last executing test programs: 2m29.349347931s ago: executing program 3 (id=729): timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_gettime(r0, &(0x7f0000000100)) 2m28.247967615s ago: executing program 3 (id=745): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff034}, {0x6, 0x0, 0x7, 0x10000000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m27.845234921s ago: executing program 3 (id=751): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 2m27.68155876s ago: executing program 3 (id=754): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m27.082128707s ago: executing program 3 (id=763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}}, 0x0) 2m26.23535459s ago: executing program 3 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 2m25.639033193s ago: executing program 32 (id=775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) 4.181738079s ago: executing program 5 (id=2532): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000080)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@utf8}, {@uni_xlateno}, {@utf8}, {@shortname_win95}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_win95}, {@rodir}, {@utf8no}]}, 0x1, 0x29b, &(0x7f0000000580)="$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") r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00000000000000140000000000000001000000"], 0x4c}, 0x20001850) 3.841722196s ago: executing program 5 (id=2538): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 3.612606795s ago: executing program 5 (id=2540): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000023c0)=ANY=[], 0xf, 0x70c, &(0x7f0000000e80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 3.355856725s ago: executing program 6 (id=2542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x3, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) 3.044521815s ago: executing program 6 (id=2544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005002100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) 3.030062862s ago: executing program 5 (id=2545): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001140)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4008a, &(0x7f00000001c0)={[{@dioread_nolock}, {@usrjquota, 0x22}, {@nogrpid}, {@data_journal}, {@acl}, {@grpjquota, 0x22}, {@errors_continue}, {@data_journal}, {@usrjquota}]}, 0xfe, 0x45c, &(0x7f0000000800)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x80061, &(0x7f00000001c0)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) 2.769431109s ago: executing program 1 (id=2546): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x90a461, &(0x7f0000000140)={[{@gid}, {}]}) 2.749356718s ago: executing program 6 (id=2547): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 2.40868516s ago: executing program 1 (id=2549): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 2.40599616s ago: executing program 5 (id=2550): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x800800, &(0x7f00000003c0)={[{@memory_low}, {@quota}, {@noquota}, {@nouser_xattr}, {@data_flush}, {@quota}, {@alloc_mode_reuse}, {@discard}, {@memory_low}, {@discard_unit_segment}, {@background_gc_on}, {@resuid}, {@extent_cache}, {@usrjquota={'usrjquota', 0x3d, '\x009VQ\x15\x91\xd2Iu\xd0\x8c\x18\x7f\xab\xa0PM?@\xa1\x86Y\x01\x94Q6\xf0\xca\x19\x14l\x03\xc2\x00\x00\x00\x00\xf0Tv\xea\xc1\xc1V\x94\x9comh\x90\xb4\xefR\x0e\x80\xeb\xb4\xc9M\x85\x11!\x1a0?\x9a\xfd\x819\x9d\xf6%\xa9j*\xb3\xd1[6L\xe9P\xb8\x9f\xea\x7f\xfe\x92\xfc\xe6\xc8\x1c[\x0f\xc7\xa8\xeb\x01E\xfc\b\xd2i\xb1g\xa8\x91\x11\xfd\xdf\xed\xf1\xc9<\xcbW\x06\xc7\xeaM\xf5\xeb\x9d\r\v\xabT`l\xcd\xa4 \x85\xb4d\x813\x86'}}]}, 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 2.267679953s ago: executing program 1 (id=2552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3d0003000000", 0x6) 2.05357195s ago: executing program 4 (id=2553): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x278, &(0x7f0000000500)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) 1.979556116s ago: executing program 1 (id=2554): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) 1.634845603s ago: executing program 1 (id=2555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd0c, 0x25dfdbf9, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.566875043s ago: executing program 0 (id=2557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 1.485914318s ago: executing program 6 (id=2558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000014000000050018000100001808001100e300000008000a000000000008001600f24d000018000180140002006e657464657673696d300000000000000800100000000000080009"], 0x5c}}, 0x0) 1.397317189s ago: executing program 0 (id=2559): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r0 = io_uring_setup(0x7fe7, &(0x7f0000000380)={0x0, 0x0, 0x3000}) poll(&(0x7f0000000000)=[{r0, 0x11000}], 0x1, 0x7) 1.381084249s ago: executing program 1 (id=2560): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000640)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.296898088s ago: executing program 4 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x35}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xf}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.203434938s ago: executing program 0 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x1fc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x800, 0x5, 0x8000, 0x1c, 0x18, 0x1a, 0x8}}, @TCA_CHOKE_STAB={0x104, 0x2, "c5140d56dde546f6f5ec1deb8c439ca5979bacefd98b6aa8e95b2caa209abefd2aa54663867d48da5febda537e447e12bb8b59175d35f562c5cfad8ab9b0e4fa7cfffe5ae418cec077877c880f4e4c2c93e927328979189af985b5141b8f36556ecddc56c9204afa5fb02ae47113863507c35fb08c5273a2d4ba2464431e218a2d7b6248721bd9be23e4e7ef1d250ddf0690168c07a54878df91d87408a945b986fd93e8f163c25f6ced9fe43ef11438078363faad60b66b85138fb3b167054963fbb8e1f8c53c17b6cab305f7236c5b3ca329432ce40fdcc303149d243afaabb4db050f96a647dfa6512bb808dc09e2c0e4a52fdb557c4cf73c670176255829"}, @TCA_CHOKE_MAX_P={0x8}]}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x3e, 0x1, {0x7b, 0x0, 0x8, 0xe, 0x1, 0x9, 0x6, 0x4}}, {0xc, 0x2, [0xfffc, 0x6, 0x9, 0x200]}}, {{0x1c, 0x1, {0x6, 0x9, 0x5, 0xffffff81, 0x1, 0x3, 0xffffff36, 0x1}}, {0x6, 0x2, [0xfffb]}}, {{0x1c, 0x1, {0x3, 0x10, 0x200, 0x9, 0x1, 0x2, 0x2, 0x6}}, {0x10, 0x2, [0x1, 0xf000, 0x3, 0x1, 0x8, 0x7]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8, 0xff, 0x2, 0x6, 0xffff8000, 0x6}}, {0x10, 0x2, [0xfffc, 0x1000, 0x9a, 0x7fff, 0xb0cd, 0xd]}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.202627602s ago: executing program 2 (id=2563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) 995.773562ms ago: executing program 2 (id=2564): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x16, 0x0, &(0x7f0000000300)="5f3539d93931974e625cf7cbdcef032b5217867d47d1", 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x10) 943.244713ms ago: executing program 0 (id=2565): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) read$FUSE(r0, &(0x7f0000001f40)={0x2020}, 0x2020) 943.065544ms ago: executing program 6 (id=2566): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x34, &(0x7f0000000040)=0x1, 0x4) 922.456001ms ago: executing program 4 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 789.600471ms ago: executing program 4 (id=2568): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x0, 0x19ef, 0x5, 0x3, 0x2800, 0x2800, 0x12, 0xd1, 0x1a, 0x30, {0xb, 0x7}, 0xd0, 0x9}}) 767.074689ms ago: executing program 2 (id=2569): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9}) close(r0) 766.184907ms ago: executing program 6 (id=2570): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183042, 0x1e1) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c62) 749.351409ms ago: executing program 0 (id=2571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f801747e7be20200200065022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c1a99ed8075ee360f"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 545.230213ms ago: executing program 2 (id=2572): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="2e000000010000", 0x7) 489.615707ms ago: executing program 4 (id=2573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18b4dd456fe35638}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) 296.337325ms ago: executing program 0 (id=2574): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f23, &(0x7f0000014380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10000, 0xd1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x2, 0xfffffff8, 0x8, 0x600000, 0x5}) 245.848761ms ago: executing program 2 (id=2575): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0xfffffffffffffcb8) 182.192671ms ago: executing program 4 (id=2576): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) 55.549644ms ago: executing program 5 (id=2577): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x221, 0x40000010, r0, 0x0) 0s ago: executing program 2 (id=2578): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x4885) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}], 0x10000000000000a3, 0x0, 0x0) kernel console output (not intermixed with test programs): directory [ 199.591120][ T9297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.609267][ T31] audit: type=1326 audit(1769793561.628:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 199.678512][ T31] audit: type=1326 audit(1769793561.628:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.6.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 199.707100][ T9297] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.1365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 199.767960][ T9297] EXT4-fs (loop1): Remounting filesystem read-only [ 199.851278][ T9310] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1370'. [ 199.895728][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.159140][ T847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 200.192418][ T9286] loop2: detected capacity change from 0 to 32768 [ 200.331995][ T847] usb 6-1: Using ep0 maxpacket: 16 [ 200.340996][ T847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.359000][ T847] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.384030][ T847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.403667][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.419242][ T847] usb 6-1: Product: syz [ 200.430348][ T847] usb 6-1: Manufacturer: syz [ 200.434959][ T847] usb 6-1: SerialNumber: syz [ 200.500321][ T9314] loop6: detected capacity change from 0 to 32768 [ 200.515498][ T9314] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1373 (9314) [ 200.566470][ T9314] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.608747][ T9314] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 200.668635][ T847] usb 6-1: 0:2 : does not exist [ 200.690840][ T847] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 200.785900][ T847] usb 6-1: USB disconnect, device number 5 [ 200.854221][ T9314] BTRFS info (device loop6): enabling ssd optimizations [ 200.901865][ T9314] BTRFS info (device loop6): turning on async discard [ 200.910851][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.936865][ T9314] BTRFS info (device loop6): enabling free space tree [ 201.154794][ T7807] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.193059][ T847] kernel write not supported for file /dsp1 (pid: 847 comm: kworker/0:2) [ 201.359220][ T30] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 201.474480][ T9360] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1385'. [ 201.510879][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1385'. [ 201.528373][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1385'. [ 201.539286][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 201.572261][ T9360] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1385'. [ 201.584618][ T30] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 201.625592][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.653874][ T30] usb 2-1: Product: syz [ 201.658081][ T30] usb 2-1: Manufacturer: syz [ 201.679423][ T30] usb 2-1: SerialNumber: syz [ 201.719519][ T30] usb 2-1: config 0 descriptor?? [ 201.967339][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 202.159367][ T9378] loop4: detected capacity change from 0 to 2048 [ 202.232072][ T9378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.280459][ T9386] loop6: detected capacity change from 0 to 512 [ 202.319850][ T9386] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.361122][ T847] usb 2-1: USB disconnect, device number 11 [ 202.367911][ T847] f81534a_ctrl 2-1:0.0: failed to enable ports: -19 [ 202.419206][ T9386] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 202.490902][ T9386] EXT4-fs (loop6): 1 truncate cleaned up [ 202.562574][ T9393] [U] ^G   [ 202.574230][ T9386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.667658][ T9386] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.6.1400: path /65/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 202.848006][ T9404] loop4: detected capacity change from 0 to 64 [ 202.857657][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.916863][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 203.020194][ T9406] veth1_macvtap: left promiscuous mode [ 203.316174][ T9416] netlink: 'syz.0.1414': attribute type 21 has an invalid length. [ 203.366526][ T9416] netlink: 'syz.0.1414': attribute type 6 has an invalid length. [ 203.407793][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1414'. [ 203.513443][ T9429] loop1: detected capacity change from 0 to 512 [ 203.524918][ T9428] loop5: detected capacity change from 0 to 1024 [ 203.558067][ T9429] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1419: invalid block [ 203.576051][ T9429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1419: invalid indirect mapped block 4294967295 (level 1) [ 203.591508][ T9433] loop6: detected capacity change from 0 to 128 [ 203.592866][ T9429] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1419: invalid indirect mapped block 4294967295 (level 1) [ 203.618645][ T9429] EXT4-fs (loop1): 2 truncates cleaned up [ 203.632790][ T9429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.641175][ T9433] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.664994][ T9433] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.686318][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.784462][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 203.811073][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.849454][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 203.918850][ T5843] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 203.963380][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.991034][ T5843] usb 5-1: Product: syz [ 203.995243][ T5843] usb 5-1: Manufacturer: syz [ 204.018900][ T7807] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.037033][ T5843] usb 5-1: SerialNumber: syz [ 204.077029][ T5843] usb 5-1: config 0 descriptor?? [ 204.134308][ T5843] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 204.170040][ T5843] dvb-usb: bulk message failed: -22 (4/0) [ 204.176386][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 204.186663][ T6001] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.227008][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 204.233712][ T9449] loop0: detected capacity change from 0 to 128 [ 204.244282][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 204.252641][ T9449] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.277873][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.321258][ T9449] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.323065][ T5843] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 204.344712][ T9425] dvb-usb: bulk message failed: -22 (8/0) [ 204.375463][ T9425] ttusb2: there might have been an error during control message transfer. (rlen = 4, was 0) [ 204.388351][ T5843] usb 5-1: media controller created [ 204.394044][ T9425] ttusb2: i2c transfer failed. [ 204.399149][ T6001] usb 3-1: Using ep0 maxpacket: 16 [ 204.429632][ T6001] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.457473][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.473892][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 204.500627][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.549417][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.575238][ T5843] usb 5-1: selecting invalid altsetting 3 [ 204.585838][ T9457] loop5: detected capacity change from 0 to 256 [ 204.592695][ T6001] usb 3-1: config 0 descriptor?? [ 204.608548][ T37] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.622865][ T5843] ttusb2: set interface to alts=3 failed [ 204.632270][ T9457] FAT-fs (loop5): Directory bread(block 1285) failed [ 204.649561][ T6001] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 204.663343][ T9457] FAT-fs (loop5): Directory bread(block 1286) failed [ 204.692017][ T9457] FAT-fs (loop5): Directory bread(block 1287) failed [ 204.729410][ T9457] FAT-fs (loop5): Directory bread(block 1288) failed [ 204.776938][ T9460] loop6: detected capacity change from 0 to 2048 [ 204.807037][ T9457] FAT-fs (loop5): Directory bread(block 1285) failed [ 204.815912][ T5843] DVB: Unable to find symbol tda10086_attach() [ 204.842742][ T5843] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 204.852252][ T30] usb 3-1: USB disconnect, device number 6 [ 204.861157][ T9457] FAT-fs (loop5): Directory bread(block 1286) failed [ 204.881869][ T5843] dvb-usb: bulk message failed: -22 (4/0) [ 204.887632][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 204.902032][ T9460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.930033][ T9457] FAT-fs (loop5): Directory bread(block 1287) failed [ 204.937149][ T9457] FAT-fs (loop5): Directory bread(block 1288) failed [ 204.957679][ T9457] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 204.959230][ T5843] dvb-usb: bulk message failed: -22 (5/0) [ 204.979258][ T5843] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 204.989578][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 205.027062][ T5843] usb 5-1: USB disconnect, device number 11 [ 205.143942][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.196612][ T5843] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 205.326865][ T9471] loop4: detected capacity change from 0 to 64 [ 205.753961][ T9453] loop1: detected capacity change from 0 to 32768 [ 205.811466][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 205.817592][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 205.819735][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 205.823619][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 205.980134][ T6388] udevd[6388]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 206.149522][ T9498] binder: 9497:9498 ioctl 541b 0 returned -22 [ 206.227389][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 206.337888][ T9505] loop0: detected capacity change from 0 to 8 [ 206.493139][ T9507] hfsplus: bad catalog entry type [ 206.539328][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 206.689554][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 206.903721][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1452'. [ 206.949184][ T5843] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.120740][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 207.157161][ T9527] [U] ¦Þ„#=Ãäøc [ 207.163419][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 207.197971][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 207.197992][ T31] audit: type=1326 audit(1769793569.948:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 207.210023][ T31] audit: type=1326 audit(1769793569.948:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 207.210085][ T31] audit: type=1326 audit(1769793569.958:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 207.210154][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 207.239321][ T5843] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 207.239359][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.239384][ T5843] usb 5-1: Product: syz [ 207.239404][ T5843] usb 5-1: Manufacturer: syz [ 207.239423][ T5843] usb 5-1: SerialNumber: syz [ 207.243141][ T5843] usb 5-1: config 0 descriptor?? [ 207.243896][ T9514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.244054][ T9514] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.255164][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 207.256996][ T5843] usb 5-1: ucan: probing device on interface #0 [ 207.298002][ T31] audit: type=1326 audit(1769793570.048:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 207.298065][ T31] audit: type=1326 audit(1769793570.048:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9530 comm="syz.0.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 207.316720][ T9533] vlan2: entered promiscuous mode [ 207.316747][ T9533] gretap0: entered promiscuous mode [ 207.552429][ T9539] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 207.839295][ T9519] JBD2: Ignoring recovery information on journal [ 207.889420][ T5843] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 207.893360][ T9548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1473'. [ 207.918661][ T5843] usb 5-1: USB disconnect, device number 12 [ 207.963399][ T9519] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 208.094344][ T5820] ocfs2: Unmounting device (7,2) on (node local) [ 208.168003][ T9553] batman_adv: batadv0: Adding interface: geneve2 [ 208.168029][ T9553] batman_adv: batadv0: Interface activated: geneve2 [ 208.218656][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 208.641244][ T9569] set_capacity_and_notify: 2 callbacks suppressed [ 208.641267][ T9569] loop4: detected capacity change from 0 to 512 [ 208.683342][ T9569] EXT4-fs: Ignoring removed oldalloc option [ 208.739460][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.782205][ T9574] loop1: detected capacity change from 0 to 256 [ 208.790978][ T9569] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1481: Parent and EA inode have the same ino 15 [ 208.925517][ T9569] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1481: Parent and EA inode have the same ino 15 [ 208.948521][ T9569] EXT4-fs (loop4): 1 orphan inode deleted [ 208.961283][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 208.989908][ T9574] FAT-fs (loop1): Directory bread(block 64) failed [ 208.996477][ T9574] FAT-fs (loop1): Directory bread(block 65) failed [ 209.009454][ T9569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.021586][ T5843] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 209.021617][ T5843] usb 3-1: config 0 has no interface number 0 [ 209.029477][ T5843] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 209.069664][ T9574] FAT-fs (loop1): Directory bread(block 66) failed [ 209.099197][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.119184][ T9574] FAT-fs (loop1): Directory bread(block 67) failed [ 209.149187][ T5843] usb 3-1: Product: syz [ 209.153392][ T5843] usb 3-1: Manufacturer: syz [ 209.168949][ T9574] FAT-fs (loop1): Directory bread(block 68) failed [ 209.188461][ T5843] usb 3-1: SerialNumber: syz [ 209.196285][ T9574] FAT-fs (loop1): Directory bread(block 69) failed [ 209.214270][ T5843] usb 3-1: config 0 descriptor?? [ 209.250129][ T9574] FAT-fs (loop1): Directory bread(block 70) failed [ 209.253875][ T5843] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 209.256723][ T9574] FAT-fs (loop1): Directory bread(block 71) failed [ 209.367340][ T9574] FAT-fs (loop1): Directory bread(block 72) failed [ 209.412143][ T9574] FAT-fs (loop1): Directory bread(block 73) failed [ 209.492952][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 209.502916][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.580670][ T9581] netlink: 'syz.0.1487': attribute type 2 has an invalid length. [ 209.583313][ T9579] gretap0: entered promiscuous mode [ 209.599419][ T5843] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 209.639372][ T9579] vlan2: entered promiscuous mode [ 209.929440][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 209.954877][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 209.956178][ T792] usb 3-1: USB disconnect, device number 7 [ 210.032920][ T792] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 210.087381][ T792] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 210.123349][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 210.142890][ T792] quatech2 3-1:0.51: device disconnected [ 210.156590][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.178651][ T30] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 210.198475][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.262591][ T30] usb 5-1: config 0 descriptor?? [ 210.685638][ T9605] loop1: detected capacity change from 0 to 4096 [ 210.744634][ T30] elo 0003:04E7:0030.0010: item fetching failed at offset 2/3 [ 210.762248][ T30] elo 0003:04E7:0030.0010: parse failed [ 210.767938][ T30] elo 0003:04E7:0030.0010: probe with driver elo failed with error -22 [ 210.833780][ T31] audit: type=1326 audit(1769793573.588:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 210.906622][ T31] audit: type=1326 audit(1769793573.628:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 210.968106][ T30] usb 5-1: USB disconnect, device number 13 [ 210.998744][ T31] audit: type=1326 audit(1769793573.628:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 211.046189][ T31] audit: type=1326 audit(1769793573.628:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 211.124608][ T31] audit: type=1326 audit(1769793573.628:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9610 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 211.760165][ T9632] loop1: detected capacity change from 0 to 1764 [ 212.061232][ T9641] loop0: detected capacity change from 0 to 1024 [ 212.123191][ T9641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.482198][ T9655] loop1: detected capacity change from 0 to 1764 [ 212.554099][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.784313][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.804840][ T9668] openvswitch: netlink: Duplicate or invalid key (type 0). [ 212.835355][ T9668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.865989][ T9669] [U]  [ 212.970984][ T5843] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 212.997587][ T5843] usb 6-1: config 0 has no interface number 0 [ 213.027891][ T5843] usb 6-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 213.068723][ T5843] usb 6-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.123369][ T5843] usb 6-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.153933][ T5843] usb 6-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 213.230306][ T5843] usb 6-1: config 0 interface 16 has no altsetting 0 [ 213.237045][ T5843] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 213.277345][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.319864][ T5843] usb 6-1: config 0 descriptor?? [ 213.459478][ T5932] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 213.482999][ T9691] loop0: detected capacity change from 0 to 128 [ 213.563743][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 213.563763][ T31] audit: type=1800 audit(1769793576.308:95): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1538" name="file1" dev="loop0" ino=1048685 res=0 errno=0 [ 213.602592][ T9691] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 213.653377][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 213.674341][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.728645][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 213.758822][ T5843] uclogic 0003:5543:004D.0011: interface is invalid, ignoring [ 213.778958][ T5932] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.799546][ T9699] netlink: 774 bytes leftover after parsing attributes in process `syz.6.1541'. [ 213.812403][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.833286][ T5932] usb 2-1: config 0 descriptor?? [ 213.862443][ T9699] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1541'. [ 214.019265][ T5906] usb 6-1: USB disconnect, device number 6 [ 214.088146][ T5932] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.233516][ T6001] IPVS: starting estimator thread 0... [ 214.268380][ T9683] iowarrior 2-1:0.0: Error -90 while submitting URB [ 214.299617][ T5906] usb 2-1: USB disconnect, device number 12 [ 214.335657][ T9713] loop6: detected capacity change from 0 to 512 [ 214.349194][ T9711] IPVS: using max 31 ests per chain, 74400 per kthread [ 214.380125][ T9713] ext4: Unknown parameter 'obj_user' [ 214.388556][ T9715] loop2: detected capacity change from 0 to 128 [ 214.626776][ T9719] sctp: [Deprecated]: syz.6.1551 (pid 9719) Use of int in max_burst socket option. [ 214.626776][ T9719] Use struct sctp_assoc_value instead [ 214.843376][ T9723] loop0: detected capacity change from 0 to 4096 [ 214.990415][ T9723] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 215.099459][ T9735] loop2: detected capacity change from 0 to 256 [ 215.100183][ T9723] ntfs3(loop0): Failed to load $Extend (-22). [ 215.121545][ T9735] exfat: Deprecated parameter 'utf8' [ 215.126964][ T9735] exfat: Deprecated parameter 'namecase' [ 215.145431][ T9735] exfat: Deprecated parameter 'namecase' [ 215.163587][ T9723] ntfs3(loop0): Failed to initialize $Extend. [ 215.172298][ T9735] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 216.475896][ T9744] loop2: detected capacity change from 0 to 32768 [ 216.499446][ T9744] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 216.543578][ T9744] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.566151][ T9773] loop0: detected capacity change from 0 to 512 [ 216.596845][ T9773] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 216.663956][ T9744] XFS (loop2): Ending clean mount [ 216.681515][ T9773] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1575: bad orphan inode 131083 [ 216.694823][ T9773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.696161][ T9744] XFS (loop2): Quotacheck needed: Please wait. [ 216.726326][ T9773] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.1575: path /276/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 216.767715][ T9744] XFS (loop2): Quotacheck: Done. [ 216.862000][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.935573][ T9759] loop1: detected capacity change from 0 to 32768 [ 216.945430][ T5820] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.996739][ T9759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1571 (9759) [ 217.037108][ T9759] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.072050][ T9759] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 217.300685][ T9759] BTRFS info (device loop1): enabling ssd optimizations [ 217.320010][ T9759] BTRFS info (device loop1): turning on flush-on-commit [ 217.350681][ T9759] BTRFS info (device loop1): enabling free space tree [ 217.357498][ T9759] BTRFS info (device loop1): enabling auto defrag [ 217.406873][ T9759] BTRFS info (device loop1): use lzo compression, level 1 [ 217.445931][ T9759] BTRFS info (device loop1): max_inline set to 4096 [ 217.617837][ T31] audit: type=1800 audit(1769793580.348:96): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1571" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 217.743552][ T5819] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.013117][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 218.327743][ T9826] loop1: detected capacity change from 0 to 1024 [ 218.658309][ T5842] Bluetooth: Frame is too long (len 18, expected len 4) [ 218.980426][ T9845] TCP: TCP_TX_DELAY enabled [ 219.883428][ T9878] loop1: detected capacity change from 0 to 16 [ 219.914139][ T9878] erofs (device loop1): mounted with root inode @ nid 36. [ 219.926951][ T9837] loop2: detected capacity change from 0 to 32768 [ 220.586212][ T9903] netlink: 'syz.5.1625': attribute type 6 has an invalid length. [ 220.720246][ T31] audit: type=1326 audit(1769793583.478:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 220.847205][ T31] audit: type=1326 audit(1769793583.498:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 220.876462][ T9909] loop1: detected capacity change from 0 to 128 [ 220.945619][ T9909] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.969790][ T9909] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.980543][ T31] audit: type=1326 audit(1769793583.528:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.073472][ T9909] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.1629: No space for directory leaf checksum. Please run e2fsck -D. [ 221.114519][ T9909] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.1629: Directory block failed checksum [ 221.136238][ T31] audit: type=1326 audit(1769793583.528:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.244925][ T31] audit: type=1326 audit(1769793583.528:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.304395][ T5819] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.318641][ T31] audit: type=1326 audit(1769793583.538:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.348672][ T9924] loop6: detected capacity change from 0 to 512 [ 221.442469][ T31] audit: type=1326 audit(1769793583.538:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.535501][ T9927] loop2: detected capacity change from 0 to 2048 [ 221.549136][ T31] audit: type=1326 audit(1769793583.538:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 221.628939][ T9927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.943428][ T9939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.951064][ T9939] IPv6: NLM_F_CREATE should be set when creating new route [ 221.958583][ T9939] IPv6: NLM_F_CREATE should be set when creating new route [ 222.026702][ T9885] loop4: detected capacity change from 0 to 32768 [ 222.134472][ T9885] JBD2: Ignoring recovery information on journal [ 222.264581][ T9950] loop6: detected capacity change from 0 to 256 [ 222.321470][ T9885] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 222.333858][ T9950] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 222.382531][ T9945] loop2: detected capacity change from 0 to 4096 [ 222.457988][ T9945] ntfs3(loop2): ino=0, mi_enum_attr [ 222.459258][ T9950] exFAT-fs (loop6): error, data size is invalid(150994954) [ 222.512608][ T9950] exFAT-fs (loop6): Filesystem has been set read-only [ 222.526052][ T9945] ntfs3(loop2): ino=0, mi_enum_attr [ 222.565551][ T9950] exFAT-fs (loop6): error, data size is invalid(150994954) [ 222.632921][ T9961] CUSE: info not properly terminated [ 222.995950][ T9973] loop0: detected capacity change from 0 to 64 [ 223.058857][ T5824] ocfs2: Unmounting device (7,4) on (node local) [ 223.662519][ T9992] loop2: detected capacity change from 0 to 64 [ 223.971535][ T9998] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 224.279465][ T37] hfsplus: b-tree write err: -5, ino 4 [ 224.340166][T10010] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 224.485722][T10010] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 224.549591][T10022] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 224.571650][T10022] hpfs: filesystem error: improperly stopped [ 224.609281][T10022] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 224.617040][T10022] hpfs: You really don't want any checks? You are crazy... [ 224.677559][T10022] hpfs: hpfs_map_sector(): read error [ 224.711863][T10022] hpfs: code page support is disabled [ 224.746981][T10022] hpfs: hpfs_map_4sectors(): unaligned read [ 224.785274][T10022] hpfs: hpfs_map_4sectors(): unaligned read [ 224.839235][T10022] hpfs: filesystem error: unable to find root dir [ 225.353742][ T31] audit: type=1400 audit(1769793588.108:105): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=10051 comm="syz.2.1696" [ 225.397856][T10046] set_capacity_and_notify: 5 callbacks suppressed [ 225.397877][T10046] loop6: detected capacity change from 0 to 4096 [ 225.487617][T10046] EXT4-fs (loop6): Test dummy encryption mode enabled [ 225.592236][T10046] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 225.603009][T10046] System zones: 0-5 [ 225.614964][T10046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.708165][T10068] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1700'. [ 225.735895][T10066] loop4: detected capacity change from 0 to 2048 [ 225.775925][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.821038][ T31] audit: type=1326 audit(1769793588.568:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 225.821551][T10071] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.905989][ T31] audit: type=1326 audit(1769793588.568:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 225.929242][ T31] audit: type=1326 audit(1769793588.568:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 225.952041][ T31] audit: type=1326 audit(1769793588.568:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 225.977729][ T31] audit: type=1326 audit(1769793588.618:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 226.082030][ T31] audit: type=1326 audit(1769793588.618:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 226.133123][T10071] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 226.155856][T10071] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 226.167696][ T31] audit: type=1326 audit(1769793588.618:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10069 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1f79aeb9 code=0x7ffc0000 [ 226.218862][T10071] Remounting filesystem read-only [ 226.239763][ T5824] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 226.389142][ T6001] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 226.549096][ T6001] usb 6-1: Using ep0 maxpacket: 16 [ 226.580489][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.614686][T10093] loop4: detected capacity change from 0 to 128 [ 226.620006][ T6001] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 226.658014][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.702472][ T6001] usb 6-1: config 0 descriptor?? [ 227.070271][T10102] loop6: detected capacity change from 0 to 256 [ 227.102529][T10081] loop1: detected capacity change from 0 to 40427 [ 227.122804][ T6001] maltron 0003:058F:9410.0012: unknown main item tag 0x0 [ 227.141126][T10081] F2FS-fs (loop1): invalid crc value [ 227.150415][ T6001] maltron 0003:058F:9410.0012: unknown main item tag 0x0 [ 227.176534][ T6001] maltron 0003:058F:9410.0012: unknown main item tag 0x0 [ 227.195843][ T6001] maltron 0003:058F:9410.0012: unknown main item tag 0x0 [ 227.229346][ T6001] maltron 0003:058F:9410.0012: unknown main item tag 0x0 [ 227.260419][ T6001] maltron 0003:058F:9410.0012: hidraw0: USB HID v0.02 Device [HID 058f:9410] on usb-dummy_hcd.5-1/input0 [ 227.345861][ T6001] usb 6-1: USB disconnect, device number 7 [ 227.402163][T10081] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.431071][T10081] F2FS-fs (loop1): Start checkpoint disabled! [ 227.473548][T10081] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 227.488363][T10104] fido_id[10104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 227.505176][T10081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 227.691267][ T13] kworker/u8:1: attempt to access beyond end of device [ 227.691267][ T13] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.714006][T10112] netlink: 'syz.6.1719': attribute type 5 has an invalid length. [ 227.729389][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.729427][ T13] Tainted: [L]=SOFTLOCKUP [ 227.729436][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 227.729453][ T13] Workqueue: writeback wb_workfn (flush-7:1) [ 227.729497][ T13] Call Trace: [ 227.729506][ T13] [ 227.729517][ T13] dump_stack_lvl+0xe8/0x150 [ 227.729550][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 227.729588][ T13] f2fs_write_end_io+0xc1d/0xfd0 [ 227.729639][ T13] __submit_merged_bio+0x256/0x650 [ 227.729675][ T13] __submit_merged_write_cond+0x269/0x530 [ 227.729718][ T13] f2fs_write_data_pages+0x2806/0x3360 [ 227.729789][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 227.729837][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 227.729912][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 227.729962][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.729992][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 227.730045][ T13] ? set_shrinker_bit+0x7c/0x350 [ 227.730076][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730109][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 227.730143][ T13] do_writepages+0x32e/0x550 [ 227.730185][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730213][ T13] ? reacquire_held_locks+0x104/0x190 [ 227.730237][ T13] ? writeback_sb_inodes+0x42a/0x1940 [ 227.730269][ T13] __writeback_single_inode+0x133/0x1230 [ 227.730296][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 227.730331][ T13] writeback_sb_inodes+0x92e/0x1940 [ 227.730376][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730416][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 227.730438][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.730514][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730543][ T13] ? rcu_is_watching+0x15/0xb0 [ 227.730568][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730606][ T13] wb_writeback+0x445/0xad0 [ 227.730636][ T13] ? queue_io+0x1f1/0x450 [ 227.730668][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 227.730689][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.730742][ T13] wb_workfn+0x3f8/0xef0 [ 227.730773][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730801][ T13] ? look_up_lock_class+0x57/0x110 [ 227.730850][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 227.730882][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730915][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.730943][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.730969][ T13] ? lock_acquire+0x106/0x330 [ 227.731006][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.731038][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731070][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731101][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731136][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 227.731173][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 227.731214][ T13] process_scheduled_works+0xaec/0x17a0 [ 227.731287][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.731323][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.731355][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.731382][ T13] ? schedule+0x90/0x360 [ 227.731409][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731444][ T13] worker_thread+0xda6/0x1360 [ 227.731514][ T13] kthread+0x726/0x8b0 [ 227.731547][ T13] ? __pfx_worker_thread+0x10/0x10 [ 227.731584][ T13] ? __pfx_kthread+0x10/0x10 [ 227.731609][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731643][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.731681][ T13] ? __pfx_kthread+0x10/0x10 [ 227.731715][ T13] ret_from_fork+0x51b/0xa40 [ 227.731758][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 227.731794][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.731822][ T13] ? __switch_to+0xc82/0x1410 [ 227.731862][ T13] ? __pfx_kthread+0x10/0x10 [ 227.731892][ T13] ret_from_fork_asm+0x1a/0x30 [ 227.731947][ T13] [ 227.731957][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 228.490629][T10128] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1728'. [ 228.682583][T10131] loop5: detected capacity change from 0 to 2048 [ 228.747107][T10131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.819285][T10131] UDF-fs: incorrect filename length (10) [ 229.099774][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1735'. [ 229.138271][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1735'. [ 229.206120][T10148] loop6: detected capacity change from 0 to 164 [ 229.433750][T10152] usb usb8: usbfs: process 10152 (syz.5.1739) did not claim interface 0 before use [ 229.721929][T10164] loop1: detected capacity change from 0 to 256 [ 229.737940][T10164] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.970740][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1748'. [ 229.987044][T10145] loop4: detected capacity change from 0 to 32768 [ 229.998989][T10145] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1736 (10145) [ 230.079314][T10145] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 230.109264][T10145] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 230.286954][T10145] BTRFS info (device loop4): enabling ssd optimizations [ 230.296149][T10196] loop1: detected capacity change from 0 to 2048 [ 230.308872][T10196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.324857][T10145] BTRFS info (device loop4): turning on async discard [ 230.329759][T10196] [syz.1.1754/10196] FS: loop1 File: /file1 would truncate fibmap result [ 230.340407][T10145] BTRFS info (device loop4): enabling free space tree [ 230.435154][ T5824] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 231.769576][T10229] overlayfs: missing 'workdir' [ 232.229282][T10234] syz.5.1770 (10234) used greatest stack depth: 17656 bytes left [ 232.401505][T10254] tmpfs: Bad value for 'mpol' [ 232.696670][T10268] loop0: detected capacity change from 0 to 512 [ 232.710809][T10268] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 232.770684][T10268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 232.803260][T10268] System zones: 1-12 [ 232.819377][T10268] EXT4-fs (loop0): orphan cleanup on readonly fs [ 232.853551][T10268] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1781: invalid indirect mapped block 12 (level 1) [ 232.901300][T10268] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1781: invalid indirect mapped block 2 (level 2) [ 233.075495][T10268] EXT4-fs (loop0): 1 truncate cleaned up [ 233.109563][ T6001] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.120713][T10268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 233.323179][ T6001] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 233.368391][ T6001] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 233.404172][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.446364][ T6001] usb 2-1: Product: syz [ 233.477047][ T6001] usb 2-1: Manufacturer: syz [ 233.494251][ T6001] usb 2-1: SerialNumber: syz [ 233.516590][ T6001] usb 2-1: config 0 descriptor?? [ 233.556217][ T6001] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 233.618939][ T6001] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.644337][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 233.669935][ T6001] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 233.697832][ T6001] usb 2-1: media controller created [ 233.764434][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.002905][ T6001] DVB: Unable to find symbol mt352_attach() [ 234.034968][ T5843] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 234.155601][ T6001] DVB: Unable to find symbol nxt6000_attach() [ 234.156607][T10275] loop6: detected capacity change from 0 to 32768 [ 234.174608][ T6001] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 234.213141][ T5843] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 234.254955][ T6001] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 234.255439][T10275] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 234.270607][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.325644][ T6001] dvb-usb: schedule remote query interval to 1000 msecs. [ 234.333403][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.349297][ T6001] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 234.360006][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.367588][ T6001] dvb-usb: bulk message failed: -22 (7/0) [ 234.374904][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.384130][ T6001] dvb-usb: bulk message failed: -22 (7/0) [ 234.392227][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.406132][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.417560][ T6001] usb 2-1: USB disconnect, device number 13 [ 234.430778][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.440043][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.454533][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.462664][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.521321][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.549312][T10275] XFS (loop6): Ending clean mount [ 234.555355][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.583254][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.590945][T10275] XFS (loop6): Quotacheck needed: Please wait. [ 234.612536][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.696256][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.721552][ T6001] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 234.735724][T10275] XFS (loop6): Quotacheck: Done. [ 234.759718][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.771536][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.827882][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.853617][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.884511][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.925894][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.952020][ T5843] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.983679][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 235.015554][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1797'. [ 235.033496][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 235.058068][ T7807] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 235.083974][ T5843] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 235.106917][T10292] loop0: detected capacity change from 0 to 32768 [ 235.108181][ T5843] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 235.132312][ T5843] usb 3-1: Product: syz [ 235.137031][ T5843] usb 3-1: Manufacturer: syz [ 235.142835][ T5843] usb 3-1: SerialNumber: syz [ 235.208872][ T5843] usb 3-1: config 0 descriptor?? [ 235.269891][ T5843] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 235.351606][T10332] loop1: detected capacity change from 0 to 1024 [ 235.693072][ T5906] usb 3-1: USB disconnect, device number 8 [ 235.736836][ T5906] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 236.011774][T10347] netlink: 'syz.0.1806': attribute type 11 has an invalid length. [ 236.037989][T10347] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1806'. [ 236.508709][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 236.668766][T10375] loop4: detected capacity change from 0 to 64 [ 236.713090][T10376] loop5: detected capacity change from 0 to 128 [ 236.777535][T10376] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 236.860632][T10380] netlink: 'syz.6.1824': attribute type 5 has an invalid length. [ 237.108567][T10387] loop4: detected capacity change from 0 to 128 [ 237.157797][T10387] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.219985][T10387] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.496127][ T2973] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 237.971937][T10414] loop0: detected capacity change from 0 to 4096 [ 237.985752][T10414] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 238.332963][T10397] loop6: detected capacity change from 0 to 32768 [ 238.382692][T10397] [ 238.382692][T10397] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.382692][T10397] [ 238.432582][T10412] loop1: detected capacity change from 0 to 32768 [ 238.437322][T10404] loop2: detected capacity change from 0 to 32768 [ 238.474912][T10412] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1839 (10412) [ 238.512616][T10404] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.571259][ T7807] [ 238.571259][ T7807] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.571259][ T7807] [ 238.593576][ T7807] [ 238.593576][ T7807] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.593576][ T7807] [ 238.626307][T10412] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 238.663880][T10404] XFS (loop2): Ending clean mount [ 238.696463][T10412] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm [ 238.730581][T10404] XFS (loop2): Quotacheck needed: Please wait. [ 238.942287][T10404] XFS (loop2): Quotacheck: Done. [ 239.010324][T10412] BTRFS info (device loop1): enabling ssd optimizations [ 239.059154][T10412] BTRFS info (device loop1): turning on async discard [ 239.066129][T10412] BTRFS info (device loop1): enabling free space tree [ 239.080173][T10412] BTRFS info (device loop1): use lzo compression, level 1 [ 239.158458][ T5820] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 239.537015][ T5819] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 239.568925][T10423] loop4: detected capacity change from 0 to 32768 [ 239.723831][T10423] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 239.930397][T10423] XFS (loop4): Ending clean mount [ 239.935600][T10470] virtiofs: Bad value for 'dax' [ 240.163823][T10474] loop0: detected capacity change from 0 to 256 [ 240.175343][ T5824] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.185930][T10474] exfat: Deprecated parameter 'namecase' [ 240.229361][T10474] exfat: Deprecated parameter 'utf8' [ 240.330815][T10474] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 240.425487][T10482] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1848'. [ 240.806824][T10491] loop0: detected capacity change from 0 to 512 [ 240.930606][ T5906] hid-generic 0006:79D90A04:10000.0013: unknown main item tag 0x0 [ 240.998507][ T5906] hid-generic 0006:79D90A04:10000.0013: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1 [ 241.286803][T10502] fido_id[10502]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.347811][T10515] xt_connbytes: Forcing CT accounting to be enabled [ 241.489344][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 241.684642][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.715521][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 241.745823][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 241.789523][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.857788][ T24] usb 5-1: config 0 descriptor?? [ 241.889602][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 241.913238][ T31] audit: type=1326 audit(1769793604.668:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 241.939232][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 241.987036][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.021072][ T31] audit: type=1326 audit(1769793604.708:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2b39999d97 code=0x7ffc0000 [ 242.021995][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 242.086381][T10508] dvb-usb: bulk message failed: -22 (2/0) [ 242.123676][ T31] audit: type=1326 audit(1769793604.708:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 242.153695][ T6001] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 242.172214][ T24] usb 5-1: media controller created [ 242.205941][ T31] audit: type=1326 audit(1769793604.708:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 242.213602][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.231778][ T31] audit: type=1326 audit(1769793604.718:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 242.300175][ T31] audit: type=1326 audit(1769793604.718:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 242.345601][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 242.379109][ T6001] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 242.379348][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 242.387326][ T6001] usb 2-1: config 4 has no interface number 0 [ 242.404266][ T31] audit: type=1326 audit(1769793604.718:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10527 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b3999aeb9 code=0x7ffc0000 [ 242.451790][ T6001] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 242.471224][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.485832][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 242.503856][T10505] loop5: detected capacity change from 0 to 32768 [ 242.506313][ T6001] usb 2-1: Product: syz [ 242.539950][ T6001] usb 2-1: Manufacturer: syz [ 242.542858][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 242.544568][ T6001] usb 2-1: SerialNumber: syz [ 242.569988][T10505] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1863 (10505) [ 242.588543][ T6001] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 242.623739][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 242.668044][T10505] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 242.695689][ T24] usb 5-1: USB disconnect, device number 14 [ 242.715575][T10505] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 242.834001][T10517] loop6: detected capacity change from 0 to 32768 [ 242.918899][T10505] BTRFS info (device loop5): rebuilding free space tree [ 242.943108][T10561] loop4: detected capacity change from 0 to 256 [ 242.953760][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 242.987054][T10561] exfat: Deprecated parameter 'namecase' [ 242.997576][ T6001] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 243.005163][T10505] BTRFS info (device loop5): disabling free space tree [ 243.036607][ T6001] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 243.109390][T10505] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 243.128515][T10561] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 243.140860][T10505] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 243.218440][T10505] BTRFS info (device loop5): setting nodatasum [ 243.261813][ T6001] usb 2-1: USB disconnect, device number 14 [ 243.270132][T10505] BTRFS info (device loop5): setting nodatacow [ 243.277201][T10505] BTRFS info (device loop5): turning off barriers [ 243.383063][T10505] BTRFS info (device loop5): force clearing of disk cache [ 243.854208][ T5822] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.896148][T10573] loop2: detected capacity change from 0 to 8192 [ 243.999515][T10585] netlink: 'syz.4.1885': attribute type 2 has an invalid length. [ 244.056728][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1885'. [ 244.220700][T10593] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 244.289168][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 244.491593][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 244.549561][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.586374][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.645692][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.700115][T10606] loop6: detected capacity change from 0 to 4096 [ 244.729161][ T30] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.738242][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.804310][ T30] usb 2-1: config 0 descriptor?? [ 244.873288][T10615] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.919383][T10612] loop4: detected capacity change from 0 to 512 [ 244.920438][T10606] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 244.977739][T10612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 245.005304][T10612] System zones: 1-12 [ 245.015345][T10606] Remounting filesystem read-only [ 245.041217][T10612] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1896: Directory hole found for htree index block 0 [ 245.059862][T10612] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 245.068305][T10612] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.1896: Directory hole found for htree index block 0 [ 245.110955][T10612] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 245.150205][T10612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.231889][ T30] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 245.239641][ T7807] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 245.293940][ T30] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 245.308799][ T30] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 245.308837][ T30] microsoft 0003:045E:07DA.0014: no inputs found [ 245.308854][ T30] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 245.321699][T10612] EXT4-fs: Ignoring removed orlov option [ 245.321826][T10612] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 245.340123][T10612] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 245.484467][ T30] usb 2-1: USB disconnect, device number 15 [ 245.525509][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.939642][T10677] loop2: detected capacity change from 0 to 512 [ 246.995085][T10677] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 247.022240][T10677] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 247.086026][T10683] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1918'. [ 247.086044][T10677] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 247.129095][T10677] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 247.174222][T10677] System zones: 0-2, 18-18, 34-35 [ 247.233781][T10677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.504766][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.850490][T10713] netlink: 'syz.4.1929': attribute type 32 has an invalid length. [ 247.881508][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'. [ 247.963000][T10713] bond1: option coupled_control: invalid value (255) [ 247.993986][T10713] bond1 (unregistering): Released all slaves [ 248.100874][T10715] loop6: detected capacity change from 0 to 4096 [ 248.218690][T10715] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 248.257636][T10715] UDF-fs: Scanning with blocksize 512 failed [ 248.311093][T10715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.435449][T10715] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 248.857506][T10752] loop0: detected capacity change from 0 to 512 [ 249.026946][T10752] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.111102][T10752] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 249.155261][T10765] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.216115][T10752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 249.221008][T10768] loop5: detected capacity change from 0 to 128 [ 249.261567][T10752] System zones: 1-12 [ 249.280237][T10771] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20016 [ 249.334017][T10752] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.1944: corrupted in-inode xattr: e_value size too large [ 249.403176][T10768] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 249.424214][T10752] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1944: couldn't read orphan inode 15 (err -117) [ 249.468163][T10768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.486217][T10752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.518357][T10779] sp0: Synchronizing with TNC [ 249.703889][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.888441][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'. [ 249.920437][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 249.960251][T10789] netlink: 'syz.2.1961': attribute type 14 has an invalid length. [ 249.968498][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 249.990135][T10794] tc_dump_action: action bad kind [ 250.241777][ T5932] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 250.424572][ T5932] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 250.477840][ T5932] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 250.511237][ T5932] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 250.569507][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.603169][ T5932] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 250.790611][T10831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.838999][ T5932] gspca_sn9c2028: read1 error -32 [ 251.110601][ T5932] gspca_sn9c2028: read1 error -71 [ 251.122828][ T5932] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -71 [ 251.181546][ T5932] usb 6-1: USB disconnect, device number 8 [ 251.245689][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 251.383500][T10855] loop1: detected capacity change from 0 to 512 [ 251.473544][T10855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 251.517042][T10855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.604211][T10855] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1982: bad orphan inode 131083 [ 251.633614][T10855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.790483][T10873] loop4: detected capacity change from 0 to 256 [ 251.799344][T10855] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 251.943406][T10873] FAT-fs (loop4): Directory bread(block 64) failed [ 251.963347][T10873] FAT-fs (loop4): Directory bread(block 65) failed [ 251.997693][T10873] FAT-fs (loop4): Directory bread(block 66) failed [ 252.039406][T10873] FAT-fs (loop4): Directory bread(block 67) failed [ 252.046057][T10873] FAT-fs (loop4): Directory bread(block 68) failed [ 252.057143][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.099639][T10873] FAT-fs (loop4): Directory bread(block 69) failed [ 252.106485][T10873] FAT-fs (loop4): Directory bread(block 70) failed [ 252.156910][T10873] FAT-fs (loop4): Directory bread(block 71) failed [ 252.175048][T10873] FAT-fs (loop4): Directory bread(block 72) failed [ 252.177142][T10882] loop2: detected capacity change from 0 to 512 [ 252.204466][T10873] FAT-fs (loop4): Directory bread(block 73) failed [ 252.320963][T10882] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 252.380039][T10882] EXT4-fs (loop2): failed to open journal device unknown-block(128,0) -6 [ 252.453065][T10892] ptrace attach of "./syz-executor exec"[5822] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[10892] [ 252.642083][T10896] loop1: detected capacity change from 0 to 1024 [ 252.655432][T10894] loop0: detected capacity change from 0 to 4096 [ 252.683957][T10896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.729281][T10896] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.742447][T10905] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 252.764142][T10898] loop6: detected capacity change from 0 to 2048 [ 252.830501][T10896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1999: bg 0: block 112: padding at end of block bitmap is not set [ 252.845757][T10898] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 252.856796][T10896] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 476 with error 117 [ 252.867488][T10894] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 252.871038][T10896] EXT4-fs (loop1): This should not happen!! Data will be lost [ 252.871038][T10896] [ 252.887199][T10900] loop2: detected capacity change from 0 to 2048 [ 252.906068][T10898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.101965][T10910] loop4: detected capacity change from 0 to 256 [ 253.168412][T10910] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 253.190629][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.201641][T10908] loop5: detected capacity change from 0 to 4096 [ 253.347406][T10908] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 253.370647][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 253.438744][T10908] ntfs3(loop5): ino=5, "/" ntfs_readdir [ 253.877501][T10918] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 253.966163][T10932] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2016'. [ 254.009909][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 254.037685][T10918] ntfs3(loop1): ino=19, mi_enum_attr [ 254.052349][T10918] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 254.479417][T10955] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 254.492970][T10949] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2025'. [ 254.538484][T10956] set_capacity_and_notify: 1 callbacks suppressed [ 254.538504][T10956] loop4: detected capacity change from 0 to 512 [ 254.609285][ T5906] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 254.652133][T10956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.753003][T10956] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.2027: No space for directory leaf checksum. Please run e2fsck -D. [ 254.793408][ T5906] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 254.805290][ T5906] usb 6-1: config 0 has no interface number 0 [ 254.821642][ T5906] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 254.831050][T10956] EXT4-fs error (device loop4): ext4_readdir:224: inode #2: comm syz.4.2027: path (unknown): directory fails checksum at offset 0 [ 254.846140][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.860892][ T5906] usb 6-1: Product: syz [ 254.865099][ T5906] usb 6-1: Manufacturer: syz [ 254.887180][ T5906] usb 6-1: SerialNumber: syz [ 254.923808][ T5906] usb 6-1: config 0 descriptor?? [ 254.934099][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.952291][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.008980][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.168284][T10976] loop0: detected capacity change from 0 to 2048 [ 255.210723][T10976] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 255.282923][T10980] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.566923][ T5906] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 255.610483][ T5906] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 255.663540][ T5906] asix 6-1:0.251: probe with driver asix failed with error -71 [ 255.703840][ T5906] usb 6-1: USB disconnect, device number 9 [ 255.739781][T10994] vim2m vim2m.0: vidioc_s_fmt queue busy [ 255.899549][T11001] loop2: detected capacity change from 0 to 64 [ 256.012999][T11007] xt_hashlimit: size too large, truncated to 1048576 [ 256.058990][T11009] tmpfs: Cannot retroactively limit inodes [ 256.432279][T11020] loop1: detected capacity change from 0 to 1024 [ 256.524943][T11020] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.542101][T11020] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.551562][T11020] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.602369][T11020] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.649310][T11029] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.688980][T11029] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.806656][ T2973] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.853998][ T2973] hfsplus: request for non-existent node 33554434 in B*Tree [ 256.975050][T11042] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 257.424109][T11053] loop1: detected capacity change from 0 to 4096 [ 257.562157][ T31] audit: type=1804 audit(1769793620.318:120): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2071" name=2F6E6577726F6F742F3334342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop1" ino=33 res=1 errno=0 [ 257.685808][T11063] loop2: detected capacity change from 0 to 512 [ 257.709578][T11064] loop4: detected capacity change from 0 to 8 [ 257.747704][T11063] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 257.823827][T11064] SQUASHFS error: Unable to read directory block [2c0:35] [ 257.831997][T11035] loop6: detected capacity change from 0 to 40427 [ 257.896101][T11035] F2FS-fs (loop6): invalid crc value [ 258.165683][T11071] loop2: detected capacity change from 0 to 512 [ 258.182914][T11073] loop1: detected capacity change from 0 to 512 [ 258.190905][T11035] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.243608][T11035] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 258.290014][T11075] EXT4-fs (loop4): 1 truncate cleaned up [ 258.291176][T11071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.331968][T11071] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.354137][T11075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.389573][T11073] EXT4-fs (loop1): 1 orphan inode deleted [ 258.403636][T11056] non-latin1 character 0x230 found in JFS file name [ 258.422335][T11073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.445666][T11073] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.460961][T11056] mount with iocharset=utf8 to access [ 258.483772][T11071] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.2078: path /359/file1: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 258.560199][T11073] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0000601b, b_size=4096, device loop1 blocksize: 4096 [ 258.589849][T11071] EXT4-fs (loop2): Remounting filesystem read-only [ 258.619295][T11073] grow_buffers: requested out-of-range block 144115188075855872 for device loop1 [ 258.660290][T11073] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted [ 258.697231][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.804616][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.921331][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.950613][T11121] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2100'. [ 259.972614][T11125] set_capacity_and_notify: 3 callbacks suppressed [ 259.972634][T11125] loop6: detected capacity change from 0 to 128 [ 260.010501][T11127] loop1: detected capacity change from 0 to 512 [ 260.034665][T11125] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.090718][T11133] loop2: detected capacity change from 0 to 512 [ 260.097421][T11127] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2102: inode has both inline data and extents flags [ 260.124228][T11125] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.187372][T11133] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2104: inode has both inline data and extents flags [ 260.241351][T11127] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2102: couldn't read orphan inode 15 (err -117) [ 260.269511][T11133] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2104: couldn't read orphan inode 15 (err -117) [ 260.317684][T11127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.349454][T11142] syz.5.2107 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 260.372317][T11133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.393237][T11125] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.470195][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.642021][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.099268][T11168] netlink: 652 bytes leftover after parsing attributes in process `syz.5.2119'. [ 261.130655][T11168] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2119'. [ 261.229211][T11170] loop1: detected capacity change from 0 to 2048 [ 261.237875][T11170] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.326459][T11179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.552904][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2126'. [ 262.189507][T11207] ipvlan2: entered promiscuous mode [ 262.400818][T11189] loop1: detected capacity change from 0 to 32768 [ 262.412137][T11189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2128 (11189) [ 262.496639][T11189] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.559451][T11189] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 262.621836][T11218] loop4: detected capacity change from 0 to 1024 [ 262.700259][T11218] EXT4-fs: Ignoring removed bh option [ 262.758791][T11218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.786825][T11189] BTRFS info (device loop1): enabling ssd optimizations [ 262.801913][T11189] BTRFS info (device loop1): turning on flush-on-commit [ 262.811176][T11189] BTRFS info (device loop1): enabling free space tree [ 262.830049][T11189] BTRFS info (device loop1): enabling auto defrag [ 262.841795][T11189] BTRFS info (device loop1): use lzo compression, level 1 [ 262.848954][T11189] BTRFS info (device loop1): max_inline set to 4096 [ 263.034963][T11195] syz.6.2130 (11195): drop_caches: 2 [ 263.071475][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.132718][ T5819] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 263.335375][T11208] loop5: detected capacity change from 0 to 32768 [ 263.389284][T11208] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.526588][T11208] XFS (loop5): Ending clean mount [ 263.722784][ T31] audit: type=1800 audit(1769793626.478:121): pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2137" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 263.899277][ T5822] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 264.131761][T11274] ALSA: mixer_oss: invalid OSS volume 'LIDE' [ 264.583263][T11284] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 264.611372][T11284] romfs: block size(16384) > page size(4096) not supported by filesystem [ 264.650569][T11284] VFS: Can't find a romfs filesystem on dev nullb0. [ 264.650569][T11284] [ 264.719952][T11286] loop6: detected capacity change from 0 to 2048 [ 264.778526][T11286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.847474][T11293] loop1: detected capacity change from 0 to 64 [ 265.040911][ T5819] hfs: node 4:3 still has 1 user(s)! [ 265.285416][T11304] loop6: detected capacity change from 0 to 2048 [ 265.349555][T11304] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 265.421510][ T6348] udevd[6348]: incorrect nilfs2 checksum on /dev/loop6 [ 265.427050][T11304] NILFS (loop6): mounting unchecked fs [ 265.495276][T11304] NILFS (loop6): recovery complete [ 265.555329][T11308] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 265.627061][T11277] loop4: detected capacity change from 0 to 32768 [ 265.627651][ T31] audit: type=1800 audit(1769793628.378:122): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2168" name="file1" dev="loop6" ino=12 res=0 errno=0 [ 265.702177][T11277] ialloc: diAlloc returned -5! [ 266.066522][T11321] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2176'. [ 266.143658][T11296] loop5: detected capacity change from 0 to 32768 [ 266.191539][T11296] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.303692][T11321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.314402][T11296] XFS (loop5): Ending clean mount [ 266.350811][T11296] XFS (loop5): Quotacheck needed: Please wait. [ 266.402514][T11321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.487575][T11321] bond0 (unregistering): Released all slaves [ 266.506206][T11296] XFS (loop5): Quotacheck: Done. [ 266.535220][T11325] loop2: detected capacity change from 0 to 2048 [ 266.626137][ T5822] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 266.790075][T11325] Dev loop2: unable to read partition block 23055453 [ 266.852108][T11325] loop2: RDSK (1311599104) unable to read partition table [ 266.904007][T11325] loop2: partition table beyond EOD, truncated [ 266.933468][T11325] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 266.996134][ T5189] Dev loop2: unable to read partition block 23055453 [ 267.010946][ T5906] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 267.016691][ T5189] loop2: RDSK (1311599104) unable to read partition table [ 267.044652][ T5189] loop2: partition table beyond EOD, truncated [ 267.075004][T11355] loop1: detected capacity change from 0 to 512 [ 267.090604][T11355] EXT4-fs: Ignoring removed orlov option [ 267.127579][T11355] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 267.190072][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 267.223367][T11355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 267.240391][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.253289][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.259949][T11355] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.2189: corrupted in-inode xattr: e_value size too large [ 267.263144][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.290238][ T5906] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.299372][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.341225][ T5906] usb 5-1: config 0 descriptor?? [ 267.372006][T11355] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2189: couldn't read orphan inode 15 (err -117) [ 267.466730][T11355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.590597][T11355] netlink: 'syz.1.2189': attribute type 5 has an invalid length. [ 267.598392][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'. [ 267.698533][T11355] ip6erspan0: entered promiscuous mode [ 267.813499][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.818240][ T5906] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input15 [ 267.916646][ T5906] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 267.994032][ T5906] usb 5-1: USB disconnect, device number 15 [ 268.301157][T11384] fido_id[11384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 268.689281][ T792] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 268.766152][T11388] loop2: detected capacity change from 0 to 32768 [ 268.781088][T11388] xfs: Deprecated parameter 'noikeep' [ 268.798081][T11388] XFS: noikeep mount option is deprecated. [ 268.833981][T11392] loop5: detected capacity change from 0 to 32768 [ 268.842193][ T792] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 253, using maximum allowed: 30 [ 268.874194][T11388] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.897048][T11392] [ 268.897048][T11392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.897048][T11392] [ 268.904917][ T792] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.925301][ T792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.933779][ T792] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.00 [ 268.944955][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.958676][ T792] usb 2-1: config 0 descriptor?? [ 268.976636][T11388] XFS (loop2): Ending clean mount [ 268.990038][T11409] loop4: detected capacity change from 0 to 256 [ 269.005622][T11388] XFS (loop2): Quotacheck needed: Please wait. [ 269.013775][T11392] ERROR: (device loop5): diWrite: ixpxd invalid [ 269.013775][T11392] [ 269.027376][T11392] ERROR: (device loop5): txCommit: [ 269.027376][T11392] [ 269.036778][T11409] exfat: Deprecated parameter 'namecase' [ 269.105191][T11409] exfat: Deprecated parameter 'namecase' [ 269.105716][T11411] ERROR: (device loop5): diWrite: ixpxd invalid [ 269.105716][T11411] [ 269.122052][T11411] ERROR: (device loop5): txCommit: [ 269.122052][T11411] [ 269.125835][T11388] XFS (loop2): Quotacheck: Done. [ 269.150460][T11409] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 269.234130][ T5820] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 269.251239][ T5822] [ 269.251239][ T5822] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.251239][ T5822] [ 269.276235][ T5822] [ 269.276235][ T5822] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.276235][ T5822] [ 269.420553][ T792] hid-corsair-void 0003:1B1C:0A75.0016: ignoring exceeding usage max [ 269.484974][ T792] hid-corsair-void 0003:1B1C:0A75.0016: hidraw0: USB HID v0.08 Device [HID 1b1c:0a75] on usb-dummy_hcd.1-1/input0 [ 269.667049][ T24] hid-corsair-void 0003:1B1C:0A75.0016: failed to request firmware (reason: -71) [ 269.676607][ T792] hid-corsair-void 0003:1B1C:0A75.0016: failed to request battery (reason: -71) [ 269.727641][ T5906] usb 2-1: USB disconnect, device number 16 [ 269.789306][T11414] fido_id[11414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:0A75.0016/report_descriptor': No such device [ 270.637434][T11448] loop4: detected capacity change from 0 to 2048 [ 270.781539][T11456] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.389431][ T792] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 271.561449][ T792] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.572795][ T792] usb 2-1: config 0 has no interface number 0 [ 271.589547][ T792] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 271.605693][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.646418][ T792] usb 2-1: config 0 descriptor?? [ 271.666968][ T792] usb 2-1: selecting invalid altsetting 1 [ 271.677740][ T792] dvb_ttusb_budget: ttusb_init_controller: error [ 271.695332][ T792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 271.889278][ T792] DVB: Unable to find symbol cx22700_attach() [ 272.021953][ T792] DVB: Unable to find symbol tda10046_attach() [ 272.028144][ T792] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 272.079491][ T792] usb 2-1: USB disconnect, device number 17 [ 272.114300][T11499] loop2: detected capacity change from 0 to 4096 [ 272.316858][T11499] ntfs3(loop2): failed to convert "0000" to iso8859-14 [ 272.354361][T11499] ntfs3(loop2): failed to convert name for inode 1e. [ 272.393871][T11499] ntfs3(loop2): ino=1f, mi_enum_attr [ 272.413576][T11499] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 272.604632][T11487] loop5: detected capacity change from 0 to 32768 [ 272.717162][T11487] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 272.764908][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 272.819699][T11518] tipc: Enabled bearer , priority 0 [ 272.962807][T11487] XFS (loop5): Ending clean mount [ 273.219756][ T5822] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.449755][T11505] loop0: detected capacity change from 0 to 32768 [ 273.573288][T11505] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 273.693976][T11539] loop6: detected capacity change from 0 to 4096 [ 273.725515][T11505] XFS (loop0): Ending clean mount [ 273.784029][T11505] XFS (loop0): Quotacheck needed: Please wait. [ 273.913945][T11505] XFS (loop0): Quotacheck: Done. [ 273.949548][ T5913] tipc: Node number set to 771752064 [ 274.159449][ T5818] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 274.169696][ T792] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 274.184150][T11531] loop1: detected capacity change from 0 to 32768 [ 274.191314][T11560] loop5: detected capacity change from 0 to 1024 [ 274.291623][T11531] find_entry called with index = 0 [ 274.291688][T11531] find_entry called with index = 0 [ 274.306263][T11531] find_entry called with index >= next_index [ 274.306281][T11531] find_entry called with index >= next_index [ 274.306292][T11531] find_entry called with index >= next_index [ 274.306305][T11531] find_entry called with index >= next_index [ 274.306316][T11531] find_entry called with index >= next_index [ 274.359201][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.359240][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.359283][ T792] usb 5-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 274.359312][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.362696][ T792] usb 5-1: config 0 descriptor?? [ 274.626275][T11569] loop5: detected capacity change from 0 to 64 [ 274.796915][ T792] hid-generic 0003:18D1:503C.0017: hidraw0: USB HID ve6.e6 Device [HID 18d1:503c] on usb-dummy_hcd.4-1/input0 [ 274.997324][ T792] usb 5-1: USB disconnect, device number 16 [ 275.098345][T11572] fido_id[11572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 275.638414][T11596] loop6: detected capacity change from 0 to 8 [ 275.714379][T11596] squashfs: Unknown parameter '00000000000000000000' [ 276.231356][T11616] netlink: zone id is out of range [ 276.236531][T11616] netlink: zone id is out of range [ 276.289269][T11616] netlink: zone id is out of range [ 276.299399][T11616] netlink: zone id is out of range [ 276.304610][T11616] netlink: zone id is out of range [ 276.330303][T11621] fuse: Bad value for 'rootmode' [ 276.335688][T11616] netlink: zone id is out of range [ 276.335826][T11616] netlink: zone id is out of range [ 276.408886][T11616] netlink: zone id is out of range [ 276.427280][T11616] netlink: zone id is out of range [ 276.439363][T11616] netlink: zone id is out of range [ 276.620954][T11628] loop2: detected capacity change from 0 to 512 [ 276.684296][T11630] loop1: detected capacity change from 0 to 64 [ 276.724435][T11588] loop0: detected capacity change from 0 to 32768 [ 276.744183][T11628] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2304: invalid indirect mapped block 4294967295 (level 1) [ 276.818134][T11588] read_mapping_page failed! [ 276.827110][ T31] audit: type=1326 audit(1769793639.578:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 276.854431][T11628] EXT4-fs (loop2): Remounting filesystem read-only [ 276.865725][T11628] EXT4-fs (loop2): 2 truncates cleaned up [ 276.901104][T11588] ERROR: (device loop0): txCommit: [ 276.901104][T11588] [ 276.916608][T11628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.959232][ T31] audit: type=1326 audit(1769793639.628:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.028167][ T31] audit: type=1326 audit(1769793639.628:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.125089][ T31] audit: type=1326 audit(1769793639.628:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.213384][T11646] loop4: detected capacity change from 0 to 47 [ 277.239235][ T31] audit: type=1326 audit(1769793639.628:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.282212][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.306896][T11649] loop1: detected capacity change from 0 to 512 [ 277.317136][ T31] audit: type=1326 audit(1769793639.628:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.462214][T11649] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2313: couldn't read orphan inode 26 (err -116) [ 277.492214][ T31] audit: type=1326 audit(1769793639.628:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.4.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7ed9aeb9 code=0x7ffc0000 [ 277.518123][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 277.526834][T11649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.626986][T11649] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.697748][T11649] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 277.845383][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.131736][T11676] kernel read not supported for file / (pid: 11676 comm: syz.5.2323) [ 278.169665][ T31] audit: type=1800 audit(1769793640.918:130): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2323" name=0D dev="mqueue" ino=26382 res=0 errno=0 [ 278.987893][T11716] loop4: detected capacity change from 0 to 1024 [ 279.119195][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 279.314080][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.349236][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.386383][ T24] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 279.420162][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.480544][ T24] usb 2-1: config 0 descriptor?? [ 279.719645][T11740] F2FS-fs: Conflicting test_dummy_encryption options [ 279.888105][T11724] overlayfs: statfs failed on './file0' [ 279.920781][ T24] uclogic 0003:2179:0077.0018: interface is invalid, ignoring [ 280.121927][ T5906] usb 2-1: USB disconnect, device number 18 [ 280.626008][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 280.932262][T11778] loop1: detected capacity change from 0 to 256 [ 280.953259][T11783] loop0: detected capacity change from 0 to 256 [ 280.975815][T11778] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 281.076501][T11783] FAT-fs (loop0): Directory bread(block 64) failed [ 281.083444][T11778] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 281.121213][T11783] FAT-fs (loop0): Directory bread(block 65) failed [ 281.127857][T11783] FAT-fs (loop0): Directory bread(block 66) failed [ 281.221555][T11783] FAT-fs (loop0): Directory bread(block 67) failed [ 281.249297][T11783] FAT-fs (loop0): Directory bread(block 68) failed [ 281.255865][T11783] FAT-fs (loop0): Directory bread(block 69) failed [ 281.299260][T11783] FAT-fs (loop0): Directory bread(block 70) failed [ 281.331941][T11783] FAT-fs (loop0): Directory bread(block 71) failed [ 281.373320][T11783] FAT-fs (loop0): Directory bread(block 72) failed [ 281.415587][T11783] FAT-fs (loop0): Directory bread(block 73) failed [ 281.689222][ T5913] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 281.826351][T11767] loop5: detected capacity change from 0 to 32768 [ 281.866423][T11767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2355 (11767) [ 281.909179][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 281.924004][ T5913] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 281.942329][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.964967][T11767] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 281.994814][ T5913] usb 2-1: config 0 descriptor?? [ 282.002030][T11767] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 282.006341][T11813] Bluetooth: MGMT ver 1.23 [ 282.201274][T11767] BTRFS info (device loop5): rebuilding free space tree [ 282.249125][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.267312][T11767] BTRFS info (device loop5): disabling free space tree [ 282.340250][T11767] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 282.359114][T11767] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 282.400463][T11767] BTRFS info (device loop5): setting nodatasum [ 282.406723][T11767] BTRFS info (device loop5): setting nodatacow [ 282.433035][T11767] BTRFS info (device loop5): turning off barriers [ 282.439166][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 282.457857][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.465844][T11767] BTRFS info (device loop5): force clearing of disk cache [ 282.489154][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.489889][ T5913] lenovo 0003:17EF:60A4.0019: unknown main item tag 0x0 [ 282.532504][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.569119][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 282.588392][ T5913] lenovo 0003:17EF:60A4.0019: hidraw0: USB HID vb4.34 Device [HID 17ef:60a4] on usb-dummy_hcd.1-1/input0 [ 282.633709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.678380][ T24] usb 5-1: config 0 descriptor?? [ 282.695150][T11767] BTRFS info (device loop5): resizing devid 6744073709551615 [ 282.719564][ T5932] usb 2-1: USB disconnect, device number 19 [ 282.725866][T11767] BTRFS info (device loop5): resizer unable to find device 6744073709551615 [ 282.869610][T11843] fido_id[11843]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 282.983757][ T5822] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.144226][ T24] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 283.186260][ T24] microsoft 0003:045E:07DA.001A: unbalanced collection at end of report description [ 283.231145][ T24] microsoft 0003:045E:07DA.001A: parse failed [ 283.261023][ T24] microsoft 0003:045E:07DA.001A: probe with driver microsoft failed with error -22 [ 283.376841][ T24] usb 5-1: USB disconnect, device number 17 [ 283.709496][ T792] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.842228][T11867] loop6: detected capacity change from 0 to 4096 [ 283.874649][ T792] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.60 [ 283.888588][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.898205][ T792] usb 2-1: Product: syz [ 283.904606][ T792] usb 2-1: Manufacturer: syz [ 283.914949][ T792] usb 2-1: SerialNumber: syz [ 283.933650][ T792] usb 2-1: config 0 descriptor?? [ 283.961666][ T792] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 284.007455][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.048961][ T792] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 284.090587][ T792] usb 2-1: media controller created [ 284.164681][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.427323][ T792] DVB: Unable to find symbol mt352_attach() [ 284.593078][ T792] DVB: Unable to find symbol nxt6000_attach() [ 284.616150][ T792] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 284.679241][ T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 284.720623][ T792] dvb-usb: schedule remote query interval to 1000 msecs. [ 284.776862][ T792] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 284.809111][ T792] dvb-usb: bulk message failed: -22 (7/0) [ 284.814881][ T792] dvb-usb: bulk message failed: -22 (7/0) [ 284.889879][ T792] usb 2-1: USB disconnect, device number 20 [ 284.892924][T11892] loop2: detected capacity change from 0 to 4096 [ 284.965933][T11905] loop5: detected capacity change from 0 to 764 [ 284.984259][T11892] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 284.991488][T11905] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 285.022361][T11892] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 285.080189][ T792] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 285.336441][T11916] loop2: detected capacity change from 0 to 512 [ 285.388382][T11916] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2412: casefold flag without casefold feature [ 285.421492][T11922] loop1: detected capacity change from 0 to 1024 [ 285.459362][T11916] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2412: couldn't read orphan inode 15 (err -117) [ 285.477997][T11916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.501230][T11922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 285.527542][T11922] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.563956][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.572360][T11922] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.2414: lblock 0 mapped to illegal pblock 0 (length 6) [ 285.584840][ T31] audit: type=1800 audit(1769793648.318:131): pid=11922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2414" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 285.624848][T11922] EXT4-fs (loop1): Remounting filesystem read-only [ 285.833046][ T5819] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 286.574868][T11954] loop5: detected capacity change from 0 to 1024 [ 286.729993][T11954] hfsplus: bad catalog entry type [ 286.780285][T11966] [U] „ [ 286.886437][T11961] loop4: detected capacity change from 0 to 4096 [ 286.969493][ T6001] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 287.024110][T11973] net_ratelimit: 47 callbacks suppressed [ 287.024132][T11973] sock: sock_set_timeout: `syz.5.2437' (pid 11973) tries to set negative timeout [ 287.083188][T11976] loop0: detected capacity change from 0 to 64 [ 287.139113][ T6001] usb 3-1: Using ep0 maxpacket: 16 [ 287.168462][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.189143][ T31] audit: type=1800 audit(1769793649.938:132): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2439" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 287.212766][ T6001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.270882][ T6001] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.342078][ T6001] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.389970][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.440598][ T6001] usb 3-1: config 0 descriptor?? [ 287.863781][T11993] loop0: detected capacity change from 0 to 256 [ 287.863799][ T6001] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 287.866207][ T6001] microsoft 0003:045E:07DA.001B: unsupported Resolution Multiplier 0 [ 287.895859][T11993] exfat: Deprecated parameter 'namecase' [ 287.938859][T11993] exfat: Deprecated parameter 'namecase' [ 287.948127][ T6001] microsoft 0003:045E:07DA.001B: implement() called with n (152) > 32! (kworker/0:7) [ 287.979719][T11993] exfat: Deprecated parameter 'utf8' [ 287.998132][T11997] loop6: detected capacity change from 0 to 2048 [ 287.999201][T11993] exfat: Deprecated parameter 'namecase' [ 288.040155][T11997] EXT4-fs: Ignoring removed bh option [ 288.077617][ T6001] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 288.083507][T11997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.152402][T11993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 288.194832][ T6001] microsoft 0003:045E:07DA.001B: no inputs found [ 288.218121][T12004] loop1: detected capacity change from 0 to 256 [ 288.247678][ T6001] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 288.303280][ T6001] usb 3-1: USB disconnect, device number 9 [ 288.464852][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.482135][T12002] fido_id[12002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 288.662233][T12017] rdma_op ffff888079cc89f0 conn xmit_rdma 0000000000000000 [ 289.362923][T12041] loop1: detected capacity change from 0 to 256 [ 289.406813][T12041] exfat: Deprecated parameter 'namecase' [ 289.446575][T12041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11ccab4c, utbl_chksum : 0xe619d30d) [ 289.692883][T12052] loop5: detected capacity change from 0 to 128 [ 289.764020][T12052] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.801852][T12052] ext4 filesystem being mounted at /442/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.883215][T12056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.022718][ T5822] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.389546][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 290.569852][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.598009][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.624375][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 290.668370][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.723346][ T5843] usb 6-1: config 0 descriptor?? [ 290.840942][ T6001] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 290.880068][ T31] audit: type=1326 audit(1769793653.638:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 290.975766][ T31] audit: type=1326 audit(1769793653.638:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 291.033776][ T31] audit: type=1326 audit(1769793653.668:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 291.051623][T12093] loop4: detected capacity change from 0 to 256 [ 291.076125][ T6001] usb 3-1: config 0 has no interfaces? [ 291.083555][ T6001] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 291.123428][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.156266][ T31] audit: type=1326 audit(1769793653.668:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 291.187650][ T5843] lg-g15 0003:046D:C222.001C: collection stack underflow [ 291.220518][T12093] FAT-fs (loop4): Directory bread(block 64) failed [ 291.239086][ T5843] lg-g15 0003:046D:C222.001C: item 0 1 0 12 parsing failed [ 291.246846][ T31] audit: type=1326 audit(1769793653.668:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.6.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0cb9aeb9 code=0x7ffc0000 [ 291.250946][ T6001] usb 3-1: config 0 descriptor?? [ 291.273471][T12093] FAT-fs (loop4): Directory bread(block 65) failed [ 291.285361][ T5843] lg-g15 0003:046D:C222.001C: probe with driver lg-g15 failed with error -22 [ 291.297376][T12093] FAT-fs (loop4): Directory bread(block 66) failed [ 291.352531][T12093] FAT-fs (loop4): Directory bread(block 67) failed [ 291.369532][ T5843] usb 6-1: USB disconnect, device number 10 [ 291.376850][T12093] FAT-fs (loop4): Directory bread(block 68) failed [ 291.440974][T12093] FAT-fs (loop4): Directory bread(block 69) failed [ 291.455180][T12093] FAT-fs (loop4): Directory bread(block 70) failed [ 291.465120][T12093] FAT-fs (loop4): Directory bread(block 71) failed [ 291.485774][T12093] FAT-fs (loop4): Directory bread(block 72) failed [ 291.499961][T12093] FAT-fs (loop4): Directory bread(block 73) failed [ 291.618942][ T5843] usb 3-1: USB disconnect, device number 10 [ 292.056018][T12125] loop5: detected capacity change from 0 to 128 [ 292.780562][T12143] loop4: detected capacity change from 0 to 4096 [ 292.798922][T12143] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 292.898905][T12154] loop1: detected capacity change from 0 to 1024 [ 292.927676][T12154] hfsplus: Filesystem is marked locked, mounting read-only. [ 292.982684][T12143] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 293.029623][T12154] hfsplus: filesystem is marked locked, leaving read-only. [ 293.108971][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2524'. [ 293.147529][T12158] sch_tbf: burst 0 is lower than device veth0 mtu (1514) ! [ 293.629142][ T5843] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 293.633138][T12178] loop5: detected capacity change from 0 to 256 [ 293.802596][ T31] audit: type=1326 audit(1769793656.558:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.0.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 293.829865][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 293.853196][ T5843] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 293.883769][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.900133][ T31] audit: type=1326 audit(1769793656.558:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.0.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 293.929239][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.957434][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 293.991032][ T31] audit: type=1326 audit(1769793656.608:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.0.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 294.021112][T12184] loop1: detected capacity change from 0 to 4096 [ 294.029601][ T5843] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 294.074143][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.078865][T12150] loop2: detected capacity change from 0 to 40427 [ 294.102355][ T31] audit: type=1326 audit(1769793656.608:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.0.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 294.126357][ T5843] usb 5-1: config 0 descriptor?? [ 294.141557][T12150] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 294.183383][T12150] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 294.201242][ T31] audit: type=1326 audit(1769793656.608:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.0.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08c179aeb9 code=0x7ffc0000 [ 294.245376][T12190] loop5: detected capacity change from 0 to 1024 [ 294.256927][T12150] F2FS-fs (loop2): invalid crc value [ 294.331521][T12184] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 294.351035][T12184] ntfs3(loop1): Failed to load $Extend (-22). [ 294.357756][T12184] ntfs3(loop1): Failed to initialize $Extend. [ 294.613186][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.614797][T12150] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 294.667627][ T2996] hfsplus: b-tree write err: -5, ino 4 [ 294.679244][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.687838][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.703008][T12150] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 294.732917][T12150] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 294.756458][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.809520][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.849146][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.856304][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.934117][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.948015][T12205] loop5: detected capacity change from 0 to 512 [ 294.969380][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 294.992738][ T5843] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 295.048667][ T5843] redragon 0003:0C45:760B.001D: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 295.095194][T12208] loop6: detected capacity change from 0 to 1024 [ 295.107352][ T5843] usb 5-1: USB disconnect, device number 18 [ 295.117223][T12205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.139675][T12205] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.179335][T12205] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 295.188957][T12205] EXT4-fs: Cannot change journaled quota options when quota turned on [ 295.202804][T12208] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 295.352001][ T5822] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.420573][T12208] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2547: lblock 2 mapped to illegal pblock 2 (length 1) [ 295.469960][T12208] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2547: lblock 0 mapped to illegal pblock 48 (length 1) [ 295.520726][T12213] fido_id[12213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 295.538680][T12208] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2547: Failed to acquire dquot type 0 [ 295.622587][T12208] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 295.665515][T12208] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2547: mark_inode_dirty error [ 295.715377][T12208] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 295.784701][T12208] EXT4-fs (loop6): 1 orphan inode deleted [ 295.803062][T12224] loop4: detected capacity change from 0 to 128 [ 295.812880][T12208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.830961][ T13] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 295.880277][T12224] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.897846][ T13] __quota_error: 5 callbacks suppressed [ 295.897864][ T13] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 295.989161][ T13] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 296.013988][T12224] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.176642][T12224] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.2553: reserved inode found cleared - inode=2 [ 296.205712][ T7807] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.224857][ T2996] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.274950][ T2996] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 296.323143][ T2996] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 296.354357][ T7807] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 296.384665][ T5824] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.387434][ T7807] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 296.437975][ T7807] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 296.521223][T12241] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2562'. [ 296.669146][ T6001] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 296.855853][ T6001] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 296.872554][ T6001] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 296.915734][ T6001] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 296.965498][ T6001] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 296.995808][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.024216][ T6001] usb 2-1: Product: syz [ 297.048927][ T6001] usb 2-1: Manufacturer: syz [ 297.054653][T12220] F2FS-fs (loop5): invalid crc value [ 297.099041][ T6001] usb 2-1: SerialNumber: syz [ 297.125153][ T6001] usb 2-1: config 0 descriptor?? [ 297.161876][T12239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.179466][T12239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.189296][ T6001] usb 2-1: ucan: probing device on interface #0 [ 297.392930][T12220] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 297.438386][T12220] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 297.656077][T12278] ------------[ cut here ]------------ [ 297.661868][T12278] RTNL: assertion failed at net/core/dev.c (9542) [ 297.663100][ T6001] usb 2-1: ucan: device reported invalid device info [ 297.668295][T12278] WARNING: net/core/dev.c:9542 at __dev_set_promiscuity+0x530/0x710, CPU#1: syz.4.2576/12278 [ 297.685138][T12278] Modules linked in: [ 297.689261][T12278] CPU: 1 UID: 0 PID: 12278 Comm: syz.4.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.695403][ T6001] usb 2-1: ucan: probe failed; try to update the device firmware [ 297.700223][T12278] Tainted: [L]=SOFTLOCKUP [ 297.700236][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 297.722334][T12278] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 297.728441][T12278] Code: 30 2f 02 e9 06 fc ff ff e8 91 cf 59 f8 e9 fc fb ff ff e8 87 cf 59 f8 48 8d 3d 20 06 93 06 48 c7 c6 80 e8 ba 8c ba 46 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 65 cf 59 f8 48 8b 7c 24 08 48 c7 [ 297.748115][T12278] RSP: 0018:ffffc90004977820 EFLAGS: 00010283 [ 297.754239][T12278] RAX: ffffffff896aa7c9 RBX: ffff888054a22000 RCX: 0000000000080000 [ 297.762261][T12278] RDX: 0000000000002546 RSI: ffffffff8cbae880 RDI: ffffffff8ffdadf0 [ 297.770288][T12278] RBP: 0000000000000000 R08: ffffffff8f9ac0e7 R09: 1ffffffff1f3581c [ 297.778265][T12278] R10: dffffc0000000000 R11: fffffbfff1f3581d R12: 00000000ffffffff [ 297.786303][T12278] R13: 0000000000000000 R14: ffff888054a220b0 R15: 1ffff1100a944416 [ 297.794317][T12278] FS: 00007ffa7cff66c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 297.803305][T12278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.809922][T12278] CR2: 000000110c30c9d0 CR3: 0000000036617000 CR4: 0000000000350ef0 [ 297.817906][T12278] Call Trace: [ 297.821229][T12278] [ 297.824160][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.829852][T12278] ? __hw_addr_add_ex+0x361/0x650 [ 297.834903][T12278] __dev_set_rx_mode+0x17c/0x260 [ 297.839907][T12278] dev_mc_add+0xc8/0x120 [ 297.844172][T12278] igmp6_group_added+0x234/0x820 [ 297.849154][T12278] ? __pfx_igmp6_group_added+0x10/0x10 [ 297.854637][T12278] __ipv6_dev_mc_inc+0x897/0xa50 [ 297.859652][T12278] __ipv6_sock_mc_join+0x503/0x750 [ 297.864777][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.870451][ T5843] usb 2-1: USB disconnect, device number 21 [ 297.870464][T12278] ? _copy_from_user+0x94/0xb0 [ 297.881127][T12278] do_ipv6_setsockopt+0x22eb/0x31c0 [ 297.886349][T12278] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 297.891960][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.897603][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.903300][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.908943][T12278] ? futex_wait+0x29a/0x380 [ 297.913517][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.919189][T12278] ? __lock_acquire+0x6b5/0x2cf0 [ 297.924148][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.929838][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.935490][T12278] ? aa_sk_perm+0x15a/0x960 [ 297.940047][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.945694][T12278] ? aa_sk_perm+0x82d/0x960 [ 297.950263][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.955908][T12278] ? __pfx_aa_sk_perm+0x10/0x10 [ 297.960796][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.966445][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 297.972140][T12278] ? aa_sock_opt_perm+0xff/0x1a0 [ 297.977097][T12278] ipv6_setsockopt+0x59/0x170 [ 297.981835][T12278] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.987745][T12278] do_sock_setsockopt+0x17c/0x1b0 [ 297.992838][T12278] __x64_sys_setsockopt+0x13d/0x1b0 [ 297.998056][T12278] do_syscall_64+0xe2/0xf80 [ 298.002608][T12278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.008680][T12278] ? trace_irq_disable+0x37/0x100 [ 298.013772][T12278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.019696][T12278] RIP: 0033:0x7ffa7ed9aeb9 [ 298.024115][T12278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.043783][T12278] RSP: 002b:00007ffa7cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.052239][T12278] RAX: ffffffffffffffda RBX: 00007ffa7f015fa0 RCX: 00007ffa7ed9aeb9 [ 298.060260][T12278] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 298.068233][T12278] RBP: 00007ffa7ee08c1f R08: 0000000000000120 R09: 0000000000000000 [ 298.076261][T12278] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 298.084268][T12278] R13: 00007ffa7f016038 R14: 00007ffa7f015fa0 R15: 00007ffdbe6c91b8 [ 298.092311][T12278] [ 298.095329][T12278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.102610][T12278] CPU: 1 UID: 0 PID: 12278 Comm: syz.4.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.113569][T12278] Tainted: [L]=SOFTLOCKUP [ 298.117912][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.127978][T12278] Call Trace: [ 298.131263][T12278] [ 298.134202][T12278] vpanic+0x1e0/0x670 [ 298.138213][T12278] panic+0xc5/0xd0 [ 298.141952][T12278] ? __pfx_panic+0x10/0x10 [ 298.146410][T12278] __warn+0x315/0x4a0 [ 298.150408][T12278] ? __dev_set_promiscuity+0x530/0x710 [ 298.155884][T12278] ? __dev_set_promiscuity+0x530/0x710 [ 298.161353][T12278] __report_bug+0x29a/0x540 [ 298.165864][T12278] ? __ipv6_dev_mc_inc+0x897/0xa50 [ 298.170973][T12278] ? __ipv6_sock_mc_join+0x503/0x750 [ 298.176253][T12278] ? do_ipv6_setsockopt+0x22eb/0x31c0 [ 298.181644][T12278] ? __dev_set_promiscuity+0x530/0x710 [ 298.187119][T12278] ? __pfx___report_bug+0x10/0x10 [ 298.192165][T12278] report_bug_entry+0x19a/0x290 [ 298.197015][T12278] ? __dev_set_promiscuity+0x53c/0x710 [ 298.202476][T12278] ? __dev_set_promiscuity+0x541/0x710 [ 298.207942][T12278] handle_bug+0xca/0x200 [ 298.212192][T12278] exc_invalid_op+0x1a/0x50 [ 298.216701][T12278] asm_exc_invalid_op+0x1a/0x20 [ 298.221543][T12278] RIP: 0010:__dev_set_promiscuity+0x53c/0x710 [ 298.227611][T12278] Code: 30 2f 02 e9 06 fc ff ff e8 91 cf 59 f8 e9 fc fb ff ff e8 87 cf 59 f8 48 8d 3d 20 06 93 06 48 c7 c6 80 e8 ba 8c ba 46 25 00 00 <67> 48 0f b9 3a e9 22 fb ff ff e8 65 cf 59 f8 48 8b 7c 24 08 48 c7 [ 298.247223][T12278] RSP: 0018:ffffc90004977820 EFLAGS: 00010283 [ 298.253310][T12278] RAX: ffffffff896aa7c9 RBX: ffff888054a22000 RCX: 0000000000080000 [ 298.261436][T12278] RDX: 0000000000002546 RSI: ffffffff8cbae880 RDI: ffffffff8ffdadf0 [ 298.269421][T12278] RBP: 0000000000000000 R08: ffffffff8f9ac0e7 R09: 1ffffffff1f3581c [ 298.277396][T12278] R10: dffffc0000000000 R11: fffffbfff1f3581d R12: 00000000ffffffff [ 298.285361][T12278] R13: 0000000000000000 R14: ffff888054a220b0 R15: 1ffff1100a944416 [ 298.293338][T12278] ? __dev_set_promiscuity+0x529/0x710 [ 298.298818][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.304448][T12278] ? __hw_addr_add_ex+0x361/0x650 [ 298.309485][T12278] __dev_set_rx_mode+0x17c/0x260 [ 298.314427][T12278] dev_mc_add+0xc8/0x120 [ 298.318669][T12278] igmp6_group_added+0x234/0x820 [ 298.323606][T12278] ? __pfx_igmp6_group_added+0x10/0x10 [ 298.329071][T12278] __ipv6_dev_mc_inc+0x897/0xa50 [ 298.334009][T12278] __ipv6_sock_mc_join+0x503/0x750 [ 298.339113][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.344741][T12278] ? _copy_from_user+0x94/0xb0 [ 298.349516][T12278] do_ipv6_setsockopt+0x22eb/0x31c0 [ 298.354719][T12278] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 298.360261][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.365888][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.371519][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.377148][T12278] ? futex_wait+0x29a/0x380 [ 298.381647][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.387274][T12278] ? __lock_acquire+0x6b5/0x2cf0 [ 298.392215][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.397843][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.403470][T12278] ? aa_sk_perm+0x15a/0x960 [ 298.407969][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.413593][T12278] ? aa_sk_perm+0x82d/0x960 [ 298.418087][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.423717][T12278] ? __pfx_aa_sk_perm+0x10/0x10 [ 298.428562][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.434188][T12278] ? srso_alias_return_thunk+0x5/0xfbef5 [ 298.439813][T12278] ? aa_sock_opt_perm+0xff/0x1a0 [ 298.444754][T12278] ipv6_setsockopt+0x59/0x170 [ 298.449431][T12278] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.455319][T12278] do_sock_setsockopt+0x17c/0x1b0 [ 298.460345][T12278] __x64_sys_setsockopt+0x13d/0x1b0 [ 298.465545][T12278] do_syscall_64+0xe2/0xf80 [ 298.470038][T12278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.476094][T12278] ? trace_irq_disable+0x37/0x100 [ 298.481113][T12278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.486999][T12278] RIP: 0033:0x7ffa7ed9aeb9 [ 298.491409][T12278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.511007][T12278] RSP: 002b:00007ffa7cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.519416][T12278] RAX: ffffffffffffffda RBX: 00007ffa7f015fa0 RCX: 00007ffa7ed9aeb9 [ 298.527380][T12278] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 298.535341][T12278] RBP: 00007ffa7ee08c1f R08: 0000000000000120 R09: 0000000000000000 [ 298.543300][T12278] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 298.551260][T12278] R13: 00007ffa7f016038 R14: 00007ffa7f015fa0 R15: 00007ffdbe6c91b8 [ 298.559241][T12278] [ 298.562572][T12278] Kernel Offset: disabled [ 298.566888][T12278] Rebooting in 86400 seconds..