last executing test programs: 1m24.830045877s ago: executing program 3 (id=11440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.522296687s ago: executing program 3 (id=11445): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 1m24.258617438s ago: executing program 3 (id=11449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="ed31e3ba64c91b87e0082e61503e", 0x0, 0x5a193ee3, 0x0, 0x29, 0x0, &(0x7f0000000080)="1454498ce2f0e8233ba5e8a441249d99955b5a7f223eb1ef3abb1a34bddb372a0b97ad07c543e02496", 0x0, 0x4}, 0x50) 1m23.918286304s ago: executing program 3 (id=11454): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m23.23021932s ago: executing program 3 (id=11462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) 1m22.438101237s ago: executing program 3 (id=11474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m21.907751474s ago: executing program 32 (id=11474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.149116196s ago: executing program 6 (id=12391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffff000}]}, 0x34}}, 0x0) 3.831431619s ago: executing program 6 (id=12397): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000c06, &(0x7f0000007f00)={[{@errors_continue}, {@discard_size={'discard', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_continue}, {@discard}, {@errors_remount}, {@nodiscard}, {@usrquota}, {}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@usrquota}]}, 0x24, 0x6303, &(0x7f0000001bc0)="$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") mount$9p_unix(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x2000002, 0x0) 3.566354731s ago: executing program 2 (id=12401): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x5, 0x136, [0x200000000640, 0x0, 0x0, 0x2000000007c6, 0x200000000a12], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x8, 0x88e5, 'virt_wifi0\x00', 'wg1\x00', 'macvlan1\x00', 'veth1_macvtap\x00', @multicast, [0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}, {0x0, '\x00', 0x1, 0x2}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x1ae) 3.291515546s ago: executing program 2 (id=12406): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x10, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) 3.152836704s ago: executing program 5 (id=12409): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x21) unlink(&(0x7f0000000040)='./file0\x00') 3.038558747s ago: executing program 2 (id=12411): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000140)="3ad9", 0x2}], 0x1) 2.8333667s ago: executing program 5 (id=12415): prctl$PR_SET_FPEMU(0xa, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000acbc5840ba0d0030ea26000000010902120001000000000904"], 0x0) 2.791962019s ago: executing program 2 (id=12416): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x8101, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x60}}, 0x0) 2.494192819s ago: executing program 2 (id=12420): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8e6, 0x3a, '\\xJ3\x00\xe2\x03\x82f\xc0I\x8cf\xaa\v`?7JM\x9f\xfdv\xd4!M ts\xb1\x11\xde\x10\xa2x\xcc\xcfp\xfa0\x9e\x0e\xbev\b\x12RP\xb1}\xeb\xa4\xce\xa4w\xc8\x16\x1a\xd3\x1a\xdf\xb5l\xdf\x95C\x12\x01\x01\x10\x8f\xd8\x8a\xbd0\nz\xe4\xaa\xd8\x8bk\n\x06u\r\x9c\x19S\xca\x15,Y>wCd\xf7\x03\x103+\xbc\aNq\x9fV7\xfd\xdf\xd4\xc1\xab=8\xc0\x96;\x1a\"\v\xe3\xac@CU\xca\r\xd76\t\x95\x03\x1e\xb6\xf0\xa2\xc3\xb4\x01?\xc3\xe3\xfd\x81s\x06\xe7\xe0U\xb2\x8a\xa1\xeb\xaf\xed\xe6\xa7.\"\xbe\x1e\x97\xed\xf3\xed\x8d\xb3k\x91\n#\x19YO\xac\xd7;D>~#\xe0\xf4\x0f\x1e\xecI\xd71\xcf\xbc\xa3\x00\x04\r`s\xa4\x1c}\x85\xd1hR\x1d\x11\xfb\x1e\xba', 0x3a, '\x00\x00w\xd7\xbf\x81\x00\x00\x00\x00\x00\x00:\"mN\xff\b\xed\x99\x94\x0f>\xed\xe9\xcbj\x87\xb6\x02\x18\xbb\xd8\xf1\x0e5\xfa\a\x8db\x01\x00\xe1\xc2\xdc\nUQ\xe5\xf3\x14\xef.\x869$\xf7\x1c\xfd\xd2\xf2\x84T`\xc8\xe8+\xd2]\xf9^iFV\xc5E\x00\x1cO\x16\xc8.\xc9\xa7\x13\x1b2\x04\xf4\x13\xc6\xdb\xdd@\x9d\x18\x90\xff\xf9b\x1e@f\x9e\x0e\xc2A\x80\x90o5f\x8aV\xdf*\xce\xfc\x80\x91Es\xff~\xc0\xa8P|\x1c9\xdbW\a\xc8i\x81\xf2H\xeb\xf2\x1f\x1d\a\xf7Q\xf1\xd1\f\x9fM\x99\x03\xba\xf0\xd5\x9c~\x05\xe2\x80\x15\xc2\x84 6\xd3Y\xe4\xd9\x10\x01B\xe3JJCMd\xc4VG O\\\x02\x80*c\x97\xe4\xaa', 0x3a, './bus'}, 0x1b7) 2.397162515s ago: executing program 4 (id=12422): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x51, 0x5, 0x100, 0x1, @remote, @local, 0x7800, 0x40, 0x6, 0xd}}) 2.233629304s ago: executing program 2 (id=12424): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") 2.068836926s ago: executing program 4 (id=12425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 2.048696791s ago: executing program 6 (id=12426): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) 2.037584145s ago: executing program 0 (id=12427): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0x80, 0x16, @MIDI_NOTEON=@special, 0xee, 0x8}) 2.036759669s ago: executing program 1 (id=12428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) 1.686554282s ago: executing program 6 (id=12429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}]}}}]}, 0x44}}, 0x0) 1.685413469s ago: executing program 0 (id=12441): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.684868055s ago: executing program 1 (id=12430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 1.474769817s ago: executing program 1 (id=12431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) 1.392599178s ago: executing program 4 (id=12432): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) iopl(0x9) 1.230957604s ago: executing program 0 (id=12433): r0 = socket(0x28, 0x5, 0x0) listen(r0, 0x1) 1.114191331s ago: executing program 5 (id=12434): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0x8}}}}}, 0x0) 1.07763228s ago: executing program 1 (id=12435): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@remote, @local, 0x1d, 0x19}}) 1.050487071s ago: executing program 4 (id=12436): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x70) 962.220466ms ago: executing program 0 (id=12437): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x28100) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)) 799.318326ms ago: executing program 5 (id=12438): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x80, 0x2, 0xd, 0x10, 0x3eb, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 608.834205ms ago: executing program 6 (id=12439): r0 = syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x80000) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000000)={0x3, "fa90e4e7556f27d4fd5fc49032f2e76d8d9c91266729c8fe6cb868c4c44cbecf"}) 483.268824ms ago: executing program 0 (id=12440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x11020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0xff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 412.220847ms ago: executing program 1 (id=12442): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 373.968485ms ago: executing program 4 (id=12443): r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 234.363089ms ago: executing program 0 (id=12444): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 234.253997ms ago: executing program 6 (id=12445): timer_create(0x0, &(0x7f0000000f00)={0x0, 0x38, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000f40)=0x0) timer_settime(r0, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0)) 234.143373ms ago: executing program 5 (id=12446): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 105.949837ms ago: executing program 4 (id=12447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 48.106484ms ago: executing program 1 (id=12448): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0xc0686611) 0s ago: executing program 5 (id=12449): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001100034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) kernel console output (not intermixed with test programs): oop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1120.350688][ T7322] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1120.902786][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1121.043936][ T7359] netlink: 'syz.4.10795': attribute type 11 has an invalid length. [ 1121.559258][ T7385] loop2: detected capacity change from 0 to 4096 [ 1121.629318][ T6219] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1121.684561][ T7396] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1121.819862][ T6219] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1121.844764][ T6219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.885602][ T6219] usb 5-1: Product: syz [ 1121.890547][ T6219] usb 5-1: Manufacturer: syz [ 1121.895322][ T6219] usb 5-1: SerialNumber: syz [ 1121.909323][ T7398] loop3: detected capacity change from 0 to 1764 [ 1121.923512][ T6219] usb 5-1: config 0 descriptor?? [ 1122.149069][ T6050] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1122.259280][ T6050] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1122.372327][ T7426] SET target dimension over the limit! [ 1122.446122][ T6219] usb 5-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1122.479303][ T6219] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1122.511676][ T6219] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 1122.592956][ T6219] usb 5-1: USB disconnect, device number 25 [ 1123.772218][ T7493] netlink: 'syz.5.10833': attribute type 4 has an invalid length. [ 1123.814460][ T7493] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10833'. [ 1123.835375][ T7435] loop3: detected capacity change from 0 to 32768 [ 1123.863651][ T7493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1123.881279][ T7499] loop4: detected capacity change from 0 to 512 [ 1123.931200][ T7435] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1123.967907][ T7499] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.10835: bad orphan inode 13 [ 1123.991300][ T7499] loop4: lost filesystem error report for type 5 error -117 [ 1123.991759][ T7499] ext4_test_bit(bit=12, block=4) = 1 [ 1124.004434][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1124.004468][ C1] EXT4-fs (loop4): initial error at time 2000000163: ext4_orphan_get:1417 [ 1124.004512][ C1] EXT4-fs (loop4): last error at time 2000000163: ext4_orphan_get:1417 [ 1124.054303][ T7499] is_bad_inode(inode)=0 [ 1124.117374][ T7499] NEXT_ORPHAN(inode)=0 [ 1124.149988][ T7499] max_ino=32 [ 1124.160475][ T7499] i_nlink=1 [ 1124.190406][ T7499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.198290][ T7435] XFS (loop3): Ending clean mount [ 1124.248182][ T7435] XFS (loop3): Quotacheck needed: Please wait. [ 1124.372017][ T7499] EXT4-fs warning (device loop4): dx_probe:812: inode #2: comm syz.4.10835: Hash code is SIPHASH, but hash not in dirent [ 1124.396284][ T7499] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.10835: Corrupt directory, running e2fsck is recommended [ 1124.450717][ T7435] XFS (loop3): Quotacheck: Done. [ 1124.456775][ T7499] EXT4-fs warning (device loop4): dx_probe:812: inode #2: comm syz.4.10835: Hash code is SIPHASH, but hash not in dirent [ 1124.487444][ T7499] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.10835: Corrupt directory, running e2fsck is recommended [ 1124.557319][ T7499] EXT4-fs error (device loop4): ext4_find_dest_de:2049: inode #2: block 13: comm syz.4.10835: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 1124.751425][ T6050] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1124.882713][ T7551] netlink: 'syz.0.10847': attribute type 11 has an invalid length. [ 1124.902848][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.931871][ T7551] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.10847'. [ 1125.338738][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10852'. [ 1125.811589][ T7594] netlink: 'syz.5.10858': attribute type 2 has an invalid length. [ 1125.847212][ T7594] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10858'. [ 1126.178750][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10865'. [ 1126.747121][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10874'. [ 1126.988704][ T7588] loop0: detected capacity change from 0 to 32768 [ 1127.060856][ T7588] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1127.211222][ T7588] XFS (loop0): Ending clean mount [ 1127.584824][ T6041] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1127.915120][ T7710] loop2: detected capacity change from 0 to 256 [ 1127.922982][ T7710] exfat: Deprecated parameter 'utf8' [ 1127.998127][ T7710] exfat: Deprecated parameter 'utf8' [ 1128.030312][ T7710] exfat: Deprecated parameter 'utf8' [ 1128.133762][ T7710] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1128.284227][ T7732] loop3: detected capacity change from 0 to 128 [ 1128.305445][ T7710] exfat: Deprecated parameter 'utf8' [ 1128.332593][ T7710] exfat: Deprecated parameter 'utf8' [ 1128.338108][ T7710] exfat: Deprecated parameter 'utf8' [ 1128.798152][ T7755] loop3: detected capacity change from 0 to 64 [ 1128.860217][ T7755] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1129.277329][ T7779] nbd: illegal input index -1495182229 [ 1129.337928][ T7784] loop2: detected capacity change from 0 to 8 [ 1129.440356][ T7784] SQUASHFS error: Unable to read inode 0xa7 [ 1130.016264][ T6098] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1130.224512][ T6098] usb 2-1: Using ep0 maxpacket: 8 [ 1130.241928][ T7854] loop5: detected capacity change from 0 to 64 [ 1130.273912][ T6098] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1130.316053][ T6098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.359868][ T6098] usb 2-1: Product: syz [ 1130.390726][ T6098] usb 2-1: Manufacturer: syz [ 1130.406855][ T6098] usb 2-1: SerialNumber: syz [ 1130.466713][ T6098] usb 2-1: config 0 descriptor?? [ 1130.573956][ T6098] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1130.651919][ T7879] tmpfs: Bad value for 'nr_inodes' [ 1130.969069][ T6098] gspca_sonixj: reg_r err -71 [ 1130.973548][ T7893] netlink: 'syz.0.10932': attribute type 8 has an invalid length. [ 1130.987620][ T6098] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1131.066738][ T6098] usb 2-1: USB disconnect, device number 20 [ 1131.161697][ T7902] loop4: detected capacity change from 0 to 64 [ 1132.177090][ T7961] loop2: detected capacity change from 0 to 1764 [ 1132.443282][ T7985] loop3: detected capacity change from 0 to 1024 [ 1132.486327][ T6219] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1132.544655][ T30] audit: type=1326 audit(2000000171.719:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1132.626013][ T30] audit: type=1326 audit(2000000171.719:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1132.689324][ T6219] usb 2-1: Using ep0 maxpacket: 32 [ 1132.730036][ T6219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1132.750574][ T30] audit: type=1326 audit(2000000171.719:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1132.819939][ T6219] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1132.856762][ T6219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.874652][ T30] audit: type=1326 audit(2000000171.738:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1132.907146][ T6219] usb 2-1: Product: syz [ 1132.911456][ T6219] usb 2-1: Manufacturer: syz [ 1132.952829][ T6219] usb 2-1: SerialNumber: syz [ 1132.960137][ T8010] netlink: 'syz.0.10960': attribute type 4 has an invalid length. [ 1132.997726][ T30] audit: type=1326 audit(2000000171.738:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1133.097846][ T30] audit: type=1326 audit(2000000171.738:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1133.214985][ T30] audit: type=1326 audit(2000000171.738:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1133.287838][ T6219] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1133.323563][ T30] audit: type=1326 audit(2000000171.738:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1133.362296][ T6219] usb 2-1: USB disconnect, device number 21 [ 1133.422964][ T30] audit: type=1326 audit(2000000171.738:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.5.10958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1133.731926][ T8053] Non-string source [ 1134.009049][ T8065] : entered promiscuous mode [ 1134.189379][ T8083] netlink: 'syz.3.10979': attribute type 8 has an invalid length. [ 1134.591403][ T6219] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1134.805287][ T6219] usb 1-1: Using ep0 maxpacket: 8 [ 1134.829061][ T6219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.864041][ T6219] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=a1.8c [ 1134.933583][ T6219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.979201][ T6219] usb 1-1: config 0 descriptor?? [ 1135.016077][ T6219] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1135.046661][ T6219] gspca_stv06xx: st6422 sensor detected [ 1135.073246][ T8130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10991'. [ 1135.222454][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10995'. [ 1135.319234][ T8145] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.10996'. [ 1135.575182][ T6219] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 1135.580257][ T8158] loop3: detected capacity change from 0 to 512 [ 1135.607090][ T6219] usb 1-1: USB disconnect, device number 25 [ 1135.652987][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.11000: inode has both inline data and extents flags [ 1135.688174][ T8158] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1135.688609][ T8158] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.11000: couldn't read orphan inode 15 (err -117) [ 1135.697861][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1135.697894][ C0] EXT4-fs (loop3): initial error at time 2000000174: ext4_orphan_get:1391: inode 15 [ 1135.697947][ C0] EXT4-fs (loop3): last error at time 2000000174: ext4_orphan_get:1391: inode 15 [ 1135.763631][ T8158] loop3: lost filesystem error report for type 5 error -117 [ 1135.780852][ T8175] loop4: detected capacity change from 0 to 1024 [ 1135.797890][ T8158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.115943][ T589] hfsplus: b-tree write err: -5, ino 25 [ 1136.145577][ T589] hfsplus: b-tree write err: -5, ino 4 [ 1136.151304][ T589] hfsplus: b-tree write err: -5, ino 2 [ 1136.218606][ T6050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.415488][ T8202] loop1: detected capacity change from 0 to 2048 [ 1136.477665][ T8202] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1137.310092][ T8252] loop1: detected capacity change from 0 to 2048 [ 1137.345812][ T8252] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1137.428975][ T8263] CIFS mount error: No usable UNC path provided in device string! [ 1137.428975][ T8263] [ 1137.457885][ T8265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1137.498089][ T8263] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1137.594709][ T8252] NILFS (loop1): the device already has a read/write mount. [ 1137.980884][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11032'. [ 1138.072203][ T8282] loop2: detected capacity change from 0 to 4096 [ 1138.122745][ T8282] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1138.302507][ T8282] ntfs3(loop2): ino=19, mi_enum_attr [ 1138.307885][ T8282] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1138.486793][ T8282] ntfs3(loop2): failed to convert "c46c" to koi8-r [ 1138.544060][ T8282] ntfs3(loop2): ino=20, mi_enum_attr [ 1139.697588][ T8382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11058'. [ 1139.725634][ T8385] sit0: entered promiscuous mode [ 1139.771331][ T8385] netlink: 'syz.2.11060': attribute type 1 has an invalid length. [ 1139.780626][ T8387] loop4: detected capacity change from 0 to 512 [ 1139.793817][ T8385] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11060'. [ 1139.844984][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.966573][ T8387] ext4 filesystem being mounted at /1826/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1140.112280][ T8387] EXT4-fs error (device loop4): ext4_xattr_block_list:766: inode #15: comm syz.4.11059: corrupted xattr block 13: invalid checksum [ 1140.541599][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.644311][ T8423] loop2: detected capacity change from 0 to 16 [ 1140.673752][ T8425] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1140.694902][ T8423] cramfs: root is not a directory [ 1141.250644][ T8460] loop5: detected capacity change from 0 to 256 [ 1141.305033][ T8460] exfat: Deprecated parameter 'utf8' [ 1141.331987][ T8460] exfat: Deprecated parameter 'namecase' [ 1141.346943][ T8462] loop4: detected capacity change from 0 to 2048 [ 1141.409985][ T8460] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 1141.429886][ T8462] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1141.550270][ T8476] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1141.646985][ T8462] NILFS (loop4): the device already has a read/write mount. [ 1141.726771][ T8480] netlink: 'syz.0.11083': attribute type 2 has an invalid length. [ 1142.200416][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.263133][ T8513] netlink: 260 bytes leftover after parsing attributes in process `syz.5.11092'. [ 1142.394244][ T8521] loop1: detected capacity change from 0 to 16 [ 1142.463290][ T8521] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1142.606585][ T8530] netlink: 'syz.4.11095': attribute type 11 has an invalid length. [ 1142.649918][ T8530] netlink: 'syz.4.11095': attribute type 11 has an invalid length. [ 1142.657877][ T8530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11095'. [ 1142.993768][ T8551] loop2: detected capacity change from 0 to 2048 [ 1143.046797][ T8551] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1143.135793][ T8568] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1143.226712][ T8551] NILFS (loop2): the device already has a read/write mount. [ 1143.790865][ T8597] usb usb9: usbfs: process 8597 (syz.4.11111) did not claim interface 0 before use [ 1144.032208][ T8610] loop1: detected capacity change from 0 to 16 [ 1144.061160][ T8610] erofs (device loop1): mounted with root inode @ nid 36. [ 1144.490695][ T8621] loop4: detected capacity change from 0 to 4096 [ 1144.555591][ T8621] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1144.661144][ T8621] ntfs3(loop4): ino=19, mi_enum_attr [ 1144.698835][ T8621] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1144.868806][ T8621] ntfs3(loop4): failed to convert "c46c" to koi8-r [ 1144.933279][ T8621] ntfs3(loop4): ino=20, mi_enum_attr [ 1145.155356][ T8658] loop0: detected capacity change from 0 to 4096 [ 1145.259904][ T8658] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1145.891015][ T8706] loop2: detected capacity change from 0 to 128 [ 1146.037228][ T6219] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1146.092424][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11142'. [ 1146.194491][ T8719] loop4: detected capacity change from 0 to 8 [ 1146.218573][ T6219] usb 6-1: Using ep0 maxpacket: 16 [ 1146.237536][ T6219] usb 6-1: config 1 has an invalid interface number: 58 but max is 0 [ 1146.260692][ T6219] usb 6-1: config 1 has no interface number 0 [ 1146.300316][ T6219] usb 6-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 1146.342932][ T6219] usb 6-1: config 1 interface 58 altsetting 6 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1146.389387][ T6219] usb 6-1: config 1 interface 58 altsetting 6 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1146.435276][ T6219] usb 6-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8D has invalid maxpacket 0 [ 1146.478160][ T6219] usb 6-1: config 1 interface 58 has no altsetting 0 [ 1146.510450][ T6219] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 1146.538779][ T6219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.579520][ T6219] usb 6-1: Product: syz [ 1146.605496][ T6219] usb 6-1: Manufacturer: syz [ 1146.619935][ T6219] usb 6-1: SerialNumber: syz [ 1146.662371][ T8694] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1146.747036][ T8745] netlink: 'syz.2.11149': attribute type 11 has an invalid length. [ 1146.791232][ T8734] loop0: detected capacity change from 0 to 4096 [ 1146.838083][ T8745] netlink: 'syz.2.11149': attribute type 11 has an invalid length. [ 1146.846304][ T8745] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11149'. [ 1146.880291][ T8734] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1147.004592][ T6219] kvaser_usb 6-1:1.58: error -EPROTO: Cannot get software info [ 1147.042381][ T6219] kvaser_usb 6-1:1.58: probe with driver kvaser_usb failed with error -71 [ 1147.055010][ T8734] ntfs3(loop0): ino=1a, mi_enum_attr [ 1147.084105][ T8734] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1147.114655][ T8734] ntfs3(loop0): ino=1a, mi_enum_attr [ 1147.138053][ T8734] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1147.147141][ T6219] usb 6-1: USB disconnect, device number 15 [ 1147.812454][ T8803] netlink: 'syz.4.11161': attribute type 1 has an invalid length. [ 1148.195881][ T8827] netlink: 'syz.1.11166': attribute type 1 has an invalid length. [ 1148.251994][ T8827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.475541][ T8844] netlink: 'syz.0.11171': attribute type 11 has an invalid length. [ 1148.587653][ T8844] netlink: 'syz.0.11171': attribute type 11 has an invalid length. [ 1148.637735][ T8844] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11171'. [ 1148.675915][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11175'. [ 1148.710705][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11175'. [ 1149.843539][ T8922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11192'. [ 1149.876380][ T8922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11192'. [ 1149.923102][ T8922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.11192'. [ 1150.561328][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11202'. [ 1150.817507][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11204'. [ 1150.877409][ T8972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11204'. [ 1150.970304][ T8981] loop4: detected capacity change from 0 to 128 [ 1151.120543][ T8915] loop1: detected capacity change from 0 to 32768 [ 1151.147730][ T8915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11189 (8915) [ 1151.274642][ T8915] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1151.337796][ T8915] BTRFS info (device loop1): using sha256 checksum algorithm [ 1151.641977][ T9024] loop0: detected capacity change from 0 to 128 [ 1151.652937][ T8915] BTRFS info (device loop1): enabling ssd optimizations [ 1151.662995][ T8915] BTRFS info (device loop1): turning on async discard [ 1151.678276][ T8915] BTRFS info (device loop1): enabling free space tree [ 1151.683444][ T9010] loop3: detected capacity change from 0 to 2048 [ 1151.759849][ T9010] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1151.860045][ T9010] UDF-fs: unknown compression code (0) [ 1152.181217][ T6048] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1152.757324][ T9073] netlink: 660 bytes leftover after parsing attributes in process `syz.3.11227'. [ 1153.522186][ T9099] loop5: detected capacity change from 0 to 4096 [ 1153.600251][ T9099] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1153.697700][ T9099] ntfs3(loop5): ino=1a, mi_enum_attr [ 1153.740733][ T9099] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1153.776831][ T9099] ntfs3(loop5): ino=1a, mi_enum_attr [ 1153.823298][ T9099] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1154.331198][ T9161] __nla_validate_parse: 1 callbacks suppressed [ 1154.331229][ T9161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1154.603212][ T9192] loop2: detected capacity change from 0 to 64 [ 1154.654079][ T9193] loop4: detected capacity change from 0 to 1024 [ 1154.708237][ T9192] syz.2.11252: attempt to access beyond end of device [ 1154.708237][ T9192] loop2: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1154.812152][ T9193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1154.852435][ T9192] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 1154.931451][ T9193] loop4: Can't mount, would change RO state [ 1155.179982][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.198719][ T9225] loop3: detected capacity change from 0 to 16 [ 1155.254374][ T9225] erofs (device loop3): mounted with root inode @ nid 36. [ 1155.795806][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11264'. [ 1155.919232][ T9267] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1156.368096][ T9289] netlink: 'syz.0.11274': attribute type 1 has an invalid length. [ 1156.520555][ T9301] netlink: 'syz.4.11279': attribute type 2 has an invalid length. [ 1156.528445][ T9301] netlink: 'syz.4.11279': attribute type 1 has an invalid length. [ 1156.565947][ T9298] loop2: detected capacity change from 0 to 2048 [ 1156.605685][ T9301] netlink: 'syz.4.11279': attribute type 1 has an invalid length. [ 1156.632843][ T9298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1156.912437][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11282'. [ 1159.112780][ T9447] trusted_key: encrypted_key: keylen parameter is missing [ 1159.237097][ T9458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1159.588513][ T9477] netlink: 'syz.2.11335': attribute type 4 has an invalid length. [ 1159.939434][ T9498] Cannot find map_set index 135 as target [ 1160.081025][ T9508] loop4: detected capacity change from 0 to 64 [ 1160.187618][ T9512] netlink: 'syz.2.11347': attribute type 61 has an invalid length. [ 1160.373345][ T9522] loop0: detected capacity change from 0 to 64 [ 1160.876409][ T9552] usb usb9: usbfs: process 9552 (syz.2.11358) did not claim interface 0 before use [ 1161.276881][ T9569] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1161.332545][ T9569] overlayfs: missing 'lowerdir' [ 1161.399293][ T9581] loop5: detected capacity change from 0 to 128 [ 1161.509187][ T9581] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1161.619468][ T9581] ext4 filesystem being mounted at /1938/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.841513][ T9602] loop4: detected capacity change from 0 to 1024 [ 1161.907572][ T6047] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.125559][ T48] hfsplus: b-tree write err: -5, ino 25 [ 1162.146094][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1162.183715][ T48] hfsplus: b-tree write err: -5, ino 2 [ 1162.346836][ T9615] loop1: detected capacity change from 0 to 4096 [ 1162.364522][ T9615] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1162.727738][ T6098] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1162.727802][ T9653] netlink: 180 bytes leftover after parsing attributes in process `syz.5.11386'. [ 1162.910632][ T6098] usb 5-1: Using ep0 maxpacket: 16 [ 1162.920118][ T6219] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1162.939108][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 1162.994482][ T6098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 1163.047521][ T6098] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1163.080865][ T6098] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.083061][ T6219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.113921][ T6219] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1163.133424][ T6219] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1163.134214][ T6098] usb 5-1: Product: syz [ 1163.178382][ T6219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.184251][ T6098] usb 5-1: Manufacturer: syz [ 1163.204315][ T6098] usb 5-1: SerialNumber: syz [ 1163.211836][ T6219] usb 1-1: config 0 descriptor?? [ 1163.247142][ T6098] usb 5-1: config 0 descriptor?? [ 1163.290260][ T6098] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1163.315802][ T6220] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1163.333393][ T6098] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 1163.471923][ T9689] trusted_key: encrypted_key: hex blob is missing [ 1163.497457][ T6220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1163.529660][ T6220] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1163.539526][ T6220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1163.597273][ T6098] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1163.605288][ T6220] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1163.628380][ T6220] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1163.647043][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.667756][ T6220] usb 6-1: Product: syz [ 1163.675742][ T6220] usb 6-1: Manufacturer: syz [ 1163.676304][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11397'. [ 1163.689686][ T6220] usb 6-1: SerialNumber: syz [ 1163.699715][ T6219] Bluetooth: Can't get state to change to load configuration err [ 1163.722055][ T6098] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1163.724901][ T6219] Bluetooth: Loading sysconfig file failed [ 1163.737447][ T6220] usb 6-1: config 0 descriptor?? [ 1163.742109][ T6098] em28xx 5-1:0.0: board has no eeprom [ 1163.759697][ T6219] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 1163.763023][ T6220] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1163.789939][ T6219] usb 1-1: USB disconnect, device number 26 [ 1163.850344][ T6098] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1163.872864][ T6098] em28xx 5-1:0.0: dvb set to isoc mode. [ 1163.878492][ T6165] em28xx 5-1:0.0: Binding DVB extension [ 1163.916157][ T6098] usb 5-1: USB disconnect, device number 26 [ 1163.924034][ T6098] em28xx 5-1:0.0: Disconnecting em28xx [ 1163.964259][ T6165] em28xx 5-1:0.0: Registering input extension [ 1163.996165][ T6098] em28xx 5-1:0.0: Closing input extension [ 1164.105019][ T6220] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1164.150320][ T6098] em28xx 5-1:0.0: Freeing device [ 1164.220513][ T9725] loop2: detected capacity change from 0 to 4096 [ 1164.325740][ T9725] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1164.400533][ T9725] ntfs3(loop2): Failed to load $Extend (-22). [ 1164.428811][ T9725] ntfs3(loop2): Failed to initialize $Extend. [ 1164.437302][ T6220] usb 6-1: USB disconnect, device number 16 [ 1164.562172][ T30] audit: type=1800 audit(2000000201.664:288): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11399" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 1165.652552][ T9823] loop1: detected capacity change from 0 to 256 [ 1165.727717][ T30] audit: type=1400 audit(2000000202.769:289): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F pid=9826 comm="syz.2.11426" [ 1165.842086][ T9823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1165.858920][ T9833] loop3: detected capacity change from 0 to 64 [ 1165.925853][ T9833] Trying to free block not in datazone [ 1166.671603][ T9876] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1167.003552][ T9832] loop5: detected capacity change from 0 to 32768 [ 1167.061934][ T9832] JBD2: Ignoring recovery information on journal [ 1167.077544][ T9899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1167.248597][ T9832] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1167.555022][ T9921] loop3: detected capacity change from 0 to 128 [ 1167.603286][ T9921] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1167.612483][ T9911] loop1: detected capacity change from 0 to 4096 [ 1167.673272][ T9921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1167.751721][ T9911] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1167.773040][ T9921] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1167.785997][ T6047] ocfs2: Unmounting device (7,5) on (node local) [ 1167.837019][ T9921] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 1167.888259][ T9911] ntfs3(loop1): Failed to load $Extend (-22). [ 1167.921151][ T9911] ntfs3(loop1): Failed to initialize $Extend. [ 1168.060353][ T30] audit: type=1800 audit(2000000204.949:290): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11451" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 1168.115660][ T6050] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 1168.146086][ T6050] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 1168.428180][ T30] audit: type=1400 audit(2000000205.295:291): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9950 comm="syz.0.11465" [ 1168.818803][ T6165] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1168.930634][ T9986] IPv6: NLM_F_CREATE should be specified when creating new route [ 1169.011811][ T6165] usb 3-1: Using ep0 maxpacket: 8 [ 1169.034234][ T9989] loop0: detected capacity change from 0 to 16 [ 1169.042634][ T9989] erofs (device loop0): mounted with root inode @ nid 36. [ 1169.057436][ T6165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1169.102099][ T6165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.115804][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11475'. [ 1169.125690][ T6165] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1169.137977][ T6165] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1169.161655][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.173319][ T6165] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1169.207775][ T6165] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1169.234215][ T6165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.283492][ T6165] usb 3-1: config 0 descriptor?? [ 1169.310902][ T9963] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1169.337783][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.613346][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.877980][ T58] bridge0: port 1(netdevsim0) entered disabled state [ 1169.974705][ T6165] usb 3-1: USB disconnect, device number 125 [ 1169.991710][T15197] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 1170.017056][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1170.035327][ T58] bridge0: port 1(netdevsim0) entered disabled state [ 1170.049323][ T6052] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1170.094026][ T6052] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1170.103931][ T6052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1170.115223][ T6052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1170.125786][ T6052] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1170.142810][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.635932][ T6219] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1170.815011][ T58] bridge_slave_1: left allmulticast mode [ 1170.829024][ T6219] usb 6-1: Using ep0 maxpacket: 8 [ 1170.836570][ T58] bridge_slave_1: left promiscuous mode [ 1170.855238][ T6219] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1170.867885][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.895778][ T6219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.945379][ T6219] usb 6-1: Product: syz [ 1170.949619][ T6219] usb 6-1: Manufacturer: syz [ 1170.954243][ T6219] usb 6-1: SerialNumber: syz [ 1171.479939][ T6219] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1171.521749][ T6219] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 1171.566554][ T6219] usb 6-1: USB disconnect, device number 17 [ 1171.726042][T10112] loop0: detected capacity change from 0 to 32768 [ 1171.748204][T10112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11494 (10112) [ 1171.787790][T10112] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1171.816019][T10112] BTRFS info (device loop0): using sha256 checksum algorithm [ 1171.998161][T10162] loop1: detected capacity change from 0 to 256 [ 1172.001255][T10112] BTRFS info (device loop0): enabling ssd optimizations [ 1172.026152][T10162] exfat: Deprecated parameter 'namecase' [ 1172.031959][T10162] exfat: Deprecated parameter 'utf8' [ 1172.065167][T10112] BTRFS info (device loop0): turning on async discard [ 1172.081205][T10123] loop4: detected capacity change from 0 to 32768 [ 1172.103768][T10112] BTRFS info (device loop0): enabling free space tree [ 1172.133459][T10162] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1172.233565][T10123] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1172.324656][T10112] BTRFS error (device loop0): balance: invalid convert metadata profile dup [ 1172.420683][ T6052] Bluetooth: hci6: command tx timeout [ 1172.480375][ T6041] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1172.517963][T10123] XFS (loop4): Ending clean mount [ 1172.558890][T10123] XFS (loop4): Quotacheck needed: Please wait. [ 1172.631482][T10123] XFS (loop4): Quotacheck: Done. [ 1172.855791][ T6054] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1172.998008][T10208] loop5: detected capacity change from 0 to 64 [ 1173.158145][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11507'. [ 1173.349728][T10219] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1173.674573][T10235] xt_l2tp: wrong L2TP version: 0 [ 1174.223433][T10256] loop0: detected capacity change from 0 to 256 [ 1174.248767][T10256] exfat: Deprecated parameter 'utf8' [ 1174.256654][T10256] exfat: Deprecated parameter 'utf8' [ 1174.309917][T10256] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dfeff5, utbl_chksum : 0xe619d30d) [ 1174.398287][T10256] overlay: filesystem on ./file0 not supported [ 1174.599995][ T6125] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1174.644599][ T6052] Bluetooth: hci6: command tx timeout [ 1174.804970][ T6125] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1174.824272][ T6125] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1174.877672][ T6125] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1174.910359][ T6125] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1174.931192][ T6125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.950121][ T6125] usb 6-1: Product: syz [ 1174.964414][ T6125] usb 6-1: Manufacturer: syz [ 1174.969084][ T6125] usb 6-1: SerialNumber: syz [ 1174.975376][T10277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11525'. [ 1175.003118][T10254] loop1: detected capacity change from 0 to 32768 [ 1175.020602][ T6125] usb 6-1: config 0 descriptor?? [ 1175.028105][T10260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1175.035719][T10260] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1175.051370][ T6125] usb 6-1: ucan: probing device on interface #0 [ 1175.069271][T10254] JBD2: Ignoring recovery information on journal [ 1175.181096][T10254] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1175.220511][T10254] OCFS2: ERROR (device loop1): ocfs2_xattr_find_entry: corrupted xattr entries [ 1175.220599][T10254] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1175.243649][T10254] OCFS2: File system is now read-only. [ 1175.249317][T10254] (syz.1.11520,10254,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 1175.260717][T10254] (syz.1.11520,10254,0):ocfs2_mknod:338 ERROR: status = -117 [ 1175.270923][T10254] (syz.1.11520,10254,0):ocfs2_mknod:506 ERROR: status = -117 [ 1175.363186][ T6048] ocfs2: Unmounting device (7,1) on (node local) [ 1175.429493][ T58] team0: Port device geneve0 removed [ 1175.491580][T10285] loop1: detected capacity change from 0 to 1024 [ 1175.501167][ T6125] usb 6-1: ucan: failed to retrieve device info [ 1175.524260][ T6125] usb 6-1: ucan: probe failed; try to update the device firmware [ 1175.528964][T10285] hfsplus: invalid length 256 has been corrected to 255 [ 1175.568690][ T6125] usb 6-1: USB disconnect, device number 18 [ 1175.608579][ T48] hfsplus: b-tree write err: -5, ino 25 [ 1175.628286][ T48] hfsplus: b-tree write err: -5, ino 4 [ 1175.644091][ T48] hfsplus: b-tree write err: -5, ino 2 [ 1175.747005][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.771017][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.797852][ T58] bond0 (unregistering): Released all slaves [ 1175.823335][ T58] bond1 (unregistering): Released all slaves [ 1175.867216][ T58] bond2 (unregistering): Released all slaves [ 1175.943559][ T58] bond3 (unregistering): Released all slaves [ 1175.966629][ T58] bond4 (unregistering): Released all slaves [ 1176.036617][T10312] kAFS: No cell specified [ 1176.181590][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1176.254827][ T58] : left promiscuous mode [ 1176.706158][T10350] loop1: detected capacity change from 0 to 4096 [ 1176.868447][ T6052] Bluetooth: hci6: command tx timeout [ 1176.990701][T10350] overlayfs: failed to resolve './file0/file1': -22 [ 1177.292916][ T6165] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1177.506603][ T6165] usb 3-1: Using ep0 maxpacket: 16 [ 1177.545364][ T6165] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1177.634412][ T6165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.675987][ T6165] usb 3-1: Product: syz [ 1177.698559][ T6165] usb 3-1: Manufacturer: syz [ 1177.734606][ T6165] usb 3-1: SerialNumber: syz [ 1177.762097][ T6165] usb 3-1: config 0 descriptor?? [ 1177.804955][ T6165] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1177.828890][T10033] chnl_net:caif_netlink_parms(): no params data found [ 1178.260721][ T6165] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1178.369739][ T6165] usb 3-1: USB disconnect, device number 126 [ 1178.755273][ T58] hsr_slave_0: left promiscuous mode [ 1178.771269][ T58] hsr_slave_1: left promiscuous mode [ 1178.789478][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.797192][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.817157][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.824821][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.871718][ T58] veth1_macvtap: left promiscuous mode [ 1178.885109][ T58] veth0_macvtap: left promiscuous mode [ 1178.937431][T10561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1178.970591][ T6219] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1179.065200][T10485] loop1: detected capacity change from 0 to 32768 [ 1179.088610][ T6052] Bluetooth: hci6: command tx timeout [ 1179.113828][T10485] JBD2: Ignoring recovery information on journal [ 1179.141682][ T6219] usb 5-1: Using ep0 maxpacket: 8 [ 1179.156388][ T6219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1179.173367][ T6219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1179.183428][ T6219] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1179.195807][ T6219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1179.207551][ T6219] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1179.215792][T10485] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1179.217727][ T6219] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1179.217773][ T6219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.248524][ T6219] usb 5-1: config 0 descriptor?? [ 1179.260814][T10551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1179.616576][ T6048] ocfs2: Unmounting device (7,1) on (node local) [ 1179.672440][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1179.767050][ T6219] usb 5-1: USB disconnect, device number 27 [ 1179.776790][ T6052] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 1180.117238][T10602] loop1: detected capacity change from 0 to 1024 [ 1180.141297][T10033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.162613][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.173650][T10033] bridge_slave_0: entered allmulticast mode [ 1180.186929][T10033] bridge_slave_0: entered promiscuous mode [ 1180.238984][T10033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.265568][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.283789][T10033] bridge_slave_1: entered allmulticast mode [ 1180.309330][T10033] bridge_slave_1: entered promiscuous mode [ 1180.495520][T10622] loop0: detected capacity change from 0 to 136 [ 1180.543700][T10622] Attempt to read inode for relocated directory [ 1180.590230][T10637] netlink: 'syz.1.11574': attribute type 1 has an invalid length. [ 1180.600565][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.610445][T10622] syz.0.11572: attempt to access beyond end of device [ 1180.610445][T10622] loop0: rw=8912896, sector=335544428, nr_sectors = 4 limit=136 [ 1180.655856][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.683651][T10622] syz.0.11572: attempt to access beyond end of device [ 1180.683651][T10622] loop0: rw=8388608, sector=335544428, nr_sectors = 4 limit=136 [ 1180.768405][ T30] audit: type=1800 audit(2000000216.843:292): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11572" name="file1" dev="loop0" ino=1487 res=0 errno=0 [ 1180.973053][T10033] team0: Port device team_slave_0 added [ 1180.998140][T10033] team0: Port device team_slave_1 added [ 1181.199980][T10691] IPv6: NLM_F_CREATE should be specified when creating new route [ 1181.208511][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.262001][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.389596][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.616773][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.642029][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.744863][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.058010][T10734] loop0: detected capacity change from 0 to 2048 [ 1182.106017][T10033] hsr_slave_0: entered promiscuous mode [ 1182.147154][T10033] hsr_slave_1: entered promiscuous mode [ 1182.164466][T10734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1182.186596][T10033] debugfs: 'hsr0' already exists in 'hsr' [ 1182.193238][T10033] Cannot create hsr debugfs directory [ 1182.274518][ T30] audit: type=1800 audit(2000000218.256:293): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11590" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 1183.536760][T10033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1183.625147][T10033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1183.714229][T10033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1183.784307][T10033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1183.835557][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11614'. [ 1183.854137][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11614'. [ 1183.885537][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11614'. [ 1183.908701][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11614'. [ 1184.220465][T10938] libceph: resolve '00' (ret=-3): failed [ 1184.261255][T10936] loop2: detected capacity change from 0 to 256 [ 1184.419501][T10936] FAT-fs (loop2): Directory bread(block 64) failed [ 1184.424715][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.461587][T10936] FAT-fs (loop2): Directory bread(block 65) failed [ 1184.507670][T10936] FAT-fs (loop2): Directory bread(block 66) failed [ 1184.514361][T10936] FAT-fs (loop2): Directory bread(block 67) failed [ 1184.525966][T10033] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.557453][T10936] FAT-fs (loop2): Directory bread(block 68) failed [ 1184.606905][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.614220][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.616696][T10936] FAT-fs (loop2): Directory bread(block 69) failed [ 1184.671783][T10936] FAT-fs (loop2): Directory bread(block 70) failed [ 1184.704132][T10936] FAT-fs (loop2): Directory bread(block 71) failed [ 1184.725739][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.732953][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.739630][T10936] FAT-fs (loop2): Directory bread(block 72) failed [ 1184.793705][T10936] FAT-fs (loop2): Directory bread(block 73) failed [ 1184.951372][T10033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1184.999153][T10033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.014886][T10936] syz.2.11618: attempt to access beyond end of device [ 1185.014886][T10936] loop2: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 1185.349571][T10980] loop0: detected capacity change from 0 to 4096 [ 1185.404916][T10980] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1185.516187][T10990] xt_hashlimit: overflow, rate too high: 0 [ 1185.644397][T10980] ntfs3(loop0): ino=19, mi_enum_attr [ 1185.792801][T10980] ntfs3(loop0): failed to convert "c46c" to cp866 [ 1185.827546][T10980] ntfs3(loop0): ino=20, mi_enum_attr [ 1185.951301][T11012] loop5: detected capacity change from 0 to 512 [ 1185.991800][T11012] EXT4-fs: Ignoring removed orlov option [ 1186.012001][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.023657][ T6098] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1186.062235][T11012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1186.104872][T11012] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1186.132833][T11012] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.11637: bg 0: block 248: padding at end of block bitmap is not set [ 1186.163289][T11012] loop5: lost filesystem error report for type 5 error -117 [ 1186.169276][T11012] Quota error (device loop5): write_blk: dquota write failed [ 1186.176690][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1186.176727][ C1] EXT4-fs (loop5): last error at time 2000000221: ext4_validate_block_bitmap:440 [ 1186.201654][T11012] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1186.212197][T11012] EXT4-fs error (device loop5): ext4_acquire_dquot:6999: comm syz.5.11637: Failed to acquire dquot type 1 [ 1186.227680][ T6098] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1186.236005][ T6098] usb 3-1: config 0 has no interface number 0 [ 1186.242677][ T6098] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7 [ 1186.249568][T11012] loop5: lost filesystem error report for type 5 error -117 [ 1186.270097][ T6098] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024 [ 1186.274049][T11025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11639'. [ 1186.293153][ T6098] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1186.318331][ T6098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.342031][ T6098] usb 3-1: config 0 descriptor?? [ 1186.355568][T11012] EXT4-fs (loop5): 1 truncate cleaned up [ 1186.372378][ T6098] ttusbir 3-1:0.83: cannot find expected altsetting [ 1186.417039][T11012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1186.536609][ T6125] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1186.545598][T11012] EXT4-fs: Ignoring removed orlov option [ 1186.561885][T11012] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1186.581221][T11012] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1186.656513][T11012] EXT4-fs error (device loop5): __ext4_remount:6804: comm syz.5.11637: Abort forced by user [ 1186.693970][ T6098] usb 3-1: USB disconnect, device number 127 [ 1186.701599][ T6125] usb 2-1: Using ep0 maxpacket: 8 [ 1186.707001][T11012] EXT4-fs (loop5): Remounting filesystem read-only [ 1186.714151][ T6125] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1186.744968][ T6125] usb 2-1: config 0 has no interface number 0 [ 1186.767194][T11012] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1186.787399][ T6125] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1186.805888][ T6125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.815073][T11012] ext4 filesystem being remounted at /1983/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.841170][ T6125] usb 2-1: Product: syz [ 1186.854299][ T6125] usb 2-1: Manufacturer: syz [ 1186.867577][ T6125] usb 2-1: SerialNumber: syz [ 1186.913671][ T6125] usb 2-1: config 0 descriptor?? [ 1187.131560][ T6047] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.172601][ T6125] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1187.196240][ T6125] uvcvideo 2-1:0.31: Failed to initialize entity for entity 32774 [ 1187.204413][ T6125] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 1187.311984][T10033] veth0_vlan: entered promiscuous mode [ 1187.371849][T10033] veth1_vlan: entered promiscuous mode [ 1187.386634][ T6125] usb 2-1: USB disconnect, device number 22 [ 1187.528993][T10033] veth0_macvtap: entered promiscuous mode [ 1187.576660][T11095] vivid-000: ================= START STATUS ================= [ 1187.606901][T10033] veth1_macvtap: entered promiscuous mode [ 1187.620030][T11095] vivid-000: Generate PTS: true [ 1187.627856][T11095] vivid-000: Generate SCR: true [ 1187.638030][T11095] tpg source WxH: 320x180 (Y'CbCr) [ 1187.646341][T11095] tpg field: 1 [ 1187.654180][T11095] tpg crop: (0,0)/320x180 [ 1187.664993][T11095] tpg compose: (0,0)/320x180 [ 1187.675781][T11095] tpg colorspace: 1 [ 1187.682608][T11095] tpg transfer function: 3/0 [ 1187.690863][T11095] tpg Y'CbCr encoding: 6/0 [ 1187.696268][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.698351][T11095] tpg quantization: 1/0 [ 1187.738095][T11095] tpg RGB range: 0/2 [ 1187.749129][T11095] vivid-000: ================== END STATUS ================== [ 1187.760136][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.829835][ T1119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.872121][ T1119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.897213][ T1119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.942297][ T1119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.407022][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.449960][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.651844][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.671607][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.955769][T11099] loop2: detected capacity change from 0 to 32768 [ 1189.014917][T11099] JBD2: Ignoring recovery information on journal [ 1189.148446][T11099] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1189.311940][T11141] loop1: detected capacity change from 0 to 32768 [ 1189.319533][T11188] netlink: 45 bytes leftover after parsing attributes in process `syz.5.11664'. [ 1189.374015][T11141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11654 (11141) [ 1189.458858][T11141] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1189.513714][T11141] BTRFS info (device loop1): using sha256 checksum algorithm [ 1189.632710][ T6044] ocfs2: Unmounting device (7,2) on (node local) [ 1189.871832][T11141] BTRFS info (device loop1): enabling ssd optimizations [ 1189.915967][T11141] BTRFS info (device loop1): turning on async discard [ 1189.922893][T11141] BTRFS info (device loop1): enabling free space tree [ 1190.120340][T11141] BTRFS error (device loop1): balance: invalid convert metadata profile dup [ 1190.230892][T11237] Cannot find add_set index 2 as target [ 1190.276367][ T30] audit: type=1326 audit(2000000225.733:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.356800][ T6048] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1190.369712][ T30] audit: type=1326 audit(2000000225.743:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.511909][ T30] audit: type=1326 audit(2000000225.743:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.593802][ T30] audit: type=1326 audit(2000000225.743:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.636527][ T30] audit: type=1326 audit(2000000225.743:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.731113][ T30] audit: type=1326 audit(2000000225.743:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.794556][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1190.821111][ T30] audit: type=1326 audit(2000000225.743:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.864269][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1190.873855][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1190.945266][ T30] audit: type=1326 audit(2000000225.743:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11241 comm="syz.5.11673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6cda39c799 code=0x7ffc0000 [ 1190.956786][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.031138][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.122187][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.143075][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.199768][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.252461][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11682'. [ 1191.396725][T11281] loop5: detected capacity change from 0 to 4096 [ 1191.434460][T11281] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1191.518127][T11281] ntfs3(loop5): ino=19, mi_enum_attr [ 1191.590992][ T6125] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1191.605644][T11281] ntfs3(loop5): failed to convert "c46c" to cp866 [ 1191.636399][T11281] ntfs3(loop5): ino=20, mi_enum_attr [ 1191.773692][ T6125] usb 5-1: Using ep0 maxpacket: 16 [ 1191.809166][ T6125] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 1191.826911][ T6125] usb 5-1: config 251 has no interface number 0 [ 1191.854995][ T6125] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1191.900906][ T6125] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1191.943345][ T6125] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1191.991883][ T6125] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1192.050982][ T6125] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 70 [ 1192.094903][ T6125] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.141858][ T6125] usb 5-1: config 251 interface 202 has no altsetting 0 [ 1192.155603][ T6125] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1192.195994][ T6125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.226493][ T6125] usb 5-1: Product: syz [ 1192.230729][ T6125] usb 5-1: Manufacturer: syz [ 1192.258624][ T6125] usb 5-1: SerialNumber: syz [ 1192.280551][T11286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1192.295541][T11286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1192.425972][T11343] tmpfs: User quota inode hardlimit too large. [ 1192.558562][T11353] syz_tun: entered promiscuous mode [ 1192.567877][ T6125] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 1192.596419][ T6125] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1192.626556][ T6125] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 1192.687025][T11363] overlay: Bad value for 'workdir' [ 1192.690648][ T6125] usb 5-1: USB disconnect, device number 28 [ 1192.698642][ T6133] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1192.888829][ T6133] usb 3-1: Using ep0 maxpacket: 8 [ 1192.910195][ T6133] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1192.938216][ T6133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1192.971829][ T6133] usb 3-1: Product: syz [ 1192.976054][ T6133] usb 3-1: Manufacturer: syz [ 1193.001223][ T6133] usb 3-1: SerialNumber: syz [ 1193.019152][ T6133] usb 3-1: config 0 descriptor?? [ 1193.058392][ T6133] usbtest 3-1:0.0: FX2 device [ 1193.063137][ T6133] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1193.337329][ T6133] usb 3-1: USB disconnect, device number 2 [ 1193.408865][T11410] x_tables: unsorted entry at hook 2 [ 1194.337110][T11455] loop2: detected capacity change from 0 to 4096 [ 1194.422760][T11455] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1194.429854][T11473] loop4: detected capacity change from 0 to 8 [ 1194.486611][ T6220] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1194.501618][T11455] ntfs3(loop2): Failed to load $Extend (-22). [ 1194.529063][T11455] ntfs3(loop2): Failed to initialize $Extend. [ 1194.683447][ T6220] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1194.692707][T11483] loop6: detected capacity change from 0 to 8 [ 1194.703377][ T6220] usb 2-1: config 0 has no interface number 0 [ 1194.709582][ T6220] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1194.789489][ T6220] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.854315][ T6220] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1194.881629][ T6220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.926500][ T6220] usb 2-1: Product: syz [ 1194.930728][ T6220] usb 2-1: Manufacturer: syz [ 1194.976341][ T6220] usb 2-1: SerialNumber: syz [ 1195.048750][ T6220] usb 2-1: config 0 descriptor?? [ 1195.067812][T11461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1195.103081][ T6220] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1195.174635][ T6220] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1195.639963][ T6125] usb 2-1: USB disconnect, device number 23 [ 1195.689643][ T6125] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1195.778024][ T6125] cyberjack 2-1:0.69: device disconnected [ 1196.442362][T11587] netlink: get zone limit has 4 unknown bytes [ 1196.762610][T11604] bridge_slave_0: left promiscuous mode [ 1196.821201][T11604] vlan0: left promiscuous mode [ 1196.826501][T11604] geneve2: left promiscuous mode [ 1196.862991][T11612] netlink: 'syz.0.11776': attribute type 21 has an invalid length. [ 1196.880907][T11604] bridge1: left promiscuous mode [ 1196.909109][T11604] ipip0: left promiscuous mode [ 1196.947482][T11612] __nla_validate_parse: 15 callbacks suppressed [ 1196.947531][T11612] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11776'. [ 1197.024727][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11776'. [ 1197.146691][T11625] QAT: failed to copy from user cfg_data. [ 1197.386173][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11785'. [ 1197.647370][T11656] loop4: detected capacity change from 0 to 512 [ 1197.677334][T11656] EXT4-fs: Ignoring removed orlov option [ 1197.697143][T11656] EXT4-fs: Ignoring removed i_version option [ 1197.719990][T11656] EXT4-fs: inline encryption not supported [ 1197.753818][T11656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e854e01d, mo2=0003] [ 1197.790000][T11656] System zones: 1-12 [ 1197.820807][T11656] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.11790: inode has both inline data and extents flags [ 1197.897008][T11656] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1197.899115][T11656] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.11790: couldn't read orphan inode 15 (err -117) [ 1197.908403][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1197.908443][ C1] EXT4-fs (loop4): initial error at time 2000000232: ext4_orphan_get:1391: inode 15 [ 1197.908497][ C1] EXT4-fs (loop4): last error at time 2000000232: ext4_orphan_get:1391: inode 15 [ 1197.967209][T11672] xt_ipcomp: unknown flags 1D [ 1197.985683][T11656] loop4: lost filesystem error report for type 5 error -117 [ 1198.023727][T11656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1198.129639][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11797'. [ 1198.389942][ T6054] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.647021][T11712] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1198.708096][T11707] loop5: detected capacity change from 0 to 1764 [ 1198.827213][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1198.900512][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1198.909700][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1198.981106][T11721] loop0: detected capacity change from 0 to 4096 [ 1198.989406][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1199.028444][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1199.048885][T11721] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1199.060565][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11806'. [ 1199.099183][T11721] ntfs3(loop0): ino=3, mi_enum_attr [ 1199.328351][T11721] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1199.377224][T11721] ntfs3(loop0): ino=1f, "file2" failed to open parent directory r=5 to update [ 1199.476980][ T6219] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1199.664325][ T589] ntfs3(loop0): ino=1f, failed to open parent directory r=5 to update [ 1199.712128][ T6219] usb 6-1: Using ep0 maxpacket: 8 [ 1199.719540][ T6219] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1199.743623][ T6219] usb 6-1: config 0 has no interface number 0 [ 1199.788868][ T6219] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1199.802839][ T6219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.811021][ T6219] usb 6-1: Product: syz [ 1199.815197][ T6219] usb 6-1: Manufacturer: syz [ 1199.841485][ T6219] usb 6-1: SerialNumber: syz [ 1199.905528][ T6219] usb 6-1: config 0 descriptor?? [ 1200.146283][ T6219] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1200.169221][ T6219] uvcvideo 6-1:0.31: Failed to initialize entity for entity 32774 [ 1200.204679][ T6219] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 1200.277246][T11802] affs: No valid root block on device nbd6 [ 1200.431218][ T6125] usb 6-1: USB disconnect, device number 19 [ 1200.673533][T11830] kAFS: unable to lookup cell '(,c¾Ì' [ 1200.877054][ T6125] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1201.054523][T11847] loop2: detected capacity change from 0 to 8 [ 1201.082589][ T6125] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1201.117073][ T6125] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 1201.157069][ T6125] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.212276][ T6125] usb 7-1: config 63 has no interface number 0 [ 1201.218574][ T6125] usb 7-1: config 63 interface 66 has no altsetting 0 [ 1201.265130][ T6125] usb 7-1: string descriptor 0 read error: -22 [ 1201.274709][ T6125] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1201.298759][T11855] delete_channel: no stack [ 1201.307884][ T6125] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.381528][ T6125] uvcvideo 7-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1201.389955][T11789] loop1: detected capacity change from 0 to 32768 [ 1201.411703][T11789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11823 (11789) [ 1201.423806][ T6125] uvcvideo 7-1:63.66: No valid video chain found. [ 1201.502637][T11789] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1201.539907][T11789] BTRFS info (device loop1): using sha256 checksum algorithm [ 1201.577362][T11873] loop2: detected capacity change from 0 to 1024 [ 1201.655925][ T6125] usb 7-1: USB disconnect, device number 2 [ 1201.761418][T11789] BTRFS info (device loop1): enabling ssd optimizations [ 1201.772432][ T36] hfsplus: b-tree write err: -5, ino 25 [ 1201.797160][T11789] BTRFS info (device loop1): turning on async discard [ 1201.803968][T11789] BTRFS info (device loop1): enabling free space tree [ 1201.828324][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1201.833898][ T36] hfsplus: b-tree write err: -5, ino 2 [ 1202.291886][ T6048] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1203.206651][T11973] netlink: 'syz.2.11863': attribute type 1 has an invalid length. [ 1203.214515][T11973] __nla_validate_parse: 36 callbacks suppressed [ 1203.214539][T11973] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11863'. [ 1203.458824][T11985] No control pipe specified [ 1204.141047][T12021] binder: BC_ATTEMPT_ACQUIRE not supported [ 1204.178892][T12021] binder: 12015:12021 ioctl c0306201 200000001a80 returned -22 [ 1204.328456][ T6165] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1204.401377][T12033] vti0: entered promiscuous mode [ 1204.500053][ T6165] usb 3-1: Using ep0 maxpacket: 16 [ 1204.543184][ T6165] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 1204.552056][ T6165] usb 3-1: config 251 has no interface number 0 [ 1204.606080][ T6165] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1204.665806][ T6165] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1204.711150][ T6165] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1204.733389][T12047] lo speed is unknown, defaulting to 1000 [ 1204.761125][ T6165] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1204.779923][T12051] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 1204.785982][T12047] lo speed is unknown, defaulting to 1000 [ 1204.789200][ T6165] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 70 [ 1204.809500][T11981] loop0: detected capacity change from 0 to 32768 [ 1204.826198][T12047] lo speed is unknown, defaulting to 1000 [ 1204.847624][T11981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.11865 (11981) [ 1204.872805][ T6165] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1204.942647][T11981] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1204.954213][ T6165] usb 3-1: config 251 interface 202 has no altsetting 0 [ 1204.994854][ T6165] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1205.011233][T11981] BTRFS info (device loop0): using sha256 checksum algorithm [ 1205.023518][ T6165] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.031662][ T6165] usb 3-1: Product: syz [ 1205.078544][ T6165] usb 3-1: Manufacturer: syz [ 1205.083216][ T6165] usb 3-1: SerialNumber: syz [ 1205.126633][T12066] cgroup: Unknown subsys name 'cpuset' [ 1205.134056][T12014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1205.152001][T12014] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1205.249759][T11981] BTRFS info (device loop0): enabling ssd optimizations [ 1205.301252][T11981] BTRFS info (device loop0): turning on async discard [ 1205.308090][T11981] BTRFS info (device loop0): enabling free space tree [ 1205.344816][T12085] loop6: detected capacity change from 0 to 512 [ 1205.411752][T12085] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1205.431695][ T6165] cxacru 3-1:251.202: send of cm 0x90 failed (-71) [ 1205.438301][ T6165] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1205.446274][ T6165] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 1205.447355][T12085] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1205.519761][T12085] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1205.537048][ C0] EXT4-fs (loop6): initial error at time 2000000240: ext4_mb_generate_buddy:1312 [ 1205.546325][ C0] EXT4-fs (loop6): last error at time 2000000240: ext4_mb_generate_buddy:1312 [ 1205.569833][ T6165] usb 3-1: USB disconnect, device number 3 [ 1205.592130][T12085] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.11889: attempt to clear invalid blocks 2 len 1 [ 1205.647752][T12085] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1205.648468][T12085] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.11889: invalid indirect mapped block 1819239214 (level 0) [ 1205.733966][T12085] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1205.735695][T12085] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.11889: invalid indirect mapped block 1819239214 (level 1) [ 1205.779063][ T6041] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1205.843789][T12085] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1205.855100][T12085] EXT4-fs (loop6): 1 truncate cleaned up [ 1205.959748][T12085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1206.039321][T12085] EXT4-fs error (device loop6): ext4_lookup:1781: inode #2: comm syz.6.11889: 'file1' linked to parent dir [ 1206.057597][T12118] netlink: 'syz.0.11893': attribute type 1 has an invalid length. [ 1206.096840][T12116] loop1: detected capacity change from 0 to 8 [ 1206.125926][T12118] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11893'. [ 1206.332283][T10033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.490295][T12047] infiniband syz0: set active [ 1206.500748][ T6220] lo speed is unknown, defaulting to 1000 [ 1206.540946][T12047] infiniband syz0: added lo [ 1206.564228][T12047] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1206.568163][T12047] infiniband syz0: Couldn't open port 1 [ 1206.858795][T12047] RDS/IB: syz0: added [ 1206.898691][T12047] smc: adding ib device syz0 with port count 1 [ 1206.933280][T12047] smc: ib device syz0 port 1 has no pnetid [ 1206.978751][ T6219] lo speed is unknown, defaulting to 1000 [ 1206.986517][T12047] lo speed is unknown, defaulting to 1000 [ 1207.347916][T12170] loop1: detected capacity change from 0 to 1024 [ 1207.402951][T12170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1207.460674][T12182] loop0: detected capacity change from 0 to 64 [ 1207.505277][T12170] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz.1.11907: directory missing '..' [ 1207.636874][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.737626][ T6220] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1207.870534][T12203] netlink: 29868 bytes leftover after parsing attributes in process `syz.1.11912'. [ 1207.918944][ T6220] usb 6-1: Using ep0 maxpacket: 16 [ 1207.950758][ T6220] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 1207.980746][ T6220] usb 6-1: config 251 has no interface number 0 [ 1207.997755][ T6220] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1208.019910][ T6220] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1208.034826][T12204] block device autoloading is deprecated and will be removed. [ 1208.080518][ T6220] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1208.131765][ T6220] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1208.165476][ T6220] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 70 [ 1208.195018][T12215] xfrm0: left promiscuous mode [ 1208.209869][ T6220] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.251805][ T6220] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1208.253191][T12215] geneve2: left promiscuous mode [ 1208.262488][ T6220] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1208.293106][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.328149][ T48] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.336123][ T6220] usb 6-1: Product: syz [ 1208.346926][ T6220] usb 6-1: Manufacturer: syz [ 1208.351564][ T6220] usb 6-1: SerialNumber: syz [ 1208.416234][T12185] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1208.435350][T12047] lo speed is unknown, defaulting to 1000 [ 1208.464501][T12185] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1208.733721][ T6220] cxacru 6-1:251.202: send of cm 0x90 failed (-71) [ 1208.740287][ T6220] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1208.758840][ T6220] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1208.819632][ T6220] usb 6-1: USB disconnect, device number 20 [ 1208.859929][ T6219] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1209.030161][T12255] loop1: detected capacity change from 0 to 4096 [ 1209.053168][ T6219] usb 1-1: too many configurations: 203, using maximum allowed: 8 [ 1209.078002][T12255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.090552][ T6219] usb 1-1: config index 0 descriptor too short (expected 65280, got 72) [ 1209.092037][ T6219] usb 1-1: config index 1 descriptor too short (expected 65280, got 72) [ 1209.108714][T12262] loop6: detected capacity change from 0 to 256 [ 1209.119910][ T6219] usb 1-1: config index 2 descriptor too short (expected 65280, got 72) [ 1209.134171][T12262] exfat: Deprecated parameter 'namecase' [ 1209.139698][ T6219] usb 1-1: config index 3 descriptor too short (expected 65280, got 72) [ 1209.147928][T12262] exfat: Deprecated parameter 'namecase' [ 1209.164412][ T6219] usb 1-1: config index 4 descriptor too short (expected 65280, got 72) [ 1209.178093][ T6219] usb 1-1: config index 5 descriptor too short (expected 65280, got 72) [ 1209.189680][ T6219] usb 1-1: config index 6 descriptor too short (expected 65280, got 72) [ 1209.206411][ T6219] usb 1-1: config index 7 descriptor too short (expected 65280, got 72) [ 1209.210338][T12262] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1209.242215][ T6219] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1209.255226][ T6219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.263282][ T6219] usb 1-1: Product: syz [ 1209.273365][ T6219] usb 1-1: Manufacturer: syz [ 1209.298624][ T6219] usb 1-1: SerialNumber: syz [ 1209.331248][ T6219] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1209.375588][ T6220] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1209.417313][ T6048] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.578014][T12278] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1209.584580][T12278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1209.641768][T12278] vhci_hcd vhci_hcd.0: Device attached [ 1209.675200][T12047] lo speed is unknown, defaulting to 1000 [ 1209.693742][T12284] vhci_hcd vhci_hcd.0: port 0 already used [ 1209.794609][T12279] vhci_hcd: connection closed [ 1209.814342][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1209.848558][ T36] vhci_hcd vhci_hcd.2: release socket [ 1209.877742][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1210.194900][T12303] No control pipe specified [ 1211.103942][T12314] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1211.226112][ T6219] usb 1-1: USB disconnect, device number 27 [ 1211.240074][ T6220] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1211.253147][ T6220] ath9k_htc: Failed to initialize the device [ 1211.260098][ T6219] usb 1-1: ath9k_htc: USB layer deinitialized [ 1211.448413][T12322] loop2: detected capacity change from 0 to 2048 [ 1211.483040][T12322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.539589][T12047] lo speed is unknown, defaulting to 1000 [ 1211.581937][T12288] loop1: detected capacity change from 0 to 32768 [ 1211.644745][T12288] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11931 (12288) [ 1211.697899][T12288] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1211.760070][T12288] BTRFS info (device loop1): using sha256 checksum algorithm [ 1211.776792][T12337] loop6: detected capacity change from 0 to 1024 [ 1211.819918][T12337] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1211.829134][T12301] loop5: detected capacity change from 0 to 32768 [ 1211.840809][T12337] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1211.858288][T12337] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1211.871409][T12337] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #3: comm syz.6.11944: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1211.892840][T12301] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11935 (12301) [ 1211.907175][T12337] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1211.907663][T12337] EXT4-fs (loop6): no journal found [ 1211.916751][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1211.916784][ C0] EXT4-fs (loop6): initial error at time 2000000245: ext4_ext_check_inode:521: inode 3 [ 1211.916839][ C0] EXT4-fs (loop6): last error at time 2000000245: ext4_ext_check_inode:521: inode 3 [ 1211.980424][T12301] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1211.992357][T12301] BTRFS info (device loop5): using sha256 checksum algorithm [ 1212.031331][T12337] EXT4-fs (loop6): can't get journal size [ 1212.077211][T12337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1212.183888][T12288] BTRFS info (device loop1): enabling ssd optimizations [ 1212.190887][T12288] BTRFS info (device loop1): turning on async discard [ 1212.311815][T12288] BTRFS info (device loop1): enabling free space tree [ 1212.412341][T12301] BTRFS info (device loop5): rebuilding free space tree [ 1212.556874][T12301] BTRFS info (device loop5): disabling free space tree [ 1212.566459][T12301] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1212.600626][T12301] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1212.634020][T10033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.656008][T12399] netlink: 'syz.0.11954': attribute type 21 has an invalid length. [ 1212.683898][ T6048] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1212.699509][T12398] sit0: left promiscuous mode [ 1212.701260][T12301] BTRFS info (device loop5): enabling ssd optimizations [ 1212.714284][T12301] BTRFS info (device loop5): turning on async discard [ 1212.738654][T12301] BTRFS info (device loop5): force clearing of disk cache [ 1212.750184][T12301] BTRFS info (device loop5): enabling auto defrag [ 1212.772579][T12301] BTRFS info (device loop5): max_inline set to 4096 [ 1212.793765][T12398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1212.815203][T12399] netlink: 'syz.0.11954': attribute type 6 has an invalid length. [ 1212.852015][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11954'. [ 1213.200377][ T6047] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1213.699789][T12047] lo speed is unknown, defaulting to 1000 [ 1213.716141][T12433] loop2: detected capacity change from 0 to 64 [ 1214.216319][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11969'. [ 1214.257796][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11970'. [ 1214.323191][T12456] loop2: detected capacity change from 0 to 1024 [ 1214.401442][T12456] hfsplus: b-tree write err: -5, ino 2 [ 1214.665735][ T1119] hfsplus: b-tree write err: -5, ino 25 [ 1214.671495][ T1119] hfsplus: b-tree write err: -5, ino 4 [ 1214.694074][T12473] openvswitch: netlink: Multiple metadata blocks provided [ 1214.704207][ T1119] hfsplus: b-tree write err: -5, ino 2 [ 1214.710811][ T1119] hfsplus: b-tree write err: -5, ino 26 [ 1214.811520][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11978'. [ 1215.081804][T12488] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1215.103205][T12491] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11981'. [ 1215.214725][T12494] netlink: 'syz.1.11982': attribute type 1 has an invalid length. [ 1215.277506][T12494] netlink: 'syz.1.11982': attribute type 3 has an invalid length. [ 1215.486152][T12047] lo speed is unknown, defaulting to 1000 [ 1215.741434][T12513] loop5: detected capacity change from 0 to 2048 [ 1215.776856][T12513] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1215.853419][T12513] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1215.886867][T12513] UDF-fs: Scanning with blocksize 512 failed [ 1215.919961][T12513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1216.254740][ T6219] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1216.447567][ T6219] usb 2-1: Using ep0 maxpacket: 32 [ 1216.491553][ T6219] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1216.521909][ T6219] usb 2-1: config 0 has no interface number 0 [ 1216.528080][ T6219] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1216.574798][ T6219] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1216.617656][ T6219] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1216.650110][ T6219] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1216.670963][ T6219] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1216.728496][ T6219] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1216.766578][ T6219] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1216.803282][ T6219] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25391, setting to 1024 [ 1216.836675][ T6219] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1216.874447][ T6219] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1216.931892][ T6219] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1216.975817][ T6219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.005453][ T6219] usb 2-1: Product: syz [ 1217.017488][ T6219] usb 2-1: Manufacturer: syz [ 1217.055702][ T6219] usb 2-1: SerialNumber: syz [ 1217.075622][ T6219] usb 2-1: config 0 descriptor?? [ 1217.097784][T12528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1217.128290][T12528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1217.195664][ T6219] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1217.204136][ T6219] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1217.288829][T12599] netlink: 'syz.6.12015': attribute type 1 has an invalid length. [ 1217.303226][ T6219] scsi host1: microtekX6 [ 1217.424922][ T6219] usb 2-1: USB disconnect, device number 24 [ 1217.431337][T12592] loop0: detected capacity change from 0 to 4096 [ 1217.451029][T16739] microtek usb (rev 0.4.3): error -19 submitting URB [ 1217.490002][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12017'. [ 1217.490242][T12618] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1217.499296][T16739] microtek usb (rev 0.4.3): error -19 submitting URB [ 1217.578876][T12592] syz.0.12011: attempt to access beyond end of device [ 1217.578876][T12592] loop0: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1217.600865][T12592] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 1217.698065][ T6220] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1217.910482][ T6220] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1217.968138][ T6220] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1217.995867][ T6220] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1218.031621][ T6220] usb 7-1: Manufacturer: syz [ 1218.036292][ T6220] usb 7-1: SerialNumber: syz [ 1218.068258][T12640] netlink: 'syz.0.12023': attribute type 10 has an invalid length. [ 1218.124077][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12023'. [ 1218.166972][T12640] team0: entered promiscuous mode [ 1218.195205][T12640] team_slave_1: entered promiscuous mode [ 1218.216974][T12640] bridge0: port 5(team0) entered blocking state [ 1218.243886][T12640] bridge0: port 5(team0) entered disabled state [ 1218.309709][ T6220] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1218.370818][ T6220] usb 7-1: USB disconnect, device number 3 [ 1219.230514][T12712] loop1: detected capacity change from 0 to 1024 [ 1219.409469][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12044'. [ 1219.502764][ T6125] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1219.668834][ T6125] usb 7-1: Using ep0 maxpacket: 32 [ 1219.711993][ T6125] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1219.747578][ T6125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.777405][ T6125] usb 7-1: config 0 descriptor?? [ 1219.817709][ T6125] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1219.872899][T12754] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1220.239109][ T6125] gspca_sq930x: ucbus_write failed -71 [ 1220.256650][ T6125] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 1220.298628][ T6125] usb 7-1: USB disconnect, device number 4 [ 1220.445262][ T6145] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1220.639708][ T6145] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1220.689115][ T6145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.730840][ T6145] usb 1-1: config 0 descriptor?? [ 1220.917224][T12822] netlink: 'syz.2.12069': attribute type 29 has an invalid length. [ 1220.926110][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12069'. [ 1221.244608][ T6145] ath6kl: Failed to submit usb control message: -71 [ 1221.251306][ T6145] ath6kl: unable to send the bmi data to the device: -71 [ 1221.297099][ T6145] ath6kl: Unable to send get target info: -71 [ 1221.330235][ T6145] ath6kl: Failed to init ath6kl core: -71 [ 1221.337443][ T6145] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1221.406631][ T6145] usb 1-1: USB disconnect, device number 28 [ 1221.736643][T12867] loop2: detected capacity change from 0 to 512 [ 1221.749022][T12858] loop6: detected capacity change from 0 to 4096 [ 1221.799150][T12858] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1221.831676][T12867] syz.2.12080: attempt to access beyond end of device [ 1221.831676][T12867] loop2: rw=8390659, sector=12608, nr_sectors = 16128 limit=512 [ 1221.921278][T12866] syz_tun: left promiscuous mode [ 1221.930032][T12858] ntfs3(loop6): ino=1a, mi_enum_attr [ 1221.950860][T12858] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1221.999510][T12866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.039600][T12866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.110190][T12858] ntfs3(loop6): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 1222.131847][T12866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.526819][T12896] No such timeout policy "syz0" [ 1222.829654][T12914] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1223.168100][ T6165] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1223.168871][T12938] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1223.385096][ T6165] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1223.404260][ T6165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.436296][ T6165] usb 3-1: config 0 descriptor?? [ 1223.732898][T12971] netdevsim netdevsim5: Direct firmware load for / [ 1223.732898][T12971] failed with error -2 [ 1223.746226][T12971] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 1223.746226][T12971] [ 1223.823629][T12979] netlink: 'syz.0.12115': attribute type 2 has an invalid length. [ 1223.943163][ T6165] ath6kl: Failed to submit usb control message: -71 [ 1223.971780][ T6165] ath6kl: unable to send the bmi data to the device: -71 [ 1223.987287][ T6165] ath6kl: Unable to send get target info: -71 [ 1224.020827][ T6165] ath6kl: Failed to init ath6kl core: -71 [ 1224.043561][ T6165] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1224.066216][ T30] audit: type=1326 audit(2000000257.354:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.078598][ T6165] usb 3-1: USB disconnect, device number 4 [ 1224.164153][ T30] audit: type=1326 audit(2000000257.391:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.252540][ T30] audit: type=1326 audit(2000000257.391:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.321478][ T30] audit: type=1326 audit(2000000257.391:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.352608][ T30] audit: type=1326 audit(2000000257.391:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.457434][ T30] audit: type=1326 audit(2000000257.391:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.592743][ T30] audit: type=1326 audit(2000000257.391:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.663632][ T30] audit: type=1326 audit(2000000257.410:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1224.764271][ T30] audit: type=1326 audit(2000000257.410:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1225.544903][T13056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.629522][T13056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.718428][T13078] loop2: detected capacity change from 0 to 1024 [ 1225.874995][T13078] hfsplus: b-tree write err: -5, ino 2 [ 1226.019463][ T589] hfsplus: b-tree write err: -5, ino 25 [ 1226.038937][ T589] hfsplus: b-tree write err: -5, ino 4 [ 1226.064479][ T589] hfsplus: b-tree write err: -5, ino 2 [ 1226.081181][ T589] hfsplus: b-tree write err: -5, ino 26 [ 1226.248519][ T6219] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1226.439699][ T6219] usb 7-1: Using ep0 maxpacket: 32 [ 1226.464364][ T6219] usb 7-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 1226.485058][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12156'. [ 1226.502305][ T6219] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.523764][T13121] netlink: 'syz.0.12156': attribute type 3 has an invalid length. [ 1226.537441][ T6219] usb 7-1: Product: syz [ 1226.541970][ T6219] usb 7-1: Manufacturer: syz [ 1226.566282][ T6219] usb 7-1: SerialNumber: syz [ 1226.585806][ T6219] usb 7-1: config 0 descriptor?? [ 1226.613402][ T6219] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1226.827820][ T6219] gspca_sn9c2028: read1 error -71 [ 1226.834839][ T6219] gspca_sn9c2028: read1 error -71 [ 1226.845034][ T6219] gspca_sn9c2028: read1 error -71 [ 1226.860864][ T6219] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1226.887969][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12160'. [ 1226.928786][ T6219] usb 7-1: USB disconnect, device number 5 [ 1227.099079][T13096] loop4: detected capacity change from 0 to 32768 [ 1227.151610][T13096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12150 (13096) [ 1227.221887][T13096] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1227.253862][T13096] BTRFS info (device loop4): using sha256 checksum algorithm [ 1227.411869][T13096] BTRFS info (device loop4): enabling ssd optimizations [ 1227.479404][T13096] BTRFS info (device loop4): turning on async discard [ 1227.511571][T13096] BTRFS info (device loop4): enabling free space tree [ 1227.865926][ T6054] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1227.881977][T13203] netlink: 'syz.6.12175': attribute type 2 has an invalid length. [ 1228.043536][T13210] QAT: Device 7 not found [ 1228.531170][T13162] loop2: detected capacity change from 0 to 32768 [ 1228.604449][T13162] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12166 (13162) [ 1228.702290][T13162] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1228.717541][T13243] netlink: 'syz.0.12186': attribute type 2 has an invalid length. [ 1228.748721][T13162] BTRFS info (device loop2): using sha256 checksum algorithm [ 1228.831655][ T6165] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1228.994371][ T6165] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1229.023956][T13162] BTRFS info (device loop2): enabling ssd optimizations [ 1229.041986][ T6165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1229.052951][T13162] BTRFS info (device loop2): turning on async discard [ 1229.052990][T13162] BTRFS info (device loop2): enabling free space tree [ 1229.068952][ T6165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1229.085183][ T6165] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1229.101107][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.109134][ T6165] usb 5-1: Product: syz [ 1229.113757][ T6165] usb 5-1: Manufacturer: syz [ 1229.118435][ T6165] usb 5-1: SerialNumber: syz [ 1229.167897][ T6165] usb 5-1: config 0 descriptor?? [ 1229.368888][ T6044] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1229.440099][T13282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12192'. [ 1229.508817][T13282] bridge_slave_0 (unregistering): left allmulticast mode [ 1229.528747][T13282] bridge_slave_0 (unregistering): left promiscuous mode [ 1229.580173][T13282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.059762][T13248] loop1: detected capacity change from 0 to 32768 [ 1230.186638][T13248] find_entry called with index >= next_index [ 1230.265266][T13248] find_entry called with index >= next_index [ 1230.271381][T13248] find_entry called with index >= next_index [ 1230.622196][T13330] loop2: detected capacity change from 0 to 512 [ 1230.757228][T13329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1230.798412][ T6125] lo speed is unknown, defaulting to 1000 [ 1230.812353][T13330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.870505][T13330] ext4 filesystem being mounted at /1991/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.930722][T13330] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.12213: corrupted xattr block 32: overlapping e_value [ 1231.058132][ T6044] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.075768][ T6145] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1231.291545][ T6145] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1231.321711][ T6145] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.358152][ T6145] usb 6-1: config 0 descriptor?? [ 1231.392865][ T6145] cp210x 6-1:0.0: cp210x converter detected [ 1231.758766][T13375] loop2: detected capacity change from 0 to 128 [ 1231.821367][ T6145] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1231.878570][ T6145] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1231.917664][ T6145] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1231.973865][ T6145] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1232.015640][ T6145] usb 6-1: USB disconnect, device number 21 [ 1232.109743][ T6145] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1232.170923][ T6145] cp210x 6-1:0.0: device disconnected [ 1232.455381][ T6220] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1232.532544][T13420] bond2 (unregistering): Released all slaves [ 1232.632114][T13461] netlink: 'syz.4.12221': attribute type 9 has an invalid length. [ 1232.678766][T13461] netlink: 'syz.4.12221': attribute type 7 has an invalid length. [ 1232.690625][ T6220] usb 3-1: Using ep0 maxpacket: 32 [ 1232.742914][ T6220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1232.754500][T13461] netlink: 'syz.4.12221': attribute type 8 has an invalid length. [ 1232.785759][ T6220] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1232.849547][ T6220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1232.907190][ T6220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 51093, setting to 1024 [ 1232.978244][ T6220] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1232.992551][ T6220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.009430][ T6220] usb 3-1: Product: syz [ 1233.024668][ T6220] usb 3-1: Manufacturer: syz [ 1233.029310][ T6220] usb 3-1: SerialNumber: syz [ 1233.096490][ T6220] usb 3-1: config 0 descriptor?? [ 1233.138928][T13404] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1233.190623][ T6220] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 1233.245369][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12228'. [ 1233.336225][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1233.604202][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1233.612444][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 1233.653211][ T6133] usb 3-1: USB disconnect, device number 5 [ 1233.806031][T13547] netlink: 'syz.5.12234': attribute type 4 has an invalid length. [ 1234.861090][T13603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1235.220533][T13622] loop5: detected capacity change from 0 to 256 [ 1235.378534][T13622] FAT-fs (loop5): Directory bread(block 64) failed [ 1235.401033][T13622] FAT-fs (loop5): Directory bread(block 65) failed [ 1235.434742][T13622] FAT-fs (loop5): Directory bread(block 66) failed [ 1235.448413][T13622] FAT-fs (loop5): Directory bread(block 67) failed [ 1235.455310][T13622] FAT-fs (loop5): Directory bread(block 68) failed [ 1235.482710][T13622] FAT-fs (loop5): Directory bread(block 69) failed [ 1235.510574][T13622] FAT-fs (loop5): Directory bread(block 70) failed [ 1235.542707][T13622] FAT-fs (loop5): Directory bread(block 71) failed [ 1235.562288][T13622] FAT-fs (loop5): Directory bread(block 72) failed [ 1235.585431][T13622] FAT-fs (loop5): Directory bread(block 73) failed [ 1235.838865][T13646] xt_socket: unknown flags 0x48 [ 1236.166610][T13657] loop0: detected capacity change from 0 to 256 [ 1236.284990][T13657] FAT-fs (loop0): Directory bread(block 64) failed [ 1236.319903][T13657] FAT-fs (loop0): Directory bread(block 65) failed [ 1236.338374][T13657] FAT-fs (loop0): Directory bread(block 66) failed [ 1236.383486][T13657] FAT-fs (loop0): Directory bread(block 67) failed [ 1236.419055][T13657] FAT-fs (loop0): Directory bread(block 68) failed [ 1236.441979][T13657] FAT-fs (loop0): Directory bread(block 69) failed [ 1236.473717][T13657] FAT-fs (loop0): Directory bread(block 70) failed [ 1236.515223][T13657] FAT-fs (loop0): Directory bread(block 71) failed [ 1236.545945][T13657] FAT-fs (loop0): Directory bread(block 72) failed [ 1236.589742][T13657] FAT-fs (loop0): Directory bread(block 73) failed [ 1236.937457][T13681] bond3 (unregistering): Released all slaves [ 1237.133011][T13783] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1237.145862][T13690] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1237.286396][T13690] bond2 (unregistering): Released all slaves [ 1238.384926][ T6219] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1238.598641][ T6219] usb 2-1: Using ep0 maxpacket: 8 [ 1238.612456][ T6219] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1238.661713][ T6219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.687649][ T6219] usb 2-1: Product: syz [ 1238.705975][ T6219] usb 2-1: Manufacturer: syz [ 1238.756127][ T6219] usb 2-1: SerialNumber: syz [ 1238.803844][ T6219] usb 2-1: config 0 descriptor?? [ 1238.884354][ T6219] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1238.957828][T13889] bond2 (unregistering): Released all slaves [ 1238.976973][T13887] loop6: detected capacity change from 0 to 4096 [ 1239.033955][T13887] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 1239.188732][T13887] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1239.304204][ T6219] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 1239.340888][ T6219] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 1239.393656][ T6219] usb 2-1: USB disconnect, device number 25 [ 1240.296055][T14000] loop6: detected capacity change from 0 to 2048 [ 1240.322273][T14000] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=27481, location=27481 [ 1240.449452][T14000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1240.479530][ T6165] iguanair 5-1:0.0: failed to get version [ 1240.513676][ T6165] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 1240.580257][ T6165] usb 5-1: USB disconnect, device number 29 [ 1240.767933][T14021] openvswitch: netlink: Flow key attribute not present in set flow. [ 1240.889397][T14029] loop6: detected capacity change from 0 to 16 [ 1240.939039][T14029] erofs (device loop6): mounted with root inode @ nid 36. [ 1240.997569][T14037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.179784][T14041] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1241.411355][ T30] audit: type=1107 audit(2000000273.590:311): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1241.633134][T13988] loop4: detected capacity change from 0 to 32768 [ 1241.739574][T14046] bond2 (unregistering): Released all slaves [ 1241.783489][T14099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.907607][ T30] audit: type=1326 audit(2000000274.058:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.2.12319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783db9c799 code=0x7ffc0000 [ 1241.932055][ T30] audit: type=1326 audit(2000000274.077:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.2.12319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783db9c799 code=0x7ffc0000 [ 1241.986208][ T30] audit: type=1326 audit(2000000274.105:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.2.12319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f783db9c799 code=0x7ffc0000 [ 1242.023947][ T30] audit: type=1326 audit(2000000274.105:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14135 comm="syz.2.12319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f783db9c799 code=0x7ffc0000 [ 1242.050543][T13988] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1242.405398][T13988] XFS (loop4): Ending clean mount [ 1242.451718][T13988] XFS (loop4): Quotacheck needed: Please wait. [ 1242.571558][T13988] XFS (loop4): Quotacheck: Done. [ 1242.816108][ T6054] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1243.084155][T14190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12331'. [ 1243.163693][T14190] bridge_slave_0 (unregistering): left allmulticast mode [ 1243.173808][T14190] bridge_slave_0 (unregistering): left promiscuous mode [ 1243.195377][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.285745][T14190] veth0_to_bridge (unregistering): left allmulticast mode [ 1243.309214][T14200] loop1: detected capacity change from 0 to 2048 [ 1243.310227][T14151] loop6: detected capacity change from 0 to 32768 [ 1243.324924][T14190] veth0_to_bridge (unregistering): left promiscuous mode [ 1243.365796][T14190] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1243.453148][T14200] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1243.539097][ T30] audit: type=1800 audit(2000000275.583:316): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12336" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 1243.560300][T14209] Lens A: ================= START STATUS ================= [ 1243.585962][T14209] Lens A: Focus, Absolute: 0 [ 1243.601480][T14209] Lens A: ================== END STATUS ================== [ 1244.070429][ T6165] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1244.277415][ T6165] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1244.294360][ T6165] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.325049][ T6165] usb 1-1: config 220 has no interface number 2 [ 1244.346672][ T6165] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1244.390089][ T6165] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1244.412305][ T6165] usb 1-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1244.447303][ T6165] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1244.465514][ T6165] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1244.472521][ T6165] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1244.521656][ T6165] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1244.541762][ T6165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.569328][ T6165] usb 1-1: Product: syz [ 1244.591037][ T6165] usb 1-1: Manufacturer: syz [ 1244.600618][T14231] loop5: detected capacity change from 0 to 32768 [ 1244.601562][ T6165] usb 1-1: SerialNumber: syz [ 1244.640866][T14231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12342 (14231) [ 1244.701410][T14231] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1244.726150][T14231] BTRFS info (device loop5): using sha256 checksum algorithm [ 1244.862484][T14231] BTRFS info (device loop5): enabling ssd optimizations [ 1244.869739][T14231] BTRFS info (device loop5): turning on async discard [ 1244.884624][ T6165] usb 1-1: selecting invalid altsetting 0 [ 1244.935568][T14283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1244.943001][T14283] IPv6: NLM_F_CREATE should be set when creating new route [ 1244.954800][ T6165] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1245.005768][T14231] BTRFS info (device loop5): enabling free space tree [ 1245.015710][ T6165] uvcvideo 1-1:220.0: No valid video chain found. [ 1245.058052][ T6165] usb 1-1: selecting invalid altsetting 0 [ 1245.074998][ T6165] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1245.104992][ T6165] usb 1-1: USB disconnect, device number 29 [ 1245.307003][ T6047] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1246.421214][T14356] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1247.000392][T14390] netlink: 276 bytes leftover after parsing attributes in process `syz.2.12382'. [ 1247.300700][T14411] netlink: 'syz.2.12390': attribute type 2 has an invalid length. [ 1247.310577][T14410] netlink: 'syz.6.12391': attribute type 2 has an invalid length. [ 1247.342921][T14410] netlink: 'syz.6.12391': attribute type 3 has an invalid length. [ 1248.921296][ T6219] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1248.949161][T14426] loop6: detected capacity change from 0 to 32768 [ 1249.071152][T14426] jfs_strtoUCS: char2uni returned -22. [ 1249.077280][T14426] charset = iso8859-6, char = 0xfc [ 1249.142442][ T6219] usb 6-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1249.169130][ T6219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.216064][ T6219] usb 6-1: config 0 descriptor?? [ 1249.252396][ T6219] usb 6-1: Invalid firmware size=18. [ 1249.481790][ T6220] usb 6-1: USB disconnect, device number 22 [ 1249.495261][T14526] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1249.521174][ T6219] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1249.567123][T14526] bond2 (unregistering): Released all slaves [ 1249.703403][ T6219] usb 3-1: Using ep0 maxpacket: 8 [ 1249.733194][ T6219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1249.750926][ T6219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.783339][ T6219] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1249.801928][ T6219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1249.871307][ T6219] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1249.929494][T14615] bond1 (unregistering): Released all slaves [ 1249.947153][ T6219] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1249.957334][ T6219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.999109][ T6219] usb 3-1: config 0 descriptor?? [ 1250.022269][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12431'. [ 1250.023005][T14517] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1250.059989][ T30] audit: type=1326 audit(2000000281.685:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.167433][ T30] audit: type=1326 audit(2000000281.685:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.244358][ T30] audit: type=1326 audit(2000000281.685:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.311572][ T30] audit: type=1326 audit(2000000281.722:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.391351][ T30] audit: type=1326 audit(2000000281.722:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.441710][ C1] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 1250.443690][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.457681][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.464715][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.471890][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.478757][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.483307][T14705] dlm: no locking on control device [ 1250.485739][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.497955][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.504989][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.512035][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.519064][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.525942][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.526875][ T30] audit: type=1326 audit(2000000281.722:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.532946][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.533034][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.569436][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.576361][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.583374][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.590295][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.597240][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.604177][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.611090][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.618516][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.626026][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.633737][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.641186][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.648457][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.655727][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.663211][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.670075][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.677410][T15197] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1250.684450][ T30] audit: type=1326 audit(2000000281.722:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.708563][ T30] audit: type=1326 audit(2000000281.722:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.4.12432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff774f9c799 code=0x7ffc0000 [ 1250.828045][ T6052] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 1250.832797][ T6219] usb 3-1: USB disconnect, device number 6 [ 1251.040287][T14729] loop1: detected capacity change from 0 to 64 [ 1251.084807][T14729] hfs: unable to locate alternate MDB [ 1251.101133][T14729] hfs: continuing without an alternate MDB [ 1251.153272][ T30] audit: type=1800 audit(2000000282.705:325): pid=14729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12442" name="file1" dev="loop1" ino=22 res=0 errno=0 [ 1251.203030][T14739] netlink: 'syz.0.12444': attribute type 10 has an invalid length. [ 1251.232780][T14739] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1251.277047][T14739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.304098][ T36] [ 1251.306447][ T36] ====================================================== [ 1251.313461][ T36] WARNING: possible circular locking dependency detected [ 1251.320474][ T36] syzkaller #0 Not tainted [ 1251.324887][ T36] ------------------------------------------------------ [ 1251.331912][ T36] kworker/u8:2/36 is trying to acquire lock: [ 1251.337890][ T36] ffff88802f5e1478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 1251.348652][ T36] [ 1251.348652][ T36] but task is already holding lock: [ 1251.356277][ T36] ffff888032f9c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1251.365673][ T36] [ 1251.365673][ T36] which lock already depends on the new lock. [ 1251.365673][ T36] [ 1251.376161][ T36] [ 1251.376161][ T36] the existing dependency chain (in reverse order) is: [ 1251.385256][ T36] [ 1251.385256][ T36] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1251.393212][ T36] __mutex_lock+0x1a2/0x1b90 [ 1251.398345][ T36] hfs_find_init+0x273/0x330 [ 1251.403491][ T36] hfs_ext_read_extent+0x19d/0x9d0 [ 1251.409146][ T36] hfs_get_block+0x576/0x830 [ 1251.414279][ T36] block_read_full_folio+0x36c/0x8e0 [ 1251.420106][ T36] filemap_read_folio+0xfc/0x3b0 [ 1251.425582][ T36] do_read_cache_folio+0x2d7/0x6b0 [ 1251.431324][ T36] read_cache_page+0x5b/0x1b0 [ 1251.436637][ T36] __hfs_bnode_create+0x718/0x9a0 [ 1251.442217][ T36] hfs_bnode_find+0x2d5/0xd30 [ 1251.447602][ T36] hfs_brec_find+0x39d/0x620 [ 1251.452734][ T36] hfs_brec_read+0x26/0x120 [ 1251.457776][ T36] hfs_cat_find_brec+0xdc/0x2a0 [ 1251.463153][ T36] hfs_fill_super+0x58d/0x7e0 [ 1251.468368][ T36] get_tree_bdev_flags+0x38c/0x620 [ 1251.474020][ T36] vfs_get_tree+0x92/0x320 [ 1251.478962][ T36] path_mount+0x7d0/0x23d0 [ 1251.483905][ T36] __x64_sys_mount+0x293/0x310 [ 1251.489193][ T36] do_syscall_64+0x106/0xf80 [ 1251.494483][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.500903][ T36] [ 1251.500903][ T36] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1251.510185][ T36] __lock_acquire+0x14b8/0x2630 [ 1251.515667][ T36] lock_acquire+0x1cf/0x380 [ 1251.520715][ T36] __mutex_lock+0x1a2/0x1b90 [ 1251.525834][ T36] hfs_extend_file+0xa6/0xcf0 [ 1251.531041][ T36] hfs_bmap_reserve+0x2ab/0x3a0 [ 1251.536415][ T36] __hfs_ext_write_extent+0x3c4/0x510 [ 1251.542316][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1251.548040][ T36] hfs_write_inode+0xce/0xab0 [ 1251.553249][ T36] __writeback_single_inode+0xd00/0x13c0 [ 1251.559413][ T36] writeback_sb_inodes+0x766/0x1c70 [ 1251.565147][ T36] wb_writeback+0x1c0/0xbe0 [ 1251.570190][ T36] wb_workfn+0x142/0xc00 [ 1251.574961][ T36] process_one_work+0xa23/0x19a0 [ 1251.580418][ T36] worker_thread+0x5ef/0xe50 [ 1251.585533][ T36] kthread+0x370/0x450 [ 1251.590123][ T36] ret_from_fork+0x754/0xd80 [ 1251.595231][ T36] ret_from_fork_asm+0x1a/0x30 [ 1251.600523][ T36] [ 1251.600523][ T36] other info that might help us debug this: [ 1251.600523][ T36] [ 1251.610740][ T36] Possible unsafe locking scenario: [ 1251.610740][ T36] [ 1251.618176][ T36] CPU0 CPU1 [ 1251.623548][ T36] ---- ---- [ 1251.628898][ T36] lock(&tree->tree_lock/1); [ 1251.633603][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 1251.642190][ T36] lock(&tree->tree_lock/1); [ 1251.649405][ T36] lock(&HFS_I(tree->inode)->extents_lock); [ 1251.655390][ T36] [ 1251.655390][ T36] *** DEADLOCK *** [ 1251.655390][ T36] [ 1251.663517][ T36] 3 locks held by kworker/u8:2/36: [ 1251.668622][ T36] #0: ffff88801fe87148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1251.679371][ T36] #1: ffffc90000ac7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1251.691244][ T36] #2: ffff888032f9c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 1251.701053][ T36] [ 1251.701053][ T36] stack backtrace: [ 1251.706931][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1251.706970][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1251.706994][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 1251.707049][ T36] Call Trace: [ 1251.707061][ T36] [ 1251.707075][ T36] dump_stack_lvl+0x100/0x190 [ 1251.707127][ T36] print_circular_bug.cold+0x178/0x1c7 [ 1251.707184][ T36] check_noncircular+0x146/0x160 [ 1251.707232][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.707281][ T36] __lock_acquire+0x14b8/0x2630 [ 1251.707338][ T36] ? __pfx_stack_trace_save+0x10/0x10 [ 1251.707385][ T36] lock_acquire+0x1cf/0x380 [ 1251.707435][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1251.707481][ T36] ? __pfx___might_resched+0x10/0x10 [ 1251.707515][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.707555][ T36] ? add_lock_to_list+0x99/0x110 [ 1251.707603][ T36] __mutex_lock+0x1a2/0x1b90 [ 1251.707637][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1251.707677][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1251.707717][ T36] ? hfs_find_init+0xb3/0x330 [ 1251.707767][ T36] ? hfs_ext_write_extent+0x192/0x200 [ 1251.707807][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 1251.707839][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.707879][ T36] ? lock_acquire+0x1cf/0x380 [ 1251.707930][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.707975][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708016][ T36] ? trace_contention_end+0x140/0x180 [ 1251.708048][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708088][ T36] ? __mutex_lock+0x26a/0x1b90 [ 1251.708123][ T36] ? hfs_extend_file+0xa6/0xcf0 [ 1251.708159][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708199][ T36] hfs_extend_file+0xa6/0xcf0 [ 1251.708238][ T36] ? __pfx_hfs_extend_file+0x10/0x10 [ 1251.708275][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708323][ T36] hfs_bmap_reserve+0x2ab/0x3a0 [ 1251.708361][ T36] __hfs_ext_write_extent+0x3c4/0x510 [ 1251.708398][ T36] ? hfs_find_init+0x273/0x330 [ 1251.708452][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708496][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1251.708534][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1251.708578][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708617][ T36] ? mpage_writepages+0x177/0x1e0 [ 1251.708665][ T36] ? __pfx_mpage_writepages+0x10/0x10 [ 1251.708715][ T36] hfs_write_inode+0xce/0xab0 [ 1251.708758][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1251.708799][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1251.708863][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1251.708907][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1251.708950][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.708996][ T36] __writeback_single_inode+0xd00/0x13c0 [ 1251.709044][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1251.709088][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709129][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1251.709164][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709208][ T36] writeback_sb_inodes+0x766/0x1c70 [ 1251.709262][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1251.709305][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709345][ T36] ? debug_object_activate+0x331/0x490 [ 1251.709430][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709477][ T36] ? rcu_is_watching+0x12/0xc0 [ 1251.709514][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709554][ T36] ? queue_io+0x287/0x550 [ 1251.709591][ T36] wb_writeback+0x1c0/0xbe0 [ 1251.709632][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709679][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1251.709728][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709768][ T36] ? mark_held_locks+0x40/0x70 [ 1251.709818][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1251.709870][ T36] wb_workfn+0x142/0xc00 [ 1251.709914][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.709954][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1251.710006][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1251.710050][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710094][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710139][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710182][ T36] ? rcu_is_watching+0x12/0xc0 [ 1251.710223][ T36] process_one_work+0xa23/0x19a0 [ 1251.710270][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1251.710302][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710350][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710394][ T36] worker_thread+0x5ef/0xe50 [ 1251.710432][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1251.710473][ T36] ? kthread+0x13a/0x450 [ 1251.710500][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1251.710531][ T36] kthread+0x370/0x450 [ 1251.710558][ T36] ? __pfx_kthread+0x10/0x10 [ 1251.710612][ T36] ret_from_fork+0x754/0xd80 [ 1251.710644][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1251.710675][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1251.710716][ T36] ? __switch_to+0x7b4/0x1120 [ 1251.710755][ T36] ? __pfx_kthread+0x10/0x10 [ 1251.710808][ T36] ret_from_fork_asm+0x1a/0x30 [ 1251.710858][ T36] [ 1252.198975][ T36] hfs: new node 0 already hashed? [ 1252.204692][ T36] ------------[ cut here ]------------ [ 1252.210152][ T36] 1 [ 1252.210167][ T36] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:2/36 [ 1252.222665][ T36] Modules linked in: [ 1252.229199][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1252.238551][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1252.248695][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 1252.254926][ T36] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1252.261060][ T36] Code: 1d e8 6a 0a e9 5f 9c d0 01 e8 23 6e e1 00 4c 89 f7 e8 0b e8 6a 0a e8 16 6e e1 00 89 ee 48 c7 c7 80 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 61 9f d0 01 e8 fa 6d e1 00 e8 15 fb 4d 00 e9 bd a1 d0 [ 1252.280973][ T36] RSP: 0018:ffffc90000ac7030 EFLAGS: 00010282 [ 1252.287091][ T36] RAX: 000000000000001f RBX: ffff88804751c300 RCX: 0000000000000000 [ 1252.295399][ T36] RDX: 000000000000001f RSI: ffffffff81e7ab29 RDI: fffff52000158df7 [ 1252.303414][ T36] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1252.311610][ T36] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1252.319643][ T36] R13: ffff888032f9c000 R14: ffff888032f9c0e0 R15: 0000000000000000 [ 1252.327658][ T36] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 1252.336776][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1252.343424][ T36] CR2: 00007ff775d4da08 CR3: 000000005db62000 CR4: 0000000000350ef0 [ 1252.351796][ T36] Call Trace: [ 1252.355089][ T36] [ 1252.358027][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1252.363030][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.368842][ T36] ? hfs_bnode_put+0x208/0x480 [ 1252.374038][ T36] hfs_bmap_alloc+0x5a7/0x6b0 [ 1252.378828][ T36] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1252.384147][ T36] ? __asan_memcpy+0x3c/0x60 [ 1252.388757][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.394440][ T36] ? hfs_bnode_read.part.0+0x298/0x330 [ 1252.400044][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.405727][ T36] ? folio_mark_accessed+0xf3/0x1040 [ 1252.411136][ T36] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1252.416894][ T36] ? rcu_is_watching+0x12/0xc0 [ 1252.421706][ T36] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1252.428249][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1252.433477][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.439166][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1252.444068][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.449852][ T36] ? hfs_bnode_put+0x208/0x480 [ 1252.454654][ T36] hfs_brec_insert+0x8ba/0xc20 [ 1252.459579][ T36] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1252.464879][ T36] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1252.469960][ T36] __hfs_ext_write_extent+0x3ef/0x510 [ 1252.475480][ T36] ? hfs_find_init+0x273/0x330 [ 1252.480465][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.486241][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1252.491595][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1252.497349][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.503048][ T36] ? mpage_writepages+0x177/0x1e0 [ 1252.508126][ T36] ? __pfx_mpage_writepages+0x10/0x10 [ 1252.513583][ T36] hfs_write_inode+0xce/0xab0 [ 1252.518315][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1252.523770][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1252.528788][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1252.534925][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1252.541035][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.547018][ T36] __writeback_single_inode+0xd00/0x13c0 [ 1252.552691][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1252.558824][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.564502][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1252.569739][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.575402][ T36] writeback_sb_inodes+0x766/0x1c70 [ 1252.580688][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1252.586476][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.592300][ T36] ? debug_object_activate+0x331/0x490 [ 1252.597877][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.603885][ T36] ? rcu_is_watching+0x12/0xc0 [ 1252.608803][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.614500][ T36] ? queue_io+0x287/0x550 [ 1252.618886][ T36] wb_writeback+0x1c0/0xbe0 [ 1252.623414][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.629066][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1252.634154][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.639816][ T36] ? mark_held_locks+0x40/0x70 [ 1252.644651][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1252.649915][ T36] wb_workfn+0x142/0xc00 [ 1252.654247][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.659905][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1252.665762][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1252.670663][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.676432][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.682095][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.687787][ T36] ? rcu_is_watching+0x12/0xc0 [ 1252.692727][ T36] process_one_work+0xa23/0x19a0 [ 1252.697913][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1252.703357][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.709117][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.714811][ T36] worker_thread+0x5ef/0xe50 [ 1252.719432][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1252.724562][ T36] ? kthread+0x13a/0x450 [ 1252.728829][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1252.733987][ T36] kthread+0x370/0x450 [ 1252.738143][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.742780][ T36] ret_from_fork+0x754/0xd80 [ 1252.747433][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1252.752573][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.758289][ T36] ? __switch_to+0x7b4/0x1120 [ 1252.762984][ T36] ? __pfx_kthread+0x10/0x10 [ 1252.767597][ T36] ret_from_fork_asm+0x1a/0x30 [ 1252.772446][ T36] [ 1252.775486][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1252.782757][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1252.792082][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1252.802224][ T36] Workqueue: writeback wb_workfn (flush-7:1) [ 1252.808248][ T36] Call Trace: [ 1252.811515][ T36] [ 1252.814442][ T36] dump_stack_lvl+0x100/0x190 [ 1252.819144][ T36] vpanic+0x552/0x970 [ 1252.823130][ T36] ? __pfx_vpanic+0x10/0x10 [ 1252.827632][ T36] ? lock_release+0x263/0x320 [ 1252.832601][ T36] panic+0xd1/0xe0 [ 1252.836338][ T36] ? __pfx_panic+0x10/0x10 [ 1252.840777][ T36] ? check_panic_on_warn+0x1f/0x90 [ 1252.845924][ T36] check_panic_on_warn.cold+0x19/0x34 [ 1252.851294][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1252.856584][ T36] __warn.cold+0x191/0x348 [ 1252.861014][ T36] __report_bug+0x296/0x3d0 [ 1252.865555][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1252.870853][ T36] ? __pfx___report_bug+0x10/0x10 [ 1252.875890][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.881547][ T36] ? preempt_schedule_thunk+0x16/0x30 [ 1252.886936][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.892584][ T36] ? preempt_count_add+0x76/0x150 [ 1252.897616][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.903264][ T36] ? __wake_up_klogd+0xe2/0x140 [ 1252.908118][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1252.913789][ T36] ? vprintk_emit+0x1c9/0x6b0 [ 1252.918497][ T36] ? __pfx_vprintk_emit+0x10/0x10 [ 1252.923539][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1252.928840][ T36] report_bug+0xb2/0x220 [ 1252.933110][ T36] ? hfs_bnode_create.cold+0x41/0x49 [ 1252.938404][ T36] handle_bug+0x16a/0x2a0 [ 1252.942756][ T36] exc_invalid_op+0x17/0x50 [ 1252.947275][ T36] asm_exc_invalid_op+0x1a/0x20 [ 1252.952221][ T36] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 1252.958145][ T36] Code: 1d e8 6a 0a e9 5f 9c d0 01 e8 23 6e e1 00 4c 89 f7 e8 0b e8 6a 0a e8 16 6e e1 00 89 ee 48 c7 c7 80 7d d1 8b e8 f8 e2 fa ff 90 <0f> 0b 90 e9 61 9f d0 01 e8 fa 6d e1 00 e8 15 fb 4d 00 e9 bd a1 d0 [ 1252.977858][ T36] RSP: 0018:ffffc90000ac7030 EFLAGS: 00010282 [ 1252.983940][ T36] RAX: 000000000000001f RBX: ffff88804751c300 RCX: 0000000000000000 [ 1252.991915][ T36] RDX: 000000000000001f RSI: ffffffff81e7ab29 RDI: fffff52000158df7 [ 1252.999890][ T36] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1253.007869][ T36] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000 [ 1253.015846][ T36] R13: ffff888032f9c000 R14: ffff888032f9c0e0 R15: 0000000000000000 [ 1253.023828][ T36] ? vprintk_emit+0x1c9/0x6b0 [ 1253.028530][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1253.033404][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.039056][ T36] ? hfs_bnode_put+0x208/0x480 [ 1253.043830][ T36] hfs_bmap_alloc+0x5a7/0x6b0 [ 1253.048526][ T36] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 1253.053730][ T36] ? __asan_memcpy+0x3c/0x60 [ 1253.058332][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.063976][ T36] ? hfs_bnode_read.part.0+0x298/0x330 [ 1253.069549][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.075196][ T36] ? folio_mark_accessed+0xf3/0x1040 [ 1253.080546][ T36] hfs_btree_inc_height.isra.0+0xff/0x820 [ 1253.086274][ T36] ? rcu_is_watching+0x12/0xc0 [ 1253.091054][ T36] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 1253.097394][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1253.102608][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.108258][ T36] ? _raw_spin_unlock+0x28/0x50 [ 1253.113132][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.118784][ T36] ? hfs_bnode_put+0x208/0x480 [ 1253.123560][ T36] hfs_brec_insert+0x8ba/0xc20 [ 1253.128437][ T36] ? __pfx_hfs_brec_insert+0x10/0x10 [ 1253.133730][ T36] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 1253.138768][ T36] __hfs_ext_write_extent+0x3ef/0x510 [ 1253.144237][ T36] ? hfs_find_init+0x273/0x330 [ 1253.149027][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.154678][ T36] hfs_ext_write_extent+0x1b7/0x200 [ 1253.159893][ T36] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 1253.165719][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.171364][ T36] ? mpage_writepages+0x177/0x1e0 [ 1253.176426][ T36] ? __pfx_mpage_writepages+0x10/0x10 [ 1253.181817][ T36] hfs_write_inode+0xce/0xab0 [ 1253.186510][ T36] ? __pfx_hfs_write_inode+0x10/0x10 [ 1253.191810][ T36] ? __lock_acquire+0x4a5/0x2630 [ 1253.196784][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1253.202605][ T36] ? __writeback_single_inode+0x454/0x13c0 [ 1253.208431][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.214084][ T36] __writeback_single_inode+0xd00/0x13c0 [ 1253.219735][ T36] ? __pfx___writeback_single_inode+0x10/0x10 [ 1253.225813][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.231456][ T36] ? do_raw_spin_unlock+0x145/0x1e0 [ 1253.236660][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.242306][ T36] writeback_sb_inodes+0x766/0x1c70 [ 1253.247533][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1253.253176][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.258837][ T36] ? debug_object_activate+0x331/0x490 [ 1253.264369][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.270022][ T36] ? rcu_is_watching+0x12/0xc0 [ 1253.274794][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.280441][ T36] ? queue_io+0x287/0x550 [ 1253.284777][ T36] wb_writeback+0x1c0/0xbe0 [ 1253.289298][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.294946][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 1253.299990][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.305632][ T36] ? mark_held_locks+0x40/0x70 [ 1253.310424][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 1253.315644][ T36] wb_workfn+0x142/0xc00 [ 1253.319905][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.325636][ T36] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1253.331476][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 1253.336256][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.341899][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.347546][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.353188][ T36] ? rcu_is_watching+0x12/0xc0 [ 1253.357966][ T36] process_one_work+0xa23/0x19a0 [ 1253.362922][ T36] ? __pfx_process_one_work+0x10/0x10 [ 1253.368474][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.374141][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.379794][ T36] worker_thread+0x5ef/0xe50 [ 1253.384398][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1253.389517][ T36] ? kthread+0x13a/0x450 [ 1253.393758][ T36] ? __pfx_worker_thread+0x10/0x10 [ 1253.398870][ T36] kthread+0x370/0x450 [ 1253.402940][ T36] ? __pfx_kthread+0x10/0x10 [ 1253.407553][ T36] ret_from_fork+0x754/0xd80 [ 1253.412156][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 1253.417270][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1253.422914][ T36] ? __switch_to+0x7b4/0x1120 [ 1253.427601][ T36] ? __pfx_kthread+0x10/0x10 [ 1253.432305][ T36] ret_from_fork_asm+0x1a/0x30 [ 1253.437092][ T36] [ 1253.440424][ T36] Kernel Offset: disabled [ 1253.444752][ T36] Rebooting in 86400 seconds..