last executing test programs: 13m38.23247543s ago: executing program 4 (id=4912): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000100)) 13m38.006878849s ago: executing program 0 (id=4913): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000100)={0x14, 0x21, 0x1, 0x0, 0x25dfdbfe, "", [@generic="05"]}, 0x14}], 0x1, 0x0, 0x0, 0x4008080}, 0x0) 13m37.711833081s ago: executing program 4 (id=4916): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) 13m37.432993446s ago: executing program 0 (id=4919): r0 = socket(0x18, 0x0, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 13m37.242464736s ago: executing program 4 (id=4922): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x2, 0x0, 0x7, 0x1, 0x4, 0x8, 0x3, 0x202, 0x13d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xb}) 13m36.919786421s ago: executing program 0 (id=4923): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000100), 0x2, 0x46b, &(0x7f0000000580)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 13m36.481082409s ago: executing program 4 (id=4926): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) 13m35.943599491s ago: executing program 4 (id=4930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000280012800a000100767863616e000000180002801400010000000000dca8bef2"], 0x50}}, 0x0) 13m35.871721703s ago: executing program 0 (id=4931): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) 13m35.295945772s ago: executing program 4 (id=4935): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@delalloc}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") 13m32.334198286s ago: executing program 0 (id=4950): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") creat(&(0x7f0000000000)='./file2\x00', 0xd931d3864d39dcdb) 13m30.14054118s ago: executing program 0 (id=4961): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) 13m19.132916839s ago: executing program 32 (id=4935): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc81) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@delalloc}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") 13m13.660450041s ago: executing program 33 (id=4961): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) 1m48.413086422s ago: executing program 1 (id=13424): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000140)={{0x3, @bcast}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 1m48.139654135s ago: executing program 1 (id=13426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x8, 0x4000000) 1m47.666198324s ago: executing program 1 (id=13429): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x8001, 0x0, 0x2, 0x4}, 0x20) 1m47.320095939s ago: executing program 1 (id=13433): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@type={'type', 0x3d, "f1aefc87"}}, {}, {@nodecompose}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m46.677454596s ago: executing program 1 (id=13436): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) 1m45.629302062s ago: executing program 1 (id=13450): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0xc979d462e1fd5f9c, 0x8000, 0x6, 0xbc9, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @remote, @multicast1}}}}) 1m45.015938508s ago: executing program 34 (id=13450): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0xc979d462e1fd5f9c, 0x8000, 0x6, 0xbc9, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x64, 0x0, 0x7, 0x4, 0x0, @remote, @multicast1}}}}) 13.225172011s ago: executing program 8 (id=14705): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 12.978326336s ago: executing program 8 (id=14709): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 12.760885432s ago: executing program 8 (id=14713): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 12.433001373s ago: executing program 8 (id=14719): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12.018314222s ago: executing program 8 (id=14724): setreuid(0xee01, 0xee01) timerfd_create(0x8, 0x0) 11.421620435s ago: executing program 8 (id=14733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x48, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x30, 0x1, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}, @typed={0x8, 0x61, 0x0, 0x0, @uid=0xee00}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) 10.739002192s ago: executing program 35 (id=14733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x48, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x30, 0x1, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}, @typed={0x8, 0x61, 0x0, 0x0, @uid=0xee00}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) 3.008806229s ago: executing program 5 (id=14818): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 2.648684092s ago: executing program 5 (id=14822): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) 2.129643184s ago: executing program 7 (id=14826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x30000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_IFLAGS={0x6}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 2.080064193s ago: executing program 3 (id=14827): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r0], 0x50) 2.079284029s ago: executing program 2 (id=14828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)={0x38, 0x2c, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x20, 0x91a, 0x0, 0x1, [@nested={0x1c, 0xdb, 0x0, 0x1, [@nested={0x18, 0xac, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 2.031615309s ago: executing program 6 (id=14829): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) 1.876441807s ago: executing program 5 (id=14830): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0xffffffffffffffe7) 1.741593587s ago: executing program 2 (id=14831): r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x101000) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000140)={0x0, "cc8f07e27bfd847bae3821b60174201abce2dfcb1d7cb7d7072316ffeacec185", 0x3, 0x0, 0x1, 0xc00000, 0x20002, 0x8}) 1.741385086s ago: executing program 7 (id=14832): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) 1.741306098s ago: executing program 3 (id=14833): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000580)={r0, r0, r0}, 0x0, 0x0, 0x0) 1.623080001s ago: executing program 6 (id=14834): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x6bf, &(0x7f0000001d80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2) 1.432564784s ago: executing program 2 (id=14835): r0 = syz_io_uring_setup(0x3869, &(0x7f0000000140)={0x0, 0x70aa, 0x2, 0x80000000}, &(0x7f00000001c0), &(0x7f0000000100)) syz_io_uring_setup(0x3c5d, &(0x7f0000000000)={0x0, 0x0, 0x27, 0x2, 0x1, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 1.391742824s ago: executing program 7 (id=14836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1044}, 0x0) 1.37981348s ago: executing program 3 (id=14837): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3}, 0xe) 1.195689492s ago: executing program 6 (id=14838): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) 1.186987993s ago: executing program 7 (id=14839): sync() sync() 1.102568375s ago: executing program 5 (id=14840): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x1, 0x400000d, 0xa, 0xffff, 0xa}}) 1.06225425s ago: executing program 3 (id=14841): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) 933.887769ms ago: executing program 2 (id=14842): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12c0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11f0, 0x2e0, 0x2e0, 0x11f0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1320) 724.248372ms ago: executing program 6 (id=14843): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040)=0x10000, 0x4) 571.197071ms ago: executing program 3 (id=14844): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 509.096033ms ago: executing program 7 (id=14845): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x3000000, 0x2, 0x12}}) 452.703751ms ago: executing program 2 (id=14846): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000016c0)) 373.997173ms ago: executing program 6 (id=14847): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001700090025bd700001dcdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 335.294596ms ago: executing program 5 (id=14848): r0 = fanotify_init(0xf00, 0x1) fanotify_mark(r0, 0x1, 0x40009975, 0xffffffffffffffff, 0x0) 213.119223ms ago: executing program 7 (id=14849): r0 = openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fchmod(r0, 0x4) 120.674876ms ago: executing program 2 (id=14850): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655594160608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 68.091221ms ago: executing program 6 (id=14851): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x9}, 0x42) 6.722217ms ago: executing program 5 (id=14852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 3 (id=14853): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) kernel console output (not intermixed with test programs): =1224, nr_sectors = 32 limit=256 [ 1364.448360][T15905] xt_addrtype: ipv6 does not support BROADCAST matching [ 1364.531225][T12800] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1364.565257][T15901] loop2: detected capacity change from 0 to 4096 [ 1364.577566][T15901] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1364.643985][T15901] ntfs3(loop2): ino=19, mi_enum_attr [ 1364.744347][T12800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1364.762715][T15901] ntfs3(loop2): failed to convert "076c" to cp949 [ 1364.775985][T12800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1364.807766][T15901] ntfs3(loop2): ino=20, mi_enum_attr [ 1364.819085][T12800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1364.856473][T12800] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1364.899424][T12800] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1364.930124][T15925] QAT: Invalid ioctl 21531 [ 1364.939413][T12800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.992359][T12800] usb 4-1: config 0 descriptor?? [ 1365.100251][T15936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1365.129046][ T791] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1365.217368][T12800] hdpvr 4-1:0.0: firmware version 0x1e dated »–¸&S¶1;¨“ÃO·X^„œ wÒΖŠ g/ƒ µn#»† [ 1365.332604][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1365.342326][ T791] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1365.391331][ T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1365.417799][ T791] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1365.433717][T12800] hdpvr 4-1:0.0: device init failed [ 1365.447387][T12800] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1365.466407][ T791] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1365.482233][T12800] usb 4-1: USB disconnect, device number 35 [ 1365.503292][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.566977][ T791] usb 6-1: config 0 descriptor?? [ 1365.737276][T15969] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1365.809778][ T791] hdpvr 6-1:0.0: firmware version 0x7e dated ÍM‘å¬8 9 >êÑèëþSŒÐ|âhÈÄn©ëBØÊk矉?qCÃ$FÃÔ [ 1365.837360][ T791] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1366.025038][ T791] hdpvr 6-1:0.0: device init failed [ 1366.038915][ T791] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1366.085257][ T791] usb 6-1: USB disconnect, device number 44 [ 1366.301486][T15934] loop1: detected capacity change from 0 to 40427 [ 1366.329969][T15934] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1366.358764][T15934] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1366.388993][T15934] F2FS-fs (loop1): invalid crc value [ 1366.774368][T15934] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1366.860008][T15934] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1366.867592][T15934] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1367.109033][T15934] syz.1.12820: attempt to access beyond end of device [ 1367.109033][T15934] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1367.810474][T16063] bond1 (unregistering): Released all slaves [ 1368.115811][T16155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12865'. [ 1368.284497][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12867'. [ 1368.691617][T16181] dvmrp1: entered allmulticast mode [ 1369.192350][T16213] netlink: 212 bytes leftover after parsing attributes in process `syz.3.12883'. [ 1369.209801][T16216] loop2: detected capacity change from 0 to 128 [ 1369.255729][T16216] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1369.292677][T16216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1369.350427][T16225] loop5: detected capacity change from 0 to 256 [ 1369.393978][T16225] vfat: Deprecated parameter 'posix' [ 1369.399331][T16225] FAT-fs: "posix" option is obsolete, not supported now [ 1370.313757][T16201] loop1: detected capacity change from 0 to 32768 [ 1370.390482][T16201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12880 (16201) [ 1370.491034][T16201] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1370.542332][T16201] BTRFS info (device loop1): using sha256 checksum algorithm [ 1370.568567][T16286] netlink: 'syz.3.12904': attribute type 1 has an invalid length. [ 1370.778868][T16201] BTRFS info (device loop1): enabling ssd optimizations [ 1370.816252][T16201] BTRFS info (device loop1): turning on async discard [ 1370.878881][T16201] BTRFS info (device loop1): enabling free space tree [ 1371.164325][ T5934] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1371.412590][T16338] netlink: 798 bytes leftover after parsing attributes in process `syz.3.12918'. [ 1371.915050][ T791] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1372.111217][T16375] loop1: detected capacity change from 0 to 512 [ 1372.120763][ T791] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.145866][ T791] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1372.196900][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.213383][T16375] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1372.278247][T16375] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1372.308599][ T791] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1372.354352][T16379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1372.529354][T14805] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1372.653010][T16393] netlink: 256 bytes leftover after parsing attributes in process `syz.7.12932'. [ 1373.556041][T16438] loop7: detected capacity change from 0 to 1024 [ 1373.614985][T16438] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1373.652384][T16438] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1373.706258][ T791] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1373.742768][T16438] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #32: comm syz.7.12946: iget: special inode unallocated [ 1373.763523][ T791] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1373.771717][ T791] stv0680 6-1:4.0: last error: 86, command = 0x78 [ 1373.811517][ T791] usb 6-1: USB disconnect, device number 45 [ 1373.833186][T16438] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1373.833234][T16438] EXT4-fs (loop7): Remounting filesystem read-only [ 1373.920086][T16467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1373.926742][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1373.945033][T16438] EXT4-fs (loop7): no journal found [ 1373.956597][T16467] vhci_hcd vhci_hcd.0: Device attached [ 1374.018093][T16467] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1374.024658][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1374.032736][T16438] EXT4-fs (loop7): can't get journal size [ 1374.066404][T16438] EXT4-fs (loop7): write access unavailable, skipping orphan cleanup [ 1374.088721][T16467] vhci_hcd vhci_hcd.0: Device attached [ 1374.112306][T16472] vhci_hcd: connection closed [ 1374.118565][ T49] vhci_hcd vhci_hcd.1: stop threads [ 1374.129712][ T49] vhci_hcd vhci_hcd.1: release socket [ 1374.138580][T16468] vhci_hcd: connection closed [ 1374.143368][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 1374.158543][ T49] vhci_hcd vhci_hcd.1: stop threads [ 1374.172423][T16438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1374.178378][ T49] vhci_hcd vhci_hcd.1: release socket [ 1374.192844][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 1374.233571][ T6004] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 1374.241147][ T6004] usb 35-1: enqueue for inactive port 0 [ 1374.329772][ T6004] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1374.508095][T17598] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.682827][ T791] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1374.864408][ T791] usb 7-1: Using ep0 maxpacket: 8 [ 1374.906601][ T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1374.928180][ T791] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1374.947010][ T791] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1374.958490][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.971081][ T791] usb 7-1: Product: syz [ 1374.975276][ T791] usb 7-1: Manufacturer: syz [ 1375.018004][ T791] usb 7-1: SerialNumber: syz [ 1375.068299][ T791] usb 7-1: config 0 descriptor?? [ 1375.086554][T16516] loop5: detected capacity change from 0 to 1764 [ 1375.257217][T16533] loop7: detected capacity change from 0 to 512 [ 1375.612881][ T6011] usb 7-1: USB disconnect, device number 31 [ 1376.121459][T16585] xt_l2tp: v2 doesn't support IP mode [ 1376.380691][T16593] loop1: detected capacity change from 0 to 1764 [ 1376.442995][T16600] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1376.643286][T16608] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1376.649874][T16608] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1376.702647][T16608] vhci_hcd vhci_hcd.0: Device attached [ 1376.784246][T16615] vhci_hcd vhci_hcd.0: port 0 already used [ 1376.802304][T16609] vhci_hcd: connection closed [ 1376.802554][ T36] vhci_hcd vhci_hcd.6: stop threads [ 1376.821411][ T36] vhci_hcd vhci_hcd.6: release socket [ 1376.830435][ T36] vhci_hcd vhci_hcd.6: disconnect device [ 1377.109591][ T30] audit: type=1326 audit(1297.943:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.5.12994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1377.168375][T16633] xt_ecn: cannot match TCP bits for non-tcp packets [ 1377.172159][ T30] audit: type=1326 audit(1297.953:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.5.12994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1377.253695][ T30] audit: type=1326 audit(1297.953:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.5.12994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1377.353933][ T30] audit: type=1326 audit(1297.953:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.5.12994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1378.048247][T16620] loop2: detected capacity change from 0 to 40427 [ 1378.108306][T16620] F2FS-fs (loop2): Image doesn't support compression [ 1378.133959][T16620] F2FS-fs (loop2): build fault injection rate: 684 [ 1378.149209][T16620] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 1378.174332][T16669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.174366][T16668] xt_limit: Overflow, try lower: 2147483649/3300 [ 1378.200382][T16620] F2FS-fs (loop2): invalid crc value [ 1378.583895][T16620] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1378.594294][T16620] F2FS-fs (loop2): Start checkpoint disabled! [ 1378.603397][T16620] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1378.657955][T16620] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1378.683472][T16688] netlink: 148 bytes leftover after parsing attributes in process `syz.7.13011'. [ 1378.794921][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1378.804735][T16620] F2FS-fs (loop2): disabling checkpoint not compatible with read-only [ 1379.007547][T16703] netlink: 256 bytes leftover after parsing attributes in process `syz.5.13015'. [ 1379.014564][T16705] loop6: detected capacity change from 0 to 8 [ 1379.111562][T16705] SQUASHFS error: zstd decompression error: 10 [ 1379.138479][T16705] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1379.170236][T16705] SQUASHFS error: Failed to read block 0x62b: -5 [ 1379.210799][T16705] SQUASHFS error: Unable to read metadata cache entry [629] [ 1379.234472][T16705] SQUASHFS error: Unable to read directory block [629:ff26] [ 1379.276320][T16713] loop5: detected capacity change from 0 to 8 [ 1379.348355][T16713] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1379.379277][T16713] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1380.756206][T16783] loop6: detected capacity change from 0 to 64 [ 1380.864721][ T30] audit: type=1800 audit(1301.452:332): pid=16783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13040" name=E91F7189591E9233614B dev="loop6" ino=22 res=0 errno=0 [ 1381.073340][T16795] loop2: detected capacity change from 0 to 8 [ 1381.132649][T16795] SQUASHFS error: Unable to read inode 0xa7 [ 1381.246667][T16803] loop6: detected capacity change from 0 to 1024 [ 1381.628563][T16769] loop5: detected capacity change from 0 to 32768 [ 1381.643664][T16769] (syz.5.13035,16769,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1381.644096][T16769] (syz.5.13035,16769,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1381.729685][T16769] JBD2: Ignoring recovery information on journal [ 1381.817943][T16769] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1382.226440][ T5938] ocfs2: Unmounting device (7,5) on (node local) [ 1382.431324][T16930] netlink: 'syz.5.13055': attribute type 2 has an invalid length. [ 1382.443478][T16832] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1382.471044][T16930] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13055'. [ 1382.757393][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13058'. [ 1382.834096][T16582] syz.3.12980 (16582): drop_caches: 3 [ 1383.084912][T16959] loop5: detected capacity change from 0 to 64 [ 1383.652119][T16987] loop2: detected capacity change from 0 to 1764 [ 1383.682362][T16995] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13074'. [ 1383.723196][T16995] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13074'. [ 1384.088191][T17018] loop5: detected capacity change from 0 to 1024 [ 1384.169700][T17018] hfsplus: b-tree write err: -5, ino 2 [ 1384.332561][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1384.345950][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1384.371843][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1384.379183][ T49] hfsplus: b-tree write err: -5, ino 26 [ 1384.590101][T17014] loop6: detected capacity change from 0 to 32768 [ 1384.654850][T20039] Dev loop6 SGI disklabel: csum bad, label corrupted [ 1384.670730][T17014] Dev loop6 SGI disklabel: csum bad, label corrupted [ 1385.219986][T17067] loop1: detected capacity change from 0 to 1764 [ 1385.840963][T17103] netlink: 'syz.2.13104': attribute type 5 has an invalid length. [ 1385.851176][T17106] loop1: detected capacity change from 0 to 64 [ 1386.494578][T17143] set_capacity_and_notify: 1 callbacks suppressed [ 1386.494606][T17143] loop2: detected capacity change from 0 to 8 [ 1386.532988][T17146] bond0: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1386.737773][T17157] tmpfs: Bad value for 'mpol' [ 1386.784088][T17162] loop7: detected capacity change from 0 to 128 [ 1387.201325][T17193] tipc: Can't bind to reserved service type 0 [ 1387.404254][T17203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1387.874401][T17228] netlink: 'syz.6.13142': attribute type 3 has an invalid length. [ 1387.943458][T17234] loop3: detected capacity change from 0 to 64 [ 1387.944813][T17228] netlink: 'syz.6.13142': attribute type 1 has an invalid length. [ 1388.029926][T17228] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13142'. [ 1388.039705][T17228] NCSI netlink: No device for ifindex 0 [ 1388.062442][T17244] netlink: 'syz.5.13146': attribute type 21 has an invalid length. [ 1388.099971][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13146'. [ 1388.146751][ T6004] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1388.245002][T17251] vlan0: entered promiscuous mode [ 1388.380355][ T6004] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1388.415139][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.448792][ T6004] usb 2-1: Product: syz [ 1388.452993][ T6004] usb 2-1: Manufacturer: syz [ 1388.477271][ T6004] usb 2-1: SerialNumber: syz [ 1388.518350][ T6004] usb 2-1: config 0 descriptor?? [ 1388.555283][ T6004] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1388.736831][ T6011] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1388.929431][ T6011] usb 7-1: Using ep0 maxpacket: 32 [ 1388.944097][ T6011] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1388.976928][ T6011] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1388.987005][ T6004] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1388.995059][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.023548][ T6004] sq905c 2-1:0.0: Reading version command failed [ 1389.033990][ T6004] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1389.050681][ T6011] usb 7-1: Product: syz [ 1389.054876][ T6011] usb 7-1: Manufacturer: syz [ 1389.068138][ T6004] usb 2-1: USB disconnect, device number 17 [ 1389.079459][ T6011] usb 7-1: SerialNumber: syz [ 1389.392391][ T6011] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1389.404361][T17325] netlink: 'syz.2.13167': attribute type 5 has an invalid length. [ 1389.423031][ T6011] usb 7-1: USB disconnect, device number 32 [ 1389.585205][T17336] loop5: detected capacity change from 0 to 128 [ 1389.633396][T17336] FAT-fs (loop5): Directory bread(block 162) failed [ 1389.654496][T17336] FAT-fs (loop5): Directory bread(block 163) failed [ 1389.661147][T17336] FAT-fs (loop5): Directory bread(block 164) failed [ 1389.693277][T17342] ptrace attach of "./syz-executor exec"[17598] was attempted by ""[17342] [ 1389.736243][T17336] FAT-fs (loop5): Directory bread(block 165) failed [ 1389.757719][T17345] loop3: detected capacity change from 0 to 1024 [ 1389.772351][T17336] FAT-fs (loop5): Directory bread(block 166) failed [ 1389.796038][T17336] FAT-fs (loop5): Directory bread(block 167) failed [ 1389.802728][T17336] FAT-fs (loop5): Directory bread(block 168) failed [ 1389.825321][T17345] hfsplus: b-tree write err: -5, ino 2 [ 1389.835248][T17336] FAT-fs (loop5): Directory bread(block 169) failed [ 1389.896507][T17336] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1390.014736][ T49] hfsplus: b-tree write err: -5, ino 25 [ 1390.017919][T17354] loop7: detected capacity change from 0 to 64 [ 1390.030909][ T49] hfsplus: b-tree write err: -5, ino 4 [ 1390.058119][ T49] hfsplus: b-tree write err: -5, ino 2 [ 1390.082885][ T49] hfsplus: b-tree write err: -5, ino 26 [ 1390.797584][ T791] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1390.971040][ T791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1390.987971][ T791] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1391.006771][ T791] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.053544][ T791] usb 2-1: config 63 has no interface number 0 [ 1391.067668][ T791] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1391.119897][ T791] usb 2-1: language id specifier not provided by device, defaulting to English [ 1391.144961][ T791] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1391.179640][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.195033][T17411] ip6t_srh: unknown srh match flags 4000 [ 1391.204341][ T791] usb 2-1: Product: 垡뷇닊å†çƒ«ä²¯æž–ã£—ë µä“ [ 1391.256982][ T791] usb 2-1: SerialNumber: syz [ 1391.365812][T17415] loop6: detected capacity change from 0 to 1024 [ 1391.536627][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1391.546056][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1391.551607][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1391.588445][ T791] uvcvideo 2-1:63.66: Found UVC 0.00 device 垡뷇닊å†çƒ«ä²¯æž–ã£—ë µä“ (174f:8acf) [ 1391.610482][T17428] nfs: Unknown parameter 'ntext' [ 1391.620465][ T791] uvcvideo 2-1:63.66: No valid video chain found. [ 1391.644883][ T791] usb 2-1: USB disconnect, device number 18 [ 1391.648789][T17356] loop2: detected capacity change from 0 to 32768 [ 1391.745669][T17356] jfs_lookup: iget failed on inum 4 [ 1392.024717][ T30] audit: type=1326 audit(1311.887:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.115506][ T30] audit: type=1326 audit(1311.887:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.202017][T17452] netlink: 'syz.2.13199': attribute type 6 has an invalid length. [ 1392.260928][ T30] audit: type=1326 audit(1311.887:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.337253][T17402] loop3: detected capacity change from 0 to 32768 [ 1392.355829][ T30] audit: type=1326 audit(1311.887:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.528190][ T30] audit: type=1326 audit(1311.887:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.654142][ T30] audit: type=1326 audit(1311.887:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.752575][ T30] audit: type=1326 audit(1311.887:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.858099][ T30] audit: type=1326 audit(1311.887:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.955496][ T30] audit: type=1326 audit(1311.887:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17446 comm="syz.6.13198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa98df9c799 code=0x7ffc0000 [ 1392.992977][T17489] /dev/nullb0: Can't open blockdev [ 1393.806364][T17527] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13222'. [ 1394.172821][T17548] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13228'. [ 1394.260301][T17496] loop5: detected capacity change from 0 to 32768 [ 1394.350543][T17496] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1394.559235][T17578] loop1: detected capacity change from 0 to 64 [ 1394.612724][T17585] SET target dimension over the limit! [ 1394.621677][ T5938] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1395.083672][T17612] loop1: detected capacity change from 0 to 16 [ 1395.116649][T17612] erofs (device loop1): mounted with root inode @ nid 36. [ 1395.184569][T17612] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 1395.241913][T17612] erofs (device loop1): readahead error at folio 1 @ nid 89 [ 1395.263828][T17619] loop6: detected capacity change from 0 to 256 [ 1395.284225][T17612] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 1395.309522][T17612] erofs (device loop1): inconsistent algorithmtype 1 for nid 89 [ 1395.342543][T17612] erofs (device loop1): read error -117 @ 1 of nid 89 [ 1395.390226][ T30] audit: type=1800 audit(1315.040:342): pid=17612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13241" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1395.413066][T17619] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1395.810797][T17655] loop2: detected capacity change from 0 to 2048 [ 1395.876826][T17655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1396.544776][T17698] loop2: detected capacity change from 0 to 128 [ 1396.621588][T17698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1396.749160][ T5928] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1397.207469][T17742] netlink: 520 bytes leftover after parsing attributes in process `syz.2.13277'. [ 1397.244600][T17739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1397.318843][T17728] bond0 (unregistering): Released all slaves [ 1397.360551][T17668] loop5: detected capacity change from 0 to 32768 [ 1397.416002][T17668] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13256 (17668) [ 1397.474193][T17668] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1397.514222][T17819] loop2: detected capacity change from 0 to 256 [ 1397.536282][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13281'. [ 1397.545672][T17668] BTRFS info (device loop5): using crc32c checksum algorithm [ 1397.572034][T17819] exfat: Deprecated parameter 'namecase' [ 1397.683904][T17819] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 1397.813232][T17668] BTRFS info (device loop5): enabling ssd optimizations [ 1397.837915][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13282'. [ 1397.847169][T17844] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13282'. [ 1397.881945][T17668] BTRFS info (device loop5): turning on flush-on-commit [ 1397.888928][T17668] BTRFS info (device loop5): enabling free space tree [ 1397.919203][T17668] BTRFS info (device loop5): enabling auto defrag [ 1397.933400][T17848] netlink: 'syz.7.13284': attribute type 11 has an invalid length. [ 1397.967816][T17668] BTRFS info (device loop5): use lzo compression, level 1 [ 1398.009968][T17668] BTRFS info (device loop5): max_inline set to 4096 [ 1398.125676][T17857] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1398.421906][ T5938] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1399.214775][T17940] loop3: detected capacity change from 0 to 16 [ 1399.224125][T17940] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1399.231788][T17921] loop1: detected capacity change from 0 to 512 [ 1399.254835][T17898] bond1 (unregistering): Released all slaves [ 1399.348982][T17921] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1399.376736][T17921] System zones: 0-2, 18-18, 34-35 [ 1399.393056][T17921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.813174][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.183535][T18008] loop3: detected capacity change from 0 to 4096 [ 1400.301675][T18008] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 1400.716310][T17987] loop6: detected capacity change from 0 to 32768 [ 1400.755376][T17987] (syz.6.13305,17987,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1400.800152][T17987] (syz.6.13305,17987,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1400.908292][T17987] JBD2: Ignoring recovery information on journal [ 1401.011377][T18021] loop2: detected capacity change from 0 to 32768 [ 1401.040374][T18021] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13315 (18021) [ 1401.111758][T17987] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1401.121570][T18021] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1401.154014][T18021] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 1401.371603][T18021] BTRFS info (device loop2): enabling ssd optimizations [ 1401.417169][T18021] BTRFS info (device loop2): turning on flush-on-commit [ 1401.470689][T18021] BTRFS info (device loop2): turning on async discard [ 1401.522905][T18021] BTRFS info (device loop2): enabling free space tree [ 1401.543860][T17564] ocfs2: Unmounting device (7,6) on (node local) [ 1401.574912][T18021] BTRFS info (device loop2): force zlib compression, level 3 [ 1401.596570][T18021] BTRFS info (device loop2): max_inline set to 4096 [ 1401.614528][T18094] loop3: detected capacity change from 0 to 256 [ 1401.675719][T18091] loop1: detected capacity change from 0 to 256 [ 1401.683274][T18091] exfat: Deprecated parameter 'utf8' [ 1401.763752][T18091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1401.870405][ T5928] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1401.990492][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13331'. [ 1403.277975][T18165] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1403.370091][T18173] ipvlan0: left promiscuous mode [ 1403.406717][T18173] ipvlan0: left allmulticast mode [ 1403.411804][T18173] veth0_vlan: left allmulticast mode [ 1403.503912][T12800] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1403.704456][T12800] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1403.736061][T18187] netlink: 'syz.1.13355': attribute type 9 has an invalid length. [ 1403.737663][T12800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.765878][T18187] netlink: 'syz.1.13355': attribute type 7 has an invalid length. [ 1403.805333][T12800] usb 6-1: Product: syz [ 1403.808298][T18187] netlink: 'syz.1.13355': attribute type 8 has an invalid length. [ 1403.817368][T12800] usb 6-1: Manufacturer: syz [ 1403.817400][T12800] usb 6-1: SerialNumber: syz [ 1403.829984][T12800] usb 6-1: config 0 descriptor?? [ 1403.873067][T12800] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 046 [ 1403.993618][T18200] loop7: detected capacity change from 0 to 2048 [ 1404.311886][T12800] (null): failure reading functionality [ 1404.335195][T12800] i2c i2c-2: failure reading functionality [ 1404.392562][T12800] i2c i2c-2: connected i2c-tiny-usb device [ 1404.453642][T12800] usb 6-1: USB disconnect, device number 46 [ 1404.541733][T18241] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1404.804298][T18242] loop3: detected capacity change from 0 to 4096 [ 1404.894223][T18259] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1405.280944][T18282] loop3: detected capacity change from 0 to 16 [ 1405.301721][T18282] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1405.966634][T18319] No source specified [ 1405.989659][T18321] loop5: detected capacity change from 0 to 1024 [ 1406.098356][T18327] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1406.147107][T18332] cgroup: noprefix used incorrectly [ 1406.242788][ T1089] hfsplus: b-tree write err: -5, ino 25 [ 1406.248515][ T1089] hfsplus: b-tree write err: -5, ino 4 [ 1406.288882][ T1089] hfsplus: b-tree write err: -5, ino 2 [ 1406.321517][ T1089] hfsplus: b-tree write err: -5, ino 17 [ 1406.468561][T18347] netlink: 84 bytes leftover after parsing attributes in process `syz.2.13400'. [ 1406.728857][T18365] loop7: detected capacity change from 0 to 16 [ 1406.757056][ T6120] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1406.968098][ T6120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1406.987616][ T6120] usb 2-1: not running at top speed; connect to a high speed hub [ 1407.021067][ T6120] usb 2-1: config 6 has an invalid interface number: 209 but max is 0 [ 1407.066109][ T6120] usb 2-1: config 6 has no interface number 0 [ 1407.131109][ T6120] usb 2-1: config 6 interface 209 altsetting 132 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1407.210651][ T6120] usb 2-1: config 6 interface 209 has no altsetting 0 [ 1407.223898][ T6120] usb 2-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=fe.1e [ 1407.245519][T18382] bond3 (unregistering): Released all slaves [ 1407.264727][ T6120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.272770][ T6120] usb 2-1: Product: syz [ 1407.315117][ T6120] usb 2-1: Manufacturer: syz [ 1407.339500][ T6120] usb 2-1: SerialNumber: syz [ 1407.348075][T18428] loop5: detected capacity change from 0 to 2048 [ 1407.411488][T18428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1407.606491][ T6120] uvcvideo 2-1:6.209: Found UVC 0.00 device syz (174f:8a12) [ 1407.626615][ T6120] uvcvideo 2-1:6.209: No valid video chain found. [ 1407.717000][ T6120] usb 2-1: USB disconnect, device number 19 [ 1407.815749][T18478] loop7: detected capacity change from 0 to 4096 [ 1407.875971][T18478] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1407.987113][T18478] ntfs3(loop7): ino=19, mi_enum_attr [ 1408.016793][T18478] ntfs3(loop7): failed to convert "c46c" to euc-jp [ 1408.017356][T18478] ntfs3(loop7): ino=20, mi_enum_attr [ 1408.459527][T18426] loop6: detected capacity change from 0 to 32768 [ 1408.518168][T18426] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.13413 (18426) [ 1408.609268][T18426] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1408.650109][T18509] loop5: detected capacity change from 0 to 4096 [ 1408.654066][T18426] BTRFS info (device loop6): using sha256 checksum algorithm [ 1408.689883][T18509] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1408.912650][T18426] BTRFS info (device loop6): enabling ssd optimizations [ 1408.930505][T18426] BTRFS info (device loop6): turning on async discard [ 1408.941825][T18426] BTRFS info (device loop6): enabling free space tree [ 1409.091233][T18486] loop2: detected capacity change from 0 to 32768 [ 1409.135522][T18486] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 398de780-1a21-474b-b3a8-2a65bd06fc0c [ 1409.204279][T18500] loop7: detected capacity change from 0 to 32768 [ 1409.221025][T18486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13417 (18486) [ 1409.336817][T17564] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1409.427210][T18486] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1409.507898][T18486] BTRFS info (device loop2): using sha256 checksum algorithm [ 1409.893666][T18486] BTRFS info (device loop2): enabling ssd optimizations [ 1409.925044][T18486] BTRFS info (device loop2): turning on async discard [ 1409.978414][T18486] BTRFS info (device loop2): enabling free space tree [ 1410.029645][ T5934] hfsplus: bad catalog entry type [ 1410.385758][T18600] set_capacity_and_notify: 1 callbacks suppressed [ 1410.385785][T18600] loop6: detected capacity change from 0 to 64 [ 1410.404038][ T5928] BTRFS info (device loop2): last unmount of filesystem 398de780-1a21-474b-b3a8-2a65bd06fc0c [ 1410.468195][T18608] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1410.949188][ T12] hfsplus: b-tree write err: -5, ino 25 [ 1410.972188][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1410.993663][ T12] hfsplus: b-tree write err: -5, ino 2 [ 1411.045264][T18633] loop3: detected capacity change from 0 to 1024 [ 1411.189372][T18642] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1411.336842][ T140] hfsplus: b-tree write err: -5, ino 25 [ 1411.342692][ T140] hfsplus: b-tree write err: -5, ino 4 [ 1411.357365][ T140] hfsplus: b-tree write err: -5, ino 2 [ 1411.544003][ T2528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.688475][ T2528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.901046][ T2528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.987649][ T6004] wg1 speed is unknown, defaulting to 1000 [ 1412.025270][ T6120] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1412.034131][ T6004] syz0: Port: 1 Link DOWN [ 1412.185159][ T2528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.190399][ T6120] usb 4-1: Using ep0 maxpacket: 32 [ 1412.230831][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1412.266071][ T6120] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1412.287023][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1412.305985][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1412.324902][ T6120] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1412.345401][T15578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1412.357286][T15578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1412.371963][ T6120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.372240][T15578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1412.387956][ T6120] usb 4-1: Product: syz [ 1412.393850][T15578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1412.395185][ T6120] usb 4-1: Manufacturer: syz [ 1412.413868][T15578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1412.467989][ T6120] usb 4-1: SerialNumber: syz [ 1412.497970][ T6120] usb 4-1: config 0 descriptor?? [ 1412.572719][ T6120] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input88 [ 1412.858164][T18691] wg1 speed is unknown, defaulting to 1000 [ 1412.890530][ T2528] veth0_to_bridge: left allmulticast mode [ 1412.919361][ T2528] veth0_to_bridge: left promiscuous mode [ 1412.961960][ T2528] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1413.011992][ T6120] usb 4-1: USB disconnect, device number 36 [ 1413.057736][ T2528] bridge_slave_1: left allmulticast mode [ 1413.083025][ T2528] bridge_slave_1: left promiscuous mode [ 1413.097585][ T2528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.129249][ T2528] bridge_slave_0: left allmulticast mode [ 1413.142239][ T2528] bridge_slave_0: left promiscuous mode [ 1413.149101][ T2528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.798099][ T2528] dvmrp0 (unregistering): left allmulticast mode [ 1413.830949][ T2528] dvmrp1 (unregistering): left allmulticast mode [ 1414.169018][T18804] loop3: detected capacity change from 0 to 1024 [ 1414.172750][ T2528] bond1 (unregistering): Released all slaves [ 1414.185322][T18804] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1414.254430][ T2528] bond2 (unregistering): Released all slaves [ 1414.316587][T18804] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1414.605787][ T462] Bluetooth: hci1: command tx timeout [ 1415.615636][T18691] chnl_net:caif_netlink_parms(): no params data found [ 1415.633651][T18812] loop6: detected capacity change from 0 to 32768 [ 1415.780824][T18812] ERROR: (device loop6): dbAllocNext: Corrupt dmap page [ 1415.780824][T18812] [ 1415.838211][T18812] ERROR: (device loop6): remounting filesystem as read-only [ 1415.874084][T18812] ialloc: diAlloc returned -5! [ 1416.432911][T18988] comedi comedi0: pcl816: I/O port conflict (0x3,16) [ 1416.723626][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.764083][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.771371][T18691] bridge_slave_0: entered allmulticast mode [ 1416.823300][T18691] bridge_slave_0: entered promiscuous mode [ 1416.832041][ T462] Bluetooth: hci1: command tx timeout [ 1416.845089][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.854918][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.865239][T18691] bridge_slave_1: entered allmulticast mode [ 1416.873654][T18691] bridge_slave_1: entered promiscuous mode [ 1417.085149][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1417.125074][ T2528] hsr_slave_0: left promiscuous mode [ 1417.148389][ T2528] hsr_slave_1: left promiscuous mode [ 1417.155472][ T2528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1417.163866][ T2528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.172519][ T2528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1417.181527][ T2528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.200620][ T2528] veth1_macvtap: left promiscuous mode [ 1417.210405][ T2528] veth1_vlan: left promiscuous mode [ 1417.221161][ T2528] veth0_vlan: left promiscuous mode [ 1417.369933][T18944] loop3: detected capacity change from 0 to 32768 [ 1417.443124][T18944] ialloc: diAlloc returned -5! [ 1417.487860][ T2528] pim6reg (unregistering): left allmulticast mode [ 1417.615289][T18972] loop6: detected capacity change from 0 to 32768 [ 1417.679400][T18972] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1417.879450][T18972] XFS (loop6): Ending clean mount [ 1417.926593][T18972] XFS (loop6): Quotacheck needed: Please wait. [ 1418.033339][T18972] XFS (loop6): Quotacheck: Done. [ 1418.115235][T17564] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1418.410207][ T2528] team0 (unregistering): Port device team_slave_1 removed [ 1418.461688][ T2528] team0 (unregistering): Port device team_slave_0 removed [ 1418.952566][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.973145][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1419.058954][ T462] Bluetooth: hci1: command tx timeout [ 1419.257775][T18691] team0: Port device team_slave_0 added [ 1419.301156][T18691] team0: Port device team_slave_1 added [ 1419.488345][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.508493][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.577816][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.676381][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.722662][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.833934][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.141455][ T6004] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1420.174479][T19229] comedi comedi0: rti802: I/O port conflict (0xfffffffffffff1f8,4) [ 1420.227014][T18691] hsr_slave_0: entered promiscuous mode [ 1420.267135][T18691] hsr_slave_1: entered promiscuous mode [ 1420.297339][T18691] debugfs: 'hsr0' already exists in 'hsr' [ 1420.333178][T18691] Cannot create hsr debugfs directory [ 1420.363191][ T6004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1420.405017][ T6004] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.431591][ T6004] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1420.481523][ T6004] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1420.492568][ T30] audit: type=1400 audit(1338.520:343): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F pid=19248 comm="syz.6.13549" [ 1420.554880][ T6004] usb 6-1: string descriptor 0 read error: -22 [ 1420.568727][ T6004] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1420.577838][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.621709][ T2528] IPVS: stop unused estimator thread 0... [ 1421.115578][ T6120] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1421.155221][ T6004] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1421.275189][ T462] Bluetooth: hci1: command tx timeout [ 1421.317077][ T6120] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1421.407609][ T6120] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1421.419879][ T6120] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1421.468861][ T6004] usb 6-1: USB disconnect, device number 47 [ 1421.476639][ T6120] usb 4-1: Manufacturer: syz [ 1421.498969][ T6120] usb 4-1: SerialNumber: syz [ 1421.541377][T19375] netlink: 'syz.2.13558': attribute type 1 has an invalid length. [ 1421.555458][T19375] netlink: 288 bytes leftover after parsing attributes in process `syz.2.13558'. [ 1421.668018][T18691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1421.695251][T18691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1421.723988][T18691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1421.778385][ T6120] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 1421.778633][T18691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1421.830879][ T6120] usb 4-1: USB disconnect, device number 37 [ 1422.174325][T18691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.212639][T18691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.245711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.252938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.324380][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.331633][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.606049][T19434] netlink: 'syz.3.13565': attribute type 2 has an invalid length. [ 1422.660482][T19434] hmaÓË224): entered promiscuous mode [ 1423.373769][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.504768][ T6018] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1424.623940][T18691] veth0_vlan: entered promiscuous mode [ 1424.666482][T18691] veth1_vlan: entered promiscuous mode [ 1424.700741][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 1424.750177][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1424.785741][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1424.855213][T18691] veth0_macvtap: entered promiscuous mode [ 1424.861079][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1424.897891][T18691] veth1_macvtap: entered promiscuous mode [ 1424.910082][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1424.941663][ T6018] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1424.943689][T19471] loop2: detected capacity change from 0 to 32768 [ 1424.965050][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.990447][ T6018] usb 6-1: Product: syz [ 1425.003324][T18691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.016041][ T6018] usb 6-1: Manufacturer: syz [ 1425.024604][ T6018] usb 6-1: SerialNumber: syz [ 1425.037078][T18691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.040547][T19471] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1425.054506][ T6018] usb 6-1: config 0 descriptor?? [ 1425.055802][ T1089] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.069829][ T1089] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.087837][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.141877][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.190976][T19471] XFS (loop2): Ending clean mount [ 1425.217618][ T6018] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input90 [ 1425.297192][T19471] XFS (loop2): Quotacheck needed: Please wait. [ 1425.490316][T19471] XFS (loop2): Quotacheck: Done. [ 1425.576999][ T89] usb 6-1: USB disconnect, device number 48 [ 1425.714411][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.787741][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.863298][ T5928] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1426.106681][T19592] netlink: 260 bytes leftover after parsing attributes in process `syz.6.13595'. [ 1426.121414][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.169110][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.620666][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13601'. [ 1426.992340][T19638] loop3: detected capacity change from 0 to 8 [ 1427.043795][T19638] SQUASHFS error: Unable to read inode 0xa7 [ 1427.059309][T19650] netlink: 'syz.5.13607': attribute type 21 has an invalid length. [ 1427.100777][T19650] IPv6: NLM_F_CREATE should be specified when creating new route [ 1427.259871][T30348] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1427.468927][T30348] usb 3-1: Using ep0 maxpacket: 8 [ 1427.507273][T30348] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1427.548922][T30348] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1427.580726][T30348] usb 3-1: Product: syz [ 1427.597952][T30348] usb 3-1: Manufacturer: syz [ 1427.638043][T30348] usb 3-1: SerialNumber: syz [ 1427.676463][T30348] usb 3-1: config 0 descriptor?? [ 1427.721986][T30348] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1427.772857][T19682] loop3: detected capacity change from 0 to 256 [ 1427.802169][T19682] exfat: Deprecated parameter 'utf8' [ 1427.844099][T19682] exfat: Deprecated parameter 'utf8' [ 1427.878434][T19682] exfat: Deprecated parameter 'utf8' [ 1427.999825][T19620] loop6: detected capacity change from 0 to 32768 [ 1428.029956][T19682] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1428.064577][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1428.110095][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1428.144893][T30348] gspca_zc3xx: reg_r err -71 [ 1428.167514][T30348] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1428.200279][T19699] loop7: detected capacity change from 0 to 64 [ 1428.219074][T30348] usb 3-1: USB disconnect, device number 40 [ 1428.352144][T19620] JBD2: Ignoring recovery information on journal [ 1428.364481][T19702] loop8: detected capacity change from 0 to 2048 [ 1428.478444][T19702] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1428.558549][T19620] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1428.621166][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 1428.810108][T30348] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1428.879396][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 1428.995228][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 1429.031845][T30348] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1429.039959][T30348] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1429.069037][T19620] (syz.6.13600,19620,0):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 1429.107687][T30348] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 1429.127835][T30348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.141214][T19620] (syz.6.13600,19620,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1429.174614][T30348] usb 4-1: config 0 descriptor?? [ 1429.223974][T19620] (syz.6.13600,19620,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1429.231808][T19620] Quota error (device loop6): find_block_dqentry: Can't read quota tree block 6 [ 1429.248866][T30348] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 1429.252444][T19620] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1429.255743][T30348] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1429.308673][T19620] (syz.6.13600,19620,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1429.317127][T30348] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1429.390248][T19620] (syz.6.13600,19620,0):ocfs2_mknod:318 ERROR: status = -5 [ 1429.416294][T19620] (syz.6.13600,19620,1):ocfs2_mknod:506 ERROR: status = -5 [ 1429.425445][T19620] (syz.6.13600,19620,1):ocfs2_mkdir:662 ERROR: status = -5 [ 1429.497318][ T6120] usb 4-1: USB disconnect, device number 38 [ 1429.896106][T17564] ocfs2: Unmounting device (7,6) on (node local) [ 1430.360116][T19812] fuse: Invalid rootmode [ 1430.711123][T19833] netlink: 'syz.7.13650': attribute type 1 has an invalid length. [ 1431.245347][T19866] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 1431.409645][T19874] loop2: detected capacity change from 0 to 16 [ 1431.470356][T19878] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1431.524562][T19874] erofs (device loop2): mounted with root inode @ nid 36. [ 1431.553894][T19883] sctp: [Deprecated]: syz.8.13664 (pid 19883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.553894][T19883] Use struct sctp_sack_info instead [ 1432.083680][T19902] loop2: detected capacity change from 0 to 4096 [ 1432.163218][T19902] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1432.326229][T19902] ntfs3(loop2): ino=19, mi_enum_attr [ 1432.430523][T19902] ntfs3(loop2): failed to convert "c46c" to cp855 [ 1432.495475][T19902] ntfs3(loop2): ino=20, mi_enum_attr [ 1432.934673][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13685'. [ 1434.549835][T20050] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1434.845607][T20064] netlink: 'syz.3.13709': attribute type 10 has an invalid length. [ 1434.935590][T20070] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1434.943248][T20064] macvlan0: entered promiscuous mode [ 1434.959401][T20064] macvlan0: entered allmulticast mode [ 1434.992745][T20064] veth1_vlan: entered allmulticast mode [ 1434.992937][T20070] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1435.053219][T20064] team0: Port device macvlan0 added [ 1435.453179][T20084] loop6: detected capacity change from 0 to 4096 [ 1435.708249][T20084] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1435.817880][T20084] ntfs3(loop6): ino=21, The size of extended attributes must not exceed 64KiB [ 1436.425215][T20146] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1436.463443][T20145] loop5: detected capacity change from 0 to 1764 [ 1436.873392][T20159] loop3: detected capacity change from 0 to 4096 [ 1436.888124][T20172] loop5: detected capacity change from 0 to 64 [ 1436.960007][T20176] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1436.981842][T20159] NILFS error (device loop3): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 1437.044103][T20159] Remounting filesystem read-only [ 1437.316873][T20195] loop5: detected capacity change from 0 to 64 [ 1437.356059][T20196] loop6: detected capacity change from 0 to 128 [ 1437.420221][T20206] netlink: zone id is out of range [ 1437.434417][T20196] fuse: Bad value for 'fd' [ 1437.440496][T20206] netlink: zone id is out of range [ 1437.445712][T20206] netlink: zone id is out of range [ 1437.462052][T20206] netlink: zone id is out of range [ 1437.494088][T20206] netlink: zone id is out of range [ 1437.512942][T20206] netlink: zone id is out of range [ 1437.544895][T20206] netlink: zone id is out of range [ 1437.558827][T20206] netlink: zone id is out of range [ 1437.612255][T20206] netlink: zone id is out of range [ 1437.751420][T30348] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1437.948106][T30348] usb 9-1: Using ep0 maxpacket: 8 [ 1438.001961][T30348] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1438.044204][T30348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.129716][T30348] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1438.190744][T30348] pvrusb2: ********** [ 1438.202998][T30348] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1438.258157][T30348] pvrusb2: Important functionality might not be entirely working. [ 1438.296341][T30348] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1438.355304][T30348] pvrusb2: ********** [ 1438.401054][ T2342] pvrusb2: Invalid write control endpoint [ 1438.647430][T12800] usb 9-1: USB disconnect, device number 2 [ 1438.672971][ T2342] pvrusb2: Invalid write control endpoint [ 1438.712246][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1438.748613][T20270] loop2: detected capacity change from 0 to 1024 [ 1438.759567][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1438.793393][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1438.841322][ T2342] pvrusb2: Device being rendered inoperable [ 1438.872195][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1438.916694][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1438.952092][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1438.976664][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1439.010318][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1439.465190][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13778'. [ 1439.478441][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13779'. [ 1439.519017][T20332] loop5: detected capacity change from 0 to 256 [ 1439.550270][T20332] exfat: Deprecated parameter 'utf8' [ 1439.592170][T20332] exfat: Deprecated parameter 'namecase' [ 1439.621200][T20332] exfat: Deprecated parameter 'utf8' [ 1439.666889][T20332] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1439.763325][T20332] Invalid source name [ 1440.497476][T20380] loop2: detected capacity change from 0 to 64 [ 1441.067279][T20415] netlink: 204476 bytes leftover after parsing attributes in process `syz.8.13805'. [ 1441.738372][T20448] net_ratelimit: 25 callbacks suppressed [ 1441.738411][T20448] netlink: get zone limit has 4 unknown bytes [ 1442.636417][T20503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.196895][T20532] netlink: 'syz.6.13837': attribute type 1 has an invalid length. [ 1443.299197][T20541] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13840'. [ 1443.324159][T20543] loop5: detected capacity change from 0 to 256 [ 1443.411561][T20545] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1443.821054][ T6011] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1444.040797][ T6011] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.088150][ T6011] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.148657][ T6011] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1444.169958][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1444.202825][ T6011] usb 4-1: SerialNumber: syz [ 1444.370886][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13855'. [ 1444.448392][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1444.525206][T20606] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1444.528721][ T6011] usb 4-1: 0:2 : does not exist [ 1444.638910][T20619] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1444.747996][ T6011] usb 4-1: USB disconnect, device number 39 [ 1444.835700][T18444] udevd[18444]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.888738][T20642] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1445.106936][T20650] loop2: detected capacity change from 0 to 128 [ 1445.188025][T20650] FAT-fs (loop2): Directory bread(block 162) failed [ 1445.207003][T20576] loop7: detected capacity change from 0 to 32768 [ 1445.229568][T20650] FAT-fs (loop2): Directory bread(block 163) failed [ 1445.261945][T20650] FAT-fs (loop2): Directory bread(block 164) failed [ 1445.334411][T20650] FAT-fs (loop2): Directory bread(block 165) failed [ 1445.362902][T20650] FAT-fs (loop2): Directory bread(block 166) failed [ 1445.391585][T20650] FAT-fs (loop2): Directory bread(block 167) failed [ 1445.426770][T20650] FAT-fs (loop2): Directory bread(block 168) failed [ 1445.452495][T20650] FAT-fs (loop2): Directory bread(block 169) failed [ 1445.487680][T20650] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1445.557058][T20650] FAT-fs (loop2): Directory bread(block 162) failed [ 1445.585560][T20650] FAT-fs (loop2): Directory bread(block 163) failed [ 1445.604732][T20650] syz.2.13862: attempt to access beyond end of device [ 1445.604732][T20650] loop2: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 1445.659316][T12800] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1445.678540][T20650] syz.2.13862: attempt to access beyond end of device [ 1445.678540][T20650] loop2: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 1445.841396][T12800] usb 4-1: Using ep0 maxpacket: 16 [ 1445.848693][T12800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1445.860572][T12800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1445.876337][T12800] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1445.888799][T12800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.905023][T12800] usb 4-1: Product: syz [ 1445.909213][T12800] usb 4-1: Manufacturer: syz [ 1445.917800][T12800] usb 4-1: SerialNumber: syz [ 1445.937049][T12800] usb 4-1: config 0 descriptor?? [ 1445.980495][T12800] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1446.025795][T12800] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 1446.233480][T20703] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1446.249226][T12800] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1446.374777][T12800] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1446.422450][T12800] em28xx 4-1:0.0: board has no eeprom [ 1446.513938][T12800] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1446.530093][T12800] em28xx 4-1:0.0: dvb set to isoc mode. [ 1446.556150][ T89] em28xx 4-1:0.0: Binding DVB extension [ 1446.626932][T12800] usb 4-1: USB disconnect, device number 40 [ 1446.664894][T12800] em28xx 4-1:0.0: Disconnecting em28xx [ 1446.853344][ T89] em28xx 4-1:0.0: Registering input extension [ 1446.909390][T12800] em28xx 4-1:0.0: Closing input extension [ 1446.983106][T20740] overlay: Bad value for 'workdir' [ 1447.028427][T12800] em28xx 4-1:0.0: Freeing device [ 1447.217836][T20682] loop5: detected capacity change from 0 to 32768 [ 1448.295705][T20810] team0: entered promiscuous mode [ 1448.302989][T20736] loop2: detected capacity change from 0 to 32768 [ 1448.324264][T20810] team_slave_0: entered promiscuous mode [ 1448.330100][T20810] team_slave_1: entered promiscuous mode [ 1448.433144][T20814] loop3: detected capacity change from 0 to 2048 [ 1448.442970][T20736] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1448.508127][T20814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1448.530645][T20830] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13901'. [ 1448.802365][T20736] XFS (loop2): Ending clean mount [ 1448.838528][T20736] XFS (loop2): Quotacheck needed: Please wait. [ 1449.008660][T20736] XFS (loop2): Quotacheck: Done. [ 1449.320965][T20871] openvswitch: netlink: Actions may not be safe on all matching packets [ 1449.341349][T20865] loop8: detected capacity change from 0 to 2048 [ 1449.355897][ T5928] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1449.414750][T20865] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.837825][T18691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.573686][T20925] loop7: detected capacity change from 0 to 1764 [ 1451.031997][T20959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1451.117649][T20963] netlink: 'syz.3.13938': attribute type 10 has an invalid length. [ 1451.151766][T20963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13938'. [ 1451.197315][T20963] dummy0: entered allmulticast mode [ 1451.207468][T20963] bridge0: port 3(dummy0) entered blocking state [ 1451.237431][T20963] bridge0: port 3(dummy0) entered disabled state [ 1451.274684][T20963] dummy0: entered promiscuous mode [ 1451.320754][T20971] usb usb9: usbfs: process 20971 (syz.8.13940) did not claim interface 0 before use [ 1451.361517][T20963] bridge0: port 3(dummy0) entered blocking state [ 1451.368142][T20963] bridge0: port 3(dummy0) entered forwarding state [ 1451.454423][T20963] bridge0: mtu less than device minimum [ 1452.174747][T20985] loop5: detected capacity change from 0 to 8192 [ 1452.216845][T20955] loop6: detected capacity change from 0 to 32768 [ 1452.267607][T20955] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1452.315944][T20955] XFS (loop6): Ending clean mount [ 1452.772018][T17564] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1453.773941][T21073] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1454.502782][T21149] openvswitch: netlink: IP tunnel dst address not specified [ 1454.876392][T21168] loop6: detected capacity change from 0 to 512 [ 1454.906385][T21168] EXT4-fs: Ignoring removed orlov option [ 1454.925558][T21168] EXT4-fs: Ignoring removed i_version option [ 1454.940680][T21168] EXT4-fs: inline encryption not supported [ 1455.011674][T21168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e854e01d, mo2=0003] [ 1455.026371][T21168] System zones: 1-12 [ 1455.041669][T21168] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.13989: inode has both inline data and extents flags [ 1455.083933][T21181] loop5: detected capacity change from 0 to 256 [ 1455.091787][T21181] exfat: Deprecated parameter 'namecase' [ 1455.098707][T21181] exfat: Deprecated parameter 'utf8' [ 1455.105114][T21168] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1455.105508][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1455.121117][ C0] EXT4-fs (loop6): initial error at time 1370: ext4_orphan_get:1391: inode 15 [ 1455.123737][T21184] xt_nat: multiple ranges no longer supported [ 1455.130047][ C0] EXT4-fs (loop6): last error at time 1370: ext4_orphan_get:1391: inode 15 [ 1455.131273][T21136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1455.152885][T21168] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.13989: couldn't read orphan inode 15 (err -117) [ 1455.154181][T21181] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1455.223152][T21168] loop6: lost filesystem error report for type 5 error -117 [ 1455.236573][T21168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.585246][T17564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.038583][T21220] netlink: 'syz.2.14003': attribute type 3 has an invalid length. [ 1456.114994][T21220] netlink: 666 bytes leftover after parsing attributes in process `syz.2.14003'. [ 1456.720058][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14009'. [ 1457.509907][T21291] netlink: 'syz.6.14024': attribute type 7 has an invalid length. [ 1457.512009][T21292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.317716][T21275] loop2: detected capacity change from 0 to 32768 [ 1458.428227][T21275] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1458.456829][T21326] loop7: detected capacity change from 0 to 1024 [ 1458.566044][T21275] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1458.739991][T21275] XFS (loop2): Ending clean mount [ 1458.793171][T21286] loop8: detected capacity change from 0 to 32768 [ 1458.903825][T21286] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1459.036982][ T5928] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1459.355491][T21304] loop3: detected capacity change from 0 to 32768 [ 1459.545847][T21286] XFS (loop8): Ending clean mount [ 1459.653927][T18691] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1460.364227][T21398] netlink: 'syz.7.14051': attribute type 10 has an invalid length. [ 1460.410466][T21398] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14051'. [ 1460.456017][T21398] ªªªªªª: entered allmulticast mode [ 1460.481061][T21398] bridge0: port 3(ªªªªªª) entered blocking state [ 1460.521077][T21398] bridge0: port 3(ªªªªªª) entered disabled state [ 1460.559960][T21398] ªªªªªª: entered promiscuous mode [ 1460.600636][T21398] bridge0: port 3(ªªªªªª) entered blocking state [ 1460.607166][T21398] bridge0: port 3(ªªªªªª) entered forwarding state [ 1460.618120][T21409] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14054'. [ 1460.944275][T21380] comedi comedi2: reset error (fatal) [ 1461.017119][T21423] xt_hashlimit: invalid rate [ 1461.071323][T21433] Lens A: ================= START STATUS ================= [ 1461.120443][T21433] Lens A: Focus, Absolute: 1023 [ 1461.195571][T21433] Lens A: ================== END STATUS ================== [ 1461.362695][T21448] comedi comedi2: s526: I/O port conflict (0x4,64) [ 1461.551538][T21453] loop5: detected capacity change from 0 to 1764 [ 1461.614553][T21460] netlink: 'syz.3.14070': attribute type 1 has an invalid length. [ 1461.768779][T21470] netlink: 'syz.6.14072': attribute type 3 has an invalid length. [ 1461.799258][T21470] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14072'. [ 1462.159888][ T30] audit: type=1326 audit(1377.524:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.8.14081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc619c799 code=0x7ffc0000 [ 1462.252722][ T30] audit: type=1326 audit(1377.552:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.8.14081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc619c799 code=0x7ffc0000 [ 1462.420284][ T30] audit: type=1326 audit(1377.570:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.8.14081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1dc619c799 code=0x7ffc0000 [ 1462.504147][ T30] audit: type=1326 audit(1377.570:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.8.14081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc619c799 code=0x7ffc0000 [ 1462.527425][ T30] audit: type=1326 audit(1377.570:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21494 comm="syz.8.14081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc619c799 code=0x7ffc0000 [ 1462.562322][ T30] audit: type=1326 audit(1377.898:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.5.14087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1462.633442][ T30] audit: type=1326 audit(1377.945:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.5.14087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1462.669111][ T30] audit: type=1326 audit(1377.945:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.5.14087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1462.745115][ T30] audit: type=1326 audit(1377.945:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.5.14087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1462.813557][ T30] audit: type=1326 audit(1377.945:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21513 comm="syz.5.14087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1463.060390][T21533] loop5: detected capacity change from 0 to 512 [ 1463.189399][T21533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.248296][T21510] loop6: detected capacity change from 0 to 32768 [ 1463.304733][T21510] jfs_mkdir: dtInsert returned -EIO [ 1463.310310][T21510] ERROR: (device loop6): txAbort: [ 1463.310310][T21510] [ 1463.357719][T21510] ERROR: (device loop6): remounting filesystem as read-only [ 1463.468765][ T5938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.607629][T21556] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14097'. [ 1464.006451][T21573] loop5: detected capacity change from 0 to 512 [ 1464.049746][T21573] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1464.058181][T21573] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1464.079840][T21573] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1464.090481][T21573] EXT4-fs warning (device loop5): ext4_enable_quotas:7232: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1464.109070][T21573] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1464.132684][T21573] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.14103: bg 0: block 40: padding at end of block bitmap is not set [ 1464.155935][T21573] loop5: lost filesystem error report for type 5 error -117 [ 1464.178362][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1464.178402][ C1] EXT4-fs (loop5): initial error at time 1379: ext4_validate_block_bitmap:440 [ 1464.178447][ C1] EXT4-fs (loop5): last error at time 1379: ext4_validate_block_bitmap:440 [ 1464.198148][T21573] EXT4-fs (loop5): Remounting filesystem read-only [ 1464.198320][T21573] EXT4-fs (loop5): 1 truncate cleaned up [ 1464.200581][T21573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1464.417369][ T5938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.660842][T21601] bond2: Removing last arp target with arp_interval on [ 1464.684929][T21601] bond2: entered promiscuous mode [ 1464.698940][T21601] bond2: entered allmulticast mode [ 1464.705535][T21601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1465.098369][ T791] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1465.279232][ T791] usb 7-1: Using ep0 maxpacket: 16 [ 1465.321609][ T791] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1465.332738][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.340777][ T791] usb 7-1: Product: syz [ 1465.389028][ T791] usb 7-1: Manufacturer: syz [ 1465.417737][ T791] usb 7-1: SerialNumber: syz [ 1465.451210][ T791] usb 7-1: config 0 descriptor?? [ 1465.482206][ T791] as10x_usb: device has been detected [ 1465.488439][ T791] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1465.601022][ T791] usb 7-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1465.684148][T21653] random: crng reseeded on system resumption [ 1465.694867][ T791] as10x_usb: error during firmware upload part1 [ 1465.742638][ T791] Registered device Sky IT Digital Key (green led) [ 1465.907809][ T791] usb 7-1: USB disconnect, device number 33 [ 1466.025759][ T791] Unregistered device Sky IT Digital Key (green led) [ 1466.062537][ T791] as10x_usb: device has been disconnected [ 1466.119703][T21731] loop2: detected capacity change from 0 to 1024 [ 1466.171753][T21742] MTD: Couldn't look up './file0': -15 [ 1466.307229][ T36] hfsplus: b-tree write err: -5, ino 25 [ 1466.321039][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1466.358155][ T36] hfsplus: b-tree write err: -5, ino 2 [ 1466.879579][T21773] loop6: detected capacity change from 0 to 2048 [ 1466.914177][T21773] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1467.030198][T21791] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1467.170285][T21773] NILFS (loop6): error -2 truncating bmap (ino=16) [ 1467.386034][T21806] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.14155'. [ 1467.654094][T21826] netlink: 'syz.8.14161': attribute type 4 has an invalid length. [ 1467.755669][T21834] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1467.800575][ T791] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1467.970042][T21842] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1467.999450][ T791] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1468.032268][ T791] usb 7-1: not running at top speed; connect to a high speed hub [ 1468.050387][ T791] usb 7-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 1468.072531][ T791] usb 7-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1468.132063][ T791] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1468.166105][ T791] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1468.210322][ T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.239678][ T791] usb 7-1: Product: syz [ 1468.255107][ T791] usb 7-1: Manufacturer: syz [ 1468.259735][ T791] usb 7-1: SerialNumber: syz [ 1468.296660][T21818] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1468.473861][ T6120] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1468.524729][T21878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1468.583874][ T791] usbhid 7-1:1.0: can't add hid device: -71 [ 1468.610437][ T791] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1468.640491][ T791] usb 7-1: USB disconnect, device number 34 [ 1468.662332][ T6120] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1468.700607][ T6120] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.730312][ T6120] usb 9-1: config 0 descriptor?? [ 1468.744618][ T6120] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1468.970597][T21908] netlink: 'syz.7.14184': attribute type 4 has an invalid length. [ 1469.006794][T21908] netlink: 'syz.7.14184': attribute type 1 has an invalid length. [ 1469.036501][T21908] netlink: 228 bytes leftover after parsing attributes in process `syz.7.14184'. [ 1469.188044][ T6120] gspca_stv06xx: I2C: Read error writing address: -71 [ 1469.236451][ T6120] usb 9-1: USB disconnect, device number 3 [ 1469.891635][T21967] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14201'. [ 1470.215742][T21983] loop2: detected capacity change from 0 to 512 [ 1470.568659][T21978] loop3: detected capacity change from 0 to 8192 [ 1470.641123][T21978] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1470.737834][T21978] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1470.768216][T21978] FAT-fs (loop3): Filesystem has been set read-only [ 1470.845462][T19590] Process accounting resumed [ 1471.042901][T22023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1471.975185][ T462] Bluetooth: hci7: unexpected event for opcode 0x2035 [ 1472.010309][T22051] loop3: detected capacity change from 0 to 4096 [ 1472.099760][T22051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1472.351085][ T5939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.665649][ T89] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1472.778425][T22106] netlink: 408 bytes leftover after parsing attributes in process `syz.7.14241'. [ 1473.073515][ T89] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1473.083134][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.104803][ T89] usb 3-1: Product: syz [ 1473.113164][ T89] usb 3-1: Manufacturer: syz [ 1473.117775][ T89] usb 3-1: SerialNumber: syz [ 1473.153509][ T89] usb 3-1: config 0 descriptor?? [ 1473.219048][ T6120] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1473.421559][ T6120] usb 9-1: Using ep0 maxpacket: 16 [ 1473.435756][ T6120] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1473.475556][ T6120] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.499090][ T6120] usb 9-1: Product: syz [ 1473.509550][ T6120] usb 9-1: Manufacturer: syz [ 1473.532168][ T6120] usb 9-1: SerialNumber: syz [ 1473.562791][T22141] loop5: detected capacity change from 0 to 2048 [ 1473.581296][T22141] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1473.599855][ T6120] usb 9-1: config 0 descriptor?? [ 1473.645300][ T6120] as10x_usb: device has been detected [ 1473.668267][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1473.668291][ T30] audit: type=1400 audit(1388.304:354): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=22150 comm="syz.3.14256" [ 1473.692315][ T6120] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1473.713587][ T89] usb 3-1: USB disconnect, device number 41 [ 1473.726192][T18444] udevd[18444]: incorrect nilfs2 checksum on /dev/loop5 [ 1473.735854][T22157] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1473.776904][ T6120] usb 9-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1473.801865][T22141] NILFS (loop5): error -2 truncating bmap (ino=16) [ 1473.838840][ T6120] as10x_usb: error during firmware upload part1 [ 1473.846712][T22109] random: crng reseeded on system resumption [ 1473.867706][ T6120] Registered device Sky IT Digital Key (green led) [ 1473.991693][T22173] loop3: detected capacity change from 0 to 164 [ 1474.056100][T22173] rock: directory entry would overflow storage [ 1474.087733][T22173] rock: sig=0x66, size=4, remaining=3 [ 1474.139559][ T6120] usb 9-1: USB disconnect, device number 4 [ 1474.148116][T22173] rock: directory entry would overflow storage [ 1474.173486][T22173] rock: sig=0x66, size=4, remaining=3 [ 1474.236100][ T6120] Unregistered device Sky IT Digital Key (green led) [ 1474.248111][ T6120] as10x_usb: device has been disconnected [ 1474.794729][T22218] xfrm1: entered allmulticast mode [ 1475.076922][T22245] loop6: detected capacity change from 0 to 256 [ 1475.231775][T22245] FAT-fs (loop6): Directory bread(block 64) failed [ 1475.264052][T22245] FAT-fs (loop6): Directory bread(block 65) failed [ 1475.285107][T22245] FAT-fs (loop6): Directory bread(block 66) failed [ 1475.302238][T19590] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1475.321190][T22245] FAT-fs (loop6): Directory bread(block 67) failed [ 1475.342416][T22245] FAT-fs (loop6): Directory bread(block 68) failed [ 1475.367346][T22245] FAT-fs (loop6): Directory bread(block 69) failed [ 1475.395860][T22245] FAT-fs (loop6): Directory bread(block 70) failed [ 1475.425961][T22245] FAT-fs (loop6): Directory bread(block 71) failed [ 1475.444886][T22245] FAT-fs (loop6): Directory bread(block 72) failed [ 1475.472423][T22245] FAT-fs (loop6): Directory bread(block 73) failed [ 1475.498934][T19590] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1475.531445][T19590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.567108][T19590] usb 9-1: config 0 descriptor?? [ 1476.042284][T19590] ath6kl: Failed to submit usb control message: -71 [ 1476.048955][T19590] ath6kl: unable to send the bmi data to the device: -71 [ 1476.104531][T19590] ath6kl: Unable to send get target info: -71 [ 1476.140834][T19590] ath6kl: Failed to init ath6kl core: -71 [ 1476.183107][T19590] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1476.227390][T19590] usb 9-1: USB disconnect, device number 5 [ 1476.408356][T22312] loop7: detected capacity change from 0 to 256 [ 1476.425162][T22312] exfat: Deprecated parameter 'utf8' [ 1476.453971][T22312] exfat: Deprecated parameter 'namecase' [ 1476.477101][T22312] exfat: Deprecated parameter 'namecase' [ 1476.812678][T22277] loop5: detected capacity change from 0 to 32768 [ 1476.867366][T22277] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1476.892385][T22323] loop6: detected capacity change from 0 to 4096 [ 1477.050412][T22277] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 1477.110724][T22277] XFS (loop5): Ending clean mount [ 1477.202955][T22352] loop2: detected capacity change from 0 to 1024 [ 1477.567754][ T5938] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1478.081256][T22403] netlink: 'syz.8.14315': attribute type 2 has an invalid length. [ 1478.089118][T22403] netlink: 'syz.8.14315': attribute type 2 has an invalid length. [ 1478.219441][T22408] netlink: 'syz.2.14316': attribute type 1 has an invalid length. [ 1478.259746][T22412] netlink: 'syz.3.14317': attribute type 1 has an invalid length. [ 1478.292665][T22412] netlink: 244 bytes leftover after parsing attributes in process `syz.3.14317'. [ 1478.315095][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14318'. [ 1478.379281][T22415] IPv6: sit2: Disabled Multicast RS [ 1478.775028][T22434] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1478.775423][T22436] comedi comedi0: aio_aio12_8: I/O port conflict (0x3,32) [ 1478.828835][T22440] netlink: 'syz.2.14325': attribute type 4 has an invalid length. [ 1478.858973][T22440] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.14325'. [ 1479.026330][T22374] loop7: detected capacity change from 0 to 32768 [ 1479.147894][T22459] loop6: detected capacity change from 0 to 128 [ 1479.169862][T22459] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1479.196391][T22459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1479.808540][T22480] loop6: detected capacity change from 0 to 4096 [ 1479.856006][T22480] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1480.040816][T22480] ntfs3(loop6): ino=1a, mi_enum_attr [ 1480.057444][T22480] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1480.065229][T22480] ntfs3(loop6): ino=1a, mi_enum_attr [ 1480.095761][T22480] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1480.426331][T22519] openvswitch: netlink: Actions may not be safe on all matching packets [ 1480.440538][T22513] geneve2: entered promiscuous mode [ 1480.877788][T22542] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1481.897285][T22604] binder: 22602:22604 ioctl 40046210 0 returned -14 [ 1482.005625][T22612] loop7: detected capacity change from 0 to 1024 [ 1482.038141][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14376'. [ 1482.826111][T22585] loop5: detected capacity change from 0 to 32768 [ 1482.862965][T22585] (syz.5.14368,22585,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1482.918969][T22585] (syz.5.14368,22585,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1482.953953][T22689] loop3: detected capacity change from 0 to 512 [ 1482.971641][T22689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1483.043548][T22585] JBD2: Ignoring recovery information on journal [ 1483.082793][T22689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1483.128940][T22585] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1483.245193][ T5939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.471938][T22717] IPv6: sit3: Disabled Multicast RS [ 1483.645294][ T5938] ocfs2: Unmounting device (7,5) on (node local) [ 1483.735942][ T791] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1483.789203][T22740] netlink: 240 bytes leftover after parsing attributes in process `syz.3.14404'. [ 1483.919177][ T791] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1483.958965][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.993834][ T791] usb 3-1: config 0 descriptor?? [ 1484.046468][T22750] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50294 out of range (51000000..2150000000) [ 1484.090021][ T791] usb 3-1: Invalid firmware size=18. [ 1484.262471][ T791] usb 3-1: USB disconnect, device number 42 [ 1484.380474][T22781] loop8: detected capacity change from 0 to 256 [ 1484.475865][T22781] exfat: Deprecated parameter 'utf8' [ 1484.522683][T22781] exfat: Deprecated parameter 'utf8' [ 1484.550506][T22781] exfat: Deprecated parameter 'utf8' [ 1484.598122][T22781] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1484.658292][T22781] exfat: Deprecated parameter 'utf8' [ 1484.675314][T22781] exfat: Deprecated parameter 'utf8' [ 1484.695850][T22781] exfat: Deprecated parameter 'utf8' [ 1485.380042][T22840] ksmbd: Unknown IPC event: 1, ignore. [ 1485.540468][T12800] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1485.743044][T12800] usb 7-1: Using ep0 maxpacket: 8 [ 1485.755719][T12800] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1485.791447][T12800] usb 7-1: config 179 has no interface number 0 [ 1485.809708][T12800] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1485.816394][T22861] loop5: detected capacity change from 0 to 2048 [ 1485.859666][T22861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1485.870228][T12800] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1485.916290][T12800] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1485.937593][ T30] audit: type=1800 audit(1399.777:355): pid=22861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14436" name="file1" dev="loop5" ino=1367 res=0 errno=0 [ 1485.945339][T12800] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1486.068198][T12800] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1486.104428][T12800] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1486.146162][T12800] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1486.201857][T12800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.236326][T22879] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50294 out of range (51000000..2150000000) [ 1486.246584][T22883] netlink: 'syz.5.14442': attribute type 8 has an invalid length. [ 1486.348883][T12800] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input95 [ 1486.456431][ T5176] input input95: unable to receive magic message: -110 [ 1486.568713][ T5176] input input95: unable to receive magic message: -71 [ 1486.615243][ T5176] input input95: unable to receive magic message: -71 [ 1486.681555][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1486.718463][T12800] usb 7-1: USB disconnect, device number 35 [ 1487.113552][T22947] loop3: detected capacity change from 0 to 256 [ 1487.217747][T22947] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 1487.225711][T22947] FAT-fs (loop3): Filesystem has been set read-only [ 1487.273988][T22947] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1487.338175][T22959] loop5: detected capacity change from 0 to 16 [ 1487.373339][T22959] erofs (device loop5): mounted with root inode @ nid 36. [ 1487.381012][T22961] netlink: 'syz.7.14461': attribute type 10 has an invalid length. [ 1487.403535][T22961] hsr0: entered allmulticast mode [ 1487.430762][T22961] hsr_slave_0: entered allmulticast mode [ 1487.466847][T22961] hsr_slave_1: entered allmulticast mode [ 1488.553057][T23024] CIFS mount error: No usable UNC path provided in device string! [ 1488.553057][T23024] [ 1488.616788][T23024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1488.655493][T23029] loop5: detected capacity change from 0 to 512 [ 1488.843330][T23029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1489.014896][T23049] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14488'. [ 1489.084038][T23004] loop2: detected capacity change from 0 to 32768 [ 1489.103548][ T5938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.144199][T23004] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.14474 (23004) [ 1489.203384][T23004] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1489.221371][T23057] loop8: detected capacity change from 0 to 128 [ 1489.236851][T23004] BTRFS info (device loop2): using blake2b checksum algorithm [ 1489.260325][T23057] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1489.317305][T23070] loop6: detected capacity change from 0 to 8 [ 1489.366974][T23082] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.14493'. [ 1489.371895][T23057] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1489.397386][T23082] bridge_slave_1: default FDB implementation only supports local addresses [ 1489.485201][T23070] SQUASHFS error: Unable to read directory block [2c0:35] [ 1489.492413][T23070] SQUASHFS error: Unable to read directory block [2c0:35] [ 1489.496291][T23004] BTRFS info (device loop2): enabling ssd optimizations [ 1489.559222][T23004] BTRFS info (device loop2): turning on async discard [ 1489.566020][T23004] BTRFS info (device loop2): enabling free space tree [ 1489.688011][T23094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14496'. [ 1489.971931][T23111] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1490.006589][ T5928] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1490.676075][T23146] set match dimension is over the limit! [ 1490.758826][T23149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14511'. [ 1490.928720][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14514'. [ 1491.258967][T23169] wireguard0: entered promiscuous mode [ 1491.266000][T23169] wireguard0: entered allmulticast mode [ 1491.521326][T23182] loop2: detected capacity change from 0 to 512 [ 1491.543927][T23182] EXT4-fs: Ignoring removed bh option [ 1491.574375][T23182] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1491.597549][T23182] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #11: block 1: comm syz.2.14522: lblock 0 mapped to illegal pblock 1 (length 1) [ 1491.634841][T23182] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1491.639420][T23182] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1491.649910][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1491.649942][ C1] EXT4-fs (loop2): initial error at time 1405: ext4_map_blocks:776: inode 11: block 1 [ 1491.650007][ C1] EXT4-fs (loop2): last error at time 1405: ext4_map_blocks:776: inode 11: block 1 [ 1491.726654][T23182] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.14522: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1491.793426][T23182] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1491.794008][T23182] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.2.14522: ea_inode dec ref err=-117 [ 1491.852623][T23182] EXT4-fs (loop2): 1 orphan inode deleted [ 1491.860144][T23153] loop8: detected capacity change from 0 to 32768 [ 1491.867344][T23182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1491.891763][T23153] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14512 (23153) [ 1491.967458][T23197] loop6: detected capacity change from 0 to 4096 [ 1491.977861][T23153] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1492.016711][T23153] BTRFS info (device loop8): using xxhash64 checksum algorithm [ 1492.034743][T23153] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1492.132333][T23197] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex [ 1492.159172][ T5928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.168436][T23197] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1492.209608][T23153] BTRFS info (device loop8): rebuilding free space tree [ 1492.283915][T23153] BTRFS info (device loop8): disabling free space tree [ 1492.334788][T23153] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1492.375137][T23153] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1492.462887][T23153] BTRFS info (device loop8): allowing degraded mounts [ 1492.485398][T23153] BTRFS info (device loop8): enabling ssd optimizations [ 1492.517462][T23153] BTRFS info (device loop8): turning on async discard [ 1492.524266][T23153] BTRFS info (device loop8): enabling disk space caching [ 1492.579205][T23153] BTRFS info (device loop8): force clearing of disk cache [ 1492.611385][T23153] BTRFS info (device loop8): use zlib compression, level 3 [ 1492.896012][T18691] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1492.996576][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14537'. [ 1493.062645][T23256] bridge_slave_1: left allmulticast mode [ 1493.069347][T23256] bridge_slave_1: left promiscuous mode [ 1493.164403][T23256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.259889][T23271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14541'. [ 1493.316808][T23256] bridge_slave_0: left allmulticast mode [ 1493.332590][T23277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14542'. [ 1493.355526][T23256] bridge_slave_0: left promiscuous mode [ 1493.375164][T23256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.532582][T19590] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1493.703493][T19590] usb 9-1: Using ep0 maxpacket: 8 [ 1493.742477][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14546'. [ 1493.744964][T19590] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1493.782343][T19590] usb 9-1: config 179 has no interface number 0 [ 1493.788688][T19590] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1493.832303][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14546'. [ 1493.863740][T19590] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1493.875678][T19590] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1493.893671][T19590] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1493.905753][T19590] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1493.919871][T19590] usb 9-1: config 179 interface 65 has no altsetting 0 [ 1493.926761][T19590] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1493.935913][T19590] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.019173][T19590] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input96 [ 1494.435113][ T89] usb 9-1: USB disconnect, device number 6 [ 1495.052799][T23361] dlm: no locking on control device [ 1495.183356][T23366] netlink: 'syz.7.14562': attribute type 12 has an invalid length. [ 1495.265483][T23373] netlink: 'syz.6.14566': attribute type 6 has an invalid length. [ 1495.300125][T23373] netlink: 176 bytes leftover after parsing attributes in process `syz.6.14566'. [ 1496.496487][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14592'. [ 1496.663505][ T6120] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1496.697840][T23468] loop8: detected capacity change from 0 to 256 [ 1496.786969][T23468] FAT-fs (loop8): Directory bread(block 64) failed [ 1496.828102][T23468] FAT-fs (loop8): Directory bread(block 65) failed [ 1496.847558][ T6120] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1496.852715][T23468] FAT-fs (loop8): Directory bread(block 66) failed [ 1496.879523][ T6120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.898609][T23468] FAT-fs (loop8): Directory bread(block 67) failed [ 1496.905596][T23468] FAT-fs (loop8): Directory bread(block 68) failed [ 1496.953493][ T6120] usb 3-1: config 0 descriptor?? [ 1496.960342][T23468] FAT-fs (loop8): Directory bread(block 69) failed [ 1496.976422][ T6120] cp210x 3-1:0.0: cp210x converter detected [ 1497.022673][T23468] FAT-fs (loop8): Directory bread(block 70) failed [ 1497.076041][T23468] FAT-fs (loop8): Directory bread(block 71) failed [ 1497.123671][T23468] FAT-fs (loop8): Directory bread(block 72) failed [ 1497.165312][T23468] FAT-fs (loop8): Directory bread(block 73) failed [ 1497.428492][ T6120] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1497.466749][ T6120] usb 3-1: USB disconnect, device number 43 [ 1497.559438][ T6120] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1497.586409][ T6120] cp210x 3-1:0.0: device disconnected [ 1497.726112][T23523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.970988][T23536] netlink: 'syz.8.14608': attribute type 3 has an invalid length. [ 1498.018417][T23536] netlink: 'syz.8.14608': attribute type 1 has an invalid length. [ 1498.072326][T23536] netlink: 224 bytes leftover after parsing attributes in process `syz.8.14608'. [ 1498.927373][T23589] loop6: detected capacity change from 0 to 1764 [ 1499.571675][T23631] openvswitch: netlink: Missing valid actions attribute. [ 1499.616982][T23631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1499.649377][T23634] misc userio: Invalid payload size [ 1500.043252][T23660] loop2: detected capacity change from 0 to 256 [ 1500.078266][T23664] ip6t_srh: unknown srh invflags 4000 [ 1500.136915][T23660] FAT-fs (loop2): Directory bread(block 64) failed [ 1500.170185][T23660] FAT-fs (loop2): Directory bread(block 65) failed [ 1500.202055][T23660] FAT-fs (loop2): Directory bread(block 66) failed [ 1500.208591][T23660] FAT-fs (loop2): Directory bread(block 67) failed [ 1500.255672][T23660] FAT-fs (loop2): Directory bread(block 68) failed [ 1500.262211][T23660] FAT-fs (loop2): Directory bread(block 69) failed [ 1500.324656][T23660] FAT-fs (loop2): Directory bread(block 70) failed [ 1500.352289][T23660] FAT-fs (loop2): Directory bread(block 71) failed [ 1500.383634][T23660] FAT-fs (loop2): Directory bread(block 72) failed [ 1500.403715][T23660] FAT-fs (loop2): Directory bread(block 73) failed [ 1500.453588][T23660] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1500.476763][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14654'. [ 1500.585427][ T791] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1500.758477][ T791] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1500.805388][ T791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1500.838590][ T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1500.869513][ T791] usb 6-1: SerialNumber: syz [ 1501.269279][T23740] netlink: 'syz.8.14668': attribute type 64 has an invalid length. [ 1501.364868][T23740] netlink: 9 bytes leftover after parsing attributes in process `syz.8.14668'. [ 1501.381074][ T791] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1501.421750][ T791] usb 6-1: USB disconnect, device number 49 [ 1501.882719][T23776] openvswitch: netlink: IP tunnel dst address not specified [ 1502.085116][T23788] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1502.207406][T23799] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1502.464862][ T30] audit: type=1326 audit(1415.236:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.561976][ T30] audit: type=1326 audit(1415.236:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.647670][ T30] audit: type=1326 audit(1415.236:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.783782][ T30] audit: type=1326 audit(1415.236:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.823598][T23830] vivid-000: ================= START STATUS ================= [ 1502.850803][T23830] vivid-000: Generate PTS: true [ 1502.856233][T23830] vivid-000: Generate SCR: true [ 1502.861135][T23830] tpg source WxH: 320x240 (HSV) [ 1502.885562][ T30] audit: type=1326 audit(1415.236:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.922081][T23830] tpg field: 1 [ 1502.933040][T23830] tpg crop: (0,0)/320x240 [ 1502.940486][T23830] tpg compose: (0,0)/320x240 [ 1502.945192][T23830] tpg colorspace: 6 [ 1502.949459][T23830] tpg transfer function: 5/5 [ 1502.954134][ T30] audit: type=1326 audit(1415.236:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1502.987824][T23830] tpg HSV encoding: 0/0 [ 1502.996547][T23830] tpg quantization: 2/2 [ 1503.011409][T23830] tpg RGB range: 0/2 [ 1503.015417][T23830] vivid-000: ================== END STATUS ================== [ 1503.023524][ T30] audit: type=1326 audit(1415.236:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1503.053383][ T30] audit: type=1326 audit(1415.236:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23814 comm="syz.5.14689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f99bc59c799 code=0x7ffc0000 [ 1503.378092][T23856] netlink: zone id is out of range [ 1503.542843][T23856] netlink: set zone limit has 4 unknown bytes [ 1504.101344][T23892] xt_ecn: cannot match TCP bits for non-tcp packets [ 1504.293982][T23903] netlink: 'syz.3.14716': attribute type 4 has an invalid length. [ 1504.360688][T23910] loop8: detected capacity change from 0 to 128 [ 1504.383384][T23910] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1504.416217][T23910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1504.486592][T23910] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1504.526497][T23910] UDF-fs: error (device loop8): udf_count_free_bitmap: udf_count_free failed [ 1504.767427][T18691] UDF-fs: error (device loop8): udf_read_inode: (ino 104) failed !bh [ 1504.799810][T18691] UDF-fs: error (device loop8): udf_read_inode: (ino 104) failed !bh [ 1505.159837][T23898] loop6: detected capacity change from 0 to 32768 [ 1505.232513][T23898] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1505.356049][T23898] XFS (loop6): Ending clean mount [ 1505.511153][ T1089] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.578412][T17564] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1505.586538][T30348] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1505.748388][ T1089] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.786594][T30348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.808808][T30348] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.835194][T30348] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1505.845700][T30348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1505.867285][T30348] usb 6-1: SerialNumber: syz [ 1505.894085][T30348] usb 6-1: 0:2 : does not exist [ 1505.919443][ T1089] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.187230][ T1089] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.347611][T23997] netlink: 'syz.6.14739': attribute type 16 has an invalid length. [ 1506.355569][T23997] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14739'. [ 1506.403996][T30348] usb 6-1: USB disconnect, device number 50 [ 1506.490491][T24019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1506.501230][T24019] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1506.502250][T24019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1506.506544][T24019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1506.509451][T24019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1506.553652][T18444] udevd[18444]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.767721][T24035] loop3: detected capacity change from 0 to 512 [ 1506.834158][T24035] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1506.868071][T24035] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1506.909325][T24035] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1506.953454][T24035] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1506.989061][T24035] System zones: 0-2, 18-18, 34-35 [ 1507.011420][ T1089] bridge_slave_1: left allmulticast mode [ 1507.045044][T24035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.068160][ T1089] bridge_slave_1: left promiscuous mode [ 1507.086449][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.163991][ T1089] bridge_slave_0: left allmulticast mode [ 1507.171196][ T5939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.210372][ T1089] bridge_slave_0: left promiscuous mode [ 1507.235997][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.523746][T24081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14755'. [ 1507.535929][T24082] loop5: detected capacity change from 0 to 128 [ 1507.834417][T24093] loop3: detected capacity change from 0 to 512 [ 1507.902122][T24093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.014486][T24093] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1508.083109][ T5939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.167295][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.232100][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.286795][ T1089] bond0 (unregistering): Released all slaves [ 1508.337300][ T1089] bond1 (unregistering): Released all slaves [ 1508.443998][T24058] ip6tnl2: entered promiscuous mode [ 1508.728540][ T462] Bluetooth: hci1: command tx timeout [ 1508.794557][T24167] usb usb8: usbfs: process 24167 (syz.7.14768) did not claim interface 0 before use [ 1509.463359][T24215] loop3: detected capacity change from 0 to 1764 [ 1509.871582][ T6011] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1510.105512][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1510.116874][ T6011] usb 7-1: Using ep0 maxpacket: 16 [ 1510.160888][ T6011] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1510.169261][ T6011] usb 7-1: config 251 has no interface number 0 [ 1510.202764][ T6011] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1510.250446][ T6011] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1510.302532][ T6011] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1510.342528][ T1089] hsr_slave_0: left promiscuous mode [ 1510.342861][ T6011] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1510.376929][ T1089] hsr_slave_1: left promiscuous mode [ 1510.389124][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.406908][ T6011] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 70 [ 1510.416563][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.442684][ T6011] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1510.461188][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.468625][ T6011] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1510.471871][T24292] loop7: detected capacity change from 0 to 4096 [ 1510.479287][ T6011] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1510.492191][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.492907][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.531845][ T6011] usb 7-1: Product: syz [ 1510.536657][ T6011] usb 7-1: Manufacturer: syz [ 1510.542104][ T6011] usb 7-1: SerialNumber: syz [ 1510.553271][T24237] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1510.594265][ T1089] veth1_macvtap: left promiscuous mode [ 1510.604422][T24237] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1510.606227][ T1089] veth0_macvtap: left promiscuous mode [ 1510.628192][ T1089] veth1_vlan: left promiscuous mode [ 1510.643488][ T1089] veth0_vlan: left promiscuous mode [ 1510.718675][ T30] audit: type=1326 audit(1422.966:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24305 comm="syz.7.14793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a7d9c799 code=0x7ffc0000 [ 1510.802879][ T30] audit: type=1326 audit(1422.994:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24305 comm="syz.7.14793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a7d9c799 code=0x7ffc0000 [ 1510.864951][ T30] audit: type=1326 audit(1422.994:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24305 comm="syz.7.14793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a7d9c799 code=0x7ffc0000 [ 1510.906788][ T6011] cxacru 7-1:251.202: send of cm 0x90 failed (-71) [ 1510.935297][ T6011] cxacru 7-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1510.958822][ T30] audit: type=1326 audit(1422.994:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24305 comm="syz.7.14793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a7d9c799 code=0x7ffc0000 [ 1510.963117][ T462] Bluetooth: hci1: command tx timeout [ 1510.989802][ T6011] cxacru 7-1:251.202: probe with driver cxacru failed with error -22 [ 1511.026424][ T6011] usb 7-1: USB disconnect, device number 36 [ 1511.209058][ T6120] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1511.368724][T24334] loop7: detected capacity change from 0 to 1764 [ 1511.382053][ T1089] team_slave_1 (unregistering): left promiscuous mode [ 1511.390056][ T6120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1511.400161][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 1511.417874][ T6120] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1511.436241][ T1089] team_slave_0 (unregistering): left promiscuous mode [ 1511.446064][ T6120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1511.468615][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 1511.474932][ T6120] usb 3-1: Product: syz [ 1511.480090][ T6120] usb 3-1: Manufacturer: syz [ 1511.484782][ T6120] usb 3-1: SerialNumber: syz [ 1511.494059][ T6120] usb 3-1: config 0 descriptor?? [ 1511.525463][ T6120] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1511.537141][ T6120] pctv452e: pctv452e_power_ctrl: 1 [ 1511.537141][ T6120] [ 1511.546215][ T6120] usb 3-1: selecting invalid altsetting 3 [ 1511.571874][ T6120] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1511.571874][ T6120] [ 1511.593845][ T6120] dvb-usb: bulk message failed: -22 (5/0) [ 1511.608667][ T6120] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1511.691573][ T6120] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1511.742356][ T6120] usb 3-1: USB disconnect, device number 44 [ 1511.959440][T24291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14788'. [ 1511.993570][T24014] chnl_net:caif_netlink_parms(): no params data found [ 1512.420738][T24401] loop3: detected capacity change from 0 to 4096 [ 1512.493606][T24014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.517513][T24401] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1512.550231][T24014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.586221][T24014] bridge_slave_0: entered allmulticast mode [ 1512.594301][T24014] bridge_slave_0: entered promiscuous mode [ 1512.657977][T24014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1512.689646][T24014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.751465][T24014] bridge_slave_1: entered allmulticast mode [ 1512.763829][T24401] ntfs3(loop3): ino=19, mi_enum_attr [ 1512.782645][T24014] bridge_slave_1: entered promiscuous mode [ 1512.795209][T24361] loop7: detected capacity change from 0 to 32768 [ 1513.033170][T24014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.050709][T24474] loop2: detected capacity change from 0 to 64 [ 1513.092928][T24014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.174944][ T462] Bluetooth: hci1: command tx timeout [ 1513.180002][T24473] netlink: 'syz.5.14810': attribute type 11 has an invalid length. [ 1513.250681][T24483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14813'. [ 1513.425893][T24014] team0: Port device team_slave_0 added [ 1513.468721][T24014] team0: Port device team_slave_1 added [ 1513.512057][T24511] ubi2: attaching mtd0 [ 1513.547769][T24511] ubi2 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1513.629629][T24509] loop2: detected capacity change from 0 to 2048 [ 1513.662495][T24014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1513.713018][T24014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.780397][T24509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1513.793762][T24014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1513.807463][T24014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1513.814421][T24014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.841348][T24014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.932166][T24509] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.14814: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 1514.027695][T24562] loop3: detected capacity change from 0 to 64 [ 1514.037353][T24014] hsr_slave_0: entered promiscuous mode [ 1514.103937][T24014] hsr_slave_1: entered promiscuous mode [ 1514.110356][T24014] debugfs: 'hsr0' already exists in 'hsr' [ 1514.138563][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14821'. [ 1514.167210][T24014] Cannot create hsr debugfs directory [ 1514.198862][ T5928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.056629][T24693] vivid-000: ================= START STATUS ================= [ 1515.064315][T24693] vivid-000: Generate PTS: true [ 1515.111616][T24693] vivid-000: Generate SCR: true [ 1515.131405][T24693] tpg source WxH: 320x180 (Y'CbCr) [ 1515.146568][T24693] tpg field: 1 [ 1515.171747][T24693] tpg crop: (0,0)/320x180 [ 1515.201924][T24693] tpg compose: (0,0)/320x180 [ 1515.214454][T24693] tpg colorspace: 6 [ 1515.236595][T24693] tpg transfer function: 5/5 [ 1515.246757][T24693] tpg Y'CbCr encoding: 0/1 [ 1515.264507][T24720] loop6: detected capacity change from 0 to 1024 [ 1515.265945][T24693] tpg quantization: 2/2 [ 1515.300770][T24693] tpg RGB range: 0/2 [ 1515.324695][T24693] vivid-000: ================== END STATUS ================== [ 1515.397128][ T462] Bluetooth: hci1: command tx timeout [ 1515.620168][T24014] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1515.773261][T24014] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1515.884490][T24014] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1515.950436][T24014] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1516.035579][T24772] xt_cgroup: path and classid specified [ 1516.403658][T24790] loop3: detected capacity change from 0 to 64 [ 1516.420230][T24014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.454004][T24790] hfs: unable to locate alternate MDB [ 1516.475505][T24790] hfs: continuing without an alternate MDB [ 1516.522051][T24014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.564663][ T30] audit: type=1800 audit(1428.431:368): pid=24790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14844" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 1516.617893][T20003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.625076][T20003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.689052][T20003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.696194][T20003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.738785][T20001] [ 1516.741120][T20001] ====================================================== [ 1516.748224][T20001] WARNING: possible circular locking dependency detected [ 1516.755242][T20001] syzkaller #0 Not tainted [ 1516.759655][T20001] ------------------------------------------------------ [ 1516.766671][T20001] kworker/u8:10/20001 is trying to acquire lock: [ 1516.773256][T20001] ffff88807ebd5bf8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1516.784277][T20001] [ 1516.784277][T20001] but task is already holding lock: [ 1516.791635][T20001] ffff8880571ea0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1516.801033][T20001] [ 1516.801033][T20001] which lock already depends on the new lock. [ 1516.801033][T20001] [ 1516.811446][T20001] [ 1516.811446][T20001] the existing dependency chain (in reverse order) is: [ 1516.820455][T20001] [ 1516.820455][T20001] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1516.828397][T20001] __mutex_lock+0x1a2/0x1b90 [ 1516.833509][T20001] hfs_find_init+0x273/0x330 [ 1516.838644][T20001] hfs_ext_read_extent+0x19d/0x9d0 [ 1516.844294][T20001] hfs_get_block+0x576/0x830 [ 1516.849415][T20001] block_read_full_folio+0x36c/0x8e0 [ 1516.855246][T20001] filemap_read_folio+0xfc/0x3b0 [ 1516.860714][T20001] do_read_cache_folio+0x2d7/0x6b0 [ 1516.866359][T20001] read_cache_page+0x5b/0x1b0 [ 1516.871653][T20001] __hfs_bnode_create+0x718/0x9a0 [ 1516.877306][T20001] hfs_bnode_find+0x2d5/0xd30 [ 1516.882503][T20001] hfs_brec_find+0x39d/0x620 [ 1516.887641][T20001] hfs_brec_read+0x26/0x120 [ 1516.892683][T20001] hfs_cat_find_brec+0xdc/0x2a0 [ 1516.898058][T20001] hfs_fill_super+0x58d/0x7e0 [ 1516.903271][T20001] get_tree_bdev_flags+0x38c/0x620 [ 1516.908914][T20001] vfs_get_tree+0x92/0x320 [ 1516.913856][T20001] path_mount+0x7d0/0x23d0 [ 1516.918795][T20001] __x64_sys_mount+0x293/0x310 [ 1516.924083][T20001] do_syscall_64+0x106/0xf80 [ 1516.929221][T20001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.935645][T20001] [ 1516.935645][T20001] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1516.944875][T20001] __lock_acquire+0x14b8/0x2630 [ 1516.950271][T20001] lock_acquire+0x1cf/0x380 [ 1516.955315][T20001] __mutex_lock+0x1a2/0x1b90 [ 1516.960424][T20001] hfs_extend_file+0xa6/0xcf0 [ 1516.965635][T20001] hfs_bmap_reserve+0x2ab/0x3a0 [ 1516.971009][T20001] __hfs_ext_write_extent+0x3c4/0x510 [ 1516.976995][T20001] hfs_ext_write_extent+0x1b7/0x200 [ 1516.982722][T20001] hfs_write_inode+0xce/0xab0 [ 1516.987934][T20001] __writeback_single_inode+0xd00/0x13c0 [ 1516.994100][T20001] writeback_sb_inodes+0x766/0x1c70 [ 1516.999832][T20001] wb_writeback+0x1c0/0xbe0 [ 1517.004868][T20001] wb_workfn+0x142/0xc00 [ 1517.009647][T20001] process_one_work+0xa23/0x19a0 [ 1517.015113][T20001] worker_thread+0x5ef/0xe50 [ 1517.020223][T20001] kthread+0x370/0x450 [ 1517.024861][T20001] ret_from_fork+0x754/0xd80 [ 1517.029972][T20001] ret_from_fork_asm+0x1a/0x30 [ 1517.035265][T20001] [ 1517.035265][T20001] other info that might help us debug this: [ 1517.035265][T20001] [ 1517.045481][T20001] Possible unsafe locking scenario: [ 1517.045481][T20001] [ 1517.052918][T20001] CPU0 CPU1 [ 1517.058268][T20001] ---- ---- [ 1517.063618][T20001] lock(&tree->tree_lock/1); [ 1517.068309][T20001] lock(&HFS_I(tree->inode)->extents_lock); [ 1517.076818][T20001] lock(&tree->tree_lock/1); [ 1517.084205][T20001] lock(&HFS_I(tree->inode)->extents_lock); [ 1517.090186][T20001] [ 1517.090186][T20001] *** DEADLOCK *** [ 1517.090186][T20001] [ 1517.098322][T20001] 3 locks held by kworker/u8:10/20001: [ 1517.103771][T20001] #0: ffff888020adf948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1517.114510][T20001] #1: ffffc9000a0efd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1517.126644][T20001] #2: ffff8880571ea0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1517.136629][T20001] [ 1517.136629][T20001] stack backtrace: [ 1517.142509][T20001] CPU: 1 UID: 0 PID: 20001 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1517.142553][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.142577][T20001] Workqueue: writeback wb_workfn (flush-7:3) [ 1517.142627][T20001] Call Trace: [ 1517.142639][T20001] [ 1517.142651][T20001] dump_stack_lvl+0x100/0x190 [ 1517.142701][T20001] print_circular_bug.cold+0x178/0x1c7 [ 1517.142757][T20001] check_noncircular+0x146/0x160 [ 1517.142805][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.142853][T20001] __lock_acquire+0x14b8/0x2630 [ 1517.142909][T20001] ? __pfx_stack_trace_save+0x10/0x10 [ 1517.142956][T20001] lock_acquire+0x1cf/0x380 [ 1517.143006][T20001] ? hfs_extend_file+0xa6/0xcf0 [ 1517.143045][T20001] ? __pfx___might_resched+0x10/0x10 [ 1517.143079][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143120][T20001] ? add_lock_to_list+0x99/0x110 [ 1517.143165][T20001] __mutex_lock+0x1a2/0x1b90 [ 1517.143196][T20001] ? hfs_extend_file+0xa6/0xcf0 [ 1517.143234][T20001] ? hfs_extend_file+0xa6/0xcf0 [ 1517.143272][T20001] ? hfs_find_init+0xb3/0x330 [ 1517.143318][T20001] ? hfs_ext_write_extent+0x192/0x200 [ 1517.143358][T20001] ? __pfx___mutex_lock+0x10/0x10 [ 1517.143388][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143428][T20001] ? lock_acquire+0x1cf/0x380 [ 1517.143479][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143524][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143570][T20001] ? trace_contention_end+0x140/0x180 [ 1517.143603][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143644][T20001] ? __mutex_lock+0x26a/0x1b90 [ 1517.143677][T20001] ? hfs_extend_file+0xa6/0xcf0 [ 1517.143712][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143753][T20001] hfs_extend_file+0xa6/0xcf0 [ 1517.143792][T20001] ? __pfx_hfs_extend_file+0x10/0x10 [ 1517.143829][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.143877][T20001] hfs_bmap_reserve+0x2ab/0x3a0 [ 1517.143915][T20001] __hfs_ext_write_extent+0x3c4/0x510 [ 1517.143953][T20001] ? hfs_find_init+0x273/0x330 [ 1517.143999][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144043][T20001] hfs_ext_write_extent+0x1b7/0x200 [ 1517.144081][T20001] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1517.144124][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144164][T20001] ? mpage_writepages+0x177/0x1e0 [ 1517.144212][T20001] ? __pfx_mpage_writepages+0x10/0x10 [ 1517.144260][T20001] hfs_write_inode+0xce/0xab0 [ 1517.144302][T20001] ? __pfx_hfs_write_inode+0x10/0x10 [ 1517.144343][T20001] ? __lock_acquire+0x4a5/0x2630 [ 1517.144407][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1517.144451][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1517.144494][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144546][T20001] __writeback_single_inode+0xd00/0x13c0 [ 1517.144594][T20001] ? __pfx___writeback_single_inode+0x10/0x10 [ 1517.144638][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144679][T20001] ? do_raw_spin_unlock+0x145/0x1e0 [ 1517.144714][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144758][T20001] writeback_sb_inodes+0x766/0x1c70 [ 1517.144812][T20001] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1517.144885][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.144926][T20001] ? rcu_is_watching+0x12/0xc0 [ 1517.144962][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145002][T20001] ? queue_io+0x287/0x550 [ 1517.145039][T20001] wb_writeback+0x1c0/0xbe0 [ 1517.145079][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145126][T20001] ? __pfx_wb_writeback+0x10/0x10 [ 1517.145178][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145219][T20001] ? mark_held_locks+0x40/0x70 [ 1517.145269][T20001] ? _raw_spin_unlock_irq+0x23/0x50 [ 1517.145318][T20001] wb_workfn+0x142/0xc00 [ 1517.145362][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145402][T20001] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1517.145451][T20001] ? __pfx_wb_workfn+0x10/0x10 [ 1517.145496][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145543][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145586][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145626][T20001] ? rcu_is_watching+0x12/0xc0 [ 1517.145666][T20001] process_one_work+0xa23/0x19a0 [ 1517.145708][T20001] ? __pfx_process_one_work+0x10/0x10 [ 1517.145740][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145792][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.145837][T20001] worker_thread+0x5ef/0xe50 [ 1517.145878][T20001] ? kthread+0x13a/0x450 [ 1517.145904][T20001] ? __pfx_worker_thread+0x10/0x10 [ 1517.145936][T20001] kthread+0x370/0x450 [ 1517.145963][T20001] ? __pfx_kthread+0x10/0x10 [ 1517.146017][T20001] ret_from_fork+0x754/0xd80 [ 1517.146049][T20001] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.146079][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.146120][T20001] ? rcu_is_watching+0x12/0xc0 [ 1517.146155][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.146196][T20001] ? __switch_to+0x7b4/0x1120 [ 1517.146235][T20001] ? __pfx_kthread+0x10/0x10 [ 1517.146288][T20001] ret_from_fork_asm+0x1a/0x30 [ 1517.146338][T20001] [ 1517.690086][T20001] hfs: new node 0 already hashed? [ 1517.701728][T20001] ------------[ cut here ]------------ [ 1517.707428][T20001] 1 [ 1517.707443][T20001] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:10/20001 [ 1517.720178][T20001] Modules linked in: [ 1517.724099][T20001] CPU: 1 UID: 0 PID: 20001 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1517.733959][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1517.744049][T20001] Workqueue: writeback wb_workfn (flush-7:3) [ 1517.750121][T20001] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1517.756042][T20001] Code: 0d 99 6a 0a e9 bf 86 d0 01 e8 93 58 e1 00 4c 89 f7 e8 fb 98 6a 0a e8 86 58 e1 00 89 ee 48 c7 c7 00 7c d1 8b e8 e8 e3 fa ff 90 <0f> 0b 90 e9 c1 89 d0 01 e8 6a 58 e1 00 e8 15 fb 4d 00 e9 1d 8c d0 [ 1517.776077][T20001] RSP: 0018:ffffc9000a0ef030 EFLAGS: 00010282 [ 1517.782191][T20001] RAX: 000000000000001f RBX: ffff888035194100 RCX: 0000000000000000 [ 1517.790588][T20001] RDX: 000000000000001f RSI: ffffffff81e7aae9 RDI: fffff5200141ddf7 [ 1517.798574][T20001] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1517.806960][T20001] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1517.814979][T20001] R13: ffff8880571ea000 R14: ffff8880571ea0e0 R15: 0000000000000000 [ 1517.823077][T20001] FS: 0000000000000000(0000) GS:ffff88812443f000(0000) knlGS:0000000000000000 [ 1517.832033][T20001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1517.838843][T20001] CR2: 00007f0eed7e7158 CR3: 000000001d388000 CR4: 0000000000350ef0 [ 1517.846865][T20001] Call Trace: [ 1517.850143][T20001] [ 1517.853077][T20001] ? _raw_spin_unlock+0x28/0x50 [ 1517.858001][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.863659][T20001] ? hfs_bnode_put+0x208/0x480 [ 1517.868481][T20001] hfs_bmap_alloc+0x5a7/0x6b0 [ 1517.873187][T20001] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1517.878600][T20001] ? __asan_memcpy+0x3c/0x60 [ 1517.883213][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.888956][T20001] ? hfs_bnode_read.part.0+0x298/0x330 [ 1517.894455][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.900154][T20001] ? folio_mark_accessed+0xf3/0x1040 [ 1517.905474][T20001] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1517.911276][T20001] ? rcu_is_watching+0x12/0xc0 [ 1517.916063][T20001] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1517.922465][T20001] ? do_raw_spin_unlock+0x145/0x1e0 [ 1517.927697][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.933398][T20001] ? _raw_spin_unlock+0x28/0x50 [ 1517.938284][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.944159][T20001] ? hfs_bnode_put+0x208/0x480 [ 1517.948972][T20001] hfs_brec_insert+0x8ba/0xc20 [ 1517.953783][T20001] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1517.959090][T20001] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1517.964223][T20001] __hfs_ext_write_extent+0x3ef/0x510 [ 1517.969618][T20001] ? hfs_find_init+0x273/0x330 [ 1517.974451][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.980120][T20001] hfs_ext_write_extent+0x1b7/0x200 [ 1517.985378][T20001] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1517.991129][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1517.996816][T20001] ? mpage_writepages+0x177/0x1e0 [ 1518.001878][T20001] ? __pfx_mpage_writepages+0x10/0x10 [ 1518.007347][T20001] hfs_write_inode+0xce/0xab0 [ 1518.012057][T20001] ? __pfx_hfs_write_inode+0x10/0x10 [ 1518.017420][T20001] ? __lock_acquire+0x4a5/0x2630 [ 1518.022425][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1518.028322][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1518.034194][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.039952][T20001] __writeback_single_inode+0xd00/0x13c0 [ 1518.045629][T20001] ? __pfx___writeback_single_inode+0x10/0x10 [ 1518.051781][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.057684][T20001] ? do_raw_spin_unlock+0x145/0x1e0 [ 1518.062914][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.068624][T20001] writeback_sb_inodes+0x766/0x1c70 [ 1518.073880][T20001] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1518.079614][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.085279][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.090105][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.095794][T20001] ? queue_io+0x287/0x550 [ 1518.100229][T20001] wb_writeback+0x1c0/0xbe0 [ 1518.104763][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.110524][T20001] ? __pfx_wb_writeback+0x10/0x10 [ 1518.115583][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.121267][T20001] ? mark_held_locks+0x40/0x70 [ 1518.126069][T20001] ? _raw_spin_unlock_irq+0x23/0x50 [ 1518.131314][T20001] wb_workfn+0x142/0xc00 [ 1518.135644][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.141304][T20001] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1518.147222][T20001] ? __pfx_wb_workfn+0x10/0x10 [ 1518.152020][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.157715][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.163606][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.169308][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.174109][T20001] process_one_work+0xa23/0x19a0 [ 1518.179130][T20001] ? __pfx_process_one_work+0x10/0x10 [ 1518.184520][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.190224][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.195990][T20001] worker_thread+0x5ef/0xe50 [ 1518.200676][T20001] ? kthread+0x13a/0x450 [ 1518.204940][T20001] ? __pfx_worker_thread+0x10/0x10 [ 1518.210138][T20001] kthread+0x370/0x450 [ 1518.214230][T20001] ? __pfx_kthread+0x10/0x10 [ 1518.219102][T20001] ret_from_fork+0x754/0xd80 [ 1518.223727][T20001] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.228948][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.234628][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.239489][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.245162][T20001] ? __switch_to+0x7b4/0x1120 [ 1518.249919][T20001] ? __pfx_kthread+0x10/0x10 [ 1518.254567][T20001] ret_from_fork_asm+0x1a/0x30 [ 1518.259400][T20001] [ 1518.262508][T20001] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1518.269814][T20001] CPU: 1 UID: 0 PID: 20001 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1518.279484][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1518.289547][T20001] Workqueue: writeback wb_workfn (flush-7:3) [ 1518.295568][T20001] Call Trace: [ 1518.298843][T20001] [ 1518.301770][T20001] dump_stack_lvl+0x100/0x190 [ 1518.306474][T20001] vpanic+0x552/0x970 [ 1518.310464][T20001] ? __pfx_vpanic+0x10/0x10 [ 1518.314973][T20001] ? lock_release+0x263/0x320 [ 1518.319695][T20001] panic+0xd1/0xe0 [ 1518.323426][T20001] ? __pfx_panic+0x10/0x10 [ 1518.327857][T20001] ? check_panic_on_warn+0x1f/0x90 [ 1518.333003][T20001] check_panic_on_warn.cold+0x19/0x34 [ 1518.338384][T20001] ? hfs_bnode_create.cold+0x41/0x49 [ 1518.343680][T20001] __warn.cold+0x191/0x348 [ 1518.348107][T20001] __report_bug+0x296/0x3d0 [ 1518.352635][T20001] ? hfs_bnode_create.cold+0x41/0x49 [ 1518.357941][T20001] ? __pfx___report_bug+0x10/0x10 [ 1518.363161][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.368847][T20001] ? irq_work_queue+0xce/0x100 [ 1518.373637][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.379284][T20001] ? __wake_up_klogd+0xe2/0x140 [ 1518.384143][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.389789][T20001] ? vprintk_emit+0x1c9/0x6b0 [ 1518.394482][T20001] ? __pfx_vprintk_emit+0x10/0x10 [ 1518.399523][T20001] ? hfs_bnode_create.cold+0x41/0x49 [ 1518.404819][T20001] report_bug+0xb2/0x220 [ 1518.409085][T20001] ? hfs_bnode_create.cold+0x41/0x49 [ 1518.414380][T20001] handle_bug+0x16a/0x2a0 [ 1518.418720][T20001] exc_invalid_op+0x17/0x50 [ 1518.423233][T20001] asm_exc_invalid_op+0x1a/0x20 [ 1518.428092][T20001] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1518.434000][T20001] Code: 0d 99 6a 0a e9 bf 86 d0 01 e8 93 58 e1 00 4c 89 f7 e8 fb 98 6a 0a e8 86 58 e1 00 89 ee 48 c7 c7 00 7c d1 8b e8 e8 e3 fa ff 90 <0f> 0b 90 e9 c1 89 d0 01 e8 6a 58 e1 00 e8 15 fb 4d 00 e9 1d 8c d0 [ 1518.453618][T20001] RSP: 0018:ffffc9000a0ef030 EFLAGS: 00010282 [ 1518.459697][T20001] RAX: 000000000000001f RBX: ffff888035194100 RCX: 0000000000000000 [ 1518.467669][T20001] RDX: 000000000000001f RSI: ffffffff81e7aae9 RDI: fffff5200141ddf7 [ 1518.475728][T20001] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1518.483698][T20001] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1518.491668][T20001] R13: ffff8880571ea000 R14: ffff8880571ea0e0 R15: 0000000000000000 [ 1518.499652][T20001] ? vprintk_emit+0x1c9/0x6b0 [ 1518.504351][T20001] ? _raw_spin_unlock+0x28/0x50 [ 1518.509226][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.514878][T20001] ? hfs_bnode_put+0x208/0x480 [ 1518.519673][T20001] hfs_bmap_alloc+0x5a7/0x6b0 [ 1518.524361][T20001] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1518.529564][T20001] ? __asan_memcpy+0x3c/0x60 [ 1518.534184][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.539855][T20001] ? hfs_bnode_read.part.0+0x298/0x330 [ 1518.545343][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.550990][T20001] ? folio_mark_accessed+0xf3/0x1040 [ 1518.556301][T20001] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1518.562026][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.566803][T20001] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1518.573143][T20001] ? do_raw_spin_unlock+0x145/0x1e0 [ 1518.578353][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.584001][T20001] ? _raw_spin_unlock+0x28/0x50 [ 1518.588872][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.594520][T20001] ? hfs_bnode_put+0x208/0x480 [ 1518.599324][T20001] hfs_brec_insert+0x8ba/0xc20 [ 1518.604103][T20001] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1518.609403][T20001] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1518.614439][T20001] __hfs_ext_write_extent+0x3ef/0x510 [ 1518.619831][T20001] ? hfs_find_init+0x273/0x330 [ 1518.624616][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.630272][T20001] hfs_ext_write_extent+0x1b7/0x200 [ 1518.635490][T20001] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1518.641226][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.646878][T20001] ? mpage_writepages+0x177/0x1e0 [ 1518.651927][T20001] ? __pfx_mpage_writepages+0x10/0x10 [ 1518.657324][T20001] hfs_write_inode+0xce/0xab0 [ 1518.662031][T20001] ? __pfx_hfs_write_inode+0x10/0x10 [ 1518.667333][T20001] ? __lock_acquire+0x4a5/0x2630 [ 1518.672309][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1518.678133][T20001] ? __writeback_single_inode+0x454/0x13c0 [ 1518.683954][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.689613][T20001] __writeback_single_inode+0xd00/0x13c0 [ 1518.695267][T20001] ? __pfx___writeback_single_inode+0x10/0x10 [ 1518.701350][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.706998][T20001] ? do_raw_spin_unlock+0x145/0x1e0 [ 1518.712244][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.717896][T20001] writeback_sb_inodes+0x766/0x1c70 [ 1518.723124][T20001] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1518.728804][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.734454][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.739245][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.744896][T20001] ? queue_io+0x287/0x550 [ 1518.749238][T20001] wb_writeback+0x1c0/0xbe0 [ 1518.753758][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.759415][T20001] ? __pfx_wb_writeback+0x10/0x10 [ 1518.764460][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.770109][T20001] ? mark_held_locks+0x40/0x70 [ 1518.774903][T20001] ? _raw_spin_unlock_irq+0x23/0x50 [ 1518.780130][T20001] wb_workfn+0x142/0xc00 [ 1518.784395][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.790044][T20001] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1518.795875][T20001] ? __pfx_wb_workfn+0x10/0x10 [ 1518.800661][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.806314][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.811965][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.817617][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.822417][T20001] process_one_work+0xa23/0x19a0 [ 1518.827372][T20001] ? __pfx_process_one_work+0x10/0x10 [ 1518.832751][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.838408][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.844057][T20001] worker_thread+0x5ef/0xe50 [ 1518.848674][T20001] ? kthread+0x13a/0x450 [ 1518.852917][T20001] ? __pfx_worker_thread+0x10/0x10 [ 1518.858032][T20001] kthread+0x370/0x450 [ 1518.862103][T20001] ? __pfx_kthread+0x10/0x10 [ 1518.866726][T20001] ret_from_fork+0x754/0xd80 [ 1518.871325][T20001] ? __pfx_ret_from_fork+0x10/0x10 [ 1518.876442][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.882091][T20001] ? rcu_is_watching+0x12/0xc0 [ 1518.886870][T20001] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1518.892519][T20001] ? __switch_to+0x7b4/0x1120 [ 1518.897210][T20001] ? __pfx_kthread+0x10/0x10 [ 1518.901830][T20001] ret_from_fork_asm+0x1a/0x30 [ 1518.906623][T20001] [ 1518.909937][T20001] Kernel Offset: disabled [ 1518.914257][T20001] Rebooting in 86400 seconds..