last executing test programs: 4.106420655s ago: executing program 4 (id=7468): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfe, 0x6178, &(0x7f000000ca40)="$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") symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.623653143s ago: executing program 4 (id=7489): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x38, 0x1, 0x3, "b49ef56105474907002fe4cd2b2e76b2f1cbff0000000000000000000800", 0x41495043}) 2.34495175s ago: executing program 4 (id=7493): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 2.039440149s ago: executing program 4 (id=7495): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000001c0)={0x0, 0x0, 0xfdfd, 0x2, 0xa9d8, 0x100}) 1.816220762s ago: executing program 2 (id=7497): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000002200)=[{&(0x7f0000001e40)="aab38885", 0x4}, {0x0, 0x56}], 0x2) 1.805531722s ago: executing program 4 (id=7498): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009058202400000000009050302"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.570094876s ago: executing program 1 (id=7501): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="68c5000000000000140003006e657464657673696d3000000000000014001680100001800c0009"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x200088c4) 1.536862518s ago: executing program 2 (id=7502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x9, 0x70bd27, 0x25dfdc01, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xa, 0x32}, [@mark={0xc, 0x15, {0x35075c, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x40008) 1.386816508s ago: executing program 0 (id=7505): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x138d, 0xd, 0xf909, 0x899d, 0x80, 0x9, 0x7, 0x810, 0xfffffe01, 0x1, 0x0, 0x2, 0x6, 0x5, 0x0], 0x1, 0x4000003}) 1.364165769s ago: executing program 2 (id=7506): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, &(0x7f0000000140)) 1.147120562s ago: executing program 0 (id=7508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', 0x0, 0x0) 1.137226592s ago: executing program 1 (id=7509): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000340)=""/3, 0x28}], 0x2) 1.055548628s ago: executing program 3 (id=7510): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 927.074675ms ago: executing program 1 (id=7511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x1b0, 0x12, 0x60d, 0x0, 0x202, 0x280, 0x2e8, 0x2e8, 0x280, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xfffd, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x49, 0x2}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 843.74484ms ago: executing program 3 (id=7512): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 800.240963ms ago: executing program 2 (id=7513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) 781.606824ms ago: executing program 0 (id=7514): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=@allocspi={0x100, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23, 0x0, 0x4e24, 0x3ff, 0xa, 0xa0, 0xa0, 0x84}, {@in6=@private0, 0x4d3, 0x32}, @in6=@loopback, {0xd6, 0x2, 0x2, 0x1, 0x9, 0x9, 0x0, 0x9}, {0x101, 0x2, 0x2fe, 0xfff}, {0x4c0, 0xa9d, 0x7cc}, 0x70bd2c, 0x3501, 0x2, 0x0, 0x9, 0x40}, 0x9, 0xfffffff9}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000044) 683.7244ms ago: executing program 1 (id=7515): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xbd, &(0x7f0000000000), &(0x7f0000000240)=0x4) 616.733564ms ago: executing program 3 (id=7516): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x9, 0x0, 0x7, 0x0}) 603.856924ms ago: executing program 0 (id=7517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x80, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 516.35379ms ago: executing program 2 (id=7518): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc16, &(0x7f0000001940)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400) 462.644053ms ago: executing program 1 (id=7519): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000340)={'macvtap0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc, 0x0, 0x0, 0x8}}) 447.265963ms ago: executing program 0 (id=7520): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030373737372c6469725f756d61736b3d30303030303030303030303030303030303030303030302c696f636861727365743d69736f383835392d362c636f6465706167653d63703835352c63726561746f723d4ddd71752c00eeabc72a9832436950c6116498dda8be60a94746ea68766f63d1d63944fbda2a9337439b37b6f2a694ba98f40070d09c3890bd28a2018f1adfe1e0a630020a9cac1a43800a70a9328ddb2a2f2e207da7cd3caf243b39eaff4966b7aa97cb6cc7d2cfc59e7a976de0a00d23c7ffaaa056cc4f8bc7b4c0f9a21db642b3e832e30a90ba1b9e7933b77c60f6a1b9ca9128f0a2d0e23373c9d15c79865bae97ddd82b98001b6aa9c5390e4deaf5f0ee492c6842b1c08486e479a889491459a257e9d4083634dac6cd58520f72e6c2f11bbd5b03655bb1863b16f3", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 401.226546ms ago: executing program 3 (id=7521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 265.901564ms ago: executing program 1 (id=7522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000012000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 217.418557ms ago: executing program 3 (id=7523): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0xcc, 0x4) 110.483644ms ago: executing program 2 (id=7524): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}, 0x40c0) 28.210779ms ago: executing program 3 (id=7525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1a42, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6) 27.366129ms ago: executing program 0 (id=7526): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r0, 0x0, 0x0) 0s ago: executing program 4 (id=7527): syz_mount_image$hfs(&(0x7f0000000580), &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000000, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uid}]}, 0x1, 0x2dd, &(0x7f0000000680)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x800000, 0x0) kernel console output (not intermixed with test programs): [ 769.658252][ T5016] usb 2-1: Manufacturer: syz [ 769.724880][ T5016] usb 2-1: SerialNumber: syz [ 769.767703][ T5016] usb 2-1: config 0 descriptor?? [ 769.809209][ T5016] gspca_main: se401-2.14.0 probing 047d:5003 [ 770.235759][ T5016] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 770.250950][ T5016] se401: probe of 2-1:0.0 failed with error -71 [ 770.261858][T18691] EXT4-fs (loop4): Test dummy encryption mode enabled [ 770.287702][ T5016] usb 2-1: USB disconnect, device number 8 [ 770.318646][T18691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 770.695533][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 771.070005][T18736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.626706][T18759] loop3: detected capacity change from 0 to 256 [ 771.701894][T18759] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 772.104174][T18774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6039'. [ 772.157201][T18777] loop3: detected capacity change from 0 to 512 [ 772.259480][T18777] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.6038: corrupted in-inode xattr [ 772.303550][T18781] kcapi: manufacturer command 18446744073709551608 unknown. [ 772.354646][T18777] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.6038: couldn't read orphan inode 15 (err -117) [ 772.381539][T18777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 772.594631][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 772.754986][T18794] loop3: detected capacity change from 0 to 64 [ 772.869237][T18796] netlink: 'syz.4.6048': attribute type 10 has an invalid length. [ 773.193623][T18806] sctp: [Deprecated]: syz.2.6054 (pid 18806) Use of int in max_burst socket option. [ 773.193623][T18806] Use struct sctp_assoc_value instead [ 773.223499][T18808] netlink: 'syz.3.6053': attribute type 6 has an invalid length. [ 773.380809][T18802] loop0: detected capacity change from 0 to 4096 [ 773.410234][T18802] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 773.504557][T18815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'. [ 774.221229][T18840] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 774.265817][T18840] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 774.283985][T18842] loop3: detected capacity change from 0 to 2048 [ 774.342023][T18842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.467102][T18848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6074'. [ 774.482638][T18848] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6074'. [ 774.689796][T18856] netlink: 'syz.1.6078': attribute type 10 has an invalid length. [ 774.698379][T16114] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 774.935288][T16114] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 774.967747][T16114] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 774.994074][T16114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.007423][T18864] xt_ecn: cannot match TCP bits for non-tcp packets [ 775.030122][T16114] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 775.225669][T18870] loop3: detected capacity change from 0 to 512 [ 775.332748][T18870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 775.352756][T18870] ext4 filesystem being mounted at /1187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.380227][T18877] xt_connbytes: Forcing CT accounting to be enabled [ 775.451769][T18880] loop1: detected capacity change from 0 to 128 [ 775.460284][T18870] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.6085: corrupted xattr block 33 [ 775.482030][T18870] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 775.520426][T18880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 775.547147][T18880] ext4 filesystem being mounted at /1251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 775.652036][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 775.717756][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 775.872158][T18892] loop1: detected capacity change from 0 to 16 [ 775.900868][T18892] erofs: (device loop1): mounted with root inode @ nid 36. [ 775.941402][T18892] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 775.982405][ T4284] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 775.996644][T18892] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 7514 in[4096, 0] out[8192] [ 776.028863][ T26] audit: type=1800 audit(1770360243.876:57): pid=18892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6094" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 776.196394][T16114] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 776.420169][T16114] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 776.429062][T16114] stv0680 3-1:4.0: last error: 85, command = 0x7f [ 776.438018][T16114] usb 3-1: USB disconnect, device number 16 [ 776.532107][T18910] loop3: detected capacity change from 0 to 4096 [ 776.562766][T18910] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 776.570499][ T4394] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 776.633354][T16122] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 776.777018][ T4394] usb 5-1: Using ep0 maxpacket: 32 [ 776.794432][ T4394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.818326][ T4394] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 776.838785][ T4394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.838864][T16122] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 776.857918][ T4394] usb 5-1: Product: syz [ 776.863362][ T4394] usb 5-1: Manufacturer: syz [ 776.868032][ T4394] usb 5-1: SerialNumber: syz [ 776.877383][T16122] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 776.909340][ T4394] usb 5-1: config 0 descriptor?? [ 776.911565][T16122] usb 1-1: config 220 has no interface number 2 [ 776.920837][T16122] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 776.931153][ T4394] cdc_ether 5-1:0.0: skipping garbage [ 776.939565][ T4394] cdc_ether 5-1:0.0: skipping garbage [ 776.962719][ T4394] usb 5-1: bad CDC descriptors [ 776.967280][T16122] usb 1-1: config 220 interface 0 has no altsetting 0 [ 776.969002][ T4394] usb 5-1: unsupported MDLM descriptors [ 776.990587][T16122] usb 1-1: config 220 interface 76 has no altsetting 0 [ 777.012219][T16122] usb 1-1: config 220 interface 1 has no altsetting 0 [ 777.035502][T16122] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 777.078520][T16122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.099396][T16122] usb 1-1: Product: syz [ 777.129184][T16122] usb 1-1: Manufacturer: syz [ 777.133867][T16122] usb 1-1: SerialNumber: syz [ 777.160636][ T4394] usb 5-1: USB disconnect, device number 7 [ 777.306808][ T5540] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 777.379432][T16122] usb 1-1: selecting invalid altsetting 0 [ 777.392799][T16122] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 777.405329][T16122] usb 1-1: No valid video chain found. [ 777.441630][T18926] loop2: detected capacity change from 0 to 4096 [ 777.453488][T16122] usb 1-1: selecting invalid altsetting 0 [ 777.466993][T16122] usbtest: probe of 1-1:220.1 failed with error -22 [ 777.484875][T16122] usb 1-1: USB disconnect, device number 8 [ 777.522717][ T5540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.538296][T18926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 777.547476][ T5540] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.562121][ T5540] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 777.571659][ T5540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.581918][ T5540] usb 4-1: config 0 descriptor?? [ 777.629480][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 777.828855][ T5540] usb 4-1: USB disconnect, device number 24 [ 777.944639][T18939] loop4: detected capacity change from 0 to 512 [ 777.965239][T18939] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 778.006997][T18939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 778.035922][T18939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 778.060850][T18939] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.6117: bad orphan inode 267 [ 778.076391][T16122] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 778.099941][T18942] tmpfs: Bad value for 'mpol' [ 778.128782][T18939] EXT4-fs (loop4): Remounting filesystem read-only [ 778.146637][T18939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 778.180588][T18939] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.6117: dx entry: limit 0 != root limit 125 [ 778.217885][T18939] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.6117: Corrupt directory, running e2fsck is recommended [ 778.281499][T16122] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 778.300765][T16122] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 778.327458][T16122] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 778.341305][T18946] loop1: detected capacity change from 0 to 256 [ 778.348727][T16122] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 778.366933][T18946] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x9059fefc, utbl_chksum : 0xe619d30d) [ 778.379331][T16122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 778.401918][T16122] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 778.437684][T18948] loop0: detected capacity change from 0 to 2048 [ 778.449988][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 778.462230][T16122] usb 3-1: string descriptor 0 read error: -22 [ 778.482782][T16122] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 778.519338][T16122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.542012][T18948] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 778.560178][T16122] usb 3-1: config 0 descriptor?? [ 778.590651][T18935] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 778.599120][T16122] hub 3-1:0.0: bad descriptor, ignoring hub [ 778.618005][T18948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.629091][T16122] hub: probe of 3-1:0.0 failed with error -5 [ 778.656656][T16122] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 779.049767][ T2171] usb 3-1: USB disconnect, device number 17 [ 779.346169][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.373725][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.390593][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.401867][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.412074][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.424550][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.435491][T18967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.446703][T18967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.457679][T18970] netlink: 'syz.0.6132': attribute type 5 has an invalid length. [ 779.470859][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6132'. [ 779.481156][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6131'. [ 779.953259][T18984] device sit2 entered promiscuous mode [ 780.108808][T18987] loop3: detected capacity change from 0 to 4096 [ 780.140279][T18987] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 780.358658][T19000] netlink: 'syz.2.6146': attribute type 8 has an invalid length. [ 780.426031][T19000] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6146'. [ 780.882543][T19013] netlink: 'syz.1.6153': attribute type 10 has an invalid length. [ 781.047051][T19013] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 781.365318][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6158'. [ 781.535997][T19030] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6163'. [ 781.733595][T19030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.792436][T19039] loop2: detected capacity change from 0 to 256 [ 781.799918][T19030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.825145][T19039] exfat: Deprecated parameter 'utf8' [ 781.846386][T19030] bond0 (unregistering): Released all slaves [ 781.899336][T19039] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 782.374226][T19055] netlink: 'syz.3.6174': attribute type 21 has an invalid length. [ 782.427192][T19060] loop0: detected capacity change from 0 to 256 [ 782.569867][T19058] netlink: 57 bytes leftover after parsing attributes in process `syz.1.6175'. [ 782.831856][T19069] loop4: detected capacity change from 0 to 2048 [ 782.903551][T19069] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 782.987746][T19077] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 783.581930][T19101] loop4: detected capacity change from 0 to 2048 [ 783.675468][T19101] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 783.731360][T19101] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 784.143348][T19116] loop2: detected capacity change from 0 to 1764 [ 784.373194][ T4394] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 784.464311][ T5540] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 784.589594][ T4394] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 784.608883][ T4394] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 784.632445][ T4394] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 784.670042][ T4394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.681416][ T5540] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 784.693840][ T5540] usb 1-1: config 0 has no interface number 0 [ 784.715272][ T4394] usb 4-1: Product: syz [ 784.719525][ T4394] usb 4-1: Manufacturer: syz [ 784.741546][ T4394] usb 4-1: SerialNumber: syz [ 784.748268][ T5540] usb 1-1: New USB device found, idVendor=2639, idProduct=0012, bcdDevice=65.b5 [ 784.757414][ T5540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.767815][ T5540] usb 1-1: Product: syz [ 784.776692][ T5540] usb 1-1: Manufacturer: syz [ 784.782165][ T5540] usb 1-1: SerialNumber: syz [ 784.809784][ T5540] usb 1-1: config 0 descriptor?? [ 784.842958][ T5540] xsens_mt 1-1:0.1: xsens_mt converter detected [ 784.874162][ T5540] usb 1-1: xsens_mt converter now attached to ttyUSB0 [ 785.009463][ T4394] usb 4-1: USB disconnect, device number 25 [ 785.033298][T19149] loop2: detected capacity change from 0 to 1024 [ 785.070571][T16113] usb 1-1: USB disconnect, device number 9 [ 785.082343][T19149] syz.2.6221: attempt to access beyond end of device [ 785.082343][T19149] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 785.104260][T16113] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 785.118474][T19149] Buffer I/O error on dev loop2, logical block 2889, async page read [ 785.126611][T16113] xsens_mt 1-1:0.1: device disconnected [ 785.139663][T19149] syz.2.6221: attempt to access beyond end of device [ 785.139663][T19149] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 785.186411][T19149] Buffer I/O error on dev loop2, logical block 2889, async page read [ 785.213642][ T26] audit: type=1800 audit(1770360252.463:58): pid=19149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6221" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 785.257065][T19149] hfsplus: can't free extent [ 785.900580][T19172] loop4: detected capacity change from 0 to 2048 [ 785.967799][T19172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.309099][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 786.903143][ T26] audit: type=1326 audit(1770360254.043:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19208 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 787.008418][ T26] audit: type=1326 audit(1770360254.081:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19208 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 787.088861][ T26] audit: type=1326 audit(1770360254.081:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19208 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 787.119011][T19217] loop4: detected capacity change from 0 to 512 [ 787.166797][T19217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 787.199799][ T26] audit: type=1326 audit(1770360254.081:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19208 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 787.288233][T19223] loop1: detected capacity change from 0 to 512 [ 787.295060][T19217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 787.313191][T19217] ext4 filesystem being mounted at /1301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 787.403490][T19223] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 787.452372][T19223] ext4 filesystem being mounted at /1294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.535036][T19223] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #12: block 32: comm syz.1.6256: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 787.566909][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 787.632836][T19223] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #12: comm syz.1.6256: directory missing '.' [ 787.693158][T19233] loop4: detected capacity change from 0 to 512 [ 787.735624][T19233] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.6260: bad orphan inode 13 [ 787.763607][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 787.776260][T19233] ext4_test_bit(bit=12, block=4) = 1 [ 787.781670][T19233] is_bad_inode(inode)=0 [ 787.788031][T19233] NEXT_ORPHAN(inode)=0 [ 787.792145][T19233] max_ino=32 [ 787.795778][T19233] i_nlink=1 [ 787.799084][T19233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 787.814127][T19233] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.6260: Unrecognised inode hash code 20 [ 787.830290][T19233] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.6260: Corrupt directory, running e2fsck is recommended [ 787.916088][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 787.923735][T19238] trusted_key: encrypted_key: insufficient parameters specified [ 788.639239][T19263] loop0: detected capacity change from 0 to 16 [ 788.701546][T19269] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.741318][T19263] erofs: (device loop0): mounted with root inode @ nid 36. [ 788.847006][T19263] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 789.133006][T19281] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 789.307067][ T26] audit: type=1326 audit(1770360256.298:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19286 comm="syz.1.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 789.382333][ T26] audit: type=1326 audit(1770360256.326:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19286 comm="syz.1.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 789.465054][ T26] audit: type=1326 audit(1770360256.326:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19286 comm="syz.1.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 789.595697][ T26] audit: type=1326 audit(1770360256.326:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19286 comm="syz.1.6285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 790.049024][T19315] loop1: detected capacity change from 0 to 1024 [ 790.106577][T19319] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 790.106577][T19319] SȘȞZ6' [ 790.127343][T19315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 790.199163][T19315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 790.259473][T19324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6303'. [ 790.586941][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 791.255797][T19352] loop0: detected capacity change from 0 to 512 [ 791.344321][T19352] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 791.406208][T19352] ext4 filesystem being mounted at /1273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.509395][T19352] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz.0.6316: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 791.598784][T19352] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.6316: directory missing '.' [ 791.729623][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 791.938888][T19374] netlink: 'syz.1.6327': attribute type 4 has an invalid length. [ 791.969737][T19374] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6327'. [ 792.229311][T19385] loop1: detected capacity change from 0 to 512 [ 792.261444][T19386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6332'. [ 792.343494][T19385] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.6333: bg 0: block 473: padding at end of block bitmap is not set [ 792.363166][T19385] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 792.403170][T19385] EXT4-fs (loop1): 1 orphan inode deleted [ 792.423744][ T35] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 792.426520][T19385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 792.444270][T19385] ext4 filesystem being mounted at /1310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.476908][ T35] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 1 [ 792.519582][ T2171] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 792.543098][T19385] Invalid option length (230) for dns_resolver key [ 792.675789][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 792.722616][ T2171] usb 5-1: Using ep0 maxpacket: 16 [ 792.727949][ T26] audit: type=1326 audit(1770360259.497:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.2.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 792.759004][ T2171] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 792.785498][ T2171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.794163][ T26] audit: type=1326 audit(1770360259.497:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.2.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 792.831104][ T2171] usb 5-1: Product: syz [ 792.835403][ T2171] usb 5-1: Manufacturer: syz [ 792.869285][ T2171] usb 5-1: SerialNumber: syz [ 792.880955][ T2171] r8152-cfgselector 5-1: config 0 descriptor?? [ 792.894663][ T26] audit: type=1326 audit(1770360259.534:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.2.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 792.960137][T19404] loop1: detected capacity change from 0 to 64 [ 792.979185][ T26] audit: type=1326 audit(1770360259.534:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.2.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 793.021538][T19406] loop3: detected capacity change from 0 to 256 [ 793.056354][ T26] audit: type=1326 audit(1770360259.534:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19399 comm="syz.2.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 793.134497][T19406] FAT-fs (loop3): Directory bread(block 64) failed [ 793.150533][T19406] FAT-fs (loop3): Directory bread(block 65) failed [ 793.176622][T19406] FAT-fs (loop3): Directory bread(block 66) failed [ 793.202168][T19406] FAT-fs (loop3): Directory bread(block 67) failed [ 793.229453][T19406] FAT-fs (loop3): Directory bread(block 68) failed [ 793.275783][T19406] FAT-fs (loop3): Directory bread(block 69) failed [ 793.310821][T19406] FAT-fs (loop3): Directory bread(block 70) failed [ 793.317490][T19406] FAT-fs (loop3): Directory bread(block 71) failed [ 793.384326][T19406] FAT-fs (loop3): Directory bread(block 72) failed [ 793.392896][ T2171] r8152-cfgselector 5-1: Unknown version 0x0000 [ 793.416198][ T2171] r8152-cfgselector 5-1: USB disconnect, device number 8 [ 793.450093][T19406] FAT-fs (loop3): Directory bread(block 73) failed [ 793.805177][T19424] usb usb8: usbfs: process 19424 (syz.2.6352) did not claim interface 0 before use [ 794.258176][T19440] loop0: detected capacity change from 0 to 1024 [ 794.308942][T19440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 794.468333][T19440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 794.620014][T19461] loop1: detected capacity change from 0 to 1024 [ 794.722461][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 794.998609][ T26] audit: type=1326 audit(1770360261.614:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.1.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 795.040356][T19474] netlink: 'syz.3.6375': attribute type 2 has an invalid length. [ 795.095861][ T26] audit: type=1326 audit(1770360261.651:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.1.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 795.161725][ T26] audit: type=1326 audit(1770360261.670:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.1.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 795.238910][T19479] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6377'. [ 795.256383][ T26] audit: type=1326 audit(1770360261.670:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.1.6373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 795.516115][T19479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.575166][T19479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.619049][T19479] bond0 (unregistering): Released all slaves [ 795.689804][T19487] loop1: detected capacity change from 0 to 4096 [ 795.749774][T19487] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 795.835521][T19487] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 795.863165][T19487] ntfs3: loop1: mft corrupted [ 795.878577][T19487] ntfs3: loop1: Failed to load $Extend. [ 795.962749][T19487] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 796.556527][T19522] loop4: detected capacity change from 0 to 136 [ 796.590769][T19522] Attempt to read inode for relocated directory [ 796.641056][T19522] syz.4.6398: attempt to access beyond end of device [ 796.641056][T19522] loop4: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 796.703667][T19522] syz.4.6398: attempt to access beyond end of device [ 796.703667][T19522] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 796.726804][T19526] loop2: detected capacity change from 0 to 2048 [ 796.793774][T19526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.817171][ T2171] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 797.020137][ T2171] usb 1-1: Using ep0 maxpacket: 32 [ 797.027751][ T2171] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.060096][ T2171] usb 1-1: config 0 has no interface number 0 [ 797.096236][ T2171] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 797.131708][ T2171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.179656][ T2171] usb 1-1: Product: syz [ 797.185077][ T2171] usb 1-1: Manufacturer: syz [ 797.189742][ T2171] usb 1-1: SerialNumber: syz [ 797.245795][ T2171] usb 1-1: config 0 descriptor?? [ 797.279264][ T2171] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 797.516294][ T2171] etas_es58x 1-1:0.2: Product info: 424242424242 [ 797.770481][T16122] usb 1-1: USB disconnect, device number 10 [ 797.777480][T16122] etas_es58x 1-1:0.2: Disconnecting syz syz [ 798.481606][T19583] unsupported nlmsg_type 40 [ 799.756754][T19591] loop4: detected capacity change from 0 to 32768 [ 799.838976][T19591] (syz.4.6429,19591,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 799.943290][T19635] xt_bpf: check failed: parse error [ 799.948794][T19591] (syz.4.6429,19591,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 800.062883][T19591] JBD2: Ignoring recovery information on journal [ 800.300597][T19591] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 800.625291][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 800.889589][T19670] Invalid ELF header magic: != ELF [ 801.478198][ T5540] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 801.702803][ T5540] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 801.711928][ T5540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.760351][ T5540] usb 5-1: config 0 descriptor?? [ 801.777112][ T5540] cp210x 5-1:0.0: cp210x converter detected [ 802.209265][ T5540] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 802.237202][ T5540] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 802.265841][T19690] loop2: detected capacity change from 0 to 32768 [ 802.276725][ T5540] usb 5-1: cp210x converter now attached to ttyUSB0 [ 802.301900][ T5540] usb 5-1: USB disconnect, device number 9 [ 802.326507][T19718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6480'. [ 802.351417][ T5540] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 802.366434][ T5540] cp210x 5-1:0.0: device disconnected [ 802.424424][T19690] read_mapping_page failed! [ 802.705794][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 802.705811][ T26] audit: type=1326 audit(1770360268.826:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 802.739100][ T26] audit: type=1326 audit(1770360268.863:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 802.850694][ T26] audit: type=1326 audit(1770360268.882:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 802.996502][ T26] audit: type=1326 audit(1770360268.882:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 803.118109][ T26] audit: type=1326 audit(1770360268.882:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 804.728184][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6520'. [ 804.737225][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6520'. [ 804.810081][T19809] fuse: Bad value for 'fd' [ 805.427412][T19833] loop4: detected capacity change from 0 to 256 [ 805.783945][T19843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.855264][T19814] loop2: detected capacity change from 0 to 32768 [ 805.880829][T19814] (syz.2.6525,19814,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 805.910026][T19845] loop3: detected capacity change from 0 to 256 [ 805.945507][T19814] (syz.2.6525,19814,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 806.027156][T19847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 806.040099][T19845] FAT-fs (loop3): Directory bread(block 64) failed [ 806.100269][T19814] JBD2: Ignoring recovery information on journal [ 806.130691][T19845] FAT-fs (loop3): Directory bread(block 65) failed [ 806.143584][T19845] FAT-fs (loop3): Directory bread(block 66) failed [ 806.193011][T19845] FAT-fs (loop3): Directory bread(block 67) failed [ 806.199723][T19845] FAT-fs (loop3): Directory bread(block 68) failed [ 806.226112][T19814] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 806.266791][T19845] FAT-fs (loop3): Directory bread(block 69) failed [ 806.358866][T19845] FAT-fs (loop3): Directory bread(block 70) failed [ 806.382733][T19845] FAT-fs (loop3): Directory bread(block 71) failed [ 806.408723][T19845] FAT-fs (loop3): Directory bread(block 72) failed [ 806.419825][T19857] loop1: detected capacity change from 0 to 256 [ 806.433478][T19845] FAT-fs (loop3): Directory bread(block 73) failed [ 806.531271][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 806.587732][T19857] FAT-fs (loop1): Directory bread(block 64) failed [ 806.616560][T19857] FAT-fs (loop1): Directory bread(block 65) failed [ 806.694806][T19857] FAT-fs (loop1): Directory bread(block 66) failed [ 806.755336][T19857] FAT-fs (loop1): Directory bread(block 67) failed [ 806.776846][T19857] FAT-fs (loop1): Directory bread(block 68) failed [ 806.796996][T19857] FAT-fs (loop1): Directory bread(block 69) failed [ 806.830515][T19857] FAT-fs (loop1): Directory bread(block 70) failed [ 806.862491][T19857] FAT-fs (loop1): Directory bread(block 71) failed [ 806.898391][T19857] FAT-fs (loop1): Directory bread(block 72) failed [ 806.905009][T19857] FAT-fs (loop1): Directory bread(block 73) failed [ 807.434195][T16114] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 807.456522][T19885] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 807.494283][T19887] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 807.556785][T19887] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 807.579465][T19887] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 807.619346][T19887] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 807.643933][T19887] device geneve2 entered promiscuous mode [ 807.652864][T16114] usb 3-1: Using ep0 maxpacket: 16 [ 807.666085][T16114] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 807.688954][T16114] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 807.697881][T16114] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 807.712875][T16114] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 807.726939][T16114] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 807.738506][T16114] usb 3-1: config 0 has no interface number 0 [ 807.764343][T16114] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 807.787112][T16114] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 807.815359][T16114] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 807.832140][T16114] usb 3-1: config 0 interface 125 has no altsetting 1 [ 807.845794][T16114] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 807.860759][T19887] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.875475][T19887] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.896233][T16114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.907053][T19887] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.932353][T16114] usb 3-1: Product: syz [ 807.938121][T16114] usb 3-1: Manufacturer: syz [ 807.942788][T16114] usb 3-1: SerialNumber: syz [ 807.953221][T19887] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 807.966405][T16114] usb 3-1: config 0 descriptor?? [ 808.402022][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6571'. [ 808.432941][T19911] netlink: 'syz.1.6571': attribute type 3 has an invalid length. [ 808.445386][T19907] loop0: detected capacity change from 0 to 4096 [ 808.467864][ T5540] usb 3-1: USB disconnect, device number 18 [ 808.480560][T19911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6571'. [ 808.515362][T19911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6571'. [ 808.761332][T19917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6574'. [ 808.817086][ T4269] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 808.838125][ T4269] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 809.286909][T16114] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 809.329617][ T5540] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 809.442110][T19943] netlink: 'syz.4.6587': attribute type 6 has an invalid length. [ 809.510970][T16114] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 809.523470][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'. [ 809.540474][ T5540] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 809.549808][ T5540] usb 4-1: config 0 has no interface number 0 [ 809.555992][ T5540] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 809.572025][T16114] usb 1-1: config 0 has no interface number 0 [ 809.595006][T16114] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 809.602805][ T5540] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.623650][ T5540] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 809.641400][T16114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.655218][ T5540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.664315][T16114] usb 1-1: Product: syz [ 809.675070][T16114] usb 1-1: Manufacturer: syz [ 809.677127][ T5540] usb 4-1: Product: syz [ 809.679803][T16114] usb 1-1: SerialNumber: syz [ 809.714512][ T5540] usb 4-1: Manufacturer: syz [ 809.720917][ T5540] usb 4-1: SerialNumber: syz [ 809.730699][T16114] usb 1-1: config 0 descriptor?? [ 809.743242][ T5540] usb 4-1: config 0 descriptor?? [ 809.770835][T19927] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 809.786428][ T5540] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 809.821147][T19951] Cannot find add_set index 0 as target [ 809.831683][ T5540] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 809.847467][T19953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6592'. [ 809.976677][T16114] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 810.030655][T16114] usb 1-1: No valid video chain found. [ 810.040034][T16114] usb 1-1: USB disconnect, device number 11 [ 810.182000][T19955] loop4: detected capacity change from 0 to 4096 [ 810.254302][T16122] usb 4-1: USB disconnect, device number 26 [ 810.277699][T16122] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 810.328015][T16122] cyberjack 4-1:0.69: device disconnected [ 810.426605][T19965] loop1: detected capacity change from 0 to 64 [ 810.486051][T19963] loop2: detected capacity change from 0 to 4096 [ 810.524599][T19963] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 810.693731][T19963] ntfs3: loop2: failed to convert "c46c" to maccenteuro [ 811.089113][ T4394] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 811.206152][T19983] netlink: 'syz.4.6606': attribute type 25 has an invalid length. [ 811.219484][T19979] loop1: detected capacity change from 0 to 4096 [ 811.226090][T19983] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6606'. [ 811.246558][T19979] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 811.326041][ T4394] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 811.342648][ T4394] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.373536][ T4394] usb 1-1: config 0 has no interface number 0 [ 811.399210][T19979] ntfs3: loop1: failed to convert "c46c" to euc-jp [ 811.419177][ T4394] usb 1-1: config 0 interface 4 has no altsetting 0 [ 811.434256][ T4394] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 811.448867][ T4394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.472734][ T4394] usb 1-1: config 0 descriptor?? [ 811.513034][ T4394] usb 1-1: selecting invalid altsetting 0 [ 811.736942][T16114] usb 1-1: USB disconnect, device number 12 [ 811.887589][T19998] device tunl0 entered promiscuous mode [ 811.921306][T19998] netlink: 'syz.1.6615': attribute type 4 has an invalid length. [ 811.955256][T19998] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6615'. [ 812.057338][T20001] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6616'. [ 812.141658][T19985] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 812.221433][T20005] netlink: 'syz.3.6618': attribute type 27 has an invalid length. [ 812.488461][T20014] loop0: detected capacity change from 0 to 1024 [ 812.553720][T16114] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 812.661093][T20016] loop2: detected capacity change from 0 to 4096 [ 812.746345][T16114] usb 5-1: Using ep0 maxpacket: 32 [ 812.757177][T16114] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 812.788209][T16114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.803209][T16114] usb 5-1: Product: syz [ 812.812684][T16114] usb 5-1: Manufacturer: syz [ 812.821672][T16114] usb 5-1: SerialNumber: syz [ 812.856159][T16114] usb 5-1: config 0 descriptor?? [ 812.897194][T16114] gspca_main: mars-2.14.0 probing 093a:050f [ 812.917203][T16113] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 813.133613][T16113] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 813.163191][T16113] usb 4-1: config 0 has no interface number 0 [ 813.179599][T16113] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 813.216606][T16113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.259418][T16113] usb 4-1: config 0 descriptor?? [ 813.304921][T16114] usb 5-1: USB disconnect, device number 10 [ 813.458524][T20037] loop0: detected capacity change from 0 to 256 [ 813.485535][T16113] usb 4-1: string descriptor 0 read error: -71 [ 813.495468][T16113] usb-storage 4-1:0.168: USB Mass Storage device detected [ 813.522984][T20040] netlink: 'syz.1.6634': attribute type 27 has an invalid length. [ 813.539255][T16113] usb-storage 4-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 813.574840][T20037] FAT-fs (loop0): Directory bread(block 64) failed [ 813.595435][T20037] FAT-fs (loop0): Directory bread(block 65) failed [ 813.603251][T20037] FAT-fs (loop0): Directory bread(block 66) failed [ 813.610459][T20037] FAT-fs (loop0): Directory bread(block 67) failed [ 813.617656][T20037] FAT-fs (loop0): Directory bread(block 68) failed [ 813.633956][T20037] FAT-fs (loop0): Directory bread(block 69) failed [ 813.646185][T20037] FAT-fs (loop0): Directory bread(block 70) failed [ 813.669687][T16113] usb 4-1: USB disconnect, device number 27 [ 813.697795][T20037] FAT-fs (loop0): Directory bread(block 71) failed [ 813.704494][T20037] FAT-fs (loop0): Directory bread(block 72) failed [ 813.738624][T20037] FAT-fs (loop0): Directory bread(block 73) failed [ 814.787344][T20045] loop2: detected capacity change from 0 to 32768 [ 814.908002][T20045] XFS (loop2): Mounting V5 Filesystem [ 815.102554][T20045] XFS (loop2): Ending clean mount [ 815.125287][T20095] loop3: detected capacity change from 0 to 1024 [ 815.147522][T20095] EXT4-fs: Ignoring removed orlov option [ 815.222629][T20095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 815.394318][ T4271] XFS (loop2): Unmounting Filesystem [ 815.562576][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 816.241907][ T2171] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 816.465938][ T2171] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 816.495254][ T2171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.538563][ T2171] usb 4-1: config 0 descriptor?? [ 816.551590][ T2171] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 816.784232][T20152] loop2: detected capacity change from 0 to 64 [ 816.988141][ T2171] gspca_cpia1: usb_control_msg 03, error -71 [ 817.001760][T20156] loop4: detected capacity change from 0 to 1024 [ 817.014774][ T2171] gspca_cpia1: usb_control_msg 01, error -71 [ 817.020845][ T2171] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 817.027964][T20156] EXT4-fs: Ignoring removed orlov option [ 817.039665][ T2171] usb 4-1: USB disconnect, device number 28 [ 817.184989][T20156] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 817.211658][T20167] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 817.458278][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 817.511429][T20175] loop0: detected capacity change from 0 to 256 [ 817.729614][T20175] FAT-fs (loop0): Directory bread(block 64) failed [ 817.763985][T20175] FAT-fs (loop0): Directory bread(block 65) failed [ 817.774866][T20175] FAT-fs (loop0): Directory bread(block 66) failed [ 817.792542][T20175] FAT-fs (loop0): Directory bread(block 67) failed [ 817.821177][T20175] FAT-fs (loop0): Directory bread(block 68) failed [ 817.847715][T20175] FAT-fs (loop0): Directory bread(block 69) failed [ 817.865358][T20175] FAT-fs (loop0): Directory bread(block 70) failed [ 817.897722][T20175] FAT-fs (loop0): Directory bread(block 71) failed [ 817.906919][T20188] loop2: detected capacity change from 0 to 512 [ 817.916811][T20175] FAT-fs (loop0): Directory bread(block 72) failed [ 817.948679][T20175] FAT-fs (loop0): Directory bread(block 73) failed [ 818.013749][T20188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 818.080806][T20188] ext4 filesystem being mounted at /1258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.152138][T20197] xt_cluster: node mask cannot exceed total number of nodes [ 818.513540][ T5540] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 818.714118][ T5540] usb 3-1: unable to get BOS descriptor or descriptor too short [ 818.734221][ T5540] usb 3-1: not running at top speed; connect to a high speed hub [ 818.766276][ T5540] usb 3-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 818.793616][T20218] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 818.808730][T20217] loop3: detected capacity change from 0 to 1024 [ 818.815278][ T5540] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 818.819237][T20218] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 818.865485][ T5540] usb 3-1: too many endpoints for config 1 interface 1 altsetting 143: 86, using maximum allowed: 30 [ 818.882001][T20218] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 818.892386][T20218] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 818.909058][T20218] device geneve2 entered promiscuous mode [ 818.924651][T20217] hfsplus: keylen 65060 too large [ 818.931002][ T5540] usb 3-1: config 1 interface 1 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 818.953992][T20218] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 818.979776][T20218] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 818.994439][ T5540] usb 3-1: config 1 interface 1 has no altsetting 0 [ 819.000451][T20218] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.015687][T20218] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.026067][ T5540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.054513][ T5540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 819.085603][ T5540] usb 3-1: Product: syz [ 819.089888][ T5540] usb 3-1: Manufacturer: syz [ 819.094582][ T5540] usb 3-1: SerialNumber: syz [ 819.110042][T20188] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 819.345371][ T5540] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 819.393923][ T5540] usb 3-1: USB disconnect, device number 19 [ 819.646719][T20238] xt_bpf: check failed: parse error [ 819.748541][ T4440] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 819.967758][T20228] loop4: detected capacity change from 0 to 32768 [ 819.970168][ T4440] usb 4-1: Using ep0 maxpacket: 8 [ 819.997070][ T4440] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 819.998593][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 820.017969][T20228] (syz.4.6718,20228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 820.025357][ T4440] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.066249][ T4440] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 820.088062][T20228] (syz.4.6718,20228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 820.092638][ T4440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.130578][ T4440] usb 4-1: Product: syz [ 820.144031][ T4440] usb 4-1: Manufacturer: syz [ 820.161179][ T4440] usb 4-1: SerialNumber: syz [ 820.179661][T20228] JBD2: Ignoring recovery information on journal [ 820.194079][ T4440] usb 4-1: config 0 descriptor?? [ 820.317932][T20228] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 820.670212][ T5540] usb 4-1: USB disconnect, device number 29 [ 820.706169][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 820.884294][T20242] loop1: detected capacity change from 0 to 32768 [ 820.899982][T20242] (syz.1.6725,20242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 820.964342][T20242] (syz.1.6725,20242,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 821.031705][T20242] JBD2: Ignoring recovery information on journal [ 821.146351][T20242] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 821.166005][T20273] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.6733'. [ 821.491745][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 821.598680][ T26] audit: type=1326 audit(1770360286.505:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e279aeb9 code=0x7ffc0000 [ 821.690611][ T26] audit: type=1326 audit(1770360286.523:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f31e279aeb9 code=0x7ffc0000 [ 821.790512][ T26] audit: type=1326 audit(1770360286.523:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e279aeb9 code=0x7ffc0000 [ 821.884386][ T26] audit: type=1326 audit(1770360286.523:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.4.6744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31e279aeb9 code=0x7ffc0000 [ 822.061744][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6749'. [ 822.143048][T20275] infiniband !yz!: set active [ 822.148627][T20275] infiniband !yz!: added team_slave_0 [ 822.287919][T20303] loop4: detected capacity change from 0 to 512 [ 822.343109][T20303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 822.418853][T20303] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.6753: inode has both inline data and extents flags [ 822.461972][T20275] RDS/IB: !yz!: added [ 822.512540][T20275] smc: adding ib device !yz! with port count 1 [ 822.561474][T20275] smc: ib device !yz! port 1 has pnetid [ 822.566648][T20303] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6753: couldn't read orphan inode 15 (err -117) [ 822.620556][T20303] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 822.747449][T20318] loop3: detected capacity change from 0 to 512 [ 822.804136][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 822.929931][T20322] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 822.949503][T20318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 823.009230][T20322] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 823.029128][T20322] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 823.041326][T20322] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 823.061478][T20322] device geneve2 entered promiscuous mode [ 823.080927][T20318] ext4 filesystem being mounted at /1319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.106536][T20322] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 823.122427][T20322] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 823.133232][T20322] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 823.166962][T20322] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 823.207670][T20318] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.6759: invalid size [ 823.371320][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 823.505407][T20335] loop1: detected capacity change from 0 to 512 [ 823.572129][T20335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 823.617091][T20335] ext4 filesystem being mounted at /1415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.886026][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 823.936926][T20346] loop3: detected capacity change from 0 to 256 [ 823.961374][T20346] exfat: Deprecated parameter 'utf8' [ 824.396232][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6776'. [ 824.590516][T20356] loop4: detected capacity change from 0 to 4096 [ 824.893096][ T4268] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 824.899626][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 825.800779][T20397] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.820743][T20397] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.840775][T20397] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.873068][T20397] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 825.916477][T20397] device geneve2 entered promiscuous mode [ 825.941322][T20397] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 825.965130][T20397] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 826.002399][T20397] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 826.035895][T20397] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 826.135143][T20387] loop4: detected capacity change from 0 to 32768 [ 826.149197][T20401] tmpfs: Bad value for 'mpol' [ 826.229245][T20387] jfs_strtoUCS: char2uni returned -22. [ 826.258723][T20387] charset = cp936, char = 0xd4 [ 826.315133][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 826.321561][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 826.536981][T20394] loop0: detected capacity change from 0 to 32768 [ 826.592157][T20394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.6803 (20394) [ 826.694241][T20394] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.761540][T20394] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 826.770461][T20394] BTRFS info (device loop0): trying to use backup root at mount time [ 826.828946][T20394] BTRFS info (device loop0): setting nodatasum [ 826.852129][T20419] block nbd3: NBD_DISCONNECT [ 826.879034][T20394] BTRFS info (device loop0): enabling auto defrag [ 826.911688][T20394] BTRFS info (device loop0): max_inline at 0 [ 826.917784][T20394] BTRFS info (device loop0): using free space tree [ 827.077152][T20430] netlink: 'syz.1.6809': attribute type 4 has an invalid length. [ 827.105176][T20430] device veth1_macvtap left promiscuous mode [ 827.404283][T20450] loop2: detected capacity change from 0 to 1024 [ 827.565098][T20454] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.606010][T20454] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.614892][T20454] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.668200][T20454] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 827.713282][T20454] device geneve2 entered promiscuous mode [ 827.714503][ T4269] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.804676][T20454] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.849950][T20454] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.905485][T20454] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.914971][T20454] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 828.116771][T20463] loop1: detected capacity change from 0 to 4096 [ 828.190265][T20463] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 828.229178][T20463] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 828.320888][T20463] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 828.376377][T20463] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 828.481930][T20463] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 828.544200][T20463] ntfs: volume version 3.1. [ 828.573786][T20463] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 828.617364][T20463] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 828.685905][T20463] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 828.744477][T20463] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 828.771617][T20463] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 828.972835][T20485] libceph: resolve '0' (ret=-3): failed [ 829.397409][T20495] loop3: detected capacity change from 0 to 4096 [ 829.434043][T20495] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 829.642841][T20500] loop0: detected capacity change from 0 to 4096 [ 829.670550][T20495] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 829.724096][T20500] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 829.840809][T20500] ntfs3: loop0: failed to convert "c46c" to iso8859-9 [ 829.848681][ T57] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 829.881026][ T4280] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 829.893922][ T4280] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 829.900966][ T4280] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 829.960858][ T57] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 829.972494][ T4280] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 829.990624][ T4280] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 830.106235][T20486] loop4: detected capacity change from 0 to 32768 [ 830.210326][T20512] IPv6: sit2: Disabled Multicast RS [ 830.224693][T20486] JBD2: Ignoring recovery information on journal [ 830.446072][T20486] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 830.675913][T20486] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 830.745455][T20486] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 830.763246][T20502] loop1: detected capacity change from 0 to 32768 [ 830.809343][T20486] OCFS2: File system is now read-only. [ 830.833220][T20486] (syz.4.6829,20486,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 830.859239][T20502] (syz.1.6836,20502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 830.864387][T20486] (syz.4.6829,20486,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 830.884099][T20531] loop0: detected capacity change from 0 to 65 [ 830.920523][T20502] (syz.1.6836,20502,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 830.963099][T20531] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 831.015388][T20486] (syz.4.6829,20486,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 831.027129][T20502] JBD2: Ignoring recovery information on journal [ 831.052268][T20486] (syz.4.6829,20486,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 831.061325][T20486] (syz.4.6829,20486,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 831.070011][T20486] (syz.4.6829,20486,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 831.078402][T20486] (syz.4.6829,20486,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 831.087291][T20486] (syz.4.6829,20486,0):ocfs2_mknod:385 ERROR: status = -30 [ 831.096471][T20486] (syz.4.6829,20486,0):ocfs2_mknod:502 ERROR: status = -30 [ 831.110333][T20486] (syz.4.6829,20486,0):ocfs2_create:676 ERROR: status = -30 [ 831.193650][ T4268] ocfs2: Unmounting device (7,4) on (node local) [ 831.255432][T20502] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 831.537320][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 831.739383][T20547] loop0: detected capacity change from 0 to 1024 [ 831.813856][T20547] hfsplus: xattr searching failed [ 831.847667][T20543] loop3: detected capacity change from 0 to 4096 [ 832.007484][ T57] hfsplus: b-tree write err: -5, ino 4 [ 832.358720][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6863'. [ 832.412221][T20562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.460012][T20536] loop2: detected capacity change from 0 to 32768 [ 832.629979][T20536] XFS (loop2): Mounting V5 Filesystem [ 832.706628][T20575] netlink: 'syz.4.6867': attribute type 1 has an invalid length. [ 832.714445][T20575] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.6867'. [ 832.840032][T20536] XFS (loop2): Ending clean mount [ 832.981914][T20585] netlink: 'syz.1.6871': attribute type 11 has an invalid length. [ 833.043625][ T4271] XFS (loop2): Unmounting Filesystem [ 833.355548][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6879'. [ 833.367450][T20598] QAT: Invalid ioctl 1075883590 [ 833.376302][T20598] QAT: Invalid ioctl 1075883590 [ 833.381723][T20598] QAT: Invalid ioctl 1075883590 [ 833.387597][T20598] QAT: Invalid ioctl 1075883590 [ 833.414893][T20598] QAT: Invalid ioctl 1075883590 [ 833.418343][T20593] loop0: detected capacity change from 0 to 4096 [ 833.443388][T20598] QAT: Invalid ioctl 1075883590 [ 833.478825][T20598] QAT: Invalid ioctl 1075883590 [ 833.484985][T20593] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 833.511047][T20598] QAT: Invalid ioctl 1075883590 [ 833.543945][T20598] QAT: Invalid ioctl 1075883590 [ 833.565396][T20598] QAT: Invalid ioctl 1075883590 [ 833.674319][T20593] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 833.724832][T20606] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 833.834946][ T9] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 833.884803][ T4269] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 833.895871][ T4269] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 833.966884][ T4269] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 833.973355][ T11] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 833.986666][ T4269] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 833.990082][T20610] device syz_tun entered promiscuous mode [ 834.018073][T20610] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 834.063431][ T4269] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 834.613349][T20630] --map-set only usable from mangle table [ 834.675645][ T22] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 834.889565][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 834.906779][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 834.933542][T20639] xt_hashlimit: overflow, try lower: 18446744073709551615/9 [ 834.943265][ T22] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 834.970086][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.995752][ T22] usb 5-1: Product: syz [ 835.004911][ T22] usb 5-1: Manufacturer: syz [ 835.020583][ T22] usb 5-1: SerialNumber: syz [ 835.031864][T20620] loop0: detected capacity change from 0 to 32768 [ 835.053777][ T22] usb 5-1: config 0 descriptor?? [ 835.088409][T20620] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 835.301041][ T22] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input49 [ 835.454581][T20649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.543722][ T4513] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 835.557852][ T22] usb 5-1: USB disconnect, device number 11 [ 835.772765][T20658] dlm: no locking on control device [ 835.947963][T20662] loop2: detected capacity change from 0 to 1024 [ 836.091264][T20662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 836.214137][T20662] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.6904: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 836.280272][T20653] loop1: detected capacity change from 0 to 32768 [ 836.319679][ T4311] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 836.340278][T20662] EXT4-fs (loop2): Remounting filesystem read-only [ 836.520867][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 836.538191][ T4311] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 836.573053][ T4311] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 836.626180][ T4311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.655315][ T4311] usb 1-1: config 0 descriptor?? [ 836.684085][ T4311] pwc: Samsung MPC-C10 USB webcam detected. [ 836.690161][ T4311] pwc: Warning: more than 1 configuration available. [ 836.787788][T20686] loop3: detected capacity change from 0 to 128 [ 836.860215][T20686] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 836.880234][ T4311] pwc: send_video_command error -71 [ 836.887463][ T4311] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 836.895854][ T4311] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 836.940804][T20686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 837.004146][ T4311] usb 1-1: USB disconnect, device number 13 [ 837.060499][T20686] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 837.081328][T20693] netlink: 'syz.4.6915': attribute type 1 has an invalid length. [ 837.313382][T20698] netlink: 'syz.1.6918': attribute type 10 has an invalid length. [ 837.399656][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 837.547704][T20703] SET target dimension over the limit! [ 837.554623][T20698] team0: Device veth1_vlan failed to register rx_handler [ 837.922637][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6928'. [ 838.200654][T16114] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 838.414261][T16114] usb 4-1: Using ep0 maxpacket: 8 [ 838.422421][T16114] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 838.457170][T16114] usb 4-1: config 0 interface 0 has no altsetting 0 [ 838.513805][T16114] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 838.518340][ T4394] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 838.534536][T16114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.551659][T16114] usb 4-1: Product: syz [ 838.560811][T16114] usb 4-1: Manufacturer: syz [ 838.571785][T16114] usb 4-1: SerialNumber: syz [ 838.601557][T16114] usb 4-1: config 0 descriptor?? [ 838.619280][T20713] loop2: detected capacity change from 0 to 32768 [ 838.645268][T16114] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 838.711927][T20713] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 838.745409][T20713] (syz.2.6926,20713,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 838.756613][ T4394] usb 5-1: Using ep0 maxpacket: 32 [ 838.801726][ T4394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 838.821653][T20713] (syz.2.6926,20713,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 838.830481][T20713] (syz.2.6926,20713,1):ocfs2_mknod:298 ERROR: status = -2 [ 838.854077][T16114] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 838.863047][T16114] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 838.871189][ T4394] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 838.871740][T20713] (syz.2.6926,20713,1):ocfs2_mknod:502 ERROR: status = -2 [ 838.890681][T16114] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 838.916797][T20713] (syz.2.6926,20713,1):ocfs2_mkdir:659 ERROR: status = -2 [ 838.941732][ T4394] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 838.962319][T20735] tmpfs: Bad value for 'mpol' [ 838.972832][ T4394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.016086][ T4394] usb 5-1: Product: syz [ 839.020339][ T4394] usb 5-1: Manufacturer: syz [ 839.026260][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 839.047317][ T4394] usb 5-1: SerialNumber: syz [ 839.093456][ T2171] usb 4-1: USB disconnect, device number 30 [ 839.221439][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6939'. [ 839.311544][ T4394] usb 5-1: Invalid number of CPorts: 0 [ 839.321893][ T4394] es2_ap_driver: probe of 5-1:7.0 failed with error -22 [ 839.378132][T20739] loop2: detected capacity change from 0 to 4096 [ 839.546375][ T4394] usb 5-1: USB disconnect, device number 12 [ 839.979428][T20761] netlink: 'syz.0.6948': attribute type 10 has an invalid length. [ 840.071600][T20761] team0: Device veth1_vlan failed to register rx_handler [ 840.458016][T20776] loop3: detected capacity change from 0 to 64 [ 840.526126][T20776] hfs: request for non-existent node -117440513 in B*Tree [ 840.559124][T20776] hfs: request for non-existent node -117440513 in B*Tree [ 841.407578][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 841.532489][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6973'. [ 841.633562][ T22] usb 5-1: config 2 interface 0 has no altsetting 0 [ 841.649566][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 841.702393][ T22] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 841.715268][T20785] loop3: detected capacity change from 0 to 32768 [ 841.722116][ T22] usb 5-1: Product: syz [ 841.726361][ T22] usb 5-1: Manufacturer: syz [ 841.739625][ T22] usb 5-1: SerialNumber: syz [ 841.775718][T20785] JBD2: Ignoring recovery information on journal [ 841.783777][ T22] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 841.820368][ T22] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 841.831423][ T22] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 841.839444][ T22] usb 5-1: media controller created [ 841.859884][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.919303][T20785] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 841.995640][ T22] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 842.002086][ T22] error writing reg: 0xff, val: 0x00 [ 842.050356][T20785] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 842.064527][ T22] dvb_usb_mxl111sf: probe of 5-1:2.0 failed with error -22 [ 842.102579][T20785] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 842.120945][T20785] OCFS2: File system is now read-only. [ 842.128807][T20785] (syz.3.6961,20785,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 842.157325][T20785] (syz.3.6961,20785,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 842.173997][T20785] (syz.3.6961,20785,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 842.186818][T20801] loop0: detected capacity change from 0 to 32768 [ 842.204401][T20785] (syz.3.6961,20785,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 842.247261][T20801] (syz.0.6969,20801,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 842.271958][T20785] (syz.3.6961,20785,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 842.295277][T20801] (syz.0.6969,20801,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 842.338916][T20785] (syz.3.6961,20785,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 842.352992][ T4394] usb 5-1: USB disconnect, device number 13 [ 842.374912][T20785] (syz.3.6961,20785,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 842.403833][T20785] (syz.3.6961,20785,1):ocfs2_mknod:385 ERROR: status = -30 [ 842.411638][T20785] (syz.3.6961,20785,1):ocfs2_mknod:502 ERROR: status = -30 [ 842.442312][T20801] JBD2: Ignoring recovery information on journal [ 842.509362][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6979'. [ 842.518602][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6979'. [ 842.537227][T20785] (syz.3.6961,20785,1):ocfs2_create:676 ERROR: status = -30 [ 842.655240][T20801] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 842.755819][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 842.867373][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 843.470933][T20845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6990'. [ 843.495381][T20847] loop2: detected capacity change from 0 to 164 [ 843.534101][T20849] loop0: detected capacity change from 0 to 256 [ 843.573225][T20847] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 843.601268][T20849] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 843.737908][T20824] loop1: detected capacity change from 0 to 32768 [ 843.748890][T16114] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 843.913629][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 843.913645][ T26] audit: type=1326 audit(1770360307.374:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.2.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 843.985825][T16114] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 844.000109][T16114] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 844.010101][T16114] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.024442][T16114] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 844.051873][T20824] XFS (loop1): Mounting V5 Filesystem [ 844.143957][ T26] audit: type=1326 audit(1770360307.374:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.2.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 844.167471][ T26] audit: type=1326 audit(1770360307.411:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.2.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 844.197566][ T26] audit: type=1326 audit(1770360307.411:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.2.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 844.219990][ T26] audit: type=1326 audit(1770360307.411:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20854 comm="syz.2.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 844.336284][T20824] XFS (loop1): Ending clean mount [ 844.529506][ T4270] XFS (loop1): Unmounting Filesystem [ 845.288268][ T5014] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 845.343819][T16114] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 845.365206][T16114] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 845.377255][T20901] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7013'. [ 845.386650][T16114] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 845.407548][T16114] usb 5-1: USB disconnect, device number 14 [ 845.502059][ T5014] usb 4-1: Using ep0 maxpacket: 8 [ 845.509070][ T5014] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 845.547992][ T5014] usb 4-1: config 0 has no interface number 0 [ 845.578780][ T5014] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 845.615492][ T5014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.638318][ T5014] usb 4-1: Product: syz [ 845.660047][ T5014] usb 4-1: Manufacturer: syz [ 845.666424][ T5014] usb 4-1: SerialNumber: syz [ 845.686196][ T5014] usb 4-1: config 0 descriptor?? [ 845.793331][T20911] comedi comedi0: dt2817: I/O port conflict (0x2008001,5) [ 845.937426][ T5014] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 845.956776][ T5014] usb 4-1: No valid video chain found. [ 845.965939][T20915] loop2: detected capacity change from 0 to 1024 [ 845.986739][ T5014] usb 4-1: USB disconnect, device number 31 [ 846.067289][ T26] audit: type=1326 audit(1770360309.385:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20918 comm="syz.1.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 846.160712][ T26] audit: type=1326 audit(1770360309.422:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20918 comm="syz.1.7022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f2b62f9aeb9 code=0x7ffc0000 [ 846.245716][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.263977][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.277578][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.303665][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.340512][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.365730][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.407284][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.443714][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.461409][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.469793][T20923] netlink: 'syz.4.7025': attribute type 3 has an invalid length. [ 846.581508][T20931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7028'. [ 847.254402][T20929] loop0: detected capacity change from 0 to 32768 [ 847.400228][T20929] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 847.511242][T20929] (syz.0.7026,20929,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 847.513769][T20960] loop4: detected capacity change from 0 to 4096 [ 847.557683][T20960] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 847.631473][T20929] (syz.0.7026,20929,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 847.673920][T20929] (syz.0.7026,20929,1):ocfs2_mknod:298 ERROR: status = -2 [ 847.681151][T20929] (syz.0.7026,20929,1):ocfs2_mknod:502 ERROR: status = -2 [ 847.800800][T20929] (syz.0.7026,20929,1):ocfs2_mkdir:659 ERROR: status = -2 [ 847.922866][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 848.440192][T20983] loop4: detected capacity change from 0 to 8 [ 848.550274][T20983] SQUASHFS error: Unable to read inode 0xa7 [ 849.005349][T20973] loop1: detected capacity change from 0 to 32768 [ 849.045017][T20997] loop4: detected capacity change from 0 to 4096 [ 849.081804][T20997] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 849.105156][T20997] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 849.135055][T20973] XFS (loop1): Mounting V5 Filesystem [ 849.179784][T20997] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 849.230767][T20997] ntfs: volume version 3.1. [ 849.265214][ T22] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 849.321016][T20973] XFS (loop1): Ending clean mount [ 849.328479][T20973] XFS (loop1): Quotacheck needed: Please wait. [ 849.332886][T20997] __ntfs_error: 2 callbacks suppressed [ 849.332946][T20997] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 849.387812][T20973] XFS (loop1): Quotacheck: Done. [ 849.415328][T20997] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 849.468164][T20997] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 849.503541][ T22] usb 4-1: config 0 has an invalid interface number: 36 but max is 0 [ 849.520436][ T22] usb 4-1: config 0 has no interface number 0 [ 849.538051][T20997] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 849.551861][ T22] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72 [ 849.584123][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.602535][T21019] loop2: detected capacity change from 0 to 512 [ 849.609475][T20997] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 849.630285][ T4270] XFS (loop1): Unmounting Filesystem [ 849.636279][ T22] usb 4-1: Product: syz [ 849.650100][ T22] usb 4-1: Manufacturer: syz [ 849.654789][ T22] usb 4-1: SerialNumber: syz [ 849.663423][ T22] usb 4-1: config 0 descriptor?? [ 849.682386][T20997] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 849.698173][ T22] gspca_main: spca505-2.14.0 probing 0733:0430 [ 849.713278][T20997] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 849.727581][T20997] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 849.736629][T20997] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 849.748561][T21019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 849.775362][T20997] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 849.799825][T21019] ext4 filesystem being mounted at /1343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 849.830670][T21019] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.7065: corrupted xattr block 33 [ 850.090767][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 850.143363][ T22] gspca_spca505: reg write: error -71 [ 850.148890][ T22] spca505: probe of 4-1:0.36 failed with error -5 [ 850.183261][ T22] usb 4-1: USB disconnect, device number 32 [ 850.468078][T21017] loop0: detected capacity change from 0 to 32768 [ 850.527516][T21017] JBD2: Ignoring recovery information on journal [ 850.590906][ T4437] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 850.641146][T21030] trusted_key: encrypted_key: master key parameter '' is invalid [ 850.652731][T21017] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 850.795861][ T4437] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.826039][ T4437] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.848217][ T4437] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.881166][ T4437] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.922242][ T4437] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.967122][ T4437] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 851.003645][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 851.021544][ T4437] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 851.060123][ T4437] usb 5-1: Product: syz [ 851.073438][ T4437] usb 5-1: Manufacturer: syz [ 851.140846][ T4437] cdc_wdm 5-1:1.0: skipping garbage [ 851.146161][ T4437] cdc_wdm 5-1:1.0: skipping garbage [ 851.164582][ T4437] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 851.177112][ T4437] cdc_wdm 5-1:1.0: Unknown control protocol [ 851.226243][T21040] binfmt_misc: register: failed to install interpreter file ./file2 [ 851.389925][T21027] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 851.440069][ T4437] usb 5-1: USB disconnect, device number 15 [ 851.482160][T21046] loop2: detected capacity change from 0 to 1024 [ 851.586943][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7078'. [ 851.696466][ T46] hfsplus: b-tree write err: -5, ino 4 [ 851.858439][T21060] loop0: detected capacity change from 0 to 8 [ 851.906616][T21060] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 851.939535][ T4517] udevd[4517]: incorrect cramfs checksum on /dev/loop0 [ 851.989258][T21060] cramfs: Error -3 while decompressing! [ 851.997089][T21060] cramfs: ffffffff96d8b1e8(26)->ffff88804acae000(4096) [ 852.004380][T21060] cramfs: Error -3 while decompressing! [ 852.010161][T21060] cramfs: ffffffff96d8b202(26)->ffff88804adf3000(4096) [ 852.017535][T21060] cramfs: Error -3 while decompressing! [ 852.024271][T21060] cramfs: ffffffff96d8b21c(16)->ffff88804cdb0000(4096) [ 852.031306][T21060] cramfs: Error -3 while decompressing! [ 852.037532][T21060] cramfs: ffffffff96d8b1e8(26)->ffff88804acae000(4096) [ 853.345511][T21099] loop2: detected capacity change from 0 to 1024 [ 853.376510][T21101] autofs4:pid:21101:autofs_fill_super: called with bogus options [ 853.427010][T21099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 853.446587][T21099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 853.454149][T21099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.7102: Invalid inode table block 0 in block_group 0 [ 853.468536][T21099] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 853.484852][T21106] loop0: detected capacity change from 0 to 512 [ 853.490321][T21099] EXT4-fs error (device loop2): ext4_quota_write:7247: inode #3: comm syz.2.7102: mark_inode_dirty error [ 853.531240][T21099] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.7102: Failed to acquire dquot type 0 [ 853.605858][T21099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.7102: Invalid inode table block 0 in block_group 0 [ 853.657908][T21099] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 853.691255][T21099] EXT4-fs error (device loop2): ext4_ext_truncate:4454: inode #15: comm syz.2.7102: mark_inode_dirty error [ 853.721017][T21099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.7102: Invalid inode table block 0 in block_group 0 [ 853.787998][T21099] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 853.815581][T21099] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 853.857736][T21099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.7102: Invalid inode table block 0 in block_group 0 [ 853.924058][T21099] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 853.974000][T21099] EXT4-fs error (device loop2): ext4_truncate:4318: inode #15: comm syz.2.7102: mark_inode_dirty error [ 854.017423][T21116] loop3: detected capacity change from 0 to 1024 [ 854.040591][T21099] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 854.052090][T21116] hfsplus: unable to change nls mapping [ 854.060554][T21099] EXT4-fs (loop2): 1 truncate cleaned up [ 854.068897][T21116] hfsplus: unable to parse mount options [ 854.075587][T21099] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 854.121699][T21099] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.7102: Invalid inode table block 0 in block_group 0 [ 854.179131][T21122] xt_CONNSECMARK: invalid mode: 0 [ 854.304056][T16114] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 854.312534][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 854.334038][T21126] loop3: detected capacity change from 0 to 764 [ 854.399691][T21128] loop4: detected capacity change from 0 to 8 [ 854.440783][T21128] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 854.457254][T21126] rock: directory entry would overflow storage [ 854.485873][ T4397] udevd[4397]: incorrect cramfs checksum on /dev/loop4 [ 854.503623][T21126] rock: sig=0x4654, size=5, remaining=4 [ 854.522565][T21128] cramfs: Error -3 while decompressing! [ 854.536333][T21132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7118'. [ 854.556163][T16114] usb 2-1: Using ep0 maxpacket: 8 [ 854.564047][T16114] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 854.578150][T21128] cramfs: ffffffff96d871e8(26)->ffff888050b7f000(4096) [ 854.610566][T16114] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.631816][T21128] cramfs: Error -3 while decompressing! [ 854.655140][ T4397] udevd[4397]: incorrect cramfs checksum on /dev/loop4 [ 854.664346][T16114] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 854.673503][T21128] cramfs: ffffffff96d87202(26)->ffff888052a91000(4096) [ 854.687399][T21128] cramfs: Error -3 while decompressing! [ 854.696786][T16114] usb 2-1: config 0 has no interface number 0 [ 854.702978][T16114] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 854.722557][T21128] cramfs: ffffffff96d8721c(16)->ffff888052b0b000(4096) [ 854.760353][T21128] cramfs: Error -3 while decompressing! [ 854.766132][T16114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.776969][T21128] cramfs: ffffffff96d871e8(26)->ffff888050b7f000(4096) [ 854.797792][T16114] usb 2-1: config 0 descriptor?? [ 855.113440][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7124'. [ 855.122415][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7124'. [ 855.298716][ T22] usb 2-1: USB disconnect, device number 9 [ 855.358810][T16114] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 855.522647][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 855.522666][ T26] audit: type=1326 audit(1770360318.234:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 855.587721][T16114] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 855.588597][ T26] audit: type=1326 audit(1770360318.262:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 855.609714][T16114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.667940][T16114] usb 5-1: Product: syz [ 855.677292][T16114] usb 5-1: Manufacturer: syz [ 855.686456][T21158] usb usb8: usbfs: process 21158 (syz.0.7131) did not claim interface 0 before use [ 855.700931][T16114] usb 5-1: SerialNumber: syz [ 855.715243][T16114] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 855.733438][ T26] audit: type=1326 audit(1770360318.262:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 855.801459][ T26] audit: type=1326 audit(1770360318.262:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 855.813097][T16114] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 855.882998][ T26] audit: type=1326 audit(1770360318.262:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 855.981543][ T26] audit: type=1326 audit(1770360318.262:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 856.090666][ T26] audit: type=1326 audit(1770360318.262:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 856.160755][ T26] audit: type=1326 audit(1770360318.262:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21155 comm="syz.2.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 856.255793][T21152] loop3: detected capacity change from 0 to 32768 [ 856.293452][ T4394] usb 5-1: USB disconnect, device number 16 [ 856.369974][T21152] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 856.369974][T21152] [ 856.395133][T21172] [U] [ 856.397927][T21172] [U] [ 856.400672][T21172] [U] [ 856.403412][T21172] [U] [ 856.425398][T21152] ERROR: (device loop3): remounting filesystem as read-only [ 856.444271][T21172] [U] [ 856.447085][T21172] [U] [ 856.449814][T21172] [U] [ 856.452534][T21172] [U] [ 856.481700][T21172] [U] [ 856.484500][T21172] [U] [ 856.487243][T21172] [U] [ 856.521501][T21171] [U] [ 857.004496][ T26] audit: type=1326 audit(1770360319.618:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21183 comm="syz.2.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 857.037885][T16114] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 857.046767][T16114] ath9k_htc: Failed to initialize the device [ 857.090953][ T4394] usb 5-1: ath9k_htc: USB layer deinitialized [ 857.133192][ T26] audit: type=1326 audit(1770360319.665:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21183 comm="syz.2.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f9e4ff9aeb9 code=0x7ffc0000 [ 857.283129][ T4437] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 857.484977][T21170] loop1: detected capacity change from 0 to 32768 [ 857.510421][ T4437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 857.538468][ T4437] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 857.555450][ T4437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 857.567999][ T4437] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 857.586713][ T4437] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 857.599618][ T4437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.613987][ T4437] usb 1-1: config 0 descriptor?? [ 857.664497][T21170] XFS (loop1): Mounting V5 Filesystem [ 857.827903][T21170] XFS (loop1): Ending clean mount [ 857.851313][ T4437] hdpvr 1-1:0.0: firmware version 0x88 dated _=&ˆ}nDT,w#ORCf( [ 857.854626][T21170] XFS (loop1): Quotacheck needed: Please wait. [ 857.868681][ T4437] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 858.010524][T21170] XFS (loop1): Quotacheck: Done. [ 858.071383][ T4437] hdpvr 1-1:0.0: device init failed [ 858.082007][ T4437] hdpvr: probe of 1-1:0.0 failed with error -12 [ 858.112360][ T4437] usb 1-1: USB disconnect, device number 14 [ 858.178531][ T4270] XFS (loop1): Unmounting Filesystem [ 858.386688][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7163'. [ 858.396570][T21229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7163'. [ 858.410302][T21229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 858.502027][T16114] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 858.715734][T16114] usb 3-1: Using ep0 maxpacket: 8 [ 858.729027][T16114] usb 3-1: unable to get BOS descriptor or descriptor too short [ 858.769968][T16114] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 858.789114][T16114] usb 3-1: config 8 has no interface number 0 [ 858.808093][T16114] usb 3-1: config 8 interface 255 has no altsetting 0 [ 858.827800][T16114] usb 3-1: string descriptor 0 read error: -22 [ 858.869553][T16114] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 858.912731][T16114] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.929857][T21241] device wlan0 entered promiscuous mode [ 859.401947][T16114] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 859.456460][T16114] usb 3-1: USB disconnect, device number 20 [ 859.971178][T21276] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003 [ 860.156695][T21286] loop1: detected capacity change from 0 to 256 [ 860.262634][T21288] loop4: detected capacity change from 0 to 512 [ 860.382595][T21288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 860.472215][T21288] EXT4-fs (loop4): 1 truncate cleaned up [ 860.546461][T21288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 860.881580][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 861.323002][T21329] loop0: detected capacity change from 0 to 256 [ 861.423116][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.482019][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.536158][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.579027][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.637049][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.680059][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.719867][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.779744][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.804519][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.825487][T21329] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 861.841064][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 861.841082][ T26] audit: type=1800 audit(1770360324.145:106): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7204" name="file1" dev="loop0" ino=1048631 res=0 errno=0 [ 861.934224][T21329] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 862.027574][T21349] netlink: 348 bytes leftover after parsing attributes in process `syz.2.7212'. [ 862.073190][T21329] syz.0.7204 (21329) used greatest stack depth: 20304 bytes left [ 862.080995][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7212'. [ 862.102169][T21352] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 862.393009][T21362] validate_nla: 41 callbacks suppressed [ 862.393045][T21362] netlink: 'syz.3.7217': attribute type 4 has an invalid length. [ 862.462493][T21362] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7217'. [ 862.490363][T21366] netlink: 'syz.1.7219': attribute type 11 has an invalid length. [ 862.506793][T21366] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7219'. [ 862.833348][T21380] loop1: detected capacity change from 0 to 128 [ 862.980444][T21382] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.332789][T21395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7230'. [ 863.687602][ T26] audit: type=1326 audit(1770360325.876:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21409 comm="syz.2.7236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4ff9aeb9 code=0x0 [ 863.867421][T21420] binder: 21416:21420 ioctl 400c620e 0 returned -14 [ 863.896157][T21419] loop3: detected capacity change from 0 to 256 [ 863.988297][T21419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 864.223933][T21424] loop0: detected capacity change from 0 to 4096 [ 864.293471][T21424] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 864.578970][T21438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7247'. [ 864.638519][T21438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7247'. [ 864.669955][T21444] loop3: detected capacity change from 0 to 128 [ 864.734305][T21444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 864.800741][T21444] ext4 filesystem being mounted at /1424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 864.886041][T21444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.7249: bg 0: bad block bitmap checksum [ 865.094984][T21455] loop2: detected capacity change from 0 to 128 [ 865.125045][T21455] FAT-fs (loop2): Directory bread(block 414) failed [ 865.148813][T21455] FAT-fs (loop2): Directory bread(block 415) failed [ 865.159448][T21455] FAT-fs (loop2): Directory bread(block 416) failed [ 865.189657][T21455] FAT-fs (loop2): Directory bread(block 417) failed [ 865.205861][T21455] FAT-fs (loop2): Directory bread(block 418) failed [ 865.236964][T21455] FAT-fs (loop2): Directory bread(block 419) failed [ 865.247946][T21455] FAT-fs (loop2): Directory bread(block 420) failed [ 865.254640][T21455] FAT-fs (loop2): Directory bread(block 421) failed [ 865.315531][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 865.325994][T21459] netlink: 'syz.0.7258': attribute type 11 has an invalid length. [ 865.414187][T21455] FAT-fs (loop2): FAT read failed (blocknr 128) [ 865.854866][T21477] bond0: (slave gretap0): Error -99 calling set_mac_address [ 866.254274][T21490] loop2: detected capacity change from 0 to 1024 [ 866.352495][T21490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 866.445271][T21496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 866.528856][T21490] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.7272: Attempting to read directory block (623) that is past i_size (638464) [ 866.668972][T21503] QAT: Stopping all acceleration devices. [ 866.749102][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 867.030662][T21515] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.137120][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7284'. [ 867.379317][T21527] netlink: 'syz.0.7290': attribute type 6 has an invalid length. [ 867.404922][T21527] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7290'. [ 867.839763][T21539] loop3: detected capacity change from 0 to 4096 [ 867.879125][T21539] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 868.267813][T21556] loop2: detected capacity change from 0 to 1024 [ 868.278643][T21560] Cannot find add_set index 0 as target [ 868.491733][ T4362] hfsplus: b-tree write err: -5, ino 4 [ 868.528586][T21565] loop1: detected capacity change from 0 to 128 [ 868.612324][T21565] FAT-fs (loop1): Directory bread(block 414) failed [ 868.642000][T21565] FAT-fs (loop1): Directory bread(block 415) failed [ 868.663599][T21565] FAT-fs (loop1): Directory bread(block 416) failed [ 868.671059][T21573] netlink: 'syz.2.7312': attribute type 4 has an invalid length. [ 868.689867][T21565] FAT-fs (loop1): Directory bread(block 417) failed [ 868.696965][T21565] FAT-fs (loop1): Directory bread(block 418) failed [ 868.703996][T21573] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7312'. [ 868.748465][T21565] FAT-fs (loop1): Directory bread(block 419) failed [ 868.785134][T21565] FAT-fs (loop1): Directory bread(block 420) failed [ 868.801313][T21571] loop0: detected capacity change from 0 to 4096 [ 868.818681][T21565] FAT-fs (loop1): Directory bread(block 421) failed [ 868.867785][T21571] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 868.919238][T21565] FAT-fs (loop1): FAT read failed (blocknr 128) [ 869.257127][T21587] afs: Unknown parameter 'dont_hash' [ 869.426373][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7321'. [ 869.795530][T21605] loop0: detected capacity change from 0 to 128 [ 869.864409][T21605] FAT-fs (loop0): Directory bread(block 414) failed [ 869.895392][T21605] FAT-fs (loop0): Directory bread(block 415) failed [ 869.922892][T21605] FAT-fs (loop0): Directory bread(block 416) failed [ 869.955353][T21605] FAT-fs (loop0): Directory bread(block 417) failed [ 869.988271][T21605] FAT-fs (loop0): Directory bread(block 418) failed [ 870.006892][T21615] loop2: detected capacity change from 0 to 512 [ 870.013830][T21605] FAT-fs (loop0): Directory bread(block 419) failed [ 870.028508][T21605] FAT-fs (loop0): Directory bread(block 420) failed [ 870.030468][T21615] EXT4-fs: Ignoring removed mblk_io_submit option [ 870.035675][T21605] FAT-fs (loop0): Directory bread(block 421) failed [ 870.092192][T21605] FAT-fs (loop0): FAT read failed (blocknr 128) [ 870.137933][T21615] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 870.157912][T21615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102] [ 870.179553][T21615] System zones: 1-12 [ 870.202541][T21615] EXT4-fs (loop2): orphan cleanup on readonly fs [ 870.226256][T21615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7333: invalid indirect mapped block 12 (level 1) [ 870.287654][T21615] EXT4-fs (loop2): Remounting filesystem read-only [ 870.333586][T21615] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7333: invalid indirect mapped block 2 (level 2) [ 870.373110][T21620] loop3: detected capacity change from 0 to 4096 [ 870.396485][T21615] EXT4-fs (loop2): Remounting filesystem read-only [ 870.428396][T21615] EXT4-fs (loop2): 1 truncate cleaned up [ 870.437348][T21620] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 870.453056][T21615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 870.514032][T21620] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 870.637332][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 870.659121][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 870.690239][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 870.814316][T21620] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 870.879632][T21620] ntfs: volume version 3.1. [ 870.923586][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 870.958432][T21636] netlink: 'syz.1.7343': attribute type 7 has an invalid length. [ 870.979973][T21636] netlink: 'syz.1.7343': attribute type 8 has an invalid length. [ 870.988505][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 871.059616][T21620] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 871.232719][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 871.278741][T21620] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 871.384252][ T22] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 871.530497][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7351'. [ 871.610665][ T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.639866][ T22] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 1.ff [ 871.662029][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 871.682602][ T22] usb 1-1: SerialNumber: syz [ 871.694726][ T22] usb 1-1: config 0 descriptor?? [ 871.713269][ T22] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 871.716298][ T4394] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 871.738923][ T22] usb 1-1: Detected SIO [ 871.754033][ T22] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 871.909934][T21660] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7355'. [ 871.931589][ T4394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 871.946629][ T4437] usb 1-1: USB disconnect, device number 15 [ 871.953614][ T4394] usb 2-1: not running at top speed; connect to a high speed hub [ 871.963657][ T4437] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 871.974074][ T4394] usb 2-1: config 97 has an invalid interface number: 135 but max is 0 [ 871.982403][ T4394] usb 2-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 872.009368][ T4437] ftdi_sio 1-1:0.0: device disconnected [ 872.056297][ T4394] usb 2-1: config 97 has no interface number 0 [ 872.078928][ T4394] usb 2-1: config 97 interface 135 has no altsetting 0 [ 872.113474][ T4394] usb 2-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=8b.d4 [ 872.132415][ T4394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.140885][ T4394] usb 2-1: Product: syz [ 872.160253][T21646] loop2: detected capacity change from 0 to 32768 [ 872.175158][ T4394] usb 2-1: Manufacturer: syz [ 872.179847][ T4394] usb 2-1: SerialNumber: syz [ 872.206740][T21646] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 872.253874][T21646] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 872.297713][T21646] (syz.2.7348,21646,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 872.447012][ T4394] usb 2-1: USB disconnect, device number 10 [ 872.533612][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 872.715587][T21680] program syz.0.7364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.736694][T21678] loop3: detected capacity change from 0 to 764 [ 872.776783][T21680] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 872.802106][T21678] Symlink component flag not implemented [ 872.848832][T21678] Symlink component flag not implemented [ 872.873071][T21678] Symlink component flag not implemented (129) [ 872.879895][T21684] AppArmor: change_hat: Invalid input '' [ 872.912807][T21678] Symlink component flag not implemented (6) [ 873.201994][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7370'. [ 873.463531][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7374'. [ 873.541503][T21706] loop0: detected capacity change from 0 to 512 [ 873.563885][T21706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 873.603865][T21706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 873.807043][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 874.045337][T21725] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7386'. [ 874.092346][T21723] device bond0 entered promiscuous mode [ 874.100543][T21723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.338554][T21734] loop4: detected capacity change from 0 to 512 [ 874.429260][T21734] EXT4-fs: Ignoring removed mblk_io_submit option [ 874.507302][T21734] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 874.540515][T21734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102] [ 874.574979][T21734] System zones: 1-12 [ 874.580311][T21734] EXT4-fs (loop4): orphan cleanup on readonly fs [ 874.667022][T21734] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7388: invalid indirect mapped block 12 (level 1) [ 874.727411][T21734] EXT4-fs (loop4): Remounting filesystem read-only [ 874.736295][T21734] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.7388: invalid indirect mapped block 2 (level 2) [ 874.761349][T21734] EXT4-fs (loop4): Remounting filesystem read-only [ 874.795613][T21734] EXT4-fs (loop4): 1 truncate cleaned up [ 874.808550][T21734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 874.958198][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 875.143957][T21722] loop3: detected capacity change from 0 to 32768 [ 875.658027][T21776] hsr0: VLAN not yet supported [ 875.881834][T21781] netlink: 'syz.2.7412': attribute type 5 has an invalid length. [ 876.103806][T21790] loop1: detected capacity change from 0 to 256 [ 876.160195][T21794] SET target dimension over the limit! [ 876.405795][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7421'. [ 876.424382][T21798] openvswitch: netlink: Flow key attr not present in new flow. [ 876.871591][T21819] device sit0 entered promiscuous mode [ 876.931553][T21819] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7429'. [ 877.370797][ T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 877.492388][T21817] loop2: detected capacity change from 0 to 32768 [ 877.573998][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 877.581273][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.624726][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.653211][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 877.703140][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.733670][ T22] usb 5-1: config 0 descriptor?? [ 877.784965][ T22] hub 5-1:0.0: USB hub found [ 877.929964][T21848] netlink: 'syz.1.7445': attribute type 21 has an invalid length. [ 877.943699][T21848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7445'. [ 877.954041][T21848] netlink: 'syz.1.7445': attribute type 4 has an invalid length. [ 877.969497][T21848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7445'. [ 877.990506][ T22] hub 5-1:0.0: 1 port detected [ 878.063307][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7446'. [ 878.211103][ T22] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 878.225154][ T22] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 878.274820][T21856] loop1: detected capacity change from 0 to 512 [ 878.294503][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 878.300594][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 878.386890][ T22] usb 5-1: USB disconnect, device number 17 [ 878.445710][T21862] loop0: detected capacity change from 0 to 512 [ 878.496781][T21865] loop2: detected capacity change from 0 to 8 [ 878.509210][T21856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 878.522457][T21862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 878.537966][T21856] ext4 filesystem being mounted at /1558/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.565591][T21862] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7451: bg 0: block 384: padding at end of block bitmap is not set [ 878.634948][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 878.642007][T21856] EXT4-fs error (device loop1): ext4_xattr_block_list:713: inode #12: comm syz.1.7448: corrupted xattr block 6 [ 878.729439][T21862] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 878.782698][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 878.811001][T21862] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.7451: attempt to clear invalid blocks 983260 len 1 [ 878.905019][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 878.911171][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 878.918243][T21862] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.7451: Invalid inode table block 0 in block_group 0 [ 878.957248][T21874] loop2: detected capacity change from 0 to 47 [ 878.983484][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.035682][T21862] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 879.077469][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.098588][T21862] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 879.169120][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.175752][T21862] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.7451: Invalid inode table block 0 in block_group 0 [ 879.265382][T21878] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 879.282574][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.291751][T21862] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 879.335527][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.357720][T21862] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.7451: mark_inode_dirty error [ 879.398891][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.417445][T21862] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 879.429936][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.441471][T21862] EXT4-fs (loop0): 1 truncate cleaned up [ 879.450397][T21862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 879.565360][T21862] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.7451: Invalid inode table block 0 in block_group 0 [ 879.669764][T21862] EXT4-fs (loop0): Remounting filesystem read-only [ 879.806149][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 879.970447][T21900] netlink: 'syz.0.7469': attribute type 4 has an invalid length. [ 880.024598][T21904] loop3: detected capacity change from 0 to 8 [ 880.034772][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7471'. [ 880.054400][T21902] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7471'. [ 880.068196][T21904] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 880.347359][T21909] device geneve2 entered promiscuous mode [ 880.606003][T21920] loop3: detected capacity change from 0 to 128 [ 880.984846][T21899] loop4: detected capacity change from 0 to 32768 [ 881.088090][T21899] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 881.088090][T21899] [ 881.141806][T21899] ERROR: (device loop4): remounting filesystem as read-only [ 881.704273][T21950] ip6t_srh: unknown srh invflags 4000 [ 881.885025][T21926] loop0: detected capacity change from 0 to 32768 [ 881.952292][T21952] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 882.374645][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7501'. [ 882.408732][T21966] device netdevsim0 entered promiscuous mode [ 882.612492][ T5014] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 882.812416][ T5014] usb 5-1: Using ep0 maxpacket: 8 [ 882.821156][ T5014] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 882.835498][ T5014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 882.845830][ T5014] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 882.855961][ T5014] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.910780][ T5014] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 882.933619][ T5014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.951421][ T5014] usb 5-1: Product: syz [ 882.955662][ T5014] usb 5-1: Manufacturer: syz [ 882.960299][ T5014] usb 5-1: SerialNumber: syz [ 882.988930][T21964] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 883.028375][ T5014] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 883.035947][ T5014] usbtest 5-1:1.0: Linux user mode ISO test driver [ 883.058224][ T5014] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 883.288713][ T5014] usb 5-1: USB disconnect, device number 18 [ 883.530696][T21999] loop2: detected capacity change from 0 to 2048 [ 883.587630][T21999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.602051][T22005] loop0: detected capacity change from 0 to 64 [ 883.684498][T22005] hfs: unable to locate alternate MDB [ 883.756877][T22005] hfs: continuing without an alternate MDB [ 883.925337][ T9] [ 883.927742][ T9] ====================================================== [ 883.934793][ T9] WARNING: possible circular locking dependency detected [ 883.941868][ T9] syzkaller #0 Not tainted [ 883.946329][ T9] ------------------------------------------------------ [ 883.953376][ T9] kworker/u4:0/9 is trying to acquire lock: [ 883.959300][ T9] ffff8880236ab4f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 883.970356][ T9] [ 883.970356][ T9] but task is already holding lock: [ 883.977758][ T9] ffff88807cb720b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 883.987152][ T9] [ 883.987152][ T9] which lock already depends on the new lock. [ 883.987152][ T9] [ 883.997598][ T9] [ 883.997598][ T9] the existing dependency chain (in reverse order) is: [ 884.006648][ T9] [ 884.006648][ T9] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 884.014620][ T9] __mutex_lock+0x12d/0xaf0 [ 884.019717][ T9] hfs_find_init+0x15b/0x1d0 [ 884.024901][ T9] hfs_get_block+0x553/0xc50 [ 884.030075][ T9] block_read_full_folio+0x3e6/0xf00 [ 884.035939][ T9] filemap_read_folio+0x16b/0x770 [ 884.041549][ T9] do_read_cache_folio+0x2a0/0x760 [ 884.047236][ T9] do_read_cache_page+0x32/0x220 [ 884.051811][T22012] loop4: detected capacity change from 0 to 64 [ 884.052812][ T9] __hfs_bnode_create+0x4ad/0x7b0 [ 884.052845][ T9] hfs_bnode_find+0x21e/0xd40 [ 884.052871][ T9] hfs_brec_find+0x178/0x500 [ 884.052898][ T9] hfs_brec_read+0x20/0x100 [ 884.052924][ T9] hfs_cat_find_brec+0x174/0x3f0 [ 884.052953][ T9] hfs_fill_super+0xff8/0x15b0 [ 884.052977][ T9] mount_bdev+0x287/0x3c0 [ 884.052998][ T9] legacy_get_tree+0xe6/0x180 [ 884.100984][ T9] vfs_get_tree+0x88/0x270 [ 884.105981][ T9] do_new_mount+0x24a/0xa40 [ 884.111067][ T9] __se_sys_mount+0x2e3/0x3d0 [ 884.116301][ T9] do_syscall_64+0x4c/0xa0 [ 884.117927][T22012] hfs: inconsistency in B*Tree (1,0,1,0,3) [ 884.121262][ T9] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.133546][ T9] [ 884.133546][ T9] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 884.142805][ T9] __lock_acquire+0x2d07/0x7d10 [ 884.148226][ T9] lock_acquire+0x1bb/0x4a0 [ 884.153280][ T9] __mutex_lock+0x12d/0xaf0 [ 884.158330][ T9] hfs_extend_file+0xfb/0x13f0 [ 884.163645][ T9] hfs_bmap_reserve+0x103/0x420 [ 884.169048][ T9] __hfs_ext_write_extent+0x1fa/0x470 [ 884.174973][ T9] hfs_ext_write_extent+0x17b/0x200 [ 884.180727][ T9] hfs_write_inode+0xd8/0xa20 [ 884.185966][ T9] __writeback_single_inode+0x75b/0x1160 [ 884.192151][ T9] writeback_sb_inodes+0xb30/0x1850 [ 884.197897][ T9] wb_writeback+0x482/0xd50 [ 884.202951][ T9] wb_workfn+0x423/0xee0 [ 884.207732][ T9] process_one_work+0x8a2/0x1160 [ 884.213214][ T9] worker_thread+0xaa2/0x1270 [ 884.218431][ T9] kthread+0x29d/0x330 [ 884.223067][ T9] ret_from_fork+0x1f/0x30 [ 884.228206][ T9] [ 884.228206][ T9] other info that might help us debug this: [ 884.228206][ T9] [ 884.238447][ T9] Possible unsafe locking scenario: [ 884.238447][ T9] [ 884.245918][ T9] CPU0 CPU1 [ 884.251315][ T9] ---- ---- [ 884.256698][ T9] lock(&tree->tree_lock/1); [ 884.261452][ T9] lock(&HFS_I(tree->inode)->extents_lock); [ 884.269979][ T9] lock(&tree->tree_lock/1); [ 884.277206][ T9] lock(&HFS_I(tree->inode)->extents_lock); [ 884.283204][ T9] [ 884.283204][ T9] *** DEADLOCK *** [ 884.283204][ T9] [ 884.291359][ T9] 3 locks held by kworker/u4:0/9: [ 884.296413][ T9] #0: ffff88801ba7c938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 884.307144][ T9] #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 884.319001][ T9] #2: ffff88807cb720b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 884.328785][ T9] [ 884.328785][ T9] stack backtrace: [ 884.334714][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 884.342020][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.352101][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 884.358112][ T9] Call Trace: [ 884.361419][ T9] [ 884.364367][ T9] dump_stack_lvl+0x188/0x24e [ 884.369072][ T9] ? load_image+0x400/0x400 [ 884.373616][ T9] ? show_regs_print_info+0x12/0x12 [ 884.378865][ T9] ? print_circular_bug+0x12b/0x1a0 [ 884.384108][ T9] check_noncircular+0x296/0x330 [ 884.389082][ T9] ? look_up_lock_class+0x75/0x140 [ 884.394338][ T9] ? add_chain_block+0x940/0x940 [ 884.399307][ T9] ? lockdep_lock+0xf1/0x1f0 [ 884.403932][ T9] ? unwind_next_frame+0x1880/0x20b0 [ 884.409243][ T9] ? _find_first_zero_bit+0xcf/0x100 [ 884.414655][ T9] __lock_acquire+0x2d07/0x7d10 [ 884.419555][ T9] ? ret_from_fork+0x1f/0x30 [ 884.424194][ T9] ? ret_from_fork+0x1f/0x30 [ 884.428827][ T9] ? verify_lock_unused+0x140/0x140 [ 884.434115][ T9] ? stack_trace_save+0xa6/0xf0 [ 884.438995][ T9] ? stack_trace_snprint+0xf0/0xf0 [ 884.444127][ T9] ? check_noncircular+0x189/0x330 [ 884.449264][ T9] ? add_chain_block+0x940/0x940 [ 884.454231][ T9] lock_acquire+0x1bb/0x4a0 [ 884.458773][ T9] ? hfs_extend_file+0xfb/0x13f0 [ 884.463747][ T9] ? __might_sleep+0xd0/0xd0 [ 884.468370][ T9] ? read_lock_is_recursive+0x10/0x10 [ 884.473865][ T9] __mutex_lock+0x12d/0xaf0 [ 884.478391][ T9] ? hfs_extend_file+0xfb/0x13f0 [ 884.483355][ T9] ? verify_lock_unused+0x140/0x140 [ 884.488580][ T9] ? hfs_extend_file+0xfb/0x13f0 [ 884.493540][ T9] ? mutex_lock_nested+0x10/0x10 [ 884.498591][ T9] ? __stack_depot_save+0x421/0x460 [ 884.503849][ T9] hfs_extend_file+0xfb/0x13f0 [ 884.508640][ T9] ? hfs_ext_write_extent+0x14e/0x200 [ 884.514040][ T9] ? hfs_write_inode+0xd8/0xa20 [ 884.518926][ T9] ? hfs_get_block+0xc50/0xc50 [ 884.523732][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 884.529998][ T9] ? rcu_is_watching+0x11/0xa0 [ 884.534785][ T9] ? trace_contention_end+0x5f/0x170 [ 884.540097][ T9] ? memset+0x1e/0x40 [ 884.544104][ T9] ? hfs_brec_find+0x197/0x500 [ 884.548897][ T9] hfs_bmap_reserve+0x103/0x420 [ 884.553789][ T9] __hfs_ext_write_extent+0x1fa/0x470 [ 884.559198][ T9] hfs_ext_write_extent+0x17b/0x200 [ 884.564424][ T9] ? verify_lock_unused+0x140/0x140 [ 884.569649][ T9] ? hfs_ext_keycmp+0x310/0x310 [ 884.574533][ T9] ? writeback_sb_inodes+0x46b/0x1850 [ 884.579950][ T9] hfs_write_inode+0xd8/0xa20 [ 884.584665][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 884.590066][ T9] ? __writeback_single_inode+0x4ae/0x1160 [ 884.595907][ T9] ? __lock_acquire+0x7d10/0x7d10 [ 884.600959][ T9] ? do_raw_spin_lock+0x128/0x2f0 [ 884.606005][ T9] ? __rwlock_init+0x140/0x140 [ 884.610797][ T9] __writeback_single_inode+0x75b/0x1160 [ 884.616459][ T9] writeback_sb_inodes+0xb30/0x1850 [ 884.621693][ T9] ? queue_io+0x5a0/0x5a0 [ 884.626051][ T9] ? rcu_is_watching+0x11/0xa0 [ 884.630843][ T9] wb_writeback+0x482/0xd50 [ 884.635375][ T9] ? percpu_ref_tryget+0x250/0x250 [ 884.640514][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 884.646525][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 884.651745][ T9] wb_workfn+0x423/0xee0 [ 884.656024][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 884.661772][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 884.667777][ T9] ? read_lock_is_recursive+0x10/0x10 [ 884.673176][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 884.679084][ T9] ? _raw_spin_unlock+0x40/0x40 [ 884.684393][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 884.689609][ T9] ? process_one_work+0x7b0/0x1160 [ 884.694758][ T9] process_one_work+0x8a2/0x1160 [ 884.699751][ T9] ? worker_detach_from_pool+0x240/0x240 [ 884.705425][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 884.710549][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 884.716126][ T9] ? kthread_data+0x4b/0xc0 [ 884.720658][ T9] worker_thread+0xaa2/0x1270 [ 884.725369][ T9] kthread+0x29d/0x330 [ 884.729472][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 884.734516][ T9] ? kthread_blkcg+0xd0/0xd0 [ 884.739140][ T9] ret_from_fork+0x1f/0x30 [ 884.743592][ T9] [ 884.836394][ T9] hfs: new node 0 already hashed? [ 884.842465][ T9] ------------[ cut here ]------------ [ 884.848345][ T9] WARNING: CPU: 1 PID: 9 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 884.857127][ T9] Modules linked in: [ 884.861057][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 884.868407][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 884.878520][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 884.884558][ T9] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 884.890273][ T9] Code: aa a2 8a 89 ee e8 66 04 d6 07 e9 ab fd ff ff e8 cc 59 37 ff 48 89 df e8 b4 53 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 46 04 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 884.909955][ T9] RSP: 0018:ffffc900000e6e80 EFLAGS: 00010246 [ 884.916068][ T9] RAX: 000000000000001f RBX: ffff88807cb720e0 RCX: 377eac1e278c3300 [ 884.924126][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 884.932183][ T9] RBP: 0000000000000000 R08: ffffc900000e6b87 R09: 1ffff9200001cd70 [ 884.940225][ T9] R10: dffffc0000000000 R11: fffff5200001cd71 R12: 0000000000000000 [ 884.948261][ T9] R13: ffff88807cb72000 R14: ffff8880238a9a00 R15: dffffc0000000000 [ 884.956310][ T9] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 884.965319][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.971956][ T9] CR2: 000055556d58aa28 CR3: 000000005c279000 CR4: 00000000003506e0 [ 884.979980][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 884.988034][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 884.996079][ T9] Call Trace: [ 884.999403][ T9] [ 885.002370][ T9] hfs_bmap_alloc+0x53d/0x5d0 [ 885.007144][ T9] ? hfs_bmap_reserve+0x420/0x420 [ 885.012219][ T9] ? rcu_is_watching+0x11/0xa0 [ 885.017143][ T9] hfs_btree_inc_height+0xfd/0xac0 [ 885.022308][ T9] ? hfs_brec_insert+0x6f6/0xbd0 [ 885.027326][ T9] ? hfs_brec_insert+0xbd0/0xbd0 [ 885.032321][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 885.037591][ T9] hfs_brec_insert+0x744/0xbd0 [ 885.042422][ T9] ? hfs_brec_keylen+0x350/0x350 [ 885.047438][ T9] __hfs_ext_write_extent+0x2a1/0x470 [ 885.052877][ T9] hfs_ext_write_extent+0x17b/0x200 [ 885.058161][ T9] ? verify_lock_unused+0x140/0x140 [ 885.063420][ T9] ? hfs_ext_keycmp+0x310/0x310 [ 885.068354][ T9] ? writeback_sb_inodes+0x46b/0x1850 [ 885.073788][ T9] hfs_write_inode+0xd8/0xa20 [ 885.078544][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 885.084013][ T9] ? __writeback_single_inode+0x4ae/0x1160 [ 885.089914][ T9] ? __lock_acquire+0x7d10/0x7d10 [ 885.094999][ T9] ? do_raw_spin_lock+0x128/0x2f0 [ 885.100109][ T9] ? __rwlock_init+0x140/0x140 [ 885.104925][ T9] __writeback_single_inode+0x75b/0x1160 [ 885.110626][ T9] writeback_sb_inodes+0xb30/0x1850 [ 885.115972][ T9] ? queue_io+0x5a0/0x5a0 [ 885.120341][ T9] ? rcu_is_watching+0x11/0xa0 [ 885.125168][ T9] wb_writeback+0x482/0xd50 [ 885.129718][ T9] ? percpu_ref_tryget+0x250/0x250 [ 885.134890][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.140912][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 885.146168][ T9] wb_workfn+0x423/0xee0 [ 885.150449][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 885.156230][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.162253][ T9] ? read_lock_is_recursive+0x10/0x10 [ 885.167708][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 885.173675][ T9] ? _raw_spin_unlock+0x40/0x40 [ 885.178579][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 885.183809][ T9] ? process_one_work+0x7b0/0x1160 [ 885.188982][ T9] process_one_work+0x8a2/0x1160 [ 885.193959][ T9] ? worker_detach_from_pool+0x240/0x240 [ 885.199650][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 885.204732][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 885.210343][ T9] ? kthread_data+0x4b/0xc0 [ 885.214887][ T9] worker_thread+0xaa2/0x1270 [ 885.219637][ T9] kthread+0x29d/0x330 [ 885.223761][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 885.228860][ T9] ? kthread_blkcg+0xd0/0xd0 [ 885.233496][ T9] ret_from_fork+0x1f/0x30 [ 885.237953][ T9] [ 885.241069][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 885.248370][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 885.255668][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.265821][ T9] Workqueue: writeback wb_workfn (flush-7:0) [ 885.272033][ T9] Call Trace: [ 885.275349][ T9] [ 885.278317][ T9] dump_stack_lvl+0x188/0x24e [ 885.283074][ T9] ? memcpy+0x3c/0x60 [ 885.287115][ T9] ? show_regs_print_info+0x12/0x12 [ 885.292345][ T9] ? load_image+0x400/0x400 [ 885.296922][ T9] panic+0x2e5/0x730 [ 885.300870][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 885.305412][ T9] ? ret_from_fork+0x1f/0x30 [ 885.310107][ T9] __warn+0x2f8/0x4f0 [ 885.314205][ T9] ? hfs_bnode_create+0x37a/0x400 [ 885.319294][ T9] ? hfs_bnode_create+0x37a/0x400 [ 885.324365][ T9] report_bug+0x2ba/0x4f0 [ 885.328721][ T9] ? hfs_bnode_create+0x37a/0x400 [ 885.333779][ T9] handle_bug+0x3a/0x70 [ 885.337969][ T9] exc_invalid_op+0x16/0x40 [ 885.342520][ T9] asm_exc_invalid_op+0x16/0x20 [ 885.347416][ T9] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 885.353080][ T9] Code: aa a2 8a 89 ee e8 66 04 d6 07 e9 ab fd ff ff e8 cc 59 37 ff 48 89 df e8 b4 53 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 46 04 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 885.372743][ T9] RSP: 0018:ffffc900000e6e80 EFLAGS: 00010246 [ 885.378838][ T9] RAX: 000000000000001f RBX: ffff88807cb720e0 RCX: 377eac1e278c3300 [ 885.387004][ T9] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 885.394995][ T9] RBP: 0000000000000000 R08: ffffc900000e6b87 R09: 1ffff9200001cd70 [ 885.403080][ T9] R10: dffffc0000000000 R11: fffff5200001cd71 R12: 0000000000000000 [ 885.411077][ T9] R13: ffff88807cb72000 R14: ffff8880238a9a00 R15: dffffc0000000000 [ 885.419082][ T9] hfs_bmap_alloc+0x53d/0x5d0 [ 885.423792][ T9] ? hfs_bmap_reserve+0x420/0x420 [ 885.428852][ T9] ? rcu_is_watching+0x11/0xa0 [ 885.433647][ T9] hfs_btree_inc_height+0xfd/0xac0 [ 885.438785][ T9] ? hfs_brec_insert+0x6f6/0xbd0 [ 885.443848][ T9] ? hfs_brec_insert+0xbd0/0xbd0 [ 885.448814][ T9] ? do_raw_spin_unlock+0x11d/0x230 [ 885.454043][ T9] hfs_brec_insert+0x744/0xbd0 [ 885.458859][ T9] ? hfs_brec_keylen+0x350/0x350 [ 885.463839][ T9] __hfs_ext_write_extent+0x2a1/0x470 [ 885.469240][ T9] hfs_ext_write_extent+0x17b/0x200 [ 885.474461][ T9] ? verify_lock_unused+0x140/0x140 [ 885.479775][ T9] ? hfs_ext_keycmp+0x310/0x310 [ 885.484773][ T9] ? writeback_sb_inodes+0x46b/0x1850 [ 885.490301][ T9] hfs_write_inode+0xd8/0xa20 [ 885.495018][ T9] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 885.500432][ T9] ? __writeback_single_inode+0x4ae/0x1160 [ 885.506279][ T9] ? __lock_acquire+0x7d10/0x7d10 [ 885.511343][ T9] ? do_raw_spin_lock+0x128/0x2f0 [ 885.516563][ T9] ? __rwlock_init+0x140/0x140 [ 885.521354][ T9] __writeback_single_inode+0x75b/0x1160 [ 885.527112][ T9] writeback_sb_inodes+0xb30/0x1850 [ 885.532347][ T9] ? queue_io+0x5a0/0x5a0 [ 885.536772][ T9] ? rcu_is_watching+0x11/0xa0 [ 885.541592][ T9] wb_writeback+0x482/0xd50 [ 885.546133][ T9] ? percpu_ref_tryget+0x250/0x250 [ 885.551269][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.557279][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 885.562500][ T9] wb_workfn+0x423/0xee0 [ 885.566784][ T9] ? inode_wait_for_writeback+0x220/0x220 [ 885.572544][ T9] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.578553][ T9] ? read_lock_is_recursive+0x10/0x10 [ 885.584037][ T9] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 885.589947][ T9] ? _raw_spin_unlock+0x40/0x40 [ 885.594817][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 885.600039][ T9] ? process_one_work+0x7b0/0x1160 [ 885.605173][ T9] process_one_work+0x8a2/0x1160 [ 885.610134][ T9] ? worker_detach_from_pool+0x240/0x240 [ 885.615786][ T9] ? _raw_spin_lock_irq+0xb7/0xf0 [ 885.620846][ T9] ? _raw_spin_lock_irqsave+0x100/0x100 [ 885.626421][ T9] ? kthread_data+0x4b/0xc0 [ 885.630988][ T9] worker_thread+0xaa2/0x1270 [ 885.635694][ T9] kthread+0x29d/0x330 [ 885.639798][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 885.644875][ T9] ? kthread_blkcg+0xd0/0xd0 [ 885.649495][ T9] ret_from_fork+0x1f/0x30 [ 885.653946][ T9] [ 885.657653][ T9] Kernel Offset: disabled [ 885.661984][ T9] Rebooting in 86400 seconds..