390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.950626][ T5466] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 288.001471][ T4390] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 288.071094][ T4390] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 288.100652][ T4390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.129179][ T4390] usb 3-1: config 0 descriptor?? [ 288.142013][ T41] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 288.160349][ T5466] usb 2-1: Using ep0 maxpacket: 32 [ 288.168387][ T5466] usb 2-1: config index 0 descriptor too short (expected 32334, got 36) [ 288.191983][ T8479] BTRFS error (device loop8): failed to load root extent [ 288.210471][ T8479] BTRFS warning (device loop8): try to load backup roots slot 1 [ 288.218557][ T56] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 288.254463][ T5466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.286249][ T8479] BTRFS warning (device loop8): couldn't read tree root [ 288.300853][ T5466] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.320604][ T8479] BTRFS warning (device loop8): try to load backup roots slot 2 [ 288.338992][ T5466] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 288.353805][ T8479] BTRFS error (device loop8): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 288.400407][ T5466] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.415961][ T8479] BTRFS warning (device loop8): couldn't read tree root [ 288.439354][ T5466] usb 2-1: config 0 descriptor?? [ 288.451851][ T8479] BTRFS warning (device loop8): try to load backup roots slot 3 [ 288.500913][ T8479] BTRFS info (device loop8): enabling ssd optimizations [ 288.515539][ T8547] loop9: detected capacity change from 0 to 256 [ 288.535928][ T8479] BTRFS info (device loop8): rebuilding free space tree [ 288.558190][ T4390] logitech 0003:046D:C623.0014: unexpected long global item [ 288.579733][ T4390] logitech 0003:046D:C623.0014: parse failed [ 288.594801][ T8479] BTRFS info (device loop8): checking UUID tree [ 288.622844][ T4390] logitech: probe of 0003:046D:C623.0014 failed with error -22 [ 288.726649][ T8547] FAT-fs (loop9): Directory bread(block 64) failed [ 288.755806][ T8547] FAT-fs (loop9): Directory bread(block 65) failed [ 288.785496][ T4390] usb 3-1: USB disconnect, device number 4 [ 288.816269][ T8547] FAT-fs (loop9): Directory bread(block 66) failed [ 288.845714][ T8547] FAT-fs (loop9): Directory bread(block 67) failed [ 288.884300][ T5466] aquacomputer_d5next 0003:0C70:F00A.0015: unknown main item tag 0x7 [ 288.901750][ T5613] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.915479][ T8547] FAT-fs (loop9): Directory bread(block 68) failed [ 288.932217][ T5466] aquacomputer_d5next 0003:0C70:F00A.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 288.955659][ T8547] FAT-fs (loop9): Directory bread(block 69) failed [ 288.982736][ T8547] FAT-fs (loop9): Directory bread(block 70) failed [ 289.006963][ T8547] FAT-fs (loop9): Directory bread(block 71) failed [ 289.050798][ T8547] FAT-fs (loop9): Directory bread(block 72) failed [ 289.080356][ T8547] FAT-fs (loop9): Directory bread(block 73) failed [ 289.180446][ T7991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop8 scanned by udevd (7991) [ 289.322199][ T8561] tipc: Started in network mode [ 289.340388][ T8561] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 289.413693][ T8561] tipc: Enabling of bearer rejected, failed to enable media [ 289.710917][ T14] usb 2-1: USB disconnect, device number 9 [ 290.211416][ T8581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.289245][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 290.356315][ T8583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1227'. [ 290.860763][ T4390] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 291.055438][ T8565] loop2: detected capacity change from 0 to 40427 [ 291.072383][ T4390] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 291.120352][ T4390] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 291.129682][ T4390] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.141653][ T8565] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 291.148516][ T8565] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 291.205662][ T4390] usb 9-1: config 0 descriptor?? [ 291.227616][ T8565] F2FS-fs (loop2): Found nat_bits in checkpoint [ 291.245616][ T8591] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 291.394324][ T8565] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 291.418751][ T8565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 291.480707][ T8585] loop4: detected capacity change from 0 to 32768 [ 291.542381][ T8585] XFS (loop4): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 291.689422][ T4390] belkin 0003:050D:3201.0016: unknown main item tag 0x0 [ 291.715948][ T4390] belkin 0003:050D:3201.0016: unknown main item tag 0x0 [ 291.747294][ T4390] belkin 0003:050D:3201.0016: unknown main item tag 0x0 [ 291.960061][ T4390] belkin 0003:050D:3201.0016: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.8-1/input0 [ 292.015206][ T4390] usb 9-1: USB disconnect, device number 7 [ 292.176873][ T8626] loop2: detected capacity change from 0 to 64 [ 292.553084][ T8624] fido_id[8624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 292.961326][ T8645] loop4: detected capacity change from 0 to 2048 [ 293.068185][ T8645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 293.071946][ T8654] loop1: detected capacity change from 0 to 256 [ 293.089860][ T8654] exfat: Deprecated parameter 'utf8' [ 293.098581][ T8654] exfat: Deprecated parameter 'namecase' [ 293.104459][ T8654] exfat: Deprecated parameter 'namecase' [ 293.110569][ T8654] exfat: Deprecated parameter 'utf8' [ 293.155403][ T8654] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 293.215055][ T8645] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 9: comm syz.4.1247: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 293.504568][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 293.760525][ T8665] Bluetooth: MGMT ver 1.22 [ 293.809540][ T8623] loop9: detected capacity change from 0 to 32768 [ 293.860779][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 293.947748][ T8623] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 293.973651][ T8623] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 294.156372][ T8623] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 294.334669][ T8623] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 294.366490][ T8681] device macsec1 entered promiscuous mode [ 294.430337][ T8681] device macvlan0 entered promiscuous mode [ 294.475205][ T8681] device macvlan0 left promiscuous mode [ 295.074607][ T8672] loop8: detected capacity change from 0 to 40427 [ 295.168203][ T8672] F2FS-fs (loop8): Found nat_bits in checkpoint [ 295.211361][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 295.350178][ T8672] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 295.423358][ T8672] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=b000b, run fsck to fix. [ 295.565272][ T8675] loop4: detected capacity change from 0 to 32768 [ 295.850756][ T8713] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0) [ 295.914415][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1271'. [ 295.950535][ T8715] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1271'. [ 296.008791][ T8715] netlink: 'syz.8.1271': attribute type 10 has an invalid length. [ 296.390774][ T4272] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 296.497572][ T8726] loop4: detected capacity change from 0 to 4096 [ 296.595841][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.628356][ T4272] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 296.658789][ T4272] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 296.681481][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.731218][ T4272] usb 3-1: config 0 descriptor?? [ 296.794094][ T4272] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 296.815648][ T4272] dvb-usb: bulk message failed: -22 (3/0) [ 296.842419][ T4272] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 296.887095][ T4272] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 296.923286][ T4272] usb 3-1: media controller created [ 296.929814][ T4272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.004504][ T4272] dvb-usb: bulk message failed: -22 (6/0) [ 297.026658][ T4272] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 297.040207][ T8711] loop1: detected capacity change from 0 to 40427 [ 297.065469][ T4272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 297.108103][ T8711] F2FS-fs (loop1): invalid crc value [ 297.156449][ T4272] dvb-usb: schedule remote query interval to 150 msecs. [ 297.167281][ T8711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.183462][ T4272] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.235945][ T4272] usb 3-1: USB disconnect, device number 5 [ 297.365270][ T4272] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.384793][ T8747] loop4: detected capacity change from 0 to 512 [ 297.437311][ T8747] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 297.460129][ T8711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.496309][ T8747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.550536][ T8747] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1280: Block bitmap for bg 0 marked uninitialized [ 297.576359][ T8747] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 297.633770][ T8747] EXT4-fs (loop4): 1 orphan inode deleted [ 297.639791][ T8747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 297.768595][ T8747] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 297.774976][ T8757] loop9: detected capacity change from 0 to 256 [ 297.857508][ T8747] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 297.912081][ T8747] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.1280: Block bitmap for bg 0 marked uninitialized [ 298.120050][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 298.385799][ T8768] loop4: detected capacity change from 0 to 512 [ 298.428979][ T8771] loop1: detected capacity change from 0 to 1024 [ 298.455959][ T8768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 298.667098][ T8768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 298.684382][ T8771] hfsplus: bad catalog entry type [ 298.726313][ T8768] System zones: 0-2, 18-18, 34-34 [ 298.776237][ T8768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 298.787426][ T8778] loop2: detected capacity change from 0 to 512 [ 298.812708][ T8744] loop8: detected capacity change from 0 to 32768 [ 298.848817][ T8768] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.905140][ T8744] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1279 (8744) [ 298.922451][ T41] hfsplus: b-tree write err: -5, ino 4 [ 299.005089][ T8768] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.1286: bad entry in directory: inode out of bounds - offset=24, inode=65527, rec_len=20, size=4096 fake=0 [ 299.048991][ T8744] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 299.103094][ T8744] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 299.127186][ T8778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.139456][ T8744] BTRFS info (device loop8): using free space tree [ 299.150601][ T8778] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.272092][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 299.477366][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 299.626255][ T8805] loop1: detected capacity change from 0 to 512 [ 299.684776][ T8805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.778783][ T8744] BTRFS info (device loop8): enabling ssd optimizations [ 299.982326][ T8805] EXT4-fs (loop1): 1 truncate cleaned up [ 300.022297][ T8805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 300.192180][ T5613] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.197459][ T8805] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.1295: corrupted in-inode xattr [ 300.236789][ T8805] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1733: inode #15: comm syz.1.1295: unable to update i_inline_off [ 300.340415][ T8805] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.1295: corrupted in-inode xattr [ 300.409188][ T4272] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 300.769624][ T4272] usb 3-1: Using ep0 maxpacket: 8 [ 300.864910][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.876613][ T4272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.936869][ T4272] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 300.987097][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.033917][ T4272] usb 3-1: config 0 descriptor?? [ 301.201002][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 301.454110][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1304'. [ 301.480464][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1304'. [ 301.532411][ T4272] cherry 0003:046A:0027.0017: item fetching failed at offset 2/69 [ 301.541074][ T4272] cherry: probe of 0003:046A:0027.0017 failed with error -22 [ 301.545238][ T8840] netlink: 'syz.9.1304': attribute type 12 has an invalid length. [ 301.580191][ T8840] netlink: 'syz.9.1304': attribute type 14 has an invalid length. [ 301.688741][ T8843] loop8: detected capacity change from 0 to 128 [ 301.764326][ T4317] usb 3-1: USB disconnect, device number 6 [ 302.555169][ T7375] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.619153][ T8864] loop8: detected capacity change from 0 to 512 [ 303.035459][ T7375] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 303.044309][ T7375] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 303.068960][ T7375] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 303.116513][ T8864] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 303.122705][ T7375] usb 5-1: config 220 has no interface number 2 [ 303.141637][ T7375] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 303.187400][ T8867] loop2: detected capacity change from 0 to 8192 [ 303.200020][ T7375] usb 5-1: config 220 interface 0 has no altsetting 0 [ 303.254918][ T7375] usb 5-1: config 220 interface 76 has no altsetting 0 [ 303.256254][ T8867] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "noborderacl" for option "block-allocator" [ 303.256254][ T8867] [ 303.280476][ T7375] usb 5-1: config 220 interface 1 has no altsetting 0 [ 303.505513][ T7375] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 303.539661][ T7375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.564529][ T7375] usb 5-1: Product: syz [ 303.569076][ T7375] usb 5-1: Manufacturer: syz [ 303.589268][ T7375] usb 5-1: SerialNumber: syz [ 303.850390][ T4317] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 303.944605][ T7375] usb 5-1: selecting invalid altsetting 0 [ 303.952295][ T7375] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 303.982500][ T7375] usb 5-1: No valid video chain found. [ 304.014045][ T8856] loop1: detected capacity change from 0 to 32768 [ 304.104592][ T8856] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 304.104592][ T8856] [ 304.140729][ T7375] usb 5-1: selecting invalid altsetting 0 [ 304.146815][ T7375] usbtest: probe of 5-1:220.1 failed with error -22 [ 304.206208][ T7375] usb 5-1: USB disconnect, device number 8 [ 304.273082][ T4317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.295009][ T4317] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.358179][ T4317] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.385552][ T4317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.422533][ T4317] usb 10-1: config 0 descriptor?? [ 304.929484][ T4317] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 304.948792][ T4317] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0018/input/input22 [ 305.016841][ T8901] loop4: detected capacity change from 0 to 512 [ 305.117809][ T8901] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.133110][ T8901] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 305.153788][ T8903] loop2: detected capacity change from 0 to 512 [ 305.176137][ T4317] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 305.230860][ T8901] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 305.279235][ T4317] usb 10-1: USB disconnect, device number 5 [ 305.302581][ T8903] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 305.350333][ T8901] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 305.373047][ T8901] System zones: 0-2, 18-18, 34-34 [ 305.487110][ T8901] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1326: couldn't read orphan inode 15 (err -116) [ 305.541388][ T8901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 305.783304][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 305.843247][ T8910] fido_id[8910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 306.175075][ T8927] CUSE: unknown device info "€" [ 306.202730][ T8927] CUSE: unknown device info "" [ 306.226156][ T8927] CUSE: unknown device info "" [ 306.239017][ T8927] CUSE: unknown device info "" [ 306.251815][ T8927] CUSE: zero length info key specified [ 306.580612][ T4317] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 306.646552][ T8939] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 307.000011][ T4317] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.024426][ T8948] device ip6gretap0 entered promiscuous mode [ 307.051482][ T4317] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 307.056753][ T8948] device macsec1 entered promiscuous mode [ 307.070335][ T4317] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 307.094374][ T8948] device ip6gretap0 left promiscuous mode [ 307.109445][ T4272] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 307.129700][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.171410][ T4317] usb 9-1: config 0 descriptor?? [ 307.220243][ T4317] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 307.227181][ T4317] dvb-usb: bulk message failed: -22 (3/0) [ 307.274666][ T4317] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 307.312105][ T4317] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 307.326836][ T4317] usb 9-1: media controller created [ 307.333349][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.373068][ T4317] dvb-usb: bulk message failed: -22 (6/0) [ 307.379033][ T4317] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 307.431267][ T8929] dvb-usb: bulk message failed: -22 (2/0) [ 307.466767][ T4272] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 307.477132][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 307.489146][ T4272] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 307.525749][ T4317] dvb-usb: schedule remote query interval to 150 msecs. [ 307.536124][ T4272] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 307.564895][ T4317] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 307.583665][ T4272] usb 10-1: config 220 has no interface number 2 [ 307.590173][ T4272] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 307.659823][ T4317] usb 9-1: USB disconnect, device number 8 [ 307.684590][ T4272] usb 10-1: config 220 interface 0 has no altsetting 0 [ 307.700118][ T4272] usb 10-1: config 220 interface 76 has no altsetting 0 [ 307.723390][ T4272] usb 10-1: config 220 interface 1 has no altsetting 0 [ 307.769291][ T4317] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 307.882829][ T4272] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 307.892904][ T4272] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.910802][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 307.920471][ T8934] loop4: detected capacity change from 0 to 32768 [ 307.952291][ T4272] usb 10-1: Product: syz [ 307.956881][ T4272] usb 10-1: Manufacturer: syz [ 307.983968][ T4272] usb 10-1: SerialNumber: syz [ 308.112564][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.150996][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.204370][ T126] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 308.245369][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.307424][ T126] usb 3-1: config 0 descriptor?? [ 308.364764][ T4272] usb 10-1: selecting invalid altsetting 0 [ 308.391012][ T4272] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 308.419395][ T4272] usb 10-1: No valid video chain found. [ 308.500653][ T4272] usb 10-1: selecting invalid altsetting 0 [ 308.506652][ T4272] usbtest: probe of 10-1:220.1 failed with error -22 [ 308.555912][ T4272] usb 10-1: USB disconnect, device number 6 [ 308.738179][ T126] hkems 0003:2006:0118.0019: unknown main item tag 0x7 [ 308.755035][ T4317] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 308.759378][ T126] hkems 0003:2006:0118.0019: item fetching failed at offset 6/7 [ 308.790932][ T126] hkems 0003:2006:0118.0019: parse failed [ 308.810403][ T126] hkems: probe of 0003:2006:0118.0019 failed with error -22 [ 309.011041][ T4272] usb 3-1: USB disconnect, device number 7 [ 309.139821][ T8971] netlink: 'syz.9.1347': attribute type 13 has an invalid length. [ 309.142157][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.166956][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.190539][ T4317] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 309.199660][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.242601][ T4317] usb 9-1: config 0 descriptor?? [ 309.256285][ T5466] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 309.700193][ T8980] loop2: detected capacity change from 0 to 1024 [ 309.722101][ T4317] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 309.730972][ T5466] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 309.739545][ T5466] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 309.758254][ T4317] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.001A/input/input24 [ 309.786888][ T5466] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 309.817915][ T5466] usb 5-1: config 220 has no interface number 2 [ 309.847510][ T8983] loop9: detected capacity change from 0 to 256 [ 309.849050][ T5466] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 309.951465][ T5466] usb 5-1: config 220 interface 0 has no altsetting 0 [ 309.958414][ T5466] usb 5-1: config 220 interface 76 has no altsetting 0 [ 309.995909][ T5466] usb 5-1: config 220 interface 1 has no altsetting 0 [ 310.005533][ T8983] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 310.039114][ T4372] hfsplus: b-tree write err: -5, ino 4 [ 310.045107][ T4317] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 310.140864][ T4317] usb 9-1: USB disconnect, device number 9 [ 310.202280][ T5466] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.220306][ T5466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.255868][ T5466] usb 5-1: Product: syz [ 310.260126][ T5466] usb 5-1: Manufacturer: syz [ 310.307140][ T5466] usb 5-1: SerialNumber: syz [ 310.476006][ T8996] loop9: detected capacity change from 0 to 512 [ 310.552148][ T8996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.620695][ T8996] EXT4-fs: Ignoring removed bh option [ 310.681144][ T5466] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 310.699765][ T5466] usb 5-1: No valid video chain found. [ 310.717029][ T5466] usb 5-1: selecting invalid altsetting 0 [ 310.814940][ T5466] usb 5-1: selecting invalid altsetting 0 [ 310.839856][ T8996] EXT4-fs error (device loop9): mb_free_blocks:1810: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 310.841674][ T5466] usbtest: probe of 5-1:220.1 failed with error -22 [ 310.914116][ T8993] fido_id[8993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 310.928799][ T5466] usb 5-1: USB disconnect, device number 9 [ 310.989053][ T8996] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1355: corrupted inode contents [ 311.094044][ T8996] EXT4-fs error (device loop9): ext4_dirty_inode:6125: inode #11: comm syz.9.1355: mark_inode_dirty error [ 311.168995][ T8996] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1355: invalid indirect mapped block 1 (level 1) [ 311.311623][ T8996] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1355: corrupted inode contents [ 311.348699][ T9011] device macsec1 entered promiscuous mode [ 311.362039][ T9011] device ip6gretap0 entered promiscuous mode [ 311.388504][ T8996] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 311.415589][ T9011] device ip6gretap0 left promiscuous mode [ 311.451118][ T8996] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #11: comm syz.9.1355: corrupted inode contents [ 311.487652][ T8996] EXT4-fs error (device loop9): ext4_truncate:4318: inode #11: comm syz.9.1355: mark_inode_dirty error [ 311.535551][ T8996] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 311.560643][ T8996] EXT4-fs (loop9): 1 truncate cleaned up [ 311.581610][ T8996] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 311.705175][ T8996] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 13: comm syz.9.1355: path /128/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 311.929140][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 312.197050][ T9028] Bluetooth: MGMT ver 1.22 [ 312.502953][ T9014] loop2: detected capacity change from 0 to 32768 [ 312.546686][ T9014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1361 (9014) [ 312.594428][ T27] audit: type=1326 audit(1760891941.046:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e398efc9 code=0x7ffc0000 [ 312.630047][ T9014] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.650813][ T4383] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 312.686685][ T9014] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 312.690698][ T27] audit: type=1326 audit(1760891941.076:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e398efc9 code=0x7ffc0000 [ 312.722036][ T9014] BTRFS info (device loop2): setting nodatacow, compression disabled [ 312.751552][ T9014] BTRFS info (device loop2): enabling auto defrag [ 312.758362][ T9014] BTRFS info (device loop2): max_inline at 0 [ 312.796790][ T9014] BTRFS info (device loop2): using free space tree [ 312.841438][ T27] audit: type=1326 audit(1760891941.076:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f68e398efc9 code=0x7ffc0000 [ 312.872175][ T4383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.902186][ T4383] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.960669][ T4383] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 312.991053][ T27] audit: type=1326 audit(1760891941.076:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e398efc9 code=0x7ffc0000 [ 313.039421][ T4383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.125798][ T4383] usb 2-1: config 0 descriptor?? [ 313.186863][ T27] audit: type=1326 audit(1760891941.076:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9035 comm="syz.9.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e398efc9 code=0x7ffc0000 [ 313.533397][ T6918] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.576606][ T4383] konepure 0003:1E7D:2DBE.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 313.812775][ T9085] loop9: detected capacity change from 0 to 512 [ 314.021051][ T9085] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 314.203705][ T9085] EXT4-fs (loop9): 1 truncate cleaned up [ 314.210506][ T4627] usb 2-1: USB disconnect, device number 10 [ 314.229455][ T9085] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 314.514933][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 314.690341][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.902683][ T126] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.920081][ T126] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 314.954659][ T126] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 315.000660][ T126] usb 3-1: config 220 has no interface number 2 [ 315.020880][ T126] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 64 [ 315.057373][ T126] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 315.107982][ T126] usb 3-1: config 220 interface 0 has no altsetting 0 [ 315.132701][ T126] usb 3-1: config 220 interface 76 has no altsetting 0 [ 315.157819][ T126] usb 3-1: config 220 interface 1 has no altsetting 0 [ 315.176653][ T9082] loop8: detected capacity change from 0 to 32768 [ 315.209119][ T126] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 315.235111][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.256101][ T126] usb 3-1: Product: syz [ 315.266245][ T126] usb 3-1: Manufacturer: syz [ 315.298340][ T126] usb 3-1: SerialNumber: syz [ 315.574418][ T126] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 315.600430][ T126] usb 3-1: No valid video chain found. [ 315.630203][ T126] usb 3-1: selecting invalid altsetting 0 [ 315.683800][ T126] usb 3-1: selecting invalid altsetting 0 [ 315.689791][ T126] usbtest: probe of 3-1:220.1 failed with error -22 [ 315.708766][ T9092] loop1: detected capacity change from 0 to 32768 [ 315.737205][ T126] usb 3-1: USB disconnect, device number 8 [ 315.909048][ T9092] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 316.108673][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 317.407966][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414487][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440030][ T9137] [U]  [ 317.767708][ T9104] loop9: detected capacity change from 0 to 40427 [ 317.969229][ T9148] loop1: detected capacity change from 0 to 128 [ 317.995044][ T9118] loop4: detected capacity change from 0 to 32768 [ 318.126716][ T9104] F2FS-fs (loop9): invalid crc value [ 318.163037][ T9118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1383 (9118) [ 318.390619][ T9104] F2FS-fs (loop9): Found nat_bits in checkpoint [ 318.540270][ C1] sched: RT throttling activated [ 318.611264][ T9142] loop8: detected capacity change from 0 to 131072 [ 318.650921][ T9118] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.672978][ T9118] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 318.678584][ T9104] F2FS-fs (loop9): Start checkpoint disabled! [ 318.710544][ T9118] BTRFS info (device loop4): setting nodatacow, compression disabled [ 318.719726][ T9142] F2FS-fs (loop8): Allow to mount readonly mode only [ 318.785362][ T9118] BTRFS info (device loop4): enabling auto defrag [ 318.862711][ T9118] BTRFS info (device loop4): max_inline at 0 [ 318.923780][ T9118] BTRFS info (device loop4): using free space tree [ 319.302487][ T9179] loop2: detected capacity change from 0 to 256 [ 319.329014][ T9179] exfat: Deprecated parameter 'namecase' [ 319.380768][ T9179] exfat: Deprecated parameter 'utf8' [ 319.445278][ T14] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 319.557067][ T9179] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 319.852791][ T9118] BTRFS error (device loop4): open_ctree failed: -22 [ 320.124410][ T14] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.145174][ T14] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.230891][ T14] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.278166][ T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.321145][ T14] usb 9-1: config 0 descriptor?? [ 320.381255][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 320.388308][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 320.486442][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.549680][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.569401][ T14] usb 9-1: media controller created [ 320.614750][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.685774][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 320.714712][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.774598][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 320.800666][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 320.830184][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.973785][ T14] usb 9-1: USB disconnect, device number 10 [ 321.053316][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.124523][ T4317] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 321.492189][ T9213] loop8: detected capacity change from 0 to 512 [ 321.518605][ T9213] EXT4-fs: Ignoring removed bh option [ 321.583312][ T9213] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 321.588494][ T4317] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 321.626767][ T4317] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 321.644948][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 321.685934][ T9219] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1410'. [ 321.710306][ T4317] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 321.790333][ T4317] usb 10-1: config 220 has no interface number 2 [ 321.821052][ T4317] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 321.844272][ T9213] EXT4-fs (loop8): 1 truncate cleaned up [ 321.895662][ T9213] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 321.904789][ T4317] usb 10-1: config 220 interface 0 has no altsetting 0 [ 321.927019][ T4317] usb 10-1: config 220 interface 76 has no altsetting 0 [ 321.940470][ T4317] usb 10-1: config 220 interface 1 has no altsetting 0 [ 322.069648][ T4317] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 322.094703][ T4317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.110352][ T4317] usb 10-1: Product: syz [ 322.114779][ T4317] usb 10-1: Manufacturer: syz [ 322.119507][ T4317] usb 10-1: SerialNumber: syz [ 322.181674][ T5613] EXT4-fs (loop8): unmounting filesystem. [ 322.356989][ T9228] loop2: detected capacity change from 0 to 256 [ 322.406005][ T9229] device macsec1 entered promiscuous mode [ 322.445196][ T9229] device macvlan0 entered promiscuous mode [ 322.543069][ T9229] device macvlan0 left promiscuous mode [ 322.608676][ T9228] FAT-fs (loop2): Directory bread(block 64) failed [ 322.630588][ T4317] usb 10-1: selecting invalid altsetting 0 [ 322.637548][ T4317] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 322.649491][ T9233] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 322.653784][ T9228] FAT-fs (loop2): Directory bread(block 65) failed [ 322.674123][ T4317] usb 10-1: No valid video chain found. [ 322.685079][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 322.685144][ T9233] nbd: illegal input index 65544 [ 322.706685][ T9228] FAT-fs (loop2): Directory bread(block 66) failed [ 322.720580][ T9228] FAT-fs (loop2): Directory bread(block 67) failed [ 322.770411][ T9228] FAT-fs (loop2): Directory bread(block 68) failed [ 322.787636][ T9228] FAT-fs (loop2): Directory bread(block 69) failed [ 322.828123][ T9228] FAT-fs (loop2): Directory bread(block 70) failed [ 322.861173][ T9228] FAT-fs (loop2): Directory bread(block 71) failed [ 322.867884][ T9228] FAT-fs (loop2): Directory bread(block 72) failed [ 322.869320][ T4317] usb 10-1: selecting invalid altsetting 0 [ 322.897197][ T4317] usbtest: probe of 10-1:220.1 failed with error -22 [ 322.971968][ T9228] FAT-fs (loop2): Directory bread(block 73) failed [ 322.990485][ T4317] usb 10-1: USB disconnect, device number 7 [ 323.466484][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 324.517785][ T9277] loop9: detected capacity change from 0 to 64 [ 324.744678][ T9279] loop2: detected capacity change from 0 to 512 [ 324.811763][ T9279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 324.862138][ T9279] EXT4-fs (loop2): 1 truncate cleaned up [ 324.873148][ T9279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 324.925994][ T4317] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 324.956086][ T9249] loop1: detected capacity change from 0 to 40427 [ 325.016859][ T9249] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 325.048225][ T9249] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 325.114124][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 325.257551][ T9249] F2FS-fs (loop1): Found nat_bits in checkpoint [ 325.375938][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 325.501564][ T9249] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 325.508806][ T9249] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 325.574517][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.600308][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.660341][ T4317] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 325.669600][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.712227][ T4317] usb 5-1: config 0 descriptor?? [ 326.169629][ T9305] device dummy0 entered promiscuous mode [ 326.178128][ T9305] device macsec1 entered promiscuous mode [ 326.247074][ T9305] device dummy0 left promiscuous mode [ 326.264452][ T4317] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 326.418127][ T9309] loop2: detected capacity change from 0 to 512 [ 326.507028][ T4317] usb 5-1: USB disconnect, device number 10 [ 326.544388][ T9285] loop9: detected capacity change from 0 to 32768 [ 326.759451][ T9307] fido_id[9307]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 326.829941][ T9285] XFS (loop9): Mounting V5 Filesystem [ 327.262654][ T9285] XFS (loop9): Ending clean mount [ 327.301022][ T9334] "syz.4.1445" (9334) uses obsolete ecb(arc4) skcipher [ 327.339322][ T9285] XFS (loop9): Quotacheck needed: Please wait. [ 327.467112][ T9285] XFS (loop9): Quotacheck: Done. [ 327.822797][ T6883] XFS (loop9): Unmounting Filesystem [ 328.462420][ T9354] loop4: detected capacity change from 0 to 64 [ 329.565572][ T9381] loop4: detected capacity change from 0 to 64 [ 329.708867][ T9381] hfs: unable to locate alternate MDB [ 329.723277][ T9381] hfs: continuing without an alternate MDB [ 330.072913][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 330.109506][ T9396] loop8: detected capacity change from 0 to 256 [ 330.189052][ T9396] exFAT-fs (loop8): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 330.364974][ T27] audit: type=1800 audit(1760891958.816:42): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1468" name="file1" dev="loop8" ino=1048700 res=0 errno=0 [ 330.600434][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 330.644661][ T9375] loop9: detected capacity change from 0 to 32768 [ 330.767937][ T9375] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 331.205022][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1475'. [ 331.251220][ T6883] (syz-executor,6883,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 331.324903][ T6883] ocfs2: Unmounting device (7,9) on (node local) [ 331.596651][ T9427] loop8: detected capacity change from 0 to 256 [ 331.672396][ T9427] exfat: Deprecated parameter 'namecase' [ 331.678227][ T9427] exfat: Deprecated parameter 'utf8' [ 331.824945][ T9427] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 331.978169][ T14] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 332.223857][ T9438] loop2: detected capacity change from 0 to 1024 [ 332.476044][ T14] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.487707][ T9438] hfsplus: bad catalog entry type [ 332.493411][ T14] usb 5-1: config 0 has no interface number 0 [ 332.534276][ T14] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 332.563855][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.602675][ T14] usb 5-1: config 0 descriptor?? [ 332.636238][ T4351] hfsplus: b-tree write err: -5, ino 4 [ 332.693400][ T14] usb 5-1: selecting invalid altsetting 1 [ 332.699386][ T14] dvb_ttusb_budget: ttusb_init_controller: error [ 332.741297][ T14] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 332.838642][ T9426] loop1: detected capacity change from 0 to 32768 [ 333.061406][ T9426] XFS (loop1): Mounting V5 Filesystem [ 333.310371][ T9426] XFS (loop1): Ending clean mount [ 333.376573][ T14] DVB: Unable to find symbol cx22700_attach() [ 333.479795][ T9426] XFS (loop1): Quotacheck needed: Please wait. [ 333.652206][ T9426] XFS (loop1): Quotacheck: Done. [ 333.881128][ T14] DVB: Unable to find symbol tda10046_attach() [ 333.887554][ T14] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 334.002577][ T14] usb 5-1: USB disconnect, device number 11 [ 334.045891][ T4266] XFS (loop1): Unmounting Filesystem [ 334.066403][ T9481] loop8: detected capacity change from 0 to 2048 [ 334.161439][ T27] audit: type=1326 audit(1760891962.616:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9484 comm="syz.2.1497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd91fd8efc9 code=0x0 [ 334.440399][ T9489] loop9: detected capacity change from 0 to 256 [ 334.565750][ T9481] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 334.630334][ T9481] UDF-fs: Scanning with blocksize 512 failed [ 334.739223][ T9481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.820980][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 335.056689][ T9481] overlayfs: upper fs needs to support d_type. [ 335.164717][ T9481] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 335.260720][ T9481] overlayfs: failed to set xattr on upper [ 335.266943][ T9481] overlayfs: ...falling back to index=off,metacopy=off. [ 335.818202][ T9486] loop2: detected capacity change from 0 to 32768 [ 335.912036][ T9486] (syz.2.1497,9486,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.017329][ T9486] (syz.2.1497,9486,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.171499][ T9486] JBD2: Ignoring recovery information on journal [ 336.419578][ T9492] loop4: detected capacity change from 0 to 32768 [ 336.430755][ T9486] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 336.518256][ T9492] [ 336.518256][ T9492] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 336.518256][ T9492] [ 336.597825][ T9492] ERROR: (device loop4): diWrite: ixpxd invalid [ 336.597825][ T9492] [ 336.711185][ T9492] ERROR: (device loop4): txCommit: [ 336.711185][ T9492] [ 336.734600][ T9519] jfs_create: dtSearch returned -17 [ 336.868702][ T9525] loop9: detected capacity change from 0 to 256 [ 337.031637][ T7002] [ 337.031637][ T7002] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 337.031637][ T7002] [ 337.071103][ T7002] [ 337.071103][ T7002] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 337.071103][ T7002] [ 337.127214][ T9527] loop1: detected capacity change from 0 to 1024 [ 337.135550][ T9525] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196) [ 337.249859][ T6918] ocfs2: Unmounting device (7,2) on (node local) [ 337.363134][ T6883] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 196) [ 338.025172][ T9546] loop8: detected capacity change from 0 to 1024 [ 338.218096][ T9552] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1516'. [ 338.367454][ T41] hfsplus: b-tree write err: -5, ino 4 [ 338.397819][ T9539] sctp: failed to load transform for md5: -2 [ 338.823007][ T9569] loop2: detected capacity change from 0 to 64 [ 339.369661][ T9580] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 339.412156][ T9580] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 339.432903][ T9583] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 339.940764][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 340.107553][ T9599] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 340.193161][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 340.212147][ T9562] loop8: detected capacity change from 0 to 32768 [ 340.289006][ T9608] loop4: detected capacity change from 0 to 256 [ 340.415218][ T9562] XFS (loop8): Mounting V5 Filesystem [ 340.571615][ T9608] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000040) [ 340.623673][ T9562] XFS (loop8): Ending clean mount [ 340.628123][ T9608] FAT-fs (loop4): Filesystem has been set read-only [ 340.642782][ T9562] XFS (loop8): Quotacheck needed: Please wait. [ 340.725881][ T9621] loop2: detected capacity change from 0 to 256 [ 340.742661][ T9621] exfat: Deprecated parameter 'utf8' [ 340.748067][ T9608] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000040) [ 340.864519][ T9621] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 340.878503][ T9562] XFS (loop8): Quotacheck: Done. [ 341.077652][ T9621] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 341.389870][ T5613] XFS (loop8): Unmounting Filesystem [ 341.705238][ T9635] loop2: detected capacity change from 0 to 2048 [ 341.776172][ T9635] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.067169][ T9635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.390736][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 342.437890][ T9649] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 342.739710][ T9655] loop9: detected capacity change from 0 to 512 [ 342.767253][ T9628] loop1: detected capacity change from 0 to 32768 [ 342.797809][ T9655] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 342.966387][ T9628] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 343.016355][ T9655] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.1550: invalid indirect mapped block 4294967295 (level 0) [ 343.133317][ T9628] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 343.187780][ T9655] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #16: comm syz.9.1550: invalid indirect mapped block 4294967295 (level 1) [ 343.322782][ T9655] EXT4-fs (loop9): 1 orphan inode deleted [ 343.336769][ T9655] EXT4-fs (loop9): 1 truncate cleaned up [ 343.371029][ T9655] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 343.662269][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 344.138263][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 344.439884][ T9693] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 344.447963][ T9693] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 344.482624][ T9693] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 344.657023][ T9660] loop8: detected capacity change from 0 to 32768 [ 344.876863][ T9660] XFS (loop8): Mounting V5 Filesystem [ 345.171029][ T9660] XFS (loop8): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c. Caller xlog_header_check_mount+0x8e/0xd0 [ 345.225892][ T9660] CPU: 1 PID: 9660 Comm: syz.8.1544 Not tainted syzkaller #0 [ 345.233462][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.244040][ T9660] Call Trace: [ 345.247408][ T9660] [ 345.250384][ T9660] dump_stack_lvl+0x168/0x22e [ 345.255127][ T9660] ? __xfs_printk+0x90/0x90 [ 345.259716][ T9660] ? show_regs_print_info+0x12/0x12 [ 345.264969][ T9660] ? kmem_cache_free+0xf7/0x290 [ 345.269885][ T9660] ? xfs_rw_bdev+0x2d2/0x2f0 [ 345.274631][ T9660] xfs_corruption_error+0x11e/0x170 [ 345.279913][ T9660] ? xlog_header_check_mount+0x8e/0xd0 [ 345.285503][ T9660] xlog_header_check_mount+0xbd/0xd0 [ 345.290945][ T9660] ? xlog_header_check_mount+0x8e/0xd0 [ 345.296649][ T9660] xlog_find_verify_log_record+0x32f/0x550 [ 345.302981][ T9660] xlog_find_zeroed+0x379/0x460 [ 345.308100][ T9660] xlog_find_head+0x60/0x790 [ 345.312872][ T9660] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 345.318842][ T9660] ? lockdep_hardirqs_on+0x94/0x140 [ 345.324143][ T9660] xlog_find_tail+0x3e/0xa00 [ 345.328982][ T9660] ? do_raw_spin_unlock+0x11d/0x230 [ 345.334346][ T9660] ? try_to_wake_up+0x67c/0x1080 [ 345.339617][ T9660] xlog_recover+0x48/0x450 [ 345.344190][ T9660] xfs_log_mount+0x2ba/0x460 [ 345.346067][ T9681] loop2: detected capacity change from 0 to 32768 [ 345.348870][ T9660] xfs_mountfs+0xc42/0x1d10 [ 345.360039][ T9660] ? lockdep_softirqs_off+0x420/0x420 [ 345.365669][ T9660] ? xfs_default_resblks+0x70/0x70 [ 345.370837][ T9660] ? init_timer_key+0x178/0x320 [ 345.375868][ T9660] ? rcu_is_watching+0x11/0xa0 [ 345.380813][ T9660] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 345.387562][ T9660] xfs_fs_fill_super+0x10f0/0x1350 [ 345.392788][ T9660] get_tree_bdev+0x3f1/0x610 [ 345.397523][ T9660] ? xfs_fs_warn_deprecated+0x190/0x190 [ 345.403234][ T9660] vfs_get_tree+0x88/0x270 [ 345.407714][ T9660] do_new_mount+0x24a/0xa40 [ 345.412373][ T9660] __se_sys_mount+0x2d6/0x3c0 [ 345.417209][ T9660] ? __x64_sys_mount+0xc0/0xc0 [ 345.422149][ T9660] ? lockdep_hardirqs_on+0x94/0x140 [ 345.427588][ T9660] ? __x64_sys_mount+0x1c/0xc0 [ 345.432507][ T9660] do_syscall_64+0x4c/0xa0 [ 345.437009][ T9660] ? clear_bhb_loop+0x60/0xb0 [ 345.441948][ T9660] ? clear_bhb_loop+0x60/0xb0 [ 345.446967][ T9660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.453355][ T9660] RIP: 0033:0x7efedef9076a [ 345.458016][ T9660] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.477950][ T9660] RSP: 002b:00007efedfed5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.486447][ T9660] RAX: ffffffffffffffda RBX: 00007efedfed5ef0 RCX: 00007efedef9076a [ 345.494649][ T9660] RDX: 0000200000009600 RSI: 0000200000000000 RDI: 00007efedfed5eb0 [ 345.502774][ T9660] RBP: 0000200000009600 R08: 00007efedfed5ef0 R09: 0000000000a00c40 [ 345.510820][ T9660] R10: 0000000000a00c40 R11: 0000000000000246 R12: 0000200000000000 [ 345.519108][ T9660] R13: 00007efedfed5eb0 R14: 00000000000096b9 R15: 0000200000000040 [ 345.527245][ T9660] [ 345.630337][ T9660] XFS (loop8): Corruption detected. Unmount and run xfs_repair [ 345.638102][ T9660] XFS (loop8): log has mismatched uuid - can't recover [ 345.690346][ T4383] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 345.740574][ T9660] XFS (loop8): empty log check failed [ 345.746049][ T9660] XFS (loop8): log mount/recovery failed: error -117 [ 345.787228][ T9681] XFS (loop2): Mounting V5 Filesystem [ 345.806036][ T9660] XFS (loop8): log mount failed [ 345.832797][ T9730] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.912478][ T4383] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.960426][ T4383] usb 10-1: config 0 has no interface number 0 [ 345.999708][ T4383] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 346.033431][ T4383] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.059933][ T4383] usb 10-1: config 0 descriptor?? [ 346.131656][ T4383] usb 10-1: selecting invalid altsetting 1 [ 346.146402][ T4383] dvb_ttusb_budget: ttusb_init_controller: error [ 346.160319][ T4383] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.228523][ T9681] XFS (loop2): Ending clean mount [ 346.282615][ T9681] XFS (loop2): Quotacheck needed: Please wait. [ 346.417828][ T4383] DVB: Unable to find symbol cx22700_attach() [ 346.555263][ T9681] XFS (loop2): Quotacheck: Done. [ 346.787716][ T4383] DVB: Unable to find symbol tda10046_attach() [ 346.823018][ T4383] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 346.882790][ T4383] usb 10-1: USB disconnect, device number 8 [ 347.042406][ T6918] XFS (loop2): Unmounting Filesystem [ 347.948206][ T9766] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1582'. [ 348.429559][ T9778] binder: 9777:9778 ioctl 541b 0 returned -22 [ 349.507096][ T9806] loop2: detected capacity change from 0 to 512 [ 349.620137][ T9806] EXT4-fs (loop2): Test dummy encryption mode enabled [ 349.634770][ T9811] loop1: detected capacity change from 0 to 64 [ 349.670376][ T9806] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 349.721755][ T9806] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 349.759912][ T9806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 349.951074][ T9806] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 350.040840][ T9806] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 350.206510][ T9824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 350.214157][ T9824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 350.255657][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 350.310428][ T9824] vhci_hcd vhci_hcd.0: Device attached [ 350.404931][ T9825] vhci_hcd: connection closed [ 350.410719][ T41] vhci_hcd: stop threads [ 350.490213][ T41] vhci_hcd: release socket [ 350.513356][ T41] vhci_hcd: disconnect device [ 351.482112][ T9843] loop1: detected capacity change from 0 to 4096 [ 351.720327][ T9850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.819632][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1613'. [ 352.885850][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1613'. [ 352.941472][ T9870] netlink: 'syz.9.1613': attribute type 14 has an invalid length. [ 353.579458][ T9878] loop1: detected capacity change from 0 to 32768 [ 353.683975][ T9857] loop4: detected capacity change from 0 to 32768 [ 353.759476][ T9857] XFS: attr2 mount option is deprecated. [ 353.910817][ T9878] XFS (loop1): Mounting V5 Filesystem [ 353.988115][ T9857] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 354.022954][ T9857] XFS (loop4): Mounting V5 Filesystem [ 354.727348][ T9881] loop8: detected capacity change from 0 to 32768 [ 354.845582][ T9878] XFS (loop1): Internal error head_block >= tail_block || head_cycle != tail_cycle + 1 at line 1649 of file fs/xfs/xfs_log_recover.c. Caller xlog_clear_stale_blocks+0x2d6/0x420 [ 354.864183][ T9878] CPU: 1 PID: 9878 Comm: syz.1.1616 Not tainted syzkaller #0 [ 354.871748][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.882057][ T9878] Call Trace: [ 354.885774][ T9878] [ 354.888939][ T9878] dump_stack_lvl+0x168/0x22e [ 354.894120][ T9878] ? show_regs_print_info+0x12/0x12 [ 354.899596][ T9878] xfs_corruption_error+0x11e/0x170 [ 354.904865][ T9878] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 354.910572][ T9878] xlog_clear_stale_blocks+0x36f/0x420 [ 354.916182][ T9878] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 354.922020][ T9878] xlog_find_tail+0x7ac/0xa00 [ 354.926965][ T9878] xlog_recover+0x48/0x450 [ 354.931781][ T9878] xfs_log_mount+0x2ba/0x460 [ 354.936719][ T9878] xfs_mountfs+0xc42/0x1d10 [ 354.941498][ T9878] ? lockdep_softirqs_off+0x420/0x420 [ 354.947135][ T9878] ? xfs_default_resblks+0x70/0x70 [ 354.952701][ T9878] ? init_timer_key+0x178/0x320 [ 354.958071][ T9878] ? rcu_is_watching+0x11/0xa0 [ 354.962997][ T9878] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 354.969393][ T9878] xfs_fs_fill_super+0x10f0/0x1350 [ 354.974591][ T9878] get_tree_bdev+0x3f1/0x610 [ 354.979380][ T9878] ? xfs_fs_warn_deprecated+0x190/0x190 [ 354.985080][ T9878] vfs_get_tree+0x88/0x270 [ 354.989558][ T9878] do_new_mount+0x24a/0xa40 [ 354.994124][ T9878] __se_sys_mount+0x2d6/0x3c0 [ 354.999044][ T9878] ? __x64_sys_mount+0xc0/0xc0 [ 355.004233][ T9878] ? lockdep_hardirqs_on+0x94/0x140 [ 355.009590][ T9878] ? __x64_sys_mount+0x1c/0xc0 [ 355.014513][ T9878] do_syscall_64+0x4c/0xa0 [ 355.019075][ T9878] ? clear_bhb_loop+0x60/0xb0 [ 355.024151][ T9878] ? clear_bhb_loop+0x60/0xb0 [ 355.028900][ T9878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.034850][ T9878] RIP: 0033:0x7f3a7e99076a [ 355.039665][ T9878] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.059842][ T9878] RSP: 002b:00007f3a7f856e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.068416][ T9878] RAX: ffffffffffffffda RBX: 00007f3a7f856ef0 RCX: 00007f3a7e99076a [ 355.076826][ T9878] RDX: 0000200000009740 RSI: 0000200000009780 RDI: 00007f3a7f856eb0 [ 355.085162][ T9878] RBP: 0000200000009740 R08: 00007f3a7f856ef0 R09: 0000000000000000 [ 355.093277][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000009780 [ 355.101390][ T9878] R13: 00007f3a7f856eb0 R14: 000000000000982d R15: 0000200000000180 [ 355.109614][ T9878] [ 355.113155][ T9878] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 355.121242][ T9878] XFS (loop1): failed to locate log tail [ 355.126920][ T9878] XFS (loop1): log mount/recovery failed: error -117 [ 355.200500][ T9878] XFS (loop1): log mount failed [ 355.317315][ T9857] XFS (loop4): Ending clean mount [ 355.422031][ T9881] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 355.435235][ T9857] XFS (loop4): Quotacheck needed: Please wait. [ 355.690782][ T9857] XFS (loop4): Quotacheck: Done. [ 355.906252][ T7002] XFS (loop4): Unmounting Filesystem [ 355.981252][ T9881] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 356.499721][ T5613] ocfs2: Unmounting device (7,8) on (node local) [ 358.468508][ T9950] loop1: detected capacity change from 0 to 164 [ 358.495804][ T9952] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 358.539709][ T9952] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 358.567870][ T9952] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 358.583302][ T9952] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 358.624966][ T9952] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 358.649543][ T9952] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 358.663889][ T9950] rock: directory entry would overflow storage [ 358.685249][ T9950] rock: sig=0x66, size=4, remaining=3 [ 358.692648][ T9952] comedi comedi3: 8255: I/O port conflict (0x400000a,4) [ 358.737372][ T9950] rock: directory entry would overflow storage [ 358.745931][ T9952] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 358.778818][ T9950] rock: sig=0x66, size=4, remaining=3 [ 358.802293][ T9952] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 359.906960][ T9949] loop8: detected capacity change from 0 to 32768 [ 360.047674][ T27] audit: type=1326 audit(1760891988.496:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.9.1633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e398efc9 code=0x7fc00000 [ 361.320624][T10001] loop8: detected capacity change from 0 to 164 [ 361.548612][T10009] loop4: detected capacity change from 0 to 764 [ 361.863206][ T9981] loop1: detected capacity change from 0 to 32768 [ 361.870097][T10015] netlink: 'syz.8.1647': attribute type 10 has an invalid length. [ 361.959081][ T9981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1636 (9981) [ 362.080547][ T9981] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.104041][ T9981] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 362.144233][ T9981] BTRFS info (device loop1): using free space tree [ 362.187680][T10015] team0: Port device dummy0 added [ 362.261566][T10018] netlink: 'syz.8.1647': attribute type 10 has an invalid length. [ 362.325905][ T4383] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 362.606170][T10018] team0: Port device dummy0 removed [ 362.655472][T10018] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.686129][ T4383] usb 10-1: Using ep0 maxpacket: 16 [ 362.900855][ T9981] BTRFS info (device loop1): enabling ssd optimizations [ 363.140702][ T4383] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 363.150490][ T4383] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.159316][ T4383] usb 10-1: Product: syz [ 363.200337][ T4383] usb 10-1: Manufacturer: syz [ 363.205971][ T4383] usb 10-1: SerialNumber: syz [ 363.291005][ T4383] usb 10-1: config 0 descriptor?? [ 363.401120][ T4383] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 363.464954][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.749314][T10082] loop2: detected capacity change from 0 to 512 [ 364.802774][T10082] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 364.941030][T10087] loop8: detected capacity change from 0 to 256 [ 365.101661][T10082] EXT4-fs (loop2): 1 orphan inode deleted [ 365.107568][T10082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 365.391209][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 365.425157][T10096] loop9: detected capacity change from 0 to 1024 [ 365.866530][T10101] loop4: detected capacity change from 0 to 512 [ 366.023178][T10101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.293274][T10101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.314136][ T4383] usb 10-1: USB disconnect, device number 9 [ 366.338402][T10101] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.539038][T10112] device veth1_macvtap left promiscuous mode [ 366.569560][T10113] device veth1_macvtap entered promiscuous mode [ 366.894611][T10087] FAT-fs (loop8): Directory bread(block 64) failed [ 366.926730][T10087] FAT-fs (loop8): Directory bread(block 65) failed [ 366.933506][T10087] FAT-fs (loop8): Directory bread(block 66) failed [ 366.949271][T10087] FAT-fs (loop8): Directory bread(block 67) failed [ 366.990451][T10087] FAT-fs (loop8): Directory bread(block 68) failed [ 367.039641][T10087] FAT-fs (loop8): Directory bread(block 69) failed [ 367.069831][T10087] FAT-fs (loop8): Directory bread(block 70) failed [ 367.114521][T10087] FAT-fs (loop8): Directory bread(block 71) failed [ 367.145855][T10087] FAT-fs (loop8): Directory bread(block 72) failed [ 367.181264][T10087] FAT-fs (loop8): Directory bread(block 73) failed [ 367.380793][ T7002] EXT4-fs (loop4): unmounting filesystem. [ 369.950402][T10192] loop9: detected capacity change from 0 to 128 [ 370.244641][T10192] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 370.299899][T10192] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.681240][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 370.709733][T10166] loop1: detected capacity change from 0 to 32768 [ 370.735241][T10201] loop2: detected capacity change from 0 to 4096 [ 370.836036][T10201] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 370.836528][T10166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1690 (10166) [ 370.974532][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 371.037960][T10166] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.070359][T10166] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 371.079176][T10166] BTRFS info (device loop1): using free space tree [ 371.464441][T10190] loop4: detected capacity change from 0 to 32768 [ 371.794285][T10196] loop8: detected capacity change from 0 to 32768 [ 371.840395][T10166] BTRFS info (device loop1): enabling ssd optimizations [ 372.053003][T10196] XFS (loop8): Mounting V5 Filesystem [ 372.313780][ T4266] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 373.670899][T10249] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2950 [ 373.731078][T10196] XFS (loop8): Ending clean mount [ 373.884067][T10196] XFS (loop8): Quotacheck needed: Please wait. [ 374.084427][T10239] loop9: detected capacity change from 0 to 32768 [ 374.310443][T10196] XFS (loop8): Quotacheck: Done. [ 374.408325][T10244] loop4: detected capacity change from 0 to 32768 [ 374.602656][ T5613] XFS (loop8): Unmounting Filesystem [ 374.949705][T10244] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 375.303154][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 375.429472][T10244] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 375.639306][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 375.816835][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.970183][ T14] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 375.979658][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 376.002623][ T14] usb 2-1: SerialNumber: syz [ 376.085546][ T14] usb 2-1: config 0 descriptor?? [ 376.110814][ T7002] ocfs2: Unmounting device (7,4) on (node local) [ 376.185016][ T14] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 376.233924][ T14] usb 2-1: No valid video chain found. [ 376.494548][ T4383] usb 2-1: USB disconnect, device number 11 [ 377.260946][T10299] loop4: detected capacity change from 0 to 16 [ 377.356185][T10299] erofs: (device loop4): mounted with root inode @ nid 36. [ 378.016274][T10280] loop2: detected capacity change from 0 to 40427 [ 378.173699][T10280] F2FS-fs (loop2): invalid crc value [ 378.364749][T10280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 378.560359][T10280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 378.742399][T10298] loop1: detected capacity change from 0 to 32768 [ 378.840759][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847587][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.883634][T10333] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 381.294063][T10354] loop1: detected capacity change from 0 to 8192 [ 381.417825][ T951] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 381.464844][T10354] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 381.585473][T10354] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 381.673020][T10354] REISERFS (device loop1): using ordered data mode [ 381.679788][T10354] reiserfs: using flush barriers [ 381.715833][ T951] usb 9-1: Using ep0 maxpacket: 32 [ 381.730754][T10354] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 381.790002][T10354] REISERFS (device loop1): checking transaction log (loop1) [ 381.798497][T10363] vivid-000: disconnect [ 381.821893][T10362] vivid-000: reconnect [ 381.848180][ T951] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.859742][ T951] usb 9-1: config 0 interface 0 has no altsetting 0 [ 381.878158][T10365] loop9: detected capacity change from 0 to 1024 [ 381.900375][ T951] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 381.940302][ T951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.008070][ T951] usb 9-1: config 0 descriptor?? [ 382.352683][T10354] REISERFS (device loop1): Using tea hash to sort names [ 382.450197][T10365] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 382.459220][T10365] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.466579][T10354] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 382.575332][ T951] usbhid 9-1:0.0: can't add hid device: -71 [ 382.581911][ T951] usbhid: probe of 9-1:0.0 failed with error -71 [ 382.651820][ T951] usb 9-1: USB disconnect, device number 11 [ 382.821529][T10365] EXT4-fs error (device loop9): ext4_free_blocks:6205: comm syz.9.1739: Freeing blocks not in datazone - block = 0, count = 16 [ 382.869013][T10349] loop4: detected capacity change from 0 to 40427 [ 382.958326][T10349] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 383.017916][T10349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 383.144483][T10349] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 383.271423][T10349] F2FS-fs (loop4): invalid crc value [ 383.285930][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 383.337820][T10379] loop2: detected capacity change from 0 to 4096 [ 383.402997][T10349] F2FS-fs (loop4): Found nat_bits in checkpoint [ 383.575955][T10349] F2FS-fs (loop4): Start checkpoint disabled! [ 383.713046][ T4331] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 383.822620][T10349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 383.829842][T10349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 384.403622][T10398] loop9: detected capacity change from 0 to 256 [ 384.444984][ T4331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.466375][ T4331] usb 9-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 384.506972][ T4331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.582868][ T4331] usb 9-1: config 0 descriptor?? [ 385.186970][ T4331] hid (null): unknown global tag 0xd [ 385.211145][ T4331] itetech 0003:06CB:73F4.001D: ignoring exceeding usage max [ 385.252605][ T4331] itetech 0003:06CB:73F4.001D: unknown global tag 0xd [ 385.275476][ T4331] itetech 0003:06CB:73F4.001D: item 0 2 1 13 parsing failed [ 385.283906][ T4331] itetech: probe of 0003:06CB:73F4.001D failed with error -22 [ 385.466025][ T4383] usb 9-1: USB disconnect, device number 12 [ 386.238988][ T951] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 386.322869][T10398] FAT-fs (loop9): Directory bread(block 64) failed [ 386.329751][T10398] FAT-fs (loop9): Directory bread(block 65) failed [ 386.381793][T10398] FAT-fs (loop9): Directory bread(block 66) failed [ 386.428578][T10398] FAT-fs (loop9): Directory bread(block 67) failed [ 386.442631][T10405] loop1: detected capacity change from 0 to 32768 [ 386.473333][T10398] FAT-fs (loop9): Directory bread(block 68) failed [ 386.479981][T10398] FAT-fs (loop9): Directory bread(block 69) failed [ 386.547399][T10398] FAT-fs (loop9): Directory bread(block 70) failed [ 386.598622][T10398] FAT-fs (loop9): Directory bread(block 71) failed [ 386.621589][T10398] FAT-fs (loop9): Directory bread(block 72) failed [ 386.646846][T10398] FAT-fs (loop9): Directory bread(block 73) failed [ 386.725084][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.742858][ T951] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 386.781304][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.841797][ T951] usb 3-1: config 0 descriptor?? [ 386.922743][T10405] XFS (loop1): Mounting V5 Filesystem [ 387.339773][T10446] loop8: detected capacity change from 0 to 64 [ 387.392518][ T951] wacom 0003:056A:00C6.001E: unbalanced collection at end of report description [ 387.430794][ T951] wacom 0003:056A:00C6.001E: parse failed [ 387.446694][ T951] wacom: probe of 0003:056A:00C6.001E failed with error -22 [ 387.623074][ T951] usb 3-1: USB disconnect, device number 9 [ 387.946021][T10453] mkiss: ax0: crc mode is auto. [ 388.308880][ T4345] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 388.351098][T10405] XFS (loop1): Ending clean mount [ 388.701097][ T4266] XFS (loop1): Unmounting Filesystem [ 388.716985][ T4345] usb 10-1: Using ep0 maxpacket: 32 [ 388.873346][ T4345] usb 10-1: config 0 has an invalid interface number: 66 but max is 0 [ 388.890290][ T4345] usb 10-1: config 0 has no interface number 0 [ 389.021924][ T4345] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 389.031500][ T4345] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.039965][ T4345] usb 10-1: Product: syz [ 389.066815][ T4345] usb 10-1: Manufacturer: syz [ 389.098612][ T4345] usb 10-1: SerialNumber: syz [ 389.148052][ T4345] usb 10-1: config 0 descriptor?? [ 389.185107][ T4345] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 389.192949][ T4345] dvb-usb: bulk message failed: -22 (2/0) [ 389.238708][ T4345] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.292209][ T4345] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 389.324880][ T4345] usb 10-1: media controller created [ 389.387745][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.396834][T10454] cxusb: i2c wr: len=80 is too big! [ 389.396834][T10454] [ 389.521330][ T4345] cxusb: set interface failed [ 389.526193][ T4345] dvb-usb: bulk message failed: -22 (1/0) [ 390.027958][ T4345] DVB: Unable to find symbol lgdt330x_attach() [ 390.040286][ T4345] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 390.258866][ T5466] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 390.497627][T10491] loop9: detected capacity change from 0 to 128 [ 390.537098][ T4345] rc_core: IR keymap rc-dvico-portable not found [ 390.549055][ T4345] Registered IR keymap rc-empty [ 390.562150][T10469] loop8: detected capacity change from 0 to 32768 [ 390.589544][ T4345] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 390.631517][ T4345] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input26 [ 390.668103][ T4345] dvb-usb: schedule remote query interval to 100 msecs. [ 390.685828][ T4345] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 390.738904][ T4345] usb 10-1: USB disconnect, device number 10 [ 390.791861][ T5466] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 390.801140][ T5466] usb 3-1: config 0 has no interface number 0 [ 390.813508][ T5466] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.844567][T10491] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 390.864880][ T5466] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.881472][ T4345] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 390.901813][ T5466] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 390.921463][T10469] XFS (loop8): Mounting V5 Filesystem [ 390.925113][ T5466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.971160][ T5466] usb 3-1: config 0 descriptor?? [ 391.179238][T10491] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.486054][ T5466] uclogic 0003:5543:0522.001F: No inputs registered, leaving [ 391.545519][ T5466] uclogic 0003:5543:0522.001F: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input20 [ 391.754403][ T5466] usb 3-1: USB disconnect, device number 10 [ 392.073501][T10511] fido_id[10511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 392.356296][T10469] XFS (loop8): Ending clean mount [ 392.577530][T10523] loop9: detected capacity change from 0 to 64 [ 392.619306][ T5613] XFS (loop8): Unmounting Filesystem [ 393.159796][T10530] hfs: request for non-existent node 196608 in B*Tree [ 393.239026][T10530] hfs: request for non-existent node 196608 in B*Tree [ 393.586019][T10531] loop1: detected capacity change from 0 to 8192 [ 393.704461][T10531] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 393.751971][T10531] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 393.794911][T10531] REISERFS (device loop1): using journaled data mode [ 393.824862][T10531] reiserfs: using flush barriers [ 393.930364][T10531] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 393.992002][T10531] REISERFS (device loop1): checking transaction log (loop1) [ 394.171825][T10531] REISERFS (device loop1): Using r5 hash to sort names [ 394.182326][T10531] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 394.212033][T10531] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 394.817748][T10555] loop2: detected capacity change from 0 to 32768 [ 394.859771][T10555] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 394.868603][T10555] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 394.924323][T10559] nbd: must specify at least one socket [ 395.171472][T10555] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 395.171472][T10555] inode = 1 34 [ 395.171472][T10555] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 395.190294][T10555] gfs2: fsid=syz:syz.0: G: s:SH n:2/22 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 395.199573][T10555] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 395.209637][T10555] gfs2: fsid=syz:syz.0: I: n:1/34 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 395.218586][T10555] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 395.233572][T10555] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 395.242679][T10555] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 395.249350][T10555] gfs2: fsid=syz:syz.0: File system withdrawn [ 395.256031][T10555] CPU: 1 PID: 10555 Comm: syz.2.1791 Not tainted syzkaller #0 [ 395.263555][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.273744][T10555] Call Trace: [ 395.277160][T10555] [ 395.280228][T10555] dump_stack_lvl+0x168/0x22e [ 395.284960][T10555] ? kobject_uevent_env+0x35f/0x8a0 [ 395.290331][T10555] ? show_regs_print_info+0x12/0x12 [ 395.295591][T10555] ? load_image+0x3b0/0x3b0 [ 395.300463][T10555] ? kobject_uevent_env+0x35f/0x8a0 [ 395.305747][T10555] gfs2_withdraw+0x143f/0x1780 [ 395.310684][T10555] ? gfs2_lm+0x220/0x220 [ 395.315079][T10555] ? make_kgid+0x1aa/0x640 [ 395.319566][T10555] ? from_kuid_munged+0x690/0x690 [ 395.324642][T10555] ? gfs2_consist_inode_i+0xf1/0x110 [ 395.330236][T10555] gfs2_inode_refresh+0xb5e/0xfc0 [ 395.335363][T10555] ? gfs2_inode_metasync+0xf0/0xf0 [ 395.340553][T10555] ? gfs2_glock_nq+0xcf0/0x14e0 [ 395.345703][T10555] gfs2_instantiate+0x15e/0x210 [ 395.350616][T10555] gfs2_glock_wait+0x1d0/0x2a0 [ 395.355451][T10555] init_journal+0xc77/0x2300 [ 395.360235][T10555] ? format_decode+0xb3b/0x1330 [ 395.365234][T10555] ? init_inodes+0xdb/0x320 [ 395.369903][T10555] ? _compound_head+0x120/0x120 [ 395.374985][T10555] ? vsnprintf+0x1905/0x1a00 [ 395.380249][T10555] ? snprintf+0xd7/0x120 [ 395.384659][T10555] ? init_inodes+0xdb/0x320 [ 395.389362][T10555] ? vscnprintf+0x80/0x80 [ 395.393918][T10555] ? gfs2_glock_nq_num+0x17f/0x1c0 [ 395.399200][T10555] init_inodes+0xdb/0x320 [ 395.403577][T10555] gfs2_fill_super+0x1718/0x1f80 [ 395.408647][T10555] ? gfs2_reconfigure+0xcd0/0xcd0 [ 395.413800][T10555] ? init_locking+0xb8/0x200 [ 395.418474][T10555] ? sb_set_blocksize+0xa5/0xe0 [ 395.423370][T10555] get_tree_bdev+0x3f1/0x610 [ 395.428016][T10555] ? gfs2_reconfigure+0xcd0/0xcd0 [ 395.433293][T10555] gfs2_get_tree+0x4d/0x1e0 [ 395.438038][T10555] vfs_get_tree+0x88/0x270 [ 395.442587][T10555] do_new_mount+0x24a/0xa40 [ 395.447307][T10555] __se_sys_mount+0x2d6/0x3c0 [ 395.452107][T10555] ? __x64_sys_mount+0xc0/0xc0 [ 395.456908][T10555] ? lockdep_hardirqs_on+0x94/0x140 [ 395.462396][T10555] ? __x64_sys_mount+0x1c/0xc0 [ 395.467282][T10555] do_syscall_64+0x4c/0xa0 [ 395.471843][T10555] ? clear_bhb_loop+0x60/0xb0 [ 395.476663][T10555] ? clear_bhb_loop+0x60/0xb0 [ 395.481718][T10555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.487812][T10555] RIP: 0033:0x7fd91fd9076a [ 395.492336][T10555] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.512675][T10555] RSP: 002b:00007fd920c6ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.521140][T10555] RAX: ffffffffffffffda RBX: 00007fd920c6aef0 RCX: 00007fd91fd9076a [ 395.529398][T10555] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007fd920c6aeb0 [ 395.537739][T10555] RBP: 000020000001f680 R08: 00007fd920c6aef0 R09: 0000000000800894 [ 395.545909][T10555] R10: 0000000000800894 R11: 0000000000000246 R12: 0000200000000040 [ 395.554098][T10555] R13: 00007fd920c6aeb0 R14: 000000000001f7c8 R15: 00002000000001c0 [ 395.562383][T10555] [ 395.567469][T10555] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 395.923281][T10562] loop9: detected capacity change from 0 to 4096 [ 396.161892][T10562] ntfs3: loop9: ino=3, Correct links count -> 2. [ 396.946240][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'. [ 396.970556][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1800'. [ 397.779249][ T4331] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 398.131314][ T4331] usb 2-1: Using ep0 maxpacket: 32 [ 398.259939][ T4331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.276974][ T4331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.336066][ T4331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.380296][ T4331] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 398.420263][ T4331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.481415][ T4331] usb 2-1: config 0 descriptor?? [ 398.617991][T10608] loop4: detected capacity change from 0 to 2048 [ 398.969424][T10608] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 398.981859][ T27] audit: type=1326 audit(1760892027.436:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10612 comm="syz.9.1810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68e398efc9 code=0x0 [ 399.014942][ T4331] wacom 0003:056A:0057.0020: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.1-1/input0 [ 399.264497][ T4331] usb 2-1: USB disconnect, device number 12 [ 399.320383][T10608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.612270][ T27] audit: type=1800 audit(1760892028.066:46): pid=10608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1807" name="file0" dev="loop4" ino=1313 res=0 errno=0 [ 399.652677][T10620] fido_id[10620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 399.804578][T10637] loop8: detected capacity change from 0 to 4096 [ 399.952274][T10637] NILFS (loop8): invalid segment: Checksum error in segment payload [ 399.970335][T10637] NILFS (loop8): trying rollback from an earlier position [ 400.082740][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1813'. [ 400.140413][T10641] delete_channel: no stack [ 400.360140][T10637] NILFS (loop8): recovery complete [ 400.412784][T10648] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.890346][ T4346] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 401.080445][ T4346] usb 2-1: Using ep0 maxpacket: 8 [ 401.104114][ T4346] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 401.130341][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.138641][ T4346] usb 2-1: Product: syz [ 401.166884][ T4346] usb 2-1: Manufacturer: syz [ 401.177032][ T4346] usb 2-1: SerialNumber: syz [ 401.208428][ T4346] usb 2-1: config 0 descriptor?? [ 401.367866][T10671] loop8: detected capacity change from 0 to 512 [ 401.456034][ T4346] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 401.473288][T10671] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 401.498079][T10671] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 401.512168][T10671] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1824: Corrupt directory, running e2fsck is recommended [ 401.583894][T10671] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 401.604655][T10640] loop4: detected capacity change from 0 to 32768 [ 401.620594][T10671] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2196: inode #15: comm syz.8.1824: corrupted in-inode xattr [ 401.655724][T10671] EXT4-fs (loop8): Remounting filesystem read-only [ 401.686884][T10640] (syz.4.1812,10640,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 401.706949][T10671] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1824: couldn't read orphan inode 15 (err -117) [ 401.745075][T10640] (syz.4.1812,10640,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 401.761422][T10671] EXT4-fs (loop8): Remounting filesystem read-only [ 401.777213][T10671] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 401.870074][ T4346] usb write operation failed. (-71) [ 401.870246][T10640] JBD2: Ignoring recovery information on journal [ 401.889800][ T4346] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.913921][T10671] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 401.914131][ T4346] dvbdev: DVB: registering new adapter (Terratec H7) [ 401.935537][ T4346] usb 2-1: media controller created [ 401.943218][ T4346] usb read operation failed. (-71) [ 401.963459][ T4346] usb write operation failed. (-71) [ 401.980748][ T4346] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 401.998819][ T4346] usb 2-1: USB disconnect, device number 13 [ 402.020955][T10671] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 402.098767][T10671] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1824: Corrupt directory, running e2fsck is recommended [ 402.170919][T10671] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.1824: path /261/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 402.192893][T10640] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 402.245004][T10671] EXT4-fs (loop8): Remounting filesystem read-only [ 402.384158][ T5613] EXT4-fs (loop8): unmounting filesystem. [ 402.534023][T10695] loop9: detected capacity change from 0 to 128 [ 402.647578][ T7002] ocfs2: Unmounting device (7,4) on (node local) [ 402.698648][T10695] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 402.801333][T10695] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.091872][T10689] loop2: detected capacity change from 0 to 32768 [ 403.105351][ T6883] EXT4-fs (loop9): unmounting filesystem. [ 403.168590][T10689] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1829 (10689) [ 403.275272][T10689] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.332579][T10689] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 403.398712][T10689] BTRFS info (device loop2): setting nodatacow, compression disabled [ 403.496509][T10689] BTRFS info (device loop2): turning on flush-on-commit [ 403.526531][T10689] BTRFS info (device loop2): enabling auto defrag [ 403.575105][T10689] BTRFS info (device loop2): trying to use backup root at mount time [ 403.624419][T10689] BTRFS info (device loop2): turning on async discard [ 403.663540][T10689] BTRFS info (device loop2): using free space tree [ 403.729677][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 404.007183][ T4351] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 404.082521][T10745] netlink: 'syz.9.1844': attribute type 1 has an invalid length. [ 404.105545][T10689] BTRFS error (device loop2): failed to load root extent [ 404.134077][T10689] BTRFS warning (device loop2): try to load backup roots slot 1 [ 404.171150][ T4351] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 404.219776][T10689] BTRFS warning (device loop2): couldn't read tree root [ 404.243676][T10689] BTRFS warning (device loop2): try to load backup roots slot 2 [ 404.300633][T10689] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 404.347301][T10689] BTRFS warning (device loop2): couldn't read tree root [ 404.393185][T10689] BTRFS warning (device loop2): try to load backup roots slot 3 [ 404.486207][T10689] BTRFS info (device loop2): enabling ssd optimizations [ 404.513671][T10689] BTRFS info (device loop2): rebuilding free space tree [ 404.515051][T10760] loop1: detected capacity change from 0 to 512 [ 404.610193][T10689] BTRFS info (device loop2): checking UUID tree [ 404.698401][T10760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 404.734720][T10760] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.056736][ T6918] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 405.092951][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 405.630403][ T4346] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 405.843446][ T4346] usb 5-1: Using ep0 maxpacket: 32 [ 405.858662][ T4346] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 405.923530][ T4346] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 405.970317][ T4346] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 405.978580][ T4346] usb 5-1: Product: syz [ 406.029631][ T4346] usb 5-1: Manufacturer: syz [ 406.037353][ T4346] usb 5-1: SerialNumber: syz [ 406.075043][ T4346] usb 5-1: config 0 descriptor?? [ 406.108211][T10785] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 406.316903][T10796] sg_read: process 531 (syz.9.1861) changed security contexts after opening file descriptor, this is not allowed. [ 406.376080][ T126] usb 5-1: USB disconnect, device number 12 [ 406.399175][T10799] loop2: detected capacity change from 0 to 512 [ 406.455919][T10799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.537789][T10799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 406.565106][T10799] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.600688][T10808] tmpfs: Bad value for 'mode' [ 406.807368][T10784] loop1: detected capacity change from 0 to 32768 [ 406.886037][ T6918] EXT4-fs (loop2): unmounting filesystem. [ 406.929935][T10784] XFS (loop1): Mounting V5 Filesystem [ 407.209292][T10784] XFS (loop1): Ending clean mount [ 407.288090][T10784] XFS (loop1): Quotacheck needed: Please wait. [ 407.412717][T10784] XFS (loop1): Quotacheck: Done. [ 407.603025][ T4266] XFS (loop1): Unmounting Filesystem [ 408.207108][T10860] loop4: detected capacity change from 0 to 16 [ 408.279845][T10860] erofs: (device loop4): mounted with root inode @ nid 36. [ 408.338828][T10860] syz.4.1878: attempt to access beyond end of device [ 408.338828][T10860] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 408.381890][T10860] syz.4.1878: attempt to access beyond end of device [ 408.381890][T10860] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 408.408397][T10865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 408.634112][T10871] loop1: detected capacity change from 0 to 164 [ 409.801607][T10904] xt_socket: unknown flags 0x8 [ 409.965740][T10874] loop4: detected capacity change from 0 to 32768 [ 410.018132][T10907] loop8: detected capacity change from 0 to 256 [ 410.124253][T10874] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 410.204312][T10907] FAT-fs (loop8): Directory bread(block 64) failed [ 410.233937][T10875] loop2: detected capacity change from 0 to 32768 [ 410.271300][T10907] FAT-fs (loop8): Directory bread(block 65) failed [ 410.309781][T10907] FAT-fs (loop8): Directory bread(block 66) failed [ 410.330754][T10907] FAT-fs (loop8): Directory bread(block 67) failed [ 410.346376][T10907] FAT-fs (loop8): Directory bread(block 68) failed [ 410.370035][T10907] FAT-fs (loop8): Directory bread(block 69) failed [ 410.379308][T10874] (syz.4.1882,10874,0):ocfs2_verify_group_and_input:427 ERROR: add group's clusters overflow. [ 410.420731][T10874] (syz.4.1882,10874,0):ocfs2_group_add:503 ERROR: status = -22 [ 410.476047][T10907] FAT-fs (loop8): Directory bread(block 70) failed [ 410.508707][T10875] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 410.517949][T10907] FAT-fs (loop8): Directory bread(block 71) failed [ 410.531181][T10875] XFS (loop2): Mounting V5 Filesystem [ 410.547510][T10907] FAT-fs (loop8): Directory bread(block 72) failed [ 410.576543][T10907] FAT-fs (loop8): Directory bread(block 73) failed [ 410.581836][T10927] bridge0: port 3(veth1_to_bridge) entered blocking state [ 410.591203][T10927] bridge0: port 3(veth1_to_bridge) entered disabled state [ 410.601422][T10927] device veth1_to_bridge entered promiscuous mode [ 410.608173][T10927] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.629831][ T7002] ocfs2: Unmounting device (7,4) on (node local) [ 410.712277][T10875] XFS (loop2): Ending clean mount [ 410.730921][T10927] bridge0: port 3(veth1_to_bridge) entered blocking state [ 410.739114][T10927] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 410.772559][T10875] XFS (loop2): Quotacheck needed: Please wait. [ 410.910970][T10907] syz.8.1895: attempt to access beyond end of device [ 410.910970][T10907] loop8: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 410.980805][T10875] XFS (loop2): Quotacheck: Done. [ 411.020970][T10907] syz.8.1895: attempt to access beyond end of device [ 411.020970][T10907] loop8: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 411.104231][ T27] audit: type=1800 audit(1760892039.556:47): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1895" name="memory.events" dev="loop8" ino=1048733 res=0 errno=0 [ 411.283827][ T6918] XFS (loop2): Unmounting Filesystem [ 411.760489][ T126] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 411.780648][ T4390] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 411.860514][ T5466] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 411.952191][ T126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 411.963209][ T126] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 411.973385][ T126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 411.983799][ T4390] usb 2-1: Using ep0 maxpacket: 32 [ 411.989460][ T126] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 412.002782][ T4390] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.017019][ T126] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 412.028429][ T126] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.041811][ T4390] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.044697][ T5466] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 412.055996][ T4390] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.064794][ T5466] usb 5-1: config 0 interface 0 has no altsetting 0 [ 412.076866][ T126] usb 9-1: Product: syz [ 412.082411][ T126] usb 9-1: Manufacturer: syz [ 412.087066][ T126] usb 9-1: SerialNumber: syz [ 412.090353][ T14] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 412.092287][ T4390] usb 2-1: Product: syz [ 412.105662][ T4390] usb 2-1: Manufacturer: syz [ 412.111719][ T126] usb 9-1: config 0 descriptor?? [ 412.114057][ T5466] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 412.118926][ T4390] usb 2-1: SerialNumber: syz [ 412.133520][ T126] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 412.136330][ T5466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.168946][ T4390] usb 2-1: config 0 descriptor?? [ 412.177872][T10950] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 412.182476][ T5466] usb 5-1: config 0 descriptor?? [ 412.303869][ T14] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 412.312999][ T14] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.331020][ T14] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 412.341182][ T14] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 412.350831][ T14] usb 10-1: Manufacturer: syz [ 412.358877][ T14] usb 10-1: config 0 descriptor?? [ 412.402990][ T126] scsi host1: usb-storage 9-1:0.0 [ 412.497788][ T4346] usb 2-1: USB disconnect, device number 14 [ 412.609022][ T126] usb 9-1: USB disconnect, device number 13 [ 412.643945][ T5466] nintendo 0003:057E:2009.0021: unbalanced delimiter at end of report description [ 412.670962][ T5466] nintendo 0003:057E:2009.0021: HID parse failed [ 412.710480][ T14] rc_core: IR keymap rc-hauppauge not found [ 412.716875][ T14] Registered IR keymap rc-empty [ 412.736476][ T14] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 412.772126][ T14] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input30 [ 412.804866][ T5466] nintendo 0003:057E:2009.0021: probe - fail = -22 [ 412.819851][ T5466] nintendo: probe of 0003:057E:2009.0021 failed with error -22 [ 412.869069][ T5466] usb 5-1: USB disconnect, device number 13 [ 413.047287][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1904'. [ 413.059489][T10983] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1904'. [ 413.085013][T10983] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 413.191587][ T5466] usb 10-1: USB disconnect, device number 11 [ 413.358406][T10989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1912'. [ 413.402784][T10989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1912'. [ 413.754093][T11005] syz.2.1918 uses obsolete (PF_INET,SOCK_PACKET) [ 413.767761][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1919'. [ 414.059282][T10986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.104977][T10986] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 414.187469][T10986] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 414.226643][T10986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.294091][T10986] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 414.335890][T10986] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 414.386726][T10986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.408085][T10986] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 414.435479][T10986] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 414.468601][T10986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.514565][T10986] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 414.549056][T10986] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 414.580463][T10986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.604262][T10986] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 414.651031][T10986] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 414.944688][ T27] audit: type=1326 audit(1760892043.396:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 415.073005][ T27] audit: type=1326 audit(1760892043.396:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 415.200511][ T27] audit: type=1326 audit(1760892043.426:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 415.277551][T11042] loop2: detected capacity change from 0 to 8192 [ 415.300080][ T27] audit: type=1326 audit(1760892043.426:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 415.362744][T11057] loop4: detected capacity change from 0 to 1764 [ 415.366395][T11042] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 415.383220][ T4275] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.390908][T11042] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 415.437508][ T4275] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 415.437637][T11042] REISERFS (device loop2): using ordered data mode [ 415.455854][T11060] sp0: Synchronizing with TNC [ 415.463263][ T27] audit: type=1326 audit(1760892043.426:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11044 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a7e98efc9 code=0x7ffc0000 [ 415.493879][T11042] reiserfs: using flush barriers [ 415.504803][T11042] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 415.525645][T11042] REISERFS (device loop2): checking transaction log (loop2) [ 415.539529][T11042] REISERFS (device loop2): Using r5 hash to sort names [ 415.560416][ T4346] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 415.586645][T11042] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 415.781344][ T4346] usb 10-1: Using ep0 maxpacket: 16 [ 415.796067][ T4346] usb 10-1: config 0 has no interfaces? [ 415.805472][T11042] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "journal_ioprio=0x0000000000000006" [ 415.815219][ T4346] usb 10-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 415.860525][ T4346] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.879427][ T4346] usb 10-1: Product: syz [ 415.889611][ T4346] usb 10-1: Manufacturer: syz [ 415.899780][ T4346] usb 10-1: SerialNumber: syz [ 415.960583][ T4346] usb 10-1: config 0 descriptor?? [ 416.287982][ T5466] usb 10-1: USB disconnect, device number 12 [ 416.420658][ T4275] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.459944][T11084] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 416.459944][T11084] program syz.8.1948 not setting count and/or reply_len properly [ 416.500374][ T4275] Bluetooth: hci4: command 0x0c1a tx timeout [ 416.660419][ T4275] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.734779][T11094] loop1: detected capacity change from 0 to 1024 [ 416.975031][T11094] [ 416.977568][T11094] ====================================================== [ 416.984707][T11094] WARNING: possible circular locking dependency detected [ 416.991884][T11094] syzkaller #0 Not tainted [ 416.996436][T11094] ------------------------------------------------------ [ 417.003653][T11094] syz.1.1950/11094 is trying to acquire lock: [ 417.009737][T11094] ffff88801db7e648 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1b3/0x1950 [ 417.020906][T11094] [ 417.020906][T11094] but task is already holding lock: [ 417.028547][T11094] ffff88805ce1e0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 [ 417.038599][T11094] [ 417.038599][T11094] which lock already depends on the new lock. [ 417.038599][T11094] [ 417.049031][T11094] [ 417.049031][T11094] the existing dependency chain (in reverse order) is: [ 417.058079][T11094] [ 417.058079][T11094] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 417.066221][T11094] __mutex_lock+0x120/0xaf0 [ 417.071280][T11094] hfsplus_find_init+0x150/0x1c0 [ 417.076756][T11094] hfsplus_ext_write_extent+0x148/0x200 [ 417.082835][T11094] hfsplus_write_inode+0x1e/0x5b0 [ 417.088483][T11094] __writeback_single_inode+0x75b/0x1160 [ 417.094747][T11094] writeback_single_inode+0x221/0x8b0 [ 417.100837][T11094] sync_inode_metadata+0xb6/0x110 [ 417.106500][T11094] hfsplus_file_fsync+0x101/0x500 [ 417.112240][T11094] generic_file_write_iter+0x25d/0x2e0 [ 417.118349][T11094] do_iter_write+0x62d/0xaf0 [ 417.123500][T11094] do_pwritev+0x201/0x340 [ 417.128760][T11094] do_syscall_64+0x4c/0xa0 [ 417.133817][T11094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.140261][T11094] [ 417.140261][T11094] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}: [ 417.149449][T11094] __lock_acquire+0x2cf8/0x7c50 [ 417.154933][T11094] lock_acquire+0x1b4/0x490 [ 417.159983][T11094] __mutex_lock+0x120/0xaf0 [ 417.165123][T11094] hfsplus_file_extend+0x1b3/0x1950 [ 417.170864][T11094] hfsplus_bmap_reserve+0x11e/0x4f0 [ 417.176681][T11094] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 417.183287][T11094] __hfsplus_ext_cache_extent+0x89/0xe20 [ 417.189558][T11094] hfsplus_file_truncate+0x455/0xb30 [ 417.195378][T11094] hfsplus_setattr+0x1c0/0x280 [ 417.200697][T11094] notify_change+0xc74/0xf40 [ 417.205923][T11094] do_truncate+0x197/0x220 [ 417.210984][T11094] vfs_truncate+0x262/0x2f0 [ 417.216159][T11094] do_sys_truncate+0xdc/0x190 [ 417.221386][T11094] do_syscall_64+0x4c/0xa0 [ 417.226370][T11094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.233095][T11094] [ 417.233095][T11094] other info that might help us debug this: [ 417.233095][T11094] [ 417.243878][T11094] Possible unsafe locking scenario: [ 417.243878][T11094] [ 417.251798][T11094] CPU0 CPU1 [ 417.257292][T11094] ---- ---- [ 417.262724][T11094] lock(&tree->tree_lock/1); [ 417.267431][T11094] lock(&HFSPLUS_I(inode)->extents_lock); [ 417.275942][T11094] lock(&tree->tree_lock/1); [ 417.283180][T11094] lock(&HFSPLUS_I(inode)->extents_lock); [ 417.289016][T11094] [ 417.289016][T11094] *** DEADLOCK *** [ 417.289016][T11094] [ 417.297195][T11094] 4 locks held by syz.1.1950/11094: [ 417.302685][T11094] #0: ffff88805db14460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 417.312240][T11094] #1: ffff88801db789c0 (&sb->s_type->i_mutex_key#30){+.+.}-{3:3}, at: do_truncate+0x183/0x220 [ 417.322666][T11094] #2: ffff88801db787c8 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 417.333324][T11094] #3: ffff88805ce1e0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0 [ 417.343637][T11094] [ 417.343637][T11094] stack backtrace: [ 417.349621][T11094] CPU: 0 PID: 11094 Comm: syz.1.1950 Not tainted syzkaller #0 [ 417.357230][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.367402][T11094] Call Trace: [ 417.370898][T11094] [ 417.374110][T11094] dump_stack_lvl+0x168/0x22e [ 417.379337][T11094] ? load_image+0x3b0/0x3b0 [ 417.383987][T11094] ? show_regs_print_info+0x12/0x12 [ 417.389306][T11094] ? print_circular_bug+0x12b/0x1a0 [ 417.394717][T11094] check_noncircular+0x274/0x310 [ 417.399793][T11094] ? add_chain_block+0x940/0x940 [ 417.404801][T11094] ? lockdep_lock+0xdc/0x1e0 [ 417.409468][T11094] ? is_bpf_text_address+0x22/0x2a0 [ 417.414745][T11094] ? _find_first_zero_bit+0xcf/0x100 [ 417.420062][T11094] __lock_acquire+0x2cf8/0x7c50 [ 417.425127][T11094] ? unwind_get_return_address+0x49/0x80 [ 417.431412][T11094] ? stack_trace_save+0xe0/0xe0 [ 417.436468][T11094] ? verify_lock_unused+0x140/0x140 [ 417.441703][T11094] ? stack_trace_save+0x98/0xe0 [ 417.446927][T11094] ? stack_trace_snprint+0xf0/0xf0 [ 417.452248][T11094] lock_acquire+0x1b4/0x490 [ 417.456791][T11094] ? hfsplus_file_extend+0x1b3/0x1950 [ 417.462283][T11094] ? add_lock_to_list+0x191/0x280 [ 417.467620][T11094] ? __might_sleep+0xd0/0xd0 [ 417.472254][T11094] ? read_lock_is_recursive+0x10/0x10 [ 417.477659][T11094] ? __lock_acquire+0x28b5/0x7c50 [ 417.482810][T11094] __mutex_lock+0x120/0xaf0 [ 417.487348][T11094] ? hfsplus_file_extend+0x1b3/0x1950 [ 417.492950][T11094] ? hfsplus_file_extend+0x1b3/0x1950 [ 417.498465][T11094] ? mutex_lock_nested+0x10/0x10 [ 417.503616][T11094] hfsplus_file_extend+0x1b3/0x1950 [ 417.508951][T11094] ? hfsplus_get_block+0x1530/0x1530 [ 417.514445][T11094] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.520721][T11094] ? __mutex_trylock_common+0x14f/0x250 [ 417.526470][T11094] ? trace_raw_output_contention_end+0xd0/0xd0 [ 417.532726][T11094] ? rcu_is_watching+0x11/0xa0 [ 417.537919][T11094] ? trace_contention_end+0x5f/0x170 [ 417.543356][T11094] ? hfsplus_brec_find+0x18e/0x500 [ 417.548584][T11094] ? __mutex_lock+0x19e/0xaf0 [ 417.554523][T11094] hfsplus_bmap_reserve+0x11e/0x4f0 [ 417.560033][T11094] __hfsplus_ext_write_extent+0x28d/0x5b0 [ 417.566221][T11094] __hfsplus_ext_cache_extent+0x89/0xe20 [ 417.572151][T11094] hfsplus_file_truncate+0x455/0xb30 [ 417.577548][T11094] ? hfsplus_add_extent+0x890/0x890 [ 417.582859][T11094] ? __up_read+0x27c/0x660 [ 417.587672][T11094] ? unmap_mapping_range+0x91/0x100 [ 417.592913][T11094] hfsplus_setattr+0x1c0/0x280 [ 417.597805][T11094] ? hfsplus_fileattr_set+0x330/0x330 [ 417.603384][T11094] notify_change+0xc74/0xf40 [ 417.608241][T11094] do_truncate+0x197/0x220 [ 417.612706][T11094] ? put_page_bootmem+0x2c0/0x2c0 [ 417.617944][T11094] ? bpf_lsm_path_truncate+0x5/0x10 [ 417.623395][T11094] vfs_truncate+0x262/0x2f0 [ 417.628019][T11094] do_sys_truncate+0xdc/0x190 [ 417.632833][T11094] ? break_lease+0xd0/0xd0 [ 417.637551][T11094] ? lockdep_hardirqs_on+0x94/0x140 [ 417.642873][T11094] do_syscall_64+0x4c/0xa0 [ 417.647832][T11094] ? clear_bhb_loop+0x60/0xb0 [ 417.652798][T11094] ? clear_bhb_loop+0x60/0xb0 [ 417.657674][T11094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.663771][T11094] RIP: 0033:0x7f3a7e98efc9 [ 417.668196][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.688087][T11094] RSP: 002b:00007f3a7f857038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 417.696615][T11094] RAX: ffffffffffffffda RBX: 00007f3a7ebe5fa0 RCX: 00007f3a7e98efc9 [ 417.704713][T11094] RDX: 0000000000000000 RSI: 000000000000fbb0 RDI: 0000200000000000 [ 417.712887][T11094] RBP: 00007f3a7ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.720958][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.729029][T11094] R13: 00007f3a7ebe6038 R14: 00007f3a7ebe5fa0 R15: 00007ffee3b29588 [ 417.737284][T11094] [ 417.742697][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 417.973744][ T5237] hfsplus: b-tree write err: -5, ino 3 [ 418.500759][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 418.582016][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 418.750270][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 419.460402][ T4275] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 419.468859][ T4275] Bluetooth: hci2: Injecting HCI hardware error event [ 419.476146][ T4271] Bluetooth: hci2: hardware error 0x00 [ 421.540426][ T4271] Bluetooth: hci2: Opcode 0x0c03 failed: -110