last executing test programs: 5m7.706264295s ago: executing program 0 (id=6965): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r0, 0x0, 0x178, 0x20000810, 0x0, 0x0) 5m7.590370211s ago: executing program 0 (id=6967): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000030c0)=[{}], &(0x7f0000000040)=0x8) 5m7.295676615s ago: executing program 0 (id=6972): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f00000001c0)=[{0x4, '\x00', @buffer={"9b2ced60257bb3c16a2e00507e71d14f81baf598bed8c675a76ac66b27e98ba3", 0x20}, 0x3700000}]}) 5m7.020333579s ago: executing program 0 (id=6978): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m6.99443074s ago: executing program 3 (id=6979): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x9, &(0x7f0000000040)=""/175, &(0x7f0000000100)=0xaf) 5m6.707484675s ago: executing program 3 (id=6984): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x60d1, &(0x7f00000066c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 5m6.516499134s ago: executing program 0 (id=6985): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") 5m5.685808915s ago: executing program 0 (id=6992): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x40045436, 0x14) 5m4.983186979s ago: executing program 32 (id=6992): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r0, 0x40045436, 0x14) 5m4.97627788s ago: executing program 3 (id=6996): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0xb8, 0x0, 0xb8, 0x0, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'veth1\x00'}, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3f}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 5m4.539091081s ago: executing program 3 (id=7008): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m4.064639344s ago: executing program 3 (id=7002): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r0, 0x100) 5m3.303029972s ago: executing program 3 (id=7009): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 5m2.779955507s ago: executing program 33 (id=7009): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0x8) 1m21.636430883s ago: executing program 6 (id=9834): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, 0x0) 1m21.303110939s ago: executing program 6 (id=9838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x84}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 1m20.940487297s ago: executing program 6 (id=9843): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) 1m20.67916367s ago: executing program 6 (id=9846): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m20.07288892s ago: executing program 6 (id=9854): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b8000000000000002900000032"], 0xb8}}], 0x2, 0x20000000) 1m19.4514131s ago: executing program 6 (id=9863): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x10010) 1m19.079295969s ago: executing program 34 (id=9863): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x10010) 2.411664822s ago: executing program 1 (id=10738): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.091943028s ago: executing program 1 (id=10742): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) 1.773673513s ago: executing program 1 (id=10747): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1.569713513s ago: executing program 4 (id=10751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 1.563919633s ago: executing program 1 (id=10752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x80000}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 1.445983219s ago: executing program 5 (id=10753): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000d80)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000014c0)='*(\x00') 1.408112941s ago: executing program 2 (id=10755): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000000380), 0x0) 1.349442834s ago: executing program 4 (id=10756): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 1.285772888s ago: executing program 1 (id=10757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000190001002dbd7000fcdbdf251d01060015000300040000a0010200003b23a0906cc60f7604000800080005000506fb"], 0x34}, 0x1, 0x0, 0x0, 0x2404c080}, 0x24008080) 1.217189751s ago: executing program 5 (id=10758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 1.143221614s ago: executing program 2 (id=10759): poll(&(0x7f0000009b00)=[{}], 0x20, 0x72) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) 1.065510318s ago: executing program 1 (id=10760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000180)={0x40, 0x15, 0x2, "1298"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.005274191s ago: executing program 7 (id=10761): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 982.978922ms ago: executing program 4 (id=10762): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xbb97, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x39, {0x6, 0x0, 0x2, 0x1}}}], 0x18}}], 0x1, 0xaaf2b733043f2f6d) 913.845785ms ago: executing program 5 (id=10763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x0) 873.096437ms ago: executing program 2 (id=10764): r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 810.64474ms ago: executing program 7 (id=10765): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000052db0000000000", 0x58}], 0x1) 766.945903ms ago: executing program 4 (id=10766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 753.242603ms ago: executing program 5 (id=10767): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 679.433217ms ago: executing program 7 (id=10768): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=@newtaction={0x98, 0x13, 0x53b, 0x0, 0x0, {}, [{0x84, 0x1, [@m_sample={0x50, 0x9, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9a, 0x0, 0x8, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4090) 648.896619ms ago: executing program 2 (id=10769): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, 0x0, 0x0) 556.622273ms ago: executing program 5 (id=10770): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1c, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x59455247}) 461.098588ms ago: executing program 2 (id=10771): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) 392.781601ms ago: executing program 7 (id=10772): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) 301.687326ms ago: executing program 4 (id=10773): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 280.601976ms ago: executing program 5 (id=10774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000000206010200000000000000000a00000005000400000000000900020073797a32000000001c0007800800064000000000080012400000098d080008400000000f0600050002000000050001000600000014000300686173683a69702c706f7274"], 0x68}, 0x1, 0x0, 0x0, 0x80820}, 0x80) 235.633339ms ago: executing program 2 (id=10775): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000580)) 200.247531ms ago: executing program 7 (id=10776): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 12.89249ms ago: executing program 7 (id=10777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 0s ago: executing program 4 (id=10778): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x140a, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40084) kernel console output (not intermixed with test programs): wait. [ 1003.042522][T25589] XFS (loop4): Ending clean mount [ 1003.048039][T25593] XFS (loop1): Ending clean mount [ 1003.199139][T25593] XFS (loop1): Quotacheck needed: Please wait. [ 1003.267796][ T4270] XFS (loop4): Unmounting Filesystem [ 1003.303484][T25592] XFS (loop2): Quotacheck: Done. [ 1003.335993][T10767] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1003.419747][T25593] XFS (loop1): Quotacheck: Done. [ 1003.555215][ T4281] XFS (loop2): Unmounting Filesystem [ 1003.573408][T10767] usb 6-1: Using ep0 maxpacket: 8 [ 1003.580828][T10767] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1003.609129][T10767] usb 6-1: config 0 has no interface number 0 [ 1003.617995][T10767] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1003.627464][T10767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.635747][T10767] usb 6-1: Product: syz [ 1003.640538][T10767] usb 6-1: Manufacturer: syz [ 1003.645828][T25634] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1003.663479][ T4267] XFS (loop1): Unmounting Filesystem [ 1003.672716][T10767] usb 6-1: SerialNumber: syz [ 1003.704862][T10767] usb 6-1: config 0 descriptor?? [ 1003.923325][T10767] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 1003.929793][T10767] usb 6-1: No valid video chain found. [ 1003.986777][T10767] usb 6-1: USB disconnect, device number 13 [ 1004.398318][T25651] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1004.424354][ T27] audit: type=1326 audit(49959221.057:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.4.9221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043099c799 code=0x7ffc0000 [ 1004.539726][ T27] audit: type=1326 audit(49959221.107:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.4.9221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f043099c799 code=0x7ffc0000 [ 1004.655004][ T27] audit: type=1326 audit(49959221.107:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.4.9221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043099c799 code=0x7ffc0000 [ 1004.760833][ T27] audit: type=1326 audit(49959221.107:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25652 comm="syz.4.9221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043099c799 code=0x7ffc0000 [ 1004.822726][T25657] Process accounting paused [ 1005.256028][T25675] device bridge1 entered promiscuous mode [ 1005.808426][T25659] loop4: detected capacity change from 0 to 32768 [ 1005.878331][T25669] loop5: detected capacity change from 0 to 32768 [ 1005.963548][T25669] JBD2: Ignoring recovery information on journal [ 1005.980531][T25659] XFS (loop4): Mounting V5 Filesystem [ 1006.110904][T25669] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1006.227425][T25659] XFS (loop4): Ending clean mount [ 1006.406811][T20237] ocfs2: Unmounting device (7,5) on (node local) [ 1006.507590][ T4270] XFS (loop4): Unmounting Filesystem [ 1006.735491][ T27] audit: type=1326 audit(49959223.367:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.6.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1006.826338][ T4687] kernel write not supported for file /3711/net/ip6_tables_targets (pid: 4687 comm: kworker/1:18) [ 1006.843849][ T27] audit: type=1326 audit(49959223.367:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.6.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1006.943122][ T27] audit: type=1326 audit(49959223.367:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.6.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1007.069672][ T27] audit: type=1326 audit(49959223.367:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25723 comm="syz.6.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1007.255806][T25740] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 1007.425537][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9265'. [ 1007.575460][ T27] audit: type=1326 audit(49959224.207:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.645696][ T27] audit: type=1326 audit(49959224.227:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.673515][ T951] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1007.729953][ T27] audit: type=1326 audit(49959224.237:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.801443][ T27] audit: type=1326 audit(49959224.237:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.833721][ T27] audit: type=1326 audit(49959224.237:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.896413][ T951] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.919123][ T951] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1007.940387][ T27] audit: type=1326 audit(49959224.237:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25749 comm="syz.1.9267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1007.949730][ T951] usb 7-1: config 1 has no interface number 0 [ 1008.043079][ T951] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1008.096190][ T951] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.133460][ T951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.172011][ T951] usb 7-1: Product: syz [ 1008.186614][ T951] usb 7-1: Manufacturer: syz [ 1008.191274][ T951] usb 7-1: SerialNumber: syz [ 1008.257595][ T951] usb 7-1: selecting invalid altsetting 1 [ 1008.667576][ T951] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS [ 1008.694045][ T951] cdc_ncm 7-1:1.1: bind() failure [ 1008.737722][ T951] usb 7-1: USB disconnect, device number 8 [ 1008.885277][T25790] loop5: detected capacity change from 0 to 512 [ 1008.977797][T25790] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 1009.003400][T25790] System zones: 0-2, 18-18, 34-34 [ 1009.022205][T25790] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #3: comm syz.5.9287: corrupted inode contents [ 1009.109908][T25790] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #3: comm syz.5.9287: mark_inode_dirty error [ 1009.149329][T25790] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #3: comm syz.5.9287: corrupted inode contents [ 1009.225285][T25790] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #3: comm syz.5.9287: mark_inode_dirty error [ 1009.309954][T25790] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.9287: Failed to acquire dquot type 0 [ 1009.354497][T25790] EXT4-fs (loop5): 1 orphan inode deleted [ 1009.360297][T25790] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1009.404413][ T4328] EXT4-fs error (device loop5): ext4_release_dquot:6871: comm kworker/u4:6: Failed to release dquot type 1 [ 1009.471893][T25772] loop1: detected capacity change from 0 to 40427 [ 1009.553641][T25772] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x3ffff [ 1009.596765][T25772] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 1009.606768][T20237] EXT4-fs (loop5): unmounting filesystem. [ 1009.632625][T25772] F2FS-fs (loop1): invalid crc value [ 1009.680755][T25772] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1009.834563][ T4687] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1009.863344][T25772] F2FS-fs (loop1): Start checkpoint disabled! [ 1009.893093][T25772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1009.967580][T25772] syz.1.9277: attempt to access beyond end of device [ 1009.967580][T25772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1010.043458][ T4687] usb 3-1: Using ep0 maxpacket: 16 [ 1010.050485][ T4687] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1010.062455][T25825] netlink: 'syz.6.9299': attribute type 2 has an invalid length. [ 1010.073107][ T4687] usb 3-1: config 0 has no interface number 0 [ 1010.079497][ T4256] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 1010.087528][T25825] netlink: 'syz.6.9299': attribute type 1 has an invalid length. [ 1010.107679][ T4687] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1010.127891][ T4687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.143444][ T4687] usb 3-1: Product: syz [ 1010.163433][ T4687] usb 3-1: Manufacturer: syz [ 1010.179356][ T4687] usb 3-1: SerialNumber: syz [ 1010.205658][ T4687] usb 3-1: config 0 descriptor?? [ 1010.242054][ T4687] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1010.275423][ T4256] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1010.275451][ T4256] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1010.275472][ T4256] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1010.275531][ T4256] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1010.275570][ T4256] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1010.275593][ T4256] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1010.280959][ T4256] usb 5-1: string descriptor 0 read error: -22 [ 1010.281069][ T4256] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1010.281096][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.283810][T20401] kworker/u4:14: attempt to access beyond end of device [ 1010.283810][T20401] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1010.284789][ T4256] usb 5-1: config 0 descriptor?? [ 1010.285376][T25818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1010.286444][ T4256] hub 5-1:0.0: bad descriptor, ignoring hub [ 1010.286466][ T4256] hub: probe of 5-1:0.0 failed with error -5 [ 1010.289490][ T4256] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 1010.385374][T25830] loop6: detected capacity change from 0 to 8 [ 1010.552584][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 1010.562540][ T7] usb 5-1: USB disconnect, device number 31 [ 1010.635692][ T4687] gspca_spca1528: reg_w err -71 [ 1010.663465][ T4687] spca1528: probe of 3-1:0.1 failed with error -71 [ 1010.674676][ T4687] usb 3-1: USB disconnect, device number 45 [ 1011.348977][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1011.564495][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 1011.578915][ T7] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 1011.608072][ T7] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 1011.634379][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.674725][ T7] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 1011.693035][T25864] openvswitch: netlink: IP tunnel dst address not specified [ 1011.702954][ T7] usb 2-1: config 0 has no interface number 0 [ 1011.729451][ T7] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1011.776682][ T7] usb 2-1: config 0 interface 150 has no altsetting 0 [ 1011.793664][ T7] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 1011.802857][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.853807][ T7] usb 2-1: config 0 descriptor?? [ 1012.300797][ T7] usb 2-1: USB disconnect, device number 5 [ 1012.728734][T25897] netlink: 'syz.4.9335': attribute type 5 has an invalid length. [ 1012.961189][T25906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9338'. [ 1013.061335][T25906] device netdevsim0 entered promiscuous mode [ 1013.199330][T25912] loop1: detected capacity change from 0 to 128 [ 1013.936918][T25941] No such timeout policy "syz1" [ 1014.283433][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1014.318802][T25959] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551489) [ 1014.369485][T25959] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1014.481640][ T7] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1014.491508][T25964] loop5: detected capacity change from 0 to 64 [ 1014.498112][ T7] usb 2-1: config 0 has no interface number 0 [ 1014.535471][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1014.551777][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.579931][ T7] usb 2-1: Product: syz [ 1014.590963][ T7] usb 2-1: Manufacturer: syz [ 1014.608286][ T7] usb 2-1: SerialNumber: syz [ 1014.631232][ T7] usb 2-1: config 0 descriptor?? [ 1014.746817][T25972] netlink: 'syz.2.9372': attribute type 21 has an invalid length. [ 1014.756070][T25972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9372'. [ 1014.863704][ T7] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 1014.870206][ T7] usb 2-1: No valid video chain found. [ 1014.914352][ T7] usb 2-1: USB disconnect, device number 6 [ 1014.943669][ T4256] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1015.124712][T25985] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9377'. [ 1015.136698][ T4256] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.171638][ T4256] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1015.182886][ T4256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.191417][ T4256] usb 7-1: Product: syz [ 1015.195767][ T4256] usb 7-1: Manufacturer: syz [ 1015.200410][ T4256] usb 7-1: SerialNumber: syz [ 1015.215646][ T4256] usb 7-1: config 0 descriptor?? [ 1015.240796][ T4256] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1015.455758][ T4256] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1015.462648][ T4256] gspca_pac7302: probe of 7-1:0.0 failed with error -71 [ 1015.522884][ T4256] usb 7-1: USB disconnect, device number 9 [ 1015.538469][T25997] loop5: detected capacity change from 0 to 128 [ 1015.595314][T25997] Bad inode number on dev loop5: 32769 is out of range [ 1015.847073][T26008] usb usb8: usbfs: process 26008 (syz.5.9389) did not claim interface 0 before use [ 1015.920311][T26010] loop4: detected capacity change from 0 to 2048 [ 1015.976316][T26010] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1016.070380][T26010] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1016.123408][T26010] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1016.153875][T26010] UDF-fs: Scanning with blocksize 512 failed [ 1016.181808][T26019] loop6: detected capacity change from 0 to 8 [ 1016.198672][T26010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.250015][T26019] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1016.274729][T26019] cramfs: Error -3 while decompressing! [ 1016.294201][T26019] cramfs: ffffffff96d8e1e8(26)->ffff888068e26000(4096) [ 1016.311717][T26019] cramfs: Error -5 while decompressing! [ 1016.323473][ T7] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1016.331950][T26019] cramfs: ffffffff96d8e202(26)->ffff88804d10b000(4096) [ 1016.355695][T26019] cramfs: Error -3 while decompressing! [ 1016.362103][T26019] cramfs: ffffffff96d8e21c(16)->ffff888046b6e000(4096) [ 1016.384702][T26019] cramfs: Error -3 while decompressing! [ 1016.395918][ T4379] udevd[4379]: incorrect cramfs checksum on /dev/loop6 [ 1016.417130][T26019] cramfs: ffffffff96d8e1e8(26)->ffff888068e26000(4096) [ 1016.436689][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1016.436704][ T27] audit: type=1800 audit(49959233.067:334): pid=26019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9395" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 1016.519025][T26023] loop5: detected capacity change from 0 to 2048 [ 1016.527950][ T7] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1016.532924][ T4379] udevd[4379]: incorrect cramfs checksum on /dev/loop6 [ 1016.547058][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.597534][T26023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1016.613649][ T7] usb 3-1: config 0 descriptor?? [ 1016.621261][ T7] cp210x 3-1:0.0: cp210x converter detected [ 1016.639510][T26027] xt_TCPMSS: Only works on TCP SYN packets [ 1016.655807][ T4379] udevd[4379]: incorrect cramfs checksum on /dev/loop6 [ 1016.950092][T26033] loop4: detected capacity change from 0 to 1024 [ 1017.013860][T26037] ip6t_rpfilter: unknown options [ 1017.028382][ T7] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1017.046868][ T7] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1017.077387][ T7] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1017.118682][ T7] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1017.175143][ T7] usb 3-1: USB disconnect, device number 46 [ 1017.208480][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1017.224912][ T7] cp210x 3-1:0.0: device disconnected [ 1017.256071][T26044] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1017.263886][ T4256] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1017.423657][T26048] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9409'. [ 1017.453490][ T4256] usb 6-1: Using ep0 maxpacket: 16 [ 1017.460611][ T4256] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.476521][T26052] device xfrm0 entered promiscuous mode [ 1017.512242][ T4256] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.535759][ T4256] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1017.555269][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.610223][ T4256] usb 6-1: Product: syz [ 1017.614894][ T4256] usb 6-1: Manufacturer: syz [ 1017.631210][ T4256] usb 6-1: SerialNumber: syz [ 1017.823868][T26060] netlink: 'syz.4.9415': attribute type 12 has an invalid length. [ 1017.855255][ T4256] usb 6-1: 0:2 : does not exist [ 1017.860222][ T4256] usb 6-1: unit 9 not found! [ 1017.888664][ T4256] usb 6-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1017.947555][ T4256] usb 6-1: USB disconnect, device number 14 [ 1018.195497][ T4384] udevd[4384]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.263699][ T4618] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1018.372005][T26081] loop6: detected capacity change from 0 to 8 [ 1018.442842][T26081] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1018.449314][ T4618] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1018.480419][ T4618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.481422][T26081] cramfs: bad data blocksize 4294950552 [ 1018.513591][ T4384] udevd[4384]: incorrect cramfs checksum on /dev/loop6 [ 1018.521446][ T4618] usb 3-1: config 0 has no interface number 0 [ 1018.536466][ T4618] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1018.558488][ T4618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.570085][T26081] cramfs: bad data blocksize 4294950552 [ 1018.585719][ T4618] usb 3-1: Product: syz [ 1018.591588][ T4618] usb 3-1: Manufacturer: syz [ 1018.607026][ T27] audit: type=1800 audit(49959235.227:335): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9425" name="file2" dev="loop6" ino=16732 res=0 errno=0 [ 1018.623559][ T4618] usb 3-1: SerialNumber: syz [ 1018.642690][ T4618] usb 3-1: config 0 descriptor?? [ 1018.648431][T26086] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9427'. [ 1018.905782][ T4618] usb 3-1: USB disconnect, device number 47 [ 1019.313457][ T7] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1019.466680][T26089] loop4: detected capacity change from 0 to 32768 [ 1019.507591][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 1019.528463][ T7] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1019.553801][ T7] usb 7-1: config 0 has no interface number 0 [ 1019.570224][ T7] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1019.587170][ T7] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1019.602937][ T7] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1019.611408][ T7] usb 7-1: Product: syz [ 1019.616844][ T7] usb 7-1: SerialNumber: syz [ 1019.632118][ T7] usb 7-1: config 0 descriptor?? [ 1019.691921][T26089] XFS (loop4): Mounting V5 Filesystem [ 1019.714902][ T7] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input57 [ 1019.869456][T26131] loop2: detected capacity change from 0 to 512 [ 1019.975303][T26131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1019.993557][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.003992][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.012127][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.019582][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.030134][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.037462][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.059232][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.066607][T26089] XFS (loop4): Ending clean mount [ 1020.085688][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.094427][ T7] usb 7-1: USB disconnect, device number 10 [ 1020.103422][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1020.110518][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1020.144803][ T7] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1020.278422][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1020.331697][ T4270] XFS (loop4): Unmounting Filesystem [ 1020.983748][T26160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1021.073463][T26162] netlink: 'syz.6.9461': attribute type 24 has an invalid length. [ 1021.160956][T26168] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1021.631907][T26184] SET target dimension over the limit! [ 1021.899408][T26197] netlink: 'syz.5.9477': attribute type 1 has an invalid length. [ 1021.974866][T26199] loop2: detected capacity change from 0 to 164 [ 1022.103591][ T4689] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1022.280061][T26211] loop2: detected capacity change from 0 to 512 [ 1022.291784][ T4689] usb 2-1: Using ep0 maxpacket: 8 [ 1022.298747][ T4689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2746, setting to 1024 [ 1022.327181][T26213] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9485'. [ 1022.336430][ T4689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1022.336474][ T4689] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1022.336499][ T4689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.365258][ T4689] usb 2-1: config 0 descriptor?? [ 1022.376434][T26195] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.395105][ T4689] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 1022.402458][T26211] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1022.445352][T26211] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1022.514794][T26211] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 1022.533582][T26209] loop6: detected capacity change from 0 to 4096 [ 1022.540473][T26211] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1022.610307][T26211] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.9484: Failed to acquire dquot type 1 [ 1022.634022][ T4689] usb 2-1: USB disconnect, device number 7 [ 1022.682572][T26209] ntfs3: loop6: ino=5, "/" directory corrupted [ 1022.695296][T26211] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.9484: bg 0: block 40: padding at end of block bitmap is not set [ 1022.707301][T26209] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1022.788620][T26211] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 1022.815180][T26211] EXT4-fs (loop2): 1 truncate cleaned up [ 1022.821014][T26211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1023.014929][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1024.321234][T26266] loop6: detected capacity change from 0 to 4096 [ 1024.524372][T26277] netlink: 'syz.1.9516': attribute type 1 has an invalid length. [ 1024.667813][T26281] loop2: detected capacity change from 0 to 1024 [ 1024.792158][T26288] netlink: 360 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1024.838813][T26281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1025.175498][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1025.231182][T26305] loop6: detected capacity change from 0 to 256 [ 1025.346211][T26307] xt_TCPMSS: Only works on TCP SYN packets [ 1025.361693][T26305] FAT-fs (loop6): Directory bread(block 64) failed [ 1025.383386][T26305] FAT-fs (loop6): Directory bread(block 65) failed [ 1025.390483][T26305] FAT-fs (loop6): Directory bread(block 66) failed [ 1025.431666][T26305] FAT-fs (loop6): Directory bread(block 67) failed [ 1025.451048][T26305] FAT-fs (loop6): Directory bread(block 68) failed [ 1025.469383][T26311] netlink: 'syz.5.9531': attribute type 11 has an invalid length. [ 1025.483029][T26305] FAT-fs (loop6): Directory bread(block 69) failed [ 1025.490230][T26311] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9531'. [ 1025.516209][T26305] FAT-fs (loop6): Directory bread(block 70) failed [ 1025.522842][T26305] FAT-fs (loop6): Directory bread(block 71) failed [ 1025.583499][T26305] FAT-fs (loop6): Directory bread(block 72) failed [ 1025.590092][T26305] FAT-fs (loop6): Directory bread(block 73) failed [ 1025.702910][T26305] FAT-fs (loop6): Filesystem has been set read-only [ 1025.980610][T26324] loop6: detected capacity change from 0 to 2048 [ 1026.051822][T26324] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1026.153447][T26324] UDF-fs: unknown compression code (0) [ 1026.303594][ T4689] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1026.392360][T26342] netlink: 'syz.2.9547': attribute type 1 has an invalid length. [ 1026.406338][T26342] netlink: 'syz.2.9547': attribute type 2 has an invalid length. [ 1026.520224][ T4689] usb 2-1: Using ep0 maxpacket: 16 [ 1026.536434][ T4689] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1026.583536][ T4689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.598741][ T4689] usb 2-1: Product: syz [ 1026.603034][ T4689] usb 2-1: Manufacturer: syz [ 1026.618325][T26346] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9548'. [ 1026.638285][ T4689] usb 2-1: SerialNumber: syz [ 1026.656437][ T4689] r8152-cfgselector 2-1: config 0 descriptor?? [ 1026.768194][T26352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9551'. [ 1026.849005][T26354] tmpfs: Bad value for 'mpol' [ 1026.892632][T26357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9553'. [ 1026.932333][T26357] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9553'. [ 1027.073770][T26362] netlink: 88 bytes leftover after parsing attributes in process `syz.5.9556'. [ 1027.084673][ T4689] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1027.100070][ T4689] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 1027.162333][T26365] loop2: detected capacity change from 0 to 256 [ 1027.201926][T26365] exfat: Deprecated parameter 'namecase' [ 1027.219815][T26367] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9559'. [ 1027.277595][T26365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1027.682595][T26382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.818260][T26391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9569'. [ 1028.815606][T26387] loop6: detected capacity change from 0 to 32768 [ 1028.844485][T26422] loop2: detected capacity change from 0 to 4096 [ 1028.863415][T26422] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1028.945285][T26387] XFS (loop6): Mounting V5 Filesystem [ 1028.959246][T26438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9588'. [ 1029.001042][T26422] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1029.145398][T26446] loop1: detected capacity change from 0 to 22 [ 1029.153509][T26387] XFS (loop6): Ending clean mount [ 1029.184267][T26446] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1029.247283][T26446] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1029.384029][T20302] XFS (loop6): Unmounting Filesystem [ 1029.474188][T26452] device netdevsim0 entered promiscuous mode [ 1029.480407][T26452] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1029.534590][T26452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1030.806787][T26500] tmpfs: Bad value for 'size' [ 1031.212078][T26516] dlm: no local IP address has been set [ 1031.250966][T26516] dlm: cannot start dlm midcomms -107 [ 1031.489952][T26527] loop2: detected capacity change from 0 to 1024 [ 1031.732854][T26535] xt_TCPMSS: Only works on TCP SYN packets [ 1032.281141][T26552] loop1: detected capacity change from 0 to 4096 [ 1032.374197][T26561] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.658976][ T27] audit: type=1326 audit(49959249.287:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26570 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33139c799 code=0x7ffc0000 [ 1032.767722][ T27] audit: type=1326 audit(49959249.327:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26570 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa33139c799 code=0x7ffc0000 [ 1032.869435][ T27] audit: type=1326 audit(49959249.327:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26570 comm="syz.2.9653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa33139c799 code=0x7ffc0000 [ 1033.063432][ T4618] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1033.172874][T26590] device wlan0 entered promiscuous mode [ 1033.189812][T26590] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1033.257732][ T4618] usb 6-1: Using ep0 maxpacket: 8 [ 1033.275483][ T4618] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1033.308812][ T4618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1033.317919][ T4618] usb 6-1: Product: syz [ 1033.322197][ T4618] usb 6-1: Manufacturer: syz [ 1033.327223][ T4618] usb 6-1: SerialNumber: syz [ 1033.341755][ T4618] usb 6-1: config 0 descriptor?? [ 1033.355492][ T4618] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1033.762544][ T4618] gspca_sn9c2028: read1 error -71 [ 1033.770388][ T4618] gspca_sn9c2028: read1 error -71 [ 1033.801246][ T4618] sn9c2028: probe of 6-1:0.0 failed with error -71 [ 1033.827701][ T4618] usb 6-1: USB disconnect, device number 15 [ 1034.282446][T26627] loop1: detected capacity change from 0 to 256 [ 1034.335588][T26629] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1035.060923][T26654] Process accounting resumed [ 1035.464009][T26674] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1036.377079][T26678] loop5: detected capacity change from 0 to 32768 [ 1036.464301][T26678] read_mapping_page failed! [ 1036.578029][T26714] netlink: 'syz.2.9718': attribute type 30 has an invalid length. [ 1037.583519][T26746] netlink: 'syz.1.9734': attribute type 41 has an invalid length. [ 1037.623145][T26746] netlink: 'syz.1.9734': attribute type 4 has an invalid length. [ 1037.631151][T26746] __nla_validate_parse: 1 callbacks suppressed [ 1037.631166][T26746] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9734'. [ 1037.691322][T26746] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1038.101643][ T27] audit: type=1326 audit(49959254.727:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1038.179280][ T27] audit: type=1326 audit(49959254.747:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1038.292592][ T27] audit: type=1326 audit(49959254.747:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1038.394184][ T27] audit: type=1326 audit(49959254.747:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.9744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350239c799 code=0x7ffc0000 [ 1038.650985][T26785] netlink: 'syz.4.9752': attribute type 2 has an invalid length. [ 1038.693399][T26785] netlink: 'syz.4.9752': attribute type 2 has an invalid length. [ 1038.750429][T26785] netlink: 'syz.4.9752': attribute type 1 has an invalid length. [ 1038.794840][T26785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9752'. [ 1039.014932][T26802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9761'. [ 1039.328795][T26813] loop5: detected capacity change from 0 to 4096 [ 1039.374703][T26813] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1039.477245][T26813] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1039.562246][T26813] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1039.593400][T26813] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1039.663642][T26813] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1039.692879][T26813] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1039.831698][T26813] ntfs: volume version 3.1. [ 1039.837356][T26824] loop6: detected capacity change from 0 to 64 [ 1040.179778][T26803] loop4: detected capacity change from 0 to 32768 [ 1041.230745][T26868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1041.268960][T26871] loop1: detected capacity change from 0 to 512 [ 1041.420267][T26871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9796: bg 0: block 248: padding at end of block bitmap is not set [ 1041.542127][T26871] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.9796: Failed to acquire dquot type 1 [ 1041.587685][T26871] EXT4-fs (loop1): 1 truncate cleaned up [ 1041.605801][T26871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1041.797360][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1041.843381][T20397] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:12: Failed to release dquot type 1 [ 1041.962437][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9806'. [ 1042.577975][T26886] loop5: detected capacity change from 0 to 32768 [ 1042.669315][T26886] read_mapping_page failed! [ 1042.698305][T26916] misc userio: No port type given on /dev/userio [ 1042.716871][T26886] ERROR: (device loop5): txCommit: [ 1042.716871][T26886] [ 1042.774850][T26920] cgroup: name respecified [ 1042.963590][ T4328] read_mapping_page failed! [ 1042.969062][ T4328] ERROR: (device loop5): txCommit: [ 1042.969062][ T4328] [ 1042.993341][ T4328] jfs_write_inode: jfs_commit_inode failed! [ 1043.268888][T26938] loop6: detected capacity change from 0 to 2048 [ 1043.334144][T26938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.479870][T26942] loop5: detected capacity change from 0 to 256 [ 1043.537132][T26942] exfat: Deprecated parameter 'namecase' [ 1043.590961][T26942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1043.881251][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9835'. [ 1043.928457][T26954] loop2: detected capacity change from 0 to 256 [ 1044.070446][T26954] FAT-fs (loop2): Directory bread(block 64) failed [ 1044.134873][T26954] FAT-fs (loop2): Directory bread(block 65) failed [ 1044.141952][T26954] FAT-fs (loop2): Directory bread(block 66) failed [ 1044.189450][T26954] FAT-fs (loop2): Directory bread(block 67) failed [ 1044.224809][T26954] FAT-fs (loop2): Directory bread(block 68) failed [ 1044.253100][T26954] FAT-fs (loop2): Directory bread(block 69) failed [ 1044.285153][T26954] FAT-fs (loop2): Directory bread(block 70) failed [ 1044.291770][T26954] FAT-fs (loop2): Directory bread(block 71) failed [ 1044.305280][T26965] loop5: detected capacity change from 0 to 764 [ 1044.380515][T26954] FAT-fs (loop2): Directory bread(block 72) failed [ 1044.389171][T26965] rock: directory entry would overflow storage [ 1044.393992][T26954] FAT-fs (loop2): Directory bread(block 73) failed [ 1044.421889][T26965] rock: sig=0x4654, size=5, remaining=4 [ 1044.592893][T26974] loop6: detected capacity change from 0 to 128 [ 1044.664590][T26974] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1044.708315][T26974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1044.779227][T26978] ip6t_srh: unknown srh match flags 5294 [ 1044.818537][T26974] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1044.893605][T26974] UDF-fs: error (device loop6): udf_count_free_bitmap: udf_count_free failed [ 1045.043554][T26985] netlink: 'syz.2.9850': attribute type 3 has an invalid length. [ 1045.066839][T26985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9850'. [ 1045.132999][T20302] UDF-fs: error (device loop6): udf_read_inode: (ino 104) failed !bh [ 1045.171727][T20302] UDF-fs: error (device loop6): udf_read_inode: (ino 104) failed !bh [ 1045.420067][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1045.533683][ T951] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1045.614069][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1045.640393][ T7] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1045.658996][ T7] usb 2-1: config 0 has no interface number 0 [ 1045.684043][ T7] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1045.721631][ T7] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1045.746100][ T951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1045.764899][ T951] usb 3-1: not running at top speed; connect to a high speed hub [ 1045.783715][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.812883][ T951] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.829235][ T7] usb 2-1: Product: syz [ 1045.837969][ T7] usb 2-1: Manufacturer: syz [ 1045.842737][ T951] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1045.865081][ T7] usb 2-1: SerialNumber: syz [ 1045.881052][ T7] usb 2-1: config 0 descriptor?? [ 1045.889585][ T951] usb 3-1: string descriptor 0 read error: -22 [ 1045.903540][ T951] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 1045.916061][ T7] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1045.932269][T20410] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.933477][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.952072][ T7] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1046.082125][T20410] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.111212][ T4687] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1046.129975][ T7] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1046.197778][ T951] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device: [ 1046.208601][ T951] eb 2e 87 4b 9a 05 e6 5e [ 1046.213244][ T951] snd-usb-6fire: probe of 3-1:2.0 failed with error -5 [ 1046.295270][ T4687] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1046.305898][T20410] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.316683][ T4687] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.341496][ T7] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 1046.349795][ T4687] usb 5-1: config 220 has no interface number 2 [ 1046.359519][ T7] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1046.374527][ T4687] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1046.389821][ T7] usb 2-1: USB disconnect, device number 9 [ 1046.396453][ T4687] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1046.406943][ T7] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1046.429737][ T4687] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1046.451162][ T4687] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1046.471083][ T4618] usb 3-1: USB disconnect, device number 48 [ 1046.478926][ T4687] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1046.498823][ T4687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.524960][T20410] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.532722][ T4687] usb 5-1: Product: syz [ 1046.552303][ T4687] usb 5-1: Manufacturer: syz [ 1046.571354][ T4687] usb 5-1: SerialNumber: syz [ 1046.733903][ T4256] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1046.798260][ T4687] usb 5-1: selecting invalid altsetting 0 [ 1046.830669][ T4687] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1046.863354][ T4687] usb 5-1: No valid video chain found. [ 1046.898128][ T4687] usb 5-1: selecting invalid altsetting 0 [ 1046.923360][ T4687] usbtest: probe of 5-1:220.1 failed with error -22 [ 1046.946213][ T4256] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 1046.972470][ T4687] usb 5-1: USB disconnect, device number 32 [ 1047.040362][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1047.048535][ T4256] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1047.073863][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1047.083860][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1047.114657][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1047.122597][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1047.131200][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.183540][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.267021][ T4256] usb 6-1: Product: syz [ 1047.296637][ T4256] usb 6-1: Manufacturer: syz [ 1047.308655][T27016] wg1 speed is unknown, defaulting to 1000 [ 1047.328730][T27025] netlink: 'syz.1.9871': attribute type 5 has an invalid length. [ 1047.337303][ T4256] usb 6-1: SerialNumber: syz [ 1047.620431][T14613] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1047.706078][T27033] netlink: 'syz.4.9873': attribute type 10 has an invalid length. [ 1047.722008][T27033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9873'. [ 1047.743774][T27033] bridge0: port 3(dummy0) entered blocking state [ 1047.751027][T27033] bridge0: port 3(dummy0) entered disabled state [ 1047.771672][T27033] device dummy0 entered promiscuous mode [ 1047.782949][T27033] bridge0: port 3(dummy0) entered blocking state [ 1047.789500][T27033] bridge0: port 3(dummy0) entered forwarding state [ 1047.803820][ T4256] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1047.824960][ T4256] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1047.856535][T14613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1047.874051][ T4256] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1047.894944][T14613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.913223][T14613] usb 3-1: Product: syz [ 1047.917711][T14613] usb 3-1: Manufacturer: syz [ 1047.922344][T14613] usb 3-1: SerialNumber: syz [ 1047.926938][ T4256] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1047.936504][ T4256] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1048.024282][T14613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1048.036559][ T4256] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1048.071717][ T4256] usb 6-1: USB disconnect, device number 16 [ 1048.106477][T10947] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1048.122681][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9876'. [ 1048.528651][T27057] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1048.597022][ T4687] usb 3-1: USB disconnect, device number 49 [ 1048.692288][T27016] chnl_net:caif_netlink_parms(): no params data found [ 1049.096207][T27075] loop1: detected capacity change from 0 to 512 [ 1049.182361][T27075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1049.203540][T10947] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1049.204391][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 1049.210673][T10947] ath9k_htc: Failed to initialize the device [ 1049.228487][T27016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.244082][T27016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.287474][T27016] device bridge_slave_0 entered promiscuous mode [ 1049.299453][T27016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.307327][T27016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.315920][T27016] device bridge_slave_1 entered promiscuous mode [ 1049.322655][ T4687] usb 3-1: ath9k_htc: USB layer deinitialized [ 1049.605490][T27091] xt_ecn: cannot match TCP bits for non-tcp packets [ 1049.610232][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1049.733918][T27016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.776371][T27016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.983446][T27016] team0: Port device team_slave_0 added [ 1050.233836][T27016] team0: Port device team_slave_1 added [ 1050.346266][T14613] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1050.363416][T20410] device hsr_slave_0 left promiscuous mode [ 1050.374125][T20410] device hsr_slave_1 left promiscuous mode [ 1050.383897][T20410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.391347][T20410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.434215][T20410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.467589][T20410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.514522][T20410] device bridge_slave_1 left promiscuous mode [ 1050.520799][T20410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.575556][T14613] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1050.592770][T14613] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1050.633471][T14613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1050.684322][T20410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.687447][T14613] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1050.734826][T14613] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1050.743089][T14613] usb 3-1: Product: syz [ 1050.773618][T14613] usb 3-1: Manufacturer: syz [ 1050.778303][T14613] usb 3-1: SerialNumber: syz [ 1050.800975][T14613] usb 3-1: config 0 descriptor?? [ 1050.861602][T27128] loop1: detected capacity change from 0 to 256 [ 1050.868847][T27125] loop5: detected capacity change from 0 to 4096 [ 1050.876200][T20410] device veth1_macvtap left promiscuous mode [ 1050.882302][T20410] device veth0_macvtap left promiscuous mode [ 1050.904299][T20410] device veth1_vlan left promiscuous mode [ 1050.924130][T27125] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 1051.009605][T27128] FAT-fs (loop1): Directory bread(block 64) failed [ 1051.056631][T27128] FAT-fs (loop1): Directory bread(block 65) failed [ 1051.118094][T27128] FAT-fs (loop1): Directory bread(block 66) failed [ 1051.140028][T27128] FAT-fs (loop1): Directory bread(block 67) failed [ 1051.205575][T27128] FAT-fs (loop1): Directory bread(block 68) failed [ 1051.212178][T27128] FAT-fs (loop1): Directory bread(block 69) failed [ 1051.278969][T14613] usb 3-1: USB disconnect, device number 50 [ 1051.284013][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 1051.291116][T27128] FAT-fs (loop1): Directory bread(block 70) failed [ 1051.344206][T27128] FAT-fs (loop1): Directory bread(block 71) failed [ 1051.350912][T27128] FAT-fs (loop1): Directory bread(block 72) failed [ 1051.357646][T27128] FAT-fs (loop1): Directory bread(block 73) failed [ 1051.489650][T27128] syz.1.9909: attempt to access beyond end of device [ 1051.489650][T27128] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 1051.946983][T27145] loop5: detected capacity change from 0 to 1764 [ 1052.136579][T27150] loop2: detected capacity change from 0 to 64 [ 1052.367313][T27134] loop4: detected capacity change from 0 to 32768 [ 1052.579544][T20410] bond2 (unregistering): Released all slaves [ 1052.580662][T27134] XFS (loop4): Mounting V5 Filesystem [ 1052.596984][T20410] bond1 (unregistering): Released all slaves [ 1052.700696][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1052.700713][ T27] audit: type=1326 audit(49959269.327:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27169 comm="syz.5.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1052.834521][T27134] XFS (loop4): Ending clean mount [ 1052.916441][ T27] audit: type=1326 audit(49959269.367:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27169 comm="syz.5.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1053.061798][ T27] audit: type=1326 audit(49959269.367:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27169 comm="syz.5.9924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1053.090752][ T4270] XFS (loop4): Unmounting Filesystem [ 1053.272471][T27159] loop1: detected capacity change from 0 to 32768 [ 1053.363639][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 1053.455515][T27159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1053.553961][T27159] (syz.1.9921,27159,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 1053.603367][T27159] (syz.1.9921,27159,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1053.624719][T27159] (syz.1.9921,27159,0):ocfs2_mknod:298 ERROR: status = -2 [ 1053.661341][T27159] (syz.1.9921,27159,0):ocfs2_mknod:502 ERROR: status = -2 [ 1053.684679][T27159] (syz.1.9921,27159,0):ocfs2_create:676 ERROR: status = -2 [ 1053.821363][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 1054.096386][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.103837][T27188] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1054.614103][T20410] team0 (unregistering): Port device team_slave_1 removed [ 1054.720577][T20410] team0 (unregistering): Port device team_slave_0 removed [ 1054.784316][T20410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.843591][T20410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.976848][ T4256] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1055.190494][ T4256] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1055.216265][ T4256] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.224401][ T4256] usb 2-1: Product: syz [ 1055.228593][ T4256] usb 2-1: Manufacturer: syz [ 1055.233226][ T4256] usb 2-1: SerialNumber: syz [ 1055.252141][ T4256] r8152-cfgselector 2-1: config 0 descriptor?? [ 1055.363779][T20410] bond0 (unregistering): Released all slaves [ 1055.443699][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 1055.513843][T27196] netlink: 'syz.5.9933': attribute type 12 has an invalid length. [ 1055.565958][T27016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.572979][T27016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.600390][T27016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.614630][T27016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.621814][T27016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.649307][T27016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.685995][ T4256] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1055.725242][ T4256] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 1055.887145][T27016] device hsr_slave_0 entered promiscuous mode [ 1055.944765][T27016] device hsr_slave_1 entered promiscuous mode [ 1056.401436][T27016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1056.421516][T27016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1056.474747][T27016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1056.494217][T27016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1056.738383][T27016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.824853][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1056.843683][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1056.897465][T27016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.944798][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1056.985896][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1057.017213][T20397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.024420][T20397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.083872][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1057.115593][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1057.154590][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1057.204028][T20397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.211212][T20397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.254378][T27237] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1057.318826][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1057.373331][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1057.395223][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1057.488684][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1057.519951][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1057.563583][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1057.584881][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1057.631298][T27016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1057.701084][T27016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.760960][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1057.766649][T27259] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1057.791389][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1057.840132][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1057.874164][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1057.890745][T20410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1058.267222][T27276] netlink: 'syz.5.9965': attribute type 21 has an invalid length. [ 1058.733214][T27293] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1058.885684][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1058.893215][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1058.962618][T27016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1058.979793][T27300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9973'. [ 1059.056517][T27300] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1059.175676][ T27] audit: type=1326 audit(49959275.807:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.5.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1059.283876][ T27] audit: type=1326 audit(49959275.837:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.5.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1059.393411][ T27] audit: type=1326 audit(49959275.837:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.5.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1059.510211][ T27] audit: type=1326 audit(49959275.837:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.5.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1059.602314][T27324] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9980'. [ 1059.618290][ T27] audit: type=1326 audit(49959275.837:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27308 comm="syz.5.9976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1059.645092][T27326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9981'. [ 1059.962008][T27334] tmpfs: Bad value for 'mpol' [ 1060.272990][T27348] loop4: detected capacity change from 0 to 256 [ 1060.360799][T27348] FAT-fs (loop4): Directory bread(block 64) failed [ 1060.370094][T27348] FAT-fs (loop4): Directory bread(block 65) failed [ 1060.419314][T27348] FAT-fs (loop4): Directory bread(block 66) failed [ 1060.469991][T27348] FAT-fs (loop4): Directory bread(block 67) failed [ 1060.503702][T27348] FAT-fs (loop4): Directory bread(block 68) failed [ 1060.510351][T27348] FAT-fs (loop4): Directory bread(block 69) failed [ 1060.533492][T27348] FAT-fs (loop4): Directory bread(block 70) failed [ 1060.540091][T27348] FAT-fs (loop4): Directory bread(block 71) failed [ 1060.596396][T27348] FAT-fs (loop4): Directory bread(block 72) failed [ 1060.603009][T27348] FAT-fs (loop4): Directory bread(block 73) failed [ 1060.626170][T20403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1060.656327][T20403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1060.758118][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1060.793085][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1060.846207][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1060.872502][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1060.898881][T27016] device veth0_vlan entered promiscuous mode [ 1060.947420][T27363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1060.987097][T27363] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9997'. [ 1061.008352][T27016] device veth1_vlan entered promiscuous mode [ 1061.038903][T27366] netlink: 'syz.4.9998': attribute type 11 has an invalid length. [ 1061.077631][T27366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9998'. [ 1061.110297][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1061.125215][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1061.154639][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1061.191104][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1061.226856][T27016] device veth0_macvtap entered promiscuous mode [ 1061.260855][T27016] device veth1_macvtap entered promiscuous mode [ 1061.310647][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.333467][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.362347][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.433299][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.443188][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.489777][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.511768][T27016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.544433][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1061.556941][T27379] tmpfs: Bad value for 'mpol' [ 1061.564394][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1061.590692][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1061.617085][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1061.634610][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.673380][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.706871][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.730352][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.778041][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.856163][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.893428][T27016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.930876][T27016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.984977][T27016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.025668][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1062.035425][T20397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1062.068620][T27016] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.131469][T27016] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.157448][T27016] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.196948][T27399] loop2: detected capacity change from 0 to 256 [ 1062.202683][T27016] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.244733][T27399] exfat: Deprecated parameter 'namecase' [ 1062.350496][T27399] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1062.534571][T20403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.593421][T20403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.633170][T20401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1062.734992][T20401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.774482][T20401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.789737][T20401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1063.076494][T27422] IPv6: Can't replace route, no match found [ 1063.123554][ T4256] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1063.336016][ T4256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1063.357780][ T4256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 1063.386420][T27429] 9pnet: Could not find request transport: virTio [ 1063.413667][ T4256] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1063.422781][ T4256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.459204][ T4256] usb 6-1: config 0 descriptor?? [ 1063.503758][T27414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1063.511345][T27414] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1063.834827][T27443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10028'. [ 1064.182954][ T951] usb 6-1: USB disconnect, device number 17 [ 1064.680777][T27468] loop7: detected capacity change from 0 to 256 [ 1065.077722][T27476] Process accounting paused [ 1065.095216][ T27] audit: type=1326 audit(49959281.727:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27480 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1065.220702][ T27] audit: type=1326 audit(49959281.757:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27480 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1065.350885][ T27] audit: type=1326 audit(49959281.757:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27480 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1065.491177][ T27] audit: type=1326 audit(49959281.757:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27480 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1065.603648][T20238] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1065.676642][ T27] audit: type=1326 audit(49959281.757:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27480 comm="syz.1.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75539c799 code=0x7ffc0000 [ 1066.513519][T27530] loop7: detected capacity change from 0 to 2048 [ 1066.562986][T27530] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1067.096593][T27552] usb usb8: check_ctrlrecip: process 27552 (syz.7.10071) requesting ep 01 but needs 81 [ 1067.146667][T27552] usb usb8: usbfs: process 27552 (syz.7.10071) did not claim interface 0 before use [ 1067.473805][T27563] loop4: detected capacity change from 0 to 1024 [ 1067.532242][T27563] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1067.588785][T27563] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1067.633709][T27563] EXT4-fs (loop4): invalid journal inode [ 1067.639643][T27563] EXT4-fs (loop4): can't get journal size [ 1067.697278][T27563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1067.814465][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1067.821826][T27567] loop5: detected capacity change from 0 to 4096 [ 1067.904890][T27567] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1067.933325][T27567] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1067.978416][T27567] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1068.009622][T27570] loop7: detected capacity change from 0 to 4096 [ 1068.041228][T27567] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1068.064613][T27580] loop4: detected capacity change from 0 to 2048 [ 1068.083480][T27570] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 1068.112733][T27580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1068.123852][T27567] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1068.197111][T27567] ntfs: volume version 3.1. [ 1068.448849][T27547] loop2: detected capacity change from 0 to 32768 [ 1068.610732][T27547] XFS (loop2): Mounting V5 Filesystem [ 1068.821200][T27547] XFS (loop2): Ending clean mount [ 1069.010600][T27608] loop7: detected capacity change from 0 to 512 [ 1069.104501][ T4281] XFS (loop2): Unmounting Filesystem [ 1069.194447][T27608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80fc02c, mo2=0002] [ 1069.202624][T27608] System zones: 1-12 [ 1069.275527][T27608] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.10091: error while reading EA inode 32 err=-116 [ 1069.319205][T27608] EXT4-fs (loop7): Remounting filesystem read-only [ 1069.371097][T27608] EXT4-fs (loop7): 1 orphan inode deleted [ 1069.381088][ T7] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1069.401380][T27608] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1069.442755][T27608] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.10091: deleted inode referenced: 15 [ 1069.481457][T27608] EXT4-fs (loop7): Remounting filesystem read-only [ 1069.615062][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1069.628903][T27016] EXT4-fs (loop7): unmounting filesystem. [ 1069.634870][ T7] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 1069.634905][ T7] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 1069.646720][ T7] usb 6-1: string descriptor 0 read error: -22 [ 1069.680037][ T7] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 1069.696479][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.917073][T27630] Cannot find del_set index 4 as target [ 1069.958749][ T7] snd-usb-audio: probe of 6-1:1.0 failed with error -2 [ 1069.977786][T27633] netlink: 'syz.4.10102': attribute type 5 has an invalid length. [ 1070.044761][T27633] device ip6erspan0 entered promiscuous mode [ 1070.112121][T27635] loop2: detected capacity change from 0 to 1024 [ 1070.150525][T27635] EXT4-fs: inline encryption not supported [ 1070.183554][ T4606] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1070.214810][ T4256] usb 6-1: USB disconnect, device number 18 [ 1070.259776][T27635] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz.2.10095: Freeing blocks not in datazone - block = 0, count = 4096 [ 1070.300931][T27635] EXT4-fs (loop2): Remounting filesystem read-only [ 1070.308523][T27635] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.10095: Invalid inode bitmap blk 0 in block_group 0 [ 1070.373366][ T4606] usb 8-1: Using ep0 maxpacket: 16 [ 1070.377960][T27635] EXT4-fs (loop2): Remounting filesystem read-only [ 1070.385248][ T4606] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1070.413316][T27635] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 1070.423723][ T4618] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1070.436719][ T4606] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1070.447232][T27635] EXT4-fs (loop2): Remounting filesystem read-only [ 1070.457084][ T4606] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.471214][ T4606] usb 8-1: Product: syz [ 1070.476066][ T4606] usb 8-1: Manufacturer: syz [ 1070.480884][ T4606] usb 8-1: SerialNumber: syz [ 1070.485380][T27635] EXT4-fs (loop2): 1 orphan inode deleted [ 1070.497943][T27635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1070.508145][ T4606] usb 8-1: config 0 descriptor?? [ 1070.555377][T27635] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.10095: Invalid inode table block 0 in block_group 0 [ 1070.615591][ T4618] usb 2-1: Using ep0 maxpacket: 16 [ 1070.621016][T27635] EXT4-fs (loop2): Remounting filesystem read-only [ 1070.634421][ T4618] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1070.665983][ T4618] usb 2-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 1070.707494][ T4618] usb 2-1: config 0 has no interface number 0 [ 1070.742562][ T4606] usb 8-1: USB disconnect, device number 2 [ 1070.768821][ T4618] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1070.782456][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1070.818863][ T4618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.838993][ T4618] usb 2-1: Product: syz [ 1070.852010][ T4618] usb 2-1: Manufacturer: syz [ 1070.872681][ T4618] usb 2-1: SerialNumber: syz [ 1070.924301][ T4618] usb 2-1: config 0 descriptor?? [ 1071.148529][ T4606] usb 2-1: USB disconnect, device number 11 [ 1071.550168][T27645] loop4: detected capacity change from 0 to 40427 [ 1071.561341][T27645] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 1071.599140][T27645] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1071.627693][T27645] F2FS-fs (loop4): invalid crc value [ 1071.646808][T27645] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1071.839274][T27645] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1071.879647][T27645] F2FS-fs (loop4): Start checkpoint disabled! [ 1071.906106][T27645] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1071.914275][T27678] IPv6: Can't replace route, no match found [ 1071.915650][T27645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1072.500183][T27684] loop7: detected capacity change from 0 to 8192 [ 1072.572675][T27684] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1072.671666][T27684] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1072.733469][T27684] REISERFS (device loop7): using ordered data mode [ 1072.740086][T27684] reiserfs: using flush barriers [ 1072.791342][T27684] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1072.837865][T27668] loop5: detected capacity change from 0 to 32768 [ 1072.873929][T27684] REISERFS (device loop7): checking transaction log (loop7) [ 1072.925495][T27684] REISERFS (device loop7): Using tea hash to sort names [ 1072.932844][T27684] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1073.162636][T27705] netlink: 'syz.2.10122': attribute type 1 has an invalid length. [ 1073.183686][T27703] loop1: detected capacity change from 0 to 2048 [ 1073.286260][T27703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.512926][T27710] nfs: Unknown parameter 'ntext' [ 1074.130875][T27733] netlink: 5364 bytes leftover after parsing attributes in process `syz.7.10135'. [ 1074.451999][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10139'. [ 1074.791997][T27753] No such timeout policy "syz1" [ 1075.330725][T27725] loop2: detected capacity change from 0 to 40427 [ 1075.390571][T27725] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 1075.432622][T27725] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1075.458616][T27725] F2FS-fs (loop2): invalid crc value [ 1075.484513][T27772] loop1: detected capacity change from 0 to 4096 [ 1075.499049][T27725] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1075.522077][T27772] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1075.766687][T27725] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 1075.809974][T27725] F2FS-fs (loop2): Start checkpoint disabled! [ 1075.839546][T27725] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1075.857637][T27725] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1076.190341][T27762] loop4: detected capacity change from 0 to 32768 [ 1076.381085][T27762] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 1076.381085][T27762] [ 1076.488328][T27762] ERROR: (device loop4): remounting filesystem as read-only [ 1076.538170][T27762] xtLookup: xtSearch returned -5 [ 1076.933492][ T7] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1077.042969][T27813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10170'. [ 1077.093620][T27813] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10170'. [ 1077.185250][ T7] usb 8-1: config 0 has no interfaces? [ 1077.192856][ T7] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1077.247377][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.275048][ T7] usb 8-1: Product: syz [ 1077.279283][ T7] usb 8-1: Manufacturer: syz [ 1077.301493][ T7] usb 8-1: SerialNumber: syz [ 1077.323585][ T7] r8152-cfgselector 8-1: config 0 descriptor?? [ 1077.542803][ T7] usbip-host 8-1: 8-1 is not in match_busid table... skip! [ 1077.752884][ T4687] usb 8-1: USB disconnect, device number 3 [ 1077.909297][T27839] loop4: detected capacity change from 0 to 2048 [ 1077.940488][T27839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.102743][T27845] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10184'. [ 1078.113347][ T4256] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1078.180899][T27848] loop4: detected capacity change from 0 to 2048 [ 1078.233527][T27848] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.303510][ T4256] usb 3-1: Using ep0 maxpacket: 32 [ 1078.311001][ T4256] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1078.341121][ T4256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.385004][ T4256] usb 3-1: config 0 descriptor?? [ 1078.416565][ T4256] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1078.599919][ T4256] gspca_sq930x: reg_r 001f failed -71 [ 1078.614891][ T4256] sq930x: probe of 3-1:0.0 failed with error -71 [ 1078.658654][ T4256] usb 3-1: USB disconnect, device number 51 [ 1079.052834][T27880] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10200'. [ 1079.183492][T10764] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1079.373461][T10764] usb 2-1: Using ep0 maxpacket: 8 [ 1079.380513][T10764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.411034][T27889] loop5: detected capacity change from 0 to 4096 [ 1079.411685][T10764] usb 2-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1079.440331][T27889] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1079.504667][T27889] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1079.510131][T10764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.553621][T27896] trusted_key: encrypted_key: master key parameter is missing [ 1079.571528][T10764] usb 2-1: config 0 descriptor?? [ 1079.616144][T10764] usb 2-1: Found UVC 0.00 device (2801:0201) [ 1079.644766][T10764] usb 2-1: No valid video chain found. [ 1079.848531][T10764] usb 2-1: USB disconnect, device number 12 [ 1080.004467][T27907] loop5: detected capacity change from 0 to 4096 [ 1080.074045][T27911] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1080.119816][T27907] syz.5.10211: attempt to access beyond end of device [ 1080.119816][T27907] loop5: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1080.151141][T27907] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 1080.172704][T27914] usb usb7: usbfs: process 27914 (syz.2.10215) did not claim interface 0 before use [ 1080.605331][T27926] netlink: 'syz.1.10220': attribute type 30 has an invalid length. [ 1080.633576][T27926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10220'. [ 1080.673367][ T4618] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1080.701669][T27929] loop5: detected capacity change from 0 to 1024 [ 1080.715728][T27926] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1080.759629][T27926] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1080.781548][T27929] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1080.824456][T27929] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1080.834448][T27901] loop7: detected capacity change from 0 to 32768 [ 1080.892230][T27929] EXT4-fs error (device loop5): ext4_get_journal_inode:5756: inode #5: comm syz.5.10221: unexpected bad inode w/o EXT4_IGET_BAD [ 1080.898708][ T4618] usb 3-1: Using ep0 maxpacket: 32 [ 1080.946936][ T4618] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1080.957514][T27901] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt [ 1080.957514][T27901] [ 1080.957892][ T4618] usb 3-1: config 0 has no interface number 0 [ 1080.979255][T27929] EXT4-fs (loop5): no journal found [ 1081.001619][T27929] EXT4-fs (loop5): can't get journal size [ 1081.016009][ T4618] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1081.028818][T27901] ERROR: (device loop7): remounting filesystem as read-only [ 1081.052584][T27929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1081.070772][ T4618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.083696][T27901] xtLookup: xtSearch returned -5 [ 1081.096466][ T4618] usb 3-1: Product: syz [ 1081.100789][ T4618] usb 3-1: Manufacturer: syz [ 1081.105863][ T4618] usb 3-1: SerialNumber: syz [ 1081.113727][ T4618] usb 3-1: config 0 descriptor?? [ 1081.121794][ T4618] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1081.131301][ T4618] usb 3-1: selecting invalid altsetting 1 [ 1081.137333][ T4618] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1081.146951][ T4618] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1081.167960][ T4618] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1081.184246][ T4618] usb 3-1: media controller created [ 1081.246531][ T4618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1081.316695][T27901] syz.7.10209 (27901) used greatest stack depth: 19256 bytes left [ 1081.419205][T20237] EXT4-fs (loop5): unmounting filesystem. [ 1081.578831][ T4618] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1081.677332][T27944] loop7: detected capacity change from 0 to 4096 [ 1081.715735][ T4618] usb 3-1: USB disconnect, device number 52 [ 1081.774118][T27944] ntfs3: loop7: ino=3, Correct links count -> 2. [ 1081.925203][T27951] delete_channel: no stack [ 1082.265890][T27938] loop4: detected capacity change from 0 to 32768 [ 1082.314263][T27938] (syz.4.10224,27938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1082.406904][T27938] (syz.4.10224,27938,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1082.572896][T27938] JBD2: Ignoring recovery information on journal [ 1082.760457][T27938] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1082.850658][T27938] ocfs2: Unmounting device (7,4) on (node local) [ 1082.989581][T27983] loop2: detected capacity change from 0 to 16 [ 1083.035807][T27983] erofs: (device loop2): mounted with root inode @ nid 36. [ 1083.099980][T27977] loop1: detected capacity change from 0 to 8192 [ 1083.214910][T27977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1083.410815][T27990] IPv6: sit2: Disabled Multicast RS [ 1084.619490][T28030] loop2: detected capacity change from 0 to 256 [ 1084.688817][T28030] FAT-fs (loop2): Directory bread(block 64) failed [ 1084.715892][T28030] FAT-fs (loop2): Directory bread(block 65) failed [ 1084.722762][T28030] FAT-fs (loop2): Directory bread(block 66) failed [ 1084.781052][T28030] FAT-fs (loop2): Directory bread(block 67) failed [ 1084.814349][T28030] FAT-fs (loop2): Directory bread(block 68) failed [ 1084.821139][T28030] FAT-fs (loop2): Directory bread(block 69) failed [ 1084.870811][T28030] FAT-fs (loop2): Directory bread(block 70) failed [ 1084.911343][T28030] FAT-fs (loop2): Directory bread(block 71) failed [ 1084.941198][T28030] FAT-fs (loop2): Directory bread(block 72) failed [ 1084.999481][T28030] FAT-fs (loop2): Directory bread(block 73) failed [ 1086.246038][T28088] binder: 28086:28088 ioctl c0046209 100000000000000 returned -22 [ 1086.328781][T28078] loop2: detected capacity change from 0 to 8192 [ 1086.390661][T28078] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1086.447229][T28078] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1086.475892][T28078] REISERFS (device loop2): using ordered data mode [ 1086.504697][T28078] reiserfs: using flush barriers [ 1086.524203][T28078] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1086.534027][ T4689] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1086.541825][T28078] REISERFS (device loop2): checking transaction log (loop2) [ 1086.559278][T28078] REISERFS (device loop2): Using r5 hash to sort names [ 1086.577300][T28078] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1086.686889][T28101] kAFS: Can only specify source 'none' with -o dyn [ 1086.773471][ T4689] usb 2-1: Using ep0 maxpacket: 16 [ 1086.788231][ T4689] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 1086.830842][ T4689] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1086.871925][ T4618] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1086.883836][ T4689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.891997][ T4689] usb 2-1: Product: syz [ 1086.922519][ T4689] usb 2-1: Manufacturer: syz [ 1086.940821][ T4689] usb 2-1: SerialNumber: syz [ 1086.968509][ T4689] r8152-cfgselector 2-1: config 0 descriptor?? [ 1087.053340][ T4618] usb 5-1: Using ep0 maxpacket: 16 [ 1087.063654][ T4618] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 1087.110279][ T4618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.143355][ T4618] usb 5-1: Product: syz [ 1087.147650][ T4618] usb 5-1: Manufacturer: syz [ 1087.163366][ T4618] usb 5-1: SerialNumber: syz [ 1087.208597][ T4618] r8152-cfgselector 5-1: config 0 descriptor?? [ 1087.405620][ T4689] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1087.425770][ T4689] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 1087.641533][ T4618] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1087.650906][ T4618] r8152-cfgselector 5-1: USB disconnect, device number 33 [ 1088.010152][T28140] loop5: detected capacity change from 0 to 128 [ 1088.070260][T28142] IPVS: length: 193 != 8 [ 1088.410754][T28154] tmpfs: Bad value for 'mpol' [ 1088.667298][T28163] netlink: 'syz.7.10316': attribute type 1 has an invalid length. [ 1089.498842][T28194] IPv6: sit1: Disabled Multicast RS [ 1089.515119][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1089.515134][ T27] audit: type=1326 audit(49959306.147:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28195 comm="syz.5.10330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1089.652423][ T27] audit: type=1326 audit(49959306.167:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28195 comm="syz.5.10330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1089.803666][ T27] audit: type=1326 audit(49959306.167:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28195 comm="syz.5.10330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1089.911695][ T27] audit: type=1326 audit(49959306.177:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28195 comm="syz.5.10330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.223061][ T27] audit: type=1326 audit(49959306.847:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.5.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.315503][ T27] audit: type=1326 audit(49959306.887:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.5.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.318228][T28180] syz.1.10323 (28180): drop_caches: 2 [ 1090.439721][ T27] audit: type=1326 audit(49959306.887:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.5.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.548902][ T27] audit: type=1326 audit(49959306.887:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.5.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.575970][T28221] loop4: detected capacity change from 0 to 1024 [ 1090.675962][ T27] audit: type=1326 audit(49959306.887:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.5.10338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280db9c799 code=0x7ffc0000 [ 1090.820234][T28231] netlink: 'syz.7.10346': attribute type 10 has an invalid length. [ 1090.854049][T20397] hfsplus: b-tree write err: -5, ino 25 [ 1090.886153][T20397] hfsplus: b-tree write err: -5, ino 4 [ 1090.891766][T20397] hfsplus: b-tree write err: -5, ino 2 [ 1090.934333][T28231] team0: Device xfrm0 is of different type [ 1091.293962][ T27] audit: type=1400 audit(49959307.927:365): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28244 comm="syz.2.10351" [ 1091.608888][T28258] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1091.633518][T28258] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 1091.641473][T28258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1092.291044][T28286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1092.640756][T28298] loop2: detected capacity change from 0 to 64 [ 1092.738127][T28294] loop4: detected capacity change from 0 to 8192 [ 1092.804020][T28294] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1092.843333][T28294] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1092.862949][T28294] REISERFS (device loop4): using ordered data mode [ 1092.873019][T28294] reiserfs: using flush barriers [ 1092.893385][T28294] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1092.913929][T28294] REISERFS (device loop4): checking transaction log (loop4) [ 1092.935794][T28294] REISERFS (device loop4): Using r5 hash to sort names [ 1092.955438][T28294] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1093.218529][T28312] netlink: 240 bytes leftover after parsing attributes in process `syz.7.10378'. [ 1093.577115][T28322] loop7: detected capacity change from 0 to 1764 [ 1093.642400][T28326] loop4: detected capacity change from 0 to 512 [ 1093.681551][T28326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1093.746497][T28326] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1093.775449][T28326] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1093.817210][T28326] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1093.846562][T28326] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.10383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1093.925668][T28326] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10383: couldn't read orphan inode 13 (err -117) [ 1093.959257][T28326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1094.068002][T28326] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.10383: inode #15: comm syz.4.10383: iget: illegal inode # [ 1094.183737][T28340] loop5: detected capacity change from 0 to 512 [ 1094.280367][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 1094.316835][T28348] loop1: detected capacity change from 0 to 64 [ 1094.353644][T28350] loop7: detected capacity change from 0 to 736 [ 1094.394039][T28340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1094.489676][T28348] syz.1.10391: attempt to access beyond end of device [ 1094.489676][T28348] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1094.593459][T28348] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1094.667310][T20237] EXT4-fs (loop5): unmounting filesystem. [ 1094.696086][T28348] syz.1.10391: attempt to access beyond end of device [ 1094.696086][T28348] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64 [ 1094.800508][T28354] loop2: detected capacity change from 0 to 2048 [ 1094.852992][T28348] Buffer I/O error on dev loop1, logical block 8388608, async page read [ 1094.861912][T28354] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1094.938095][T28354] NILFS (loop2): mounting unchecked fs [ 1095.023378][T28354] NILFS (loop2): recovery complete [ 1095.045302][T28362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1095.104539][T28354] Process accounting resumed [ 1095.572790][T28382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10404'. [ 1095.663738][T28382] netlink: 'syz.1.10404': attribute type 2 has an invalid length. [ 1095.955194][T28400] loop1: detected capacity change from 0 to 64 [ 1096.012948][T28400] syz.1.10410: attempt to access beyond end of device [ 1096.012948][T28400] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1096.073522][T28400] Buffer I/O error on dev loop1, logical block 512, async page read [ 1096.123607][T28400] syz.1.10410: attempt to access beyond end of device [ 1096.123607][T28400] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1096.252303][T28400] Buffer I/O error on dev loop1, logical block 56576, async page read [ 1096.794405][ T4687] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1096.995324][ T4687] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1097.023313][ T4687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.078982][ T4687] usb 3-1: config 0 descriptor?? [ 1097.295304][ T4687] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1097.310685][ T4687] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1097.505271][ T4687] [drm:udl_init] *ERROR* Selecting channel failed [ 1097.614617][ T4687] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1097.640861][ T4687] [drm] Initialized udl on minor 2 [ 1097.670290][ T4687] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1097.747414][ T4687] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1097.803780][ T4687] usb 3-1: USB disconnect, device number 53 [ 1097.836188][ T4689] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1097.880629][ T4689] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1097.900491][ T4689] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1098.288550][T28476] loop1: detected capacity change from 0 to 512 [ 1098.352329][T28476] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1098.421339][T28476] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1098.489919][T28476] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1098.548215][T28476] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1098.573304][ T4687] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1098.608962][T28476] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.10439: Failed to acquire dquot type 1 [ 1098.653764][T28476] EXT4-fs (loop1): Remounting filesystem read-only [ 1098.673482][T28476] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10439: bg 0: block 40: padding at end of block bitmap is not set [ 1098.763545][ T4687] usb 3-1: Using ep0 maxpacket: 32 [ 1098.769946][T28476] EXT4-fs (loop1): Remounting filesystem read-only [ 1098.777388][ T4687] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1098.819114][ T4687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.827810][T28476] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6179: Corrupt filesystem [ 1098.860355][ T4687] usb 3-1: config 0 descriptor?? [ 1098.878894][ T4687] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1098.885491][T28476] EXT4-fs (loop1): Remounting filesystem read-only [ 1098.892315][T28476] EXT4-fs (loop1): 1 truncate cleaned up [ 1098.918967][T28476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1099.160787][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 1099.281957][ T4687] gspca_nw80x: reg_r err -71 [ 1099.286995][ T4687] nw80x: probe of 3-1:0.0 failed with error -71 [ 1099.343494][ T4687] usb 3-1: USB disconnect, device number 54 [ 1099.722990][T28523] loop5: detected capacity change from 0 to 1024 [ 1099.962856][T14324] hfsplus: b-tree write err: -5, ino 25 [ 1099.975058][T14324] hfsplus: b-tree write err: -5, ino 4 [ 1099.981177][T14324] hfsplus: b-tree write err: -5, ino 2 [ 1100.026624][T14324] hfsplus: b-tree write err: -5, ino 26 [ 1100.604286][T28558] loop7: detected capacity change from 0 to 1024 [ 1100.760749][T28558] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1100.826911][T28558] EXT4-fs error (device loop7): ext4_empty_dir:3166: inode #11: block 623: comm syz.7.10469: Attempting to read directory block (623) that is past i_size (638464) [ 1100.973050][T28574] loop2: detected capacity change from 0 to 128 [ 1101.066482][T28578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10478'. [ 1101.152522][T27016] EXT4-fs (loop7): unmounting filesystem. [ 1101.635432][T28593] dlm: no locking on control device [ 1102.277222][T28576] loop5: detected capacity change from 0 to 32768 [ 1102.308952][T28576] XFS: attr2 mount option is deprecated. [ 1102.423616][T28576] XFS (loop5): Mounting V5 Filesystem [ 1102.509976][T28576] XFS (loop5): Ending clean mount [ 1102.517896][T28576] XFS (loop5): Quotacheck needed: Please wait. [ 1102.565713][ T27] audit: type=1326 audit(49959319.197:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28632 comm="syz.7.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097219c799 code=0x7ffc0000 [ 1102.678517][ T27] audit: type=1326 audit(49959319.197:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28632 comm="syz.7.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097219c799 code=0x7ffc0000 [ 1102.700839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1102.771386][T28576] XFS (loop5): Quotacheck: Done. [ 1102.849625][ T27] audit: type=1326 audit(49959319.217:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28632 comm="syz.7.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f097219c799 code=0x7ffc0000 [ 1102.923652][T28643] loop7: detected capacity change from 0 to 136 [ 1102.958139][ T27] audit: type=1326 audit(49959319.217:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28632 comm="syz.7.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097219c799 code=0x7ffc0000 [ 1103.088788][ T27] audit: type=1326 audit(49959319.217:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28632 comm="syz.7.10498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097219c799 code=0x7ffc0000 [ 1103.112537][T20237] XFS (loop5): Unmounting Filesystem [ 1103.982008][T28677] loop4: detected capacity change from 0 to 8 [ 1104.207733][T28687] netlink: 'syz.7.10518': attribute type 21 has an invalid length. [ 1104.234703][T28687] IPv6: NLM_F_CREATE should be specified when creating new route [ 1104.323796][T28687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1104.331068][T28687] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.338542][T28687] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.345846][T28687] IPv6: NLM_F_CREATE should be set when creating new route [ 1104.753066][T28706] SET target dimension over the limit! [ 1104.943533][ T4687] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1105.073403][ T7] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1105.143368][ T4687] usb 5-1: Using ep0 maxpacket: 16 [ 1105.156772][ T4687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.199778][ T4687] usb 5-1: New USB device found, idVendor=1803, idProduct=5510, bcdDevice=7d.bf [ 1105.228038][ T4687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.256476][ T4687] usb 5-1: Product: syz [ 1105.260983][ T4687] usb 5-1: Manufacturer: syz [ 1105.271901][ T4687] usb 5-1: SerialNumber: syz [ 1105.282084][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.303287][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.319033][ T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1105.355686][ T4687] usb 5-1: config 0 descriptor?? [ 1105.362868][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1105.398421][ T7] usb 8-1: SerialNumber: syz [ 1105.469136][ T7] usb 8-1: 0:2 : does not exist [ 1105.487786][T28733] loop1: detected capacity change from 0 to 256 [ 1105.569496][ T4687] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1105.795431][ T4687] usb 5-1: USB disconnect, device number 34 [ 1105.831955][T28740] loop2: detected capacity change from 0 to 512 [ 1105.862506][ T4689] usb 8-1: USB disconnect, device number 4 [ 1105.870695][T28742] netlink: 'syz.1.10540': attribute type 9 has an invalid length. [ 1105.906697][T28742] netlink: 399 bytes leftover after parsing attributes in process `syz.1.10540'. [ 1105.954675][T28740] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1105.969720][T28740] Quota error (device loop2): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 1106.009433][T28740] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1106.025295][T28740] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1106.080168][T28745] loop5: detected capacity change from 0 to 4096 [ 1106.095606][T28745] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1106.105105][T28740] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.10539: bad orphan inode 14 [ 1106.137687][T28745] ntfs3: loop5: mft corrupted [ 1106.142639][T28745] ntfs3: loop5: Failed to load $Volume. [ 1106.222129][T28740] ext4_test_bit(bit=13, block=18) = 1 [ 1106.253295][T28740] is_bad_inode(inode)=0 [ 1106.257591][T28740] NEXT_ORPHAN(inode)=0 [ 1106.261693][T28740] max_ino=32 [ 1106.275038][T28740] i_nlink=1 [ 1106.278259][T28740] EXT4-fs (loop2): 1 truncate cleaned up [ 1106.313359][T28740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1106.458176][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 1106.532942][T28754] loop1: detected capacity change from 0 to 256 [ 1106.683748][T28754] FAT-fs (loop1): Directory bread(block 64) failed [ 1106.690355][T28754] FAT-fs (loop1): Directory bread(block 65) failed [ 1106.735022][T28761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10545'. [ 1106.760241][T28754] FAT-fs (loop1): Directory bread(block 66) failed [ 1106.793989][T28754] FAT-fs (loop1): Directory bread(block 67) failed [ 1106.800714][T28754] FAT-fs (loop1): Directory bread(block 68) failed [ 1106.833585][T28754] FAT-fs (loop1): Directory bread(block 69) failed [ 1106.873420][T28754] FAT-fs (loop1): Directory bread(block 70) failed [ 1106.880040][T28754] FAT-fs (loop1): Directory bread(block 71) failed [ 1106.923599][T28754] FAT-fs (loop1): Directory bread(block 72) failed [ 1106.930651][T28754] FAT-fs (loop1): Directory bread(block 73) failed [ 1106.949295][T28760] loop7: detected capacity change from 0 to 8192 [ 1106.985122][T28760] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1107.022808][T28760] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 1107.062238][T28760] REISERFS (device loop7): using ordered data mode [ 1107.118620][T28760] reiserfs: using flush barriers [ 1107.140115][T28760] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1107.267938][T28760] REISERFS (device loop7): checking transaction log (loop7) [ 1107.325141][T28760] REISERFS (device loop7): Using rupasov hash to sort names [ 1107.332620][T28760] REISERFS (device loop7): using 3.5.x disk format [ 1107.388877][T28760] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1107.467564][T28760] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1107.537933][T28760] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1107.592008][T28760] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 1107.630394][T28784] netlink: 'syz.1.10555': attribute type 3 has an invalid length. [ 1107.648556][T28760] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1107.658648][T28786] sctp: [Deprecated]: syz.5.10556 (pid 28786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1107.658648][T28786] Use struct sctp_sack_info instead [ 1107.720104][T28760] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1107.720112][T28779] xt_CT: No such helper "netbios-ns" [ 1107.819668][T28760] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1108.187633][T28800] loop1: detected capacity change from 0 to 64 [ 1108.573542][T10767] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1108.773527][T10767] usb 6-1: Using ep0 maxpacket: 8 [ 1108.784949][T10767] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 1108.814733][T10767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1108.859638][T28827] netlink: 'syz.1.10573': attribute type 4 has an invalid length. [ 1108.870822][T10767] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1108.903355][T10767] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1108.926934][T10767] usb 6-1: Product: syz [ 1108.943338][T10767] usb 6-1: Manufacturer: syz [ 1108.948009][T10767] usb 6-1: SerialNumber: syz [ 1109.005289][T10767] usb 6-1: config 0 descriptor?? [ 1109.053941][T10767] smsusb:smsusb_probe: board id=2, interface number 0 [ 1109.068534][T28825] loop2: detected capacity change from 0 to 8192 [ 1109.105330][T10767] smsusb:smsusb_probe: Device initialized with return code -19 [ 1109.136656][T28825] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1109.156791][T28834] loop7: detected capacity change from 0 to 164 [ 1109.173732][T28825] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1109.182997][T28825] REISERFS (device loop2): using ordered data mode [ 1109.189982][T28825] reiserfs: using flush barriers [ 1109.203355][T28825] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1109.225909][T28825] REISERFS (device loop2): checking transaction log (loop2) [ 1109.253705][T28825] REISERFS (device loop2): Using r5 hash to sort names [ 1109.260960][T28825] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1109.355532][T28834] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1109.435559][T28834] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1109.474173][T28834] Symlink component flag not implemented [ 1109.500510][T28834] Symlink component flag not implemented [ 1109.509714][T10767] usb 6-1: USB disconnect, device number 19 [ 1109.531081][T28834] Symlink component flag not implemented (7) [ 1109.544033][T28834] Symlink component flag not implemented (116) [ 1110.410169][T28875] loop7: detected capacity change from 0 to 1024 [ 1110.496478][T28875] EXT4-fs: inline encryption not supported [ 1110.590570][T28880] loop1: detected capacity change from 0 to 1024 [ 1110.642816][T28875] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.10592: lblock 2 mapped to illegal pblock 2 (length 1) [ 1110.705954][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1110.739385][T28875] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 1110.796645][T28888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10596'. [ 1110.811538][T28875] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.10592: lblock 0 mapped to illegal pblock 48 (length 1) [ 1110.865095][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1110.897905][T28875] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1110.943784][T28875] EXT4-fs error (device loop7): ext4_acquire_dquot:6835: comm syz.7.10592: Failed to acquire dquot type 0 [ 1111.000125][T20401] hfsplus: b-tree write err: -5, ino 25 [ 1111.013736][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.031471][T20401] hfsplus: b-tree write err: -5, ino 4 [ 1111.039459][T28875] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1111.052882][T20401] hfsplus: b-tree write err: -5, ino 2 [ 1111.069474][T20401] hfsplus: b-tree write err: -5, ino 26 [ 1111.113589][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.120187][T28875] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.10592: mark_inode_dirty error [ 1111.184137][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.230388][T28875] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1111.271493][T28875] EXT4-fs (loop7): 1 orphan inode deleted [ 1111.291746][T28875] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1111.329994][T14324] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 1111.397285][T14324] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.404039][T14324] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 1111.417038][T28875] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.10592: lblock 0 mapped to illegal pblock 48 (length 1) [ 1111.478834][T14324] EXT4-fs error (device loop7): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 1111.522086][T28904] program syz.1.10602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.534805][T14324] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.555321][T28875] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.563484][T28904] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1111.580781][T28875] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 1111.591805][T28876] loop4: detected capacity change from 0 to 32768 [ 1111.699082][T28876] jfs_mkdir: dtInsert returned -EIO [ 1111.738668][T28876] ERROR: (device loop4): jfs_mkdir: [ 1111.738668][T28876] [ 1111.775680][T28876] ERROR: (device loop4): remounting filesystem as read-only [ 1111.791490][T27016] EXT4-fs (loop7): unmounting filesystem. [ 1111.835867][T27016] EXT4-fs error (device loop7): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1111.894313][T27016] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.900903][T27016] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 1111.954372][T27016] EXT4-fs (loop7): Remounting filesystem read-only [ 1111.984317][T27016] EXT4-fs error (device loop7): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 1112.023365][T10767] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1112.053757][T27016] EXT4-fs (loop7): Remounting filesystem read-only [ 1112.226139][T10767] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 1112.244555][T10767] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1112.324025][T10767] usb 6-1: config 0 has no interface number 0 [ 1112.343396][T10767] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 1112.410813][T10767] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.464606][T10767] usb 6-1: config 0 interface 52 has no altsetting 0 [ 1112.508976][T28926] loop1: detected capacity change from 0 to 2048 [ 1112.512335][T10767] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1112.574929][T10767] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1112.598630][T28926] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1112.613071][T10767] usb 6-1: Manufacturer: syz [ 1112.640011][T10767] usb 6-1: config 0 descriptor?? [ 1112.666404][T10767] hub 6-1:0.52: bad descriptor, ignoring hub [ 1112.679990][T10767] hub: probe of 6-1:0.52 failed with error -5 [ 1112.702957][T28934] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1112.760264][T28926] NILFS (loop1): error -2 truncating bmap (ino=16) [ 1112.876571][T28940] loop7: detected capacity change from 0 to 256 [ 1112.913707][T10767] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input62 [ 1113.008361][T28940] FAT-fs (loop7): Directory bread(block 64) failed [ 1113.033414][T28940] FAT-fs (loop7): Directory bread(block 65) failed [ 1113.056724][T28940] FAT-fs (loop7): Directory bread(block 66) failed [ 1113.130118][T28940] FAT-fs (loop7): Directory bread(block 67) failed [ 1113.169825][T28940] FAT-fs (loop7): Directory bread(block 68) failed [ 1113.203628][T28940] FAT-fs (loop7): Directory bread(block 69) failed [ 1113.243930][T28940] FAT-fs (loop7): Directory bread(block 70) failed [ 1113.293791][T28940] FAT-fs (loop7): Directory bread(block 71) failed [ 1113.300587][T28940] FAT-fs (loop7): Directory bread(block 72) failed [ 1113.316876][ T7] usb 6-1: USB disconnect, device number 20 [ 1113.333441][T28940] FAT-fs (loop7): Directory bread(block 73) failed [ 1113.499806][T28952] PKCS7: Unknown OID: [4] 0.0 [ 1113.519229][T28952] PKCS7: Only support pkcs7_signedData type [ 1114.182567][T28977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10631'. [ 1115.005543][ T27] audit: type=1800 audit(49959331.637:371): pid=28982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.10632" name="/" dev="sockfs" ino=107169 res=0 errno=0 [ 1115.189301][T29008] loop4: detected capacity change from 0 to 2048 [ 1115.208200][T29008] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1115.340400][T29019] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1115.410838][T29008] NILFS (loop4): error -2 truncating bmap (ino=16) [ 1115.526316][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.686766][T29027] loop2: detected capacity change from 0 to 164 [ 1115.710166][T29027] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1115.780921][T29027] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1115.831034][T29033] loop1: detected capacity change from 0 to 64 [ 1115.840483][T29027] Symlink component flag not implemented [ 1115.882387][T29027] Symlink component flag not implemented [ 1115.923877][T29027] Symlink component flag not implemented (7) [ 1115.929928][T29027] Symlink component flag not implemented (116) [ 1116.243644][T29044] netlink: 'syz.1.10656': attribute type 10 has an invalid length. [ 1116.294776][T29044] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1116.346603][T29044] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1116.387711][T29044] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1116.433489][T29044] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1117.150695][T29071] netlink: 'syz.7.10666': attribute type 1 has an invalid length. [ 1117.290612][T29079] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10670'. [ 1118.299480][T29113] xt_CT: No such helper "snmp_trap" [ 1118.611516][T29127] loop7: detected capacity change from 0 to 4096 [ 1118.676029][T29127] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1118.737378][T29138] netlink: 'syz.1.10698': attribute type 2 has an invalid length. [ 1118.740014][T29140] loop4: detected capacity change from 0 to 16 [ 1118.806251][T29140] erofs: (device loop4): mounted with root inode @ nid 36. [ 1119.037533][T29147] netlink: 'syz.7.10702': attribute type 13 has an invalid length. [ 1119.616407][T29165] loop4: detected capacity change from 0 to 1764 [ 1120.059861][T29147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.067484][T29147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.130131][T29181] No such timeout policy "syz1" [ 1120.277849][T29185] netlink: 'syz.1.10720': attribute type 9 has an invalid length. [ 1120.291641][T29185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10720'. [ 1120.896631][T29147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.950706][T29147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.469356][T29147] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.478615][T29147] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.487583][T29147] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.496577][T29147] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.642485][T29191] netlink: 'syz.1.10723': attribute type 11 has an invalid length. [ 1121.673290][T29191] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10723'. [ 1121.996348][T29201] loop1: detected capacity change from 0 to 512 [ 1122.044388][T29201] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1122.085296][T29201] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1122.098265][T29201] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1122.123415][T29201] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1122.198813][T29199] loop2: detected capacity change from 0 to 4096 [ 1122.230739][T29199] ntfs: volume version 3.1. [ 1122.286280][T29199] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1122.302107][T29201] EXT4-fs (loop1): 1 truncate cleaned up [ 1122.323582][T29201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1122.341657][T29199] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1122.363714][T29201] EXT4-fs (loop1): unmounting filesystem. [ 1122.415459][T29199] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1122.420982][T29212] loop5: detected capacity change from 0 to 4096 [ 1122.450085][T29212] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 1122.494222][T29199] ntfs: (device loop2): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1122.582250][T29212] ntfs3: loop5: mft corrupted [ 1122.613766][T29199] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1122.673823][T29199] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 1122.840044][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1122.883755][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1122.922019][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1122.995302][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1123.036789][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1123.075591][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1123.116451][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1123.164108][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1123.228372][T29220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1123.585925][T29245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10748'. [ 1123.883625][T29255] loop7: detected capacity change from 0 to 256 [ 1124.087718][T29263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10758'. [ 1124.453444][ T4687] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1124.657508][ T4687] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 1124.677044][ T4687] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1124.703317][ T4687] usb 2-1: Product: syz [ 1124.707654][ T4687] usb 2-1: Manufacturer: syz [ 1124.713605][ T4687] usb 2-1: SerialNumber: syz [ 1124.729515][ T4687] usb 2-1: config 0 descriptor?? [ 1124.740788][ T4687] ch341 2-1:0.0: ch341-uart converter detected [ 1124.969334][T29294] loop4: detected capacity change from 0 to 64 [ 1125.011870][T29294] hfs: unable to locate alternate MDB [ 1125.030473][T29294] hfs: continuing without an alternate MDB [ 1125.043777][T29298] netlink: 'syz.5.10774': attribute type 5 has an invalid length. [ 1125.083189][ T27] audit: type=1800 audit(49959341.707:372): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10773" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 1125.153679][ T4687] usb 2-1: failed to send control message: -71 [ 1125.162430][ T4687] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1125.184166][T20403] [ 1125.186565][T20403] ====================================================== [ 1125.193615][T20403] WARNING: possible circular locking dependency detected [ 1125.200678][T20403] syzkaller #0 Not tainted [ 1125.205125][T20403] ------------------------------------------------------ [ 1125.206819][ T4687] usb 2-1: USB disconnect, device number 14 [ 1125.212154][T20403] kworker/u4:15/20403 is trying to acquire lock: [ 1125.212168][T20403] ffff88802534d578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1125.230618][ T4687] ch341 2-1:0.0: device disconnected [ 1125.235343][T20403] [ 1125.235343][T20403] but task is already holding lock: [ 1125.235351][T20403] ffff888058d2e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1125.257578][T20403] [ 1125.257578][T20403] which lock already depends on the new lock. [ 1125.257578][T20403] [ 1125.268005][T20403] [ 1125.268005][T20403] the existing dependency chain (in reverse order) is: [ 1125.277050][T20403] [ 1125.277050][T20403] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1125.285218][T20403] __mutex_lock+0x12d/0xaf0 [ 1125.290317][T20403] hfs_find_init+0x15b/0x1d0 [ 1125.295471][T20403] hfs_get_block+0x553/0xc50 [ 1125.300623][T20403] block_read_full_folio+0x3e6/0xf00 [ 1125.306475][T20403] filemap_read_folio+0x16b/0x770 [ 1125.312066][T20403] do_read_cache_folio+0x2a0/0x760 [ 1125.317757][T20403] do_read_cache_page+0x32/0x220 [ 1125.323266][T20403] __hfs_bnode_create+0x4ad/0x7b0 [ 1125.328864][T20403] hfs_bnode_find+0x21e/0xd40 [ 1125.334101][T20403] hfs_brec_find+0x178/0x500 [ 1125.339259][T20403] hfs_brec_read+0x20/0x100 [ 1125.344319][T20403] hfs_cat_find_brec+0x174/0x3f0 [ 1125.349826][T20403] hfs_fill_super+0xff8/0x15b0 [ 1125.355159][T20403] mount_bdev+0x287/0x3c0 [ 1125.360046][T20403] legacy_get_tree+0xe6/0x180 [ 1125.365614][T20403] vfs_get_tree+0x88/0x270 [ 1125.370595][T20403] do_new_mount+0x24a/0xa40 [ 1125.375655][T20403] __se_sys_mount+0x2e3/0x3d0 [ 1125.380896][T20403] do_syscall_64+0x4c/0xa0 [ 1125.385876][T20403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.392337][T20403] [ 1125.392337][T20403] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1125.401601][T20403] __lock_acquire+0x2d07/0x7d10 [ 1125.407017][T20403] lock_acquire+0x1bb/0x4a0 [ 1125.412090][T20403] __mutex_lock+0x12d/0xaf0 [ 1125.417161][T20403] hfs_extend_file+0xfb/0x13f0 [ 1125.422501][T20403] hfs_bmap_reserve+0x103/0x420 [ 1125.428007][T20403] __hfs_ext_write_extent+0x1fa/0x470 [ 1125.433957][T20403] hfs_ext_write_extent+0x17b/0x200 [ 1125.439718][T20403] hfs_write_inode+0xd8/0xa20 [ 1125.444954][T20403] __writeback_single_inode+0x75b/0x1160 [ 1125.451141][T20403] writeback_sb_inodes+0xb30/0x1850 [ 1125.456893][T20403] wb_writeback+0x482/0xd50 [ 1125.461960][T20403] wb_workfn+0x423/0xee0 [ 1125.466763][T20403] process_one_work+0x8a2/0x1160 [ 1125.472275][T20403] worker_thread+0xaa2/0x1270 [ 1125.477517][T20403] kthread+0x29d/0x330 [ 1125.482148][T20403] ret_from_fork+0x1f/0x30 [ 1125.487133][T20403] [ 1125.487133][T20403] other info that might help us debug this: [ 1125.487133][T20403] [ 1125.497387][T20403] Possible unsafe locking scenario: [ 1125.497387][T20403] [ 1125.504869][T20403] CPU0 CPU1 [ 1125.510257][T20403] ---- ---- [ 1125.515642][T20403] lock(&tree->tree_lock#2/1); [ 1125.520548][T20403] lock(&HFS_I(tree->inode)->extents_lock); [ 1125.529097][T20403] lock(&tree->tree_lock#2/1); [ 1125.536525][T20403] lock(&HFS_I(tree->inode)->extents_lock); [ 1125.542546][T20403] [ 1125.542546][T20403] *** DEADLOCK *** [ 1125.542546][T20403] [ 1125.550723][T20403] 3 locks held by kworker/u4:15/20403: [ 1125.556307][T20403] #0: ffff88801b2db938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.567155][T20403] #1: ffffc90003647d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1125.579061][T20403] #2: ffff888058d2e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1125.589131][T20403] [ 1125.589131][T20403] stack backtrace: [ 1125.595141][T20403] CPU: 0 PID: 20403 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1125.602985][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1125.613166][T20403] Workqueue: writeback wb_workfn (flush-7:4) [ 1125.619207][T20403] Call Trace: [ 1125.622523][T20403] [ 1125.625492][T20403] dump_stack_lvl+0x188/0x24e [ 1125.630239][T20403] ? load_image+0x400/0x400 [ 1125.634782][T20403] ? show_regs_print_info+0x12/0x12 [ 1125.640048][T20403] ? print_circular_bug+0x12b/0x1a0 [ 1125.645283][T20403] check_noncircular+0x296/0x330 [ 1125.650260][T20403] ? look_up_lock_class+0x75/0x140 [ 1125.655411][T20403] ? add_chain_block+0x940/0x940 [ 1125.660395][T20403] ? lockdep_lock+0xf1/0x1f0 [ 1125.665020][T20403] ? unwind_next_frame+0x1880/0x20b0 [ 1125.670373][T20403] ? _find_first_zero_bit+0xcf/0x100 [ 1125.675692][T20403] __lock_acquire+0x2d07/0x7d10 [ 1125.680595][T20403] ? ret_from_fork+0x1f/0x30 [ 1125.685240][T20403] ? ret_from_fork+0x1f/0x30 [ 1125.690071][T20403] ? verify_lock_unused+0x140/0x140 [ 1125.695337][T20403] ? stack_trace_save+0xa6/0xf0 [ 1125.700228][T20403] ? stack_trace_snprint+0xf0/0xf0 [ 1125.705388][T20403] ? check_noncircular+0x189/0x330 [ 1125.710549][T20403] ? add_chain_block+0x940/0x940 [ 1125.715529][T20403] lock_acquire+0x1bb/0x4a0 [ 1125.720086][T20403] ? hfs_extend_file+0xfb/0x13f0 [ 1125.725074][T20403] ? __might_sleep+0xd0/0xd0 [ 1125.729693][T20403] ? read_lock_is_recursive+0x10/0x10 [ 1125.735110][T20403] __mutex_lock+0x12d/0xaf0 [ 1125.739654][T20403] ? hfs_extend_file+0xfb/0x13f0 [ 1125.744635][T20403] ? verify_lock_unused+0x140/0x140 [ 1125.749883][T20403] ? hfs_extend_file+0xfb/0x13f0 [ 1125.754864][T20403] ? mutex_lock_nested+0x10/0x10 [ 1125.759859][T20403] ? __stack_depot_save+0x421/0x460 [ 1125.765540][T20403] hfs_extend_file+0xfb/0x13f0 [ 1125.770360][T20403] ? hfs_ext_write_extent+0x14e/0x200 [ 1125.775792][T20403] ? hfs_write_inode+0xd8/0xa20 [ 1125.780695][T20403] ? hfs_get_block+0xc50/0xc50 [ 1125.785535][T20403] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1125.791750][T20403] ? rcu_is_watching+0x11/0xa0 [ 1125.796565][T20403] ? trace_contention_end+0x5f/0x170 [ 1125.801895][T20403] ? memset+0x1e/0x40 [ 1125.805913][T20403] ? hfs_brec_find+0x197/0x500 [ 1125.810725][T20403] hfs_bmap_reserve+0x103/0x420 [ 1125.815633][T20403] __hfs_ext_write_extent+0x1fa/0x470 [ 1125.821168][T20403] hfs_ext_write_extent+0x17b/0x200 [ 1125.826420][T20403] ? verify_lock_unused+0x140/0x140 [ 1125.831667][T20403] ? hfs_ext_keycmp+0x310/0x310 [ 1125.836564][T20403] ? writeback_sb_inodes+0x46b/0x1850 [ 1125.841996][T20403] hfs_write_inode+0xd8/0xa20 [ 1125.846730][T20403] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1125.852145][T20403] ? __writeback_single_inode+0x4ae/0x1160 [ 1125.857998][T20403] ? __lock_acquire+0x7d10/0x7d10 [ 1125.863075][T20403] ? do_raw_spin_lock+0x128/0x2f0 [ 1125.868138][T20403] ? __rwlock_init+0x140/0x140 [ 1125.872942][T20403] __writeback_single_inode+0x75b/0x1160 [ 1125.878627][T20403] writeback_sb_inodes+0xb30/0x1850 [ 1125.883936][T20403] ? queue_io+0x5a0/0x5a0 [ 1125.888036][ T52] block nbd5: Attempted send on invalid socket [ 1125.888297][T20403] ? rcu_is_watching+0x11/0xa0 [ 1125.894638][ T52] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1125.899219][T20403] wb_writeback+0x482/0xd50 [ 1125.912809][T20403] ? percpu_ref_tryget+0x250/0x250 [ 1125.917965][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1125.924017][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1125.929271][T20403] wb_workfn+0x423/0xee0 [ 1125.930976][T29311] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1125.933557][T20403] ? inode_wait_for_writeback+0x220/0x220 [ 1125.933597][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1125.952205][T20403] ? read_lock_is_recursive+0x10/0x10 [ 1125.957633][T20403] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1125.963570][T20403] ? _raw_spin_unlock+0x40/0x40 [ 1125.968461][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1125.973685][T20403] ? process_one_work+0x7b0/0x1160 [ 1125.978878][T20403] process_one_work+0x8a2/0x1160 [ 1125.983848][T20403] ? worker_detach_from_pool+0x240/0x240 [ 1125.989513][T20403] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1125.994553][T20403] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1126.000122][T20403] ? kthread_data+0x4b/0xc0 [ 1126.004658][T20403] worker_thread+0xaa2/0x1270 [ 1126.009458][T20403] kthread+0x29d/0x330 [ 1126.013551][T20403] ? worker_clr_flags+0x1a0/0x1a0 [ 1126.018604][T20403] ? kthread_blkcg+0xd0/0xd0 [ 1126.023239][T20403] ret_from_fork+0x1f/0x30 [ 1126.027714][T20403] [ 1126.033729][T29300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1126.103981][T29300] Process accounting paused [ 1126.116008][T20403] hfs: new node 0 already hashed? [ 1126.121525][T20403] ------------[ cut here ]------------ [ 1126.127166][T20403] WARNING: CPU: 0 PID: 20403 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 1126.136282][T20403] Modules linked in: [ 1126.140210][T20403] CPU: 0 PID: 20403 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1126.148002][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.158197][T20403] Workqueue: writeback wb_workfn (flush-7:4) [ 1126.164402][T20403] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1126.170081][T20403] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1126.189901][T20403] RSP: 0018:ffffc90003646e80 EFLAGS: 00010246 [ 1126.196043][T20403] RAX: 000000000000001f RBX: ffff888058d2e0e0 RCX: f66e2d16a645e600 [ 1126.204088][T20403] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1126.212103][T20403] RBP: 0000000000000000 R08: ffffc90003646b07 R09: 1ffff920006c8d60 [ 1126.220174][T20403] R10: dffffc0000000000 R11: fffff520006c8d61 R12: 0000000000000000 [ 1126.228226][T20403] R13: ffff888058d2e000 R14: ffff888024339d00 R15: dffffc0000000000 [ 1126.236265][T20403] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1126.245279][T20403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1126.251902][T20403] CR2: 00007fa3315e92f8 CR3: 000000002eeac000 CR4: 00000000003506f0 [ 1126.259961][T20403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1126.268087][T20403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1126.276179][T20403] Call Trace: [ 1126.279490][T20403] [ 1126.282450][T20403] hfs_bmap_alloc+0x53d/0x5d0 [ 1126.287241][T20403] ? hfs_bmap_reserve+0x420/0x420 [ 1126.292312][T20403] ? rcu_is_watching+0x11/0xa0 [ 1126.297157][T20403] hfs_btree_inc_height+0xfd/0xac0 [ 1126.302317][T20403] ? hfs_brec_insert+0x6f6/0xbd0 [ 1126.307423][T20403] ? hfs_brec_insert+0xbd0/0xbd0 [ 1126.312415][T20403] ? do_raw_spin_unlock+0x11d/0x230 [ 1126.317710][T20403] hfs_brec_insert+0x744/0xbd0 [ 1126.322539][T20403] ? hfs_brec_keylen+0x350/0x350 [ 1126.327587][T20403] __hfs_ext_write_extent+0x2a1/0x470 [ 1126.333011][T20403] hfs_ext_write_extent+0x17b/0x200 [ 1126.338292][T20403] ? verify_lock_unused+0x140/0x140 [ 1126.343569][T20403] ? hfs_ext_keycmp+0x310/0x310 [ 1126.348472][T20403] ? writeback_sb_inodes+0x46b/0x1850 [ 1126.353912][T20403] hfs_write_inode+0xd8/0xa20 [ 1126.358657][T20403] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1126.364133][T20403] ? __writeback_single_inode+0x4ae/0x1160 [ 1126.369995][T20403] ? __lock_acquire+0x7d10/0x7d10 [ 1126.375109][T20403] ? do_raw_spin_lock+0x128/0x2f0 [ 1126.380197][T20403] ? __rwlock_init+0x140/0x140 [ 1126.385044][T20403] __writeback_single_inode+0x75b/0x1160 [ 1126.390734][T20403] writeback_sb_inodes+0xb30/0x1850 [ 1126.396018][T20403] ? queue_io+0x5a0/0x5a0 [ 1126.400426][T20403] ? rcu_is_watching+0x11/0xa0 [ 1126.405334][T20403] wb_writeback+0x482/0xd50 [ 1126.409930][T20403] ? percpu_ref_tryget+0x250/0x250 [ 1126.415102][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1126.421137][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1126.426405][T20403] wb_workfn+0x423/0xee0 [ 1126.430789][T20403] ? inode_wait_for_writeback+0x220/0x220 [ 1126.436626][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1126.442719][T20403] ? read_lock_is_recursive+0x10/0x10 [ 1126.448264][T20403] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1126.454280][T20403] ? _raw_spin_unlock+0x40/0x40 [ 1126.459189][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1126.464459][T20403] ? process_one_work+0x7b0/0x1160 [ 1126.469625][T20403] process_one_work+0x8a2/0x1160 [ 1126.474670][T20403] ? worker_detach_from_pool+0x240/0x240 [ 1126.480393][T20403] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1126.485507][T20403] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1126.491185][T20403] ? kthread_data+0x4b/0xc0 [ 1126.495780][T20403] worker_thread+0xaa2/0x1270 [ 1126.500511][T20403] kthread+0x29d/0x330 [ 1126.504647][T20403] ? worker_clr_flags+0x1a0/0x1a0 [ 1126.509715][T20403] ? kthread_blkcg+0xd0/0xd0 [ 1126.514371][T20403] ret_from_fork+0x1f/0x30 [ 1126.518841][T20403] [ 1126.521895][T20403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1126.529211][T20403] CPU: 0 PID: 20403 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 1126.536959][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.547068][T20403] Workqueue: writeback wb_workfn (flush-7:4) [ 1126.553112][T20403] Call Trace: [ 1126.556489][T20403] [ 1126.559443][T20403] dump_stack_lvl+0x188/0x24e [ 1126.564163][T20403] ? memcpy+0x3c/0x60 [ 1126.568179][T20403] ? show_regs_print_info+0x12/0x12 [ 1126.573425][T20403] ? load_image+0x400/0x400 [ 1126.577968][T20403] panic+0x2e5/0x730 [ 1126.581880][T20403] ? bpf_jit_dump+0xd0/0xd0 [ 1126.586413][T20403] ? ret_from_fork+0x1f/0x30 [ 1126.591038][T20403] __warn+0x2f8/0x4f0 [ 1126.595037][T20403] ? hfs_bnode_create+0x37a/0x400 [ 1126.600103][T20403] ? hfs_bnode_create+0x37a/0x400 [ 1126.605149][T20403] report_bug+0x2ba/0x4f0 [ 1126.609520][T20403] ? hfs_bnode_create+0x37a/0x400 [ 1126.614567][T20403] handle_bug+0x3a/0x70 [ 1126.618756][T20403] exc_invalid_op+0x16/0x40 [ 1126.623277][T20403] asm_exc_invalid_op+0x16/0x20 [ 1126.628167][T20403] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1126.633840][T20403] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1126.653475][T20403] RSP: 0018:ffffc90003646e80 EFLAGS: 00010246 [ 1126.659559][T20403] RAX: 000000000000001f RBX: ffff888058d2e0e0 RCX: f66e2d16a645e600 [ 1126.667553][T20403] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1126.675541][T20403] RBP: 0000000000000000 R08: ffffc90003646b07 R09: 1ffff920006c8d60 [ 1126.683529][T20403] R10: dffffc0000000000 R11: fffff520006c8d61 R12: 0000000000000000 [ 1126.691516][T20403] R13: ffff888058d2e000 R14: ffff888024339d00 R15: dffffc0000000000 [ 1126.699603][T20403] hfs_bmap_alloc+0x53d/0x5d0 [ 1126.704308][T20403] ? hfs_bmap_reserve+0x420/0x420 [ 1126.709359][T20403] ? rcu_is_watching+0x11/0xa0 [ 1126.714150][T20403] hfs_btree_inc_height+0xfd/0xac0 [ 1126.719282][T20403] ? hfs_brec_insert+0x6f6/0xbd0 [ 1126.724244][T20403] ? hfs_brec_insert+0xbd0/0xbd0 [ 1126.729200][T20403] ? do_raw_spin_unlock+0x11d/0x230 [ 1126.734430][T20403] hfs_brec_insert+0x744/0xbd0 [ 1126.739219][T20403] ? hfs_brec_keylen+0x350/0x350 [ 1126.744195][T20403] __hfs_ext_write_extent+0x2a1/0x470 [ 1126.749605][T20403] hfs_ext_write_extent+0x17b/0x200 [ 1126.754823][T20403] ? verify_lock_unused+0x140/0x140 [ 1126.760044][T20403] ? hfs_ext_keycmp+0x310/0x310 [ 1126.764920][T20403] ? writeback_sb_inodes+0x46b/0x1850 [ 1126.770325][T20403] hfs_write_inode+0xd8/0xa20 [ 1126.775035][T20403] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1126.780439][T20403] ? __writeback_single_inode+0x4ae/0x1160 [ 1126.786293][T20403] ? __lock_acquire+0x7d10/0x7d10 [ 1126.791357][T20403] ? do_raw_spin_lock+0x128/0x2f0 [ 1126.796402][T20403] ? __rwlock_init+0x140/0x140 [ 1126.801182][T20403] __writeback_single_inode+0x75b/0x1160 [ 1126.806853][T20403] writeback_sb_inodes+0xb30/0x1850 [ 1126.812091][T20403] ? queue_io+0x5a0/0x5a0 [ 1126.816461][T20403] ? rcu_is_watching+0x11/0xa0 [ 1126.821277][T20403] wb_writeback+0x482/0xd50 [ 1126.825811][T20403] ? percpu_ref_tryget+0x250/0x250 [ 1126.830943][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1126.836989][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1126.842207][T20403] wb_workfn+0x423/0xee0 [ 1126.846489][T20403] ? inode_wait_for_writeback+0x220/0x220 [ 1126.852241][T20403] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1126.858250][T20403] ? read_lock_is_recursive+0x10/0x10 [ 1126.863654][T20403] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1126.869573][T20403] ? _raw_spin_unlock+0x40/0x40 [ 1126.874454][T20403] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1126.879671][T20403] ? process_one_work+0x7b0/0x1160 [ 1126.884800][T20403] process_one_work+0x8a2/0x1160 [ 1126.889758][T20403] ? worker_detach_from_pool+0x240/0x240 [ 1126.895414][T20403] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1126.900456][T20403] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1126.906113][T20403] ? kthread_data+0x4b/0xc0 [ 1126.910664][T20403] worker_thread+0xaa2/0x1270 [ 1126.915385][T20403] kthread+0x29d/0x330 [ 1126.919470][T20403] ? worker_clr_flags+0x1a0/0x1a0 [ 1126.924527][T20403] ? kthread_blkcg+0xd0/0xd0 [ 1126.929129][T20403] ret_from_fork+0x1f/0x30 [ 1126.933572][T20403] [ 1126.937187][T20403] Kernel Offset: disabled [ 1126.941523][T20403] Rebooting in 86400 seconds..