last executing test programs: 3m56.561783069s ago: executing program 0 (id=414): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f0000000340)=""/6) 3m56.165180525s ago: executing program 0 (id=418): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) 3m55.926762481s ago: executing program 0 (id=422): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x40}}, 0x2004c884) 3m55.732945945s ago: executing program 0 (id=424): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m55.220301109s ago: executing program 0 (id=431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) 3m54.552472005s ago: executing program 0 (id=440): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 3m54.210311911s ago: executing program 32 (id=440): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 1m15.05785336s ago: executing program 3 (id=2424): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m15.011779792s ago: executing program 3 (id=2425): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x119, 0x8, &(0x7f0000000000), 0x4) 1m14.739149421s ago: executing program 3 (id=2429): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 1m13.867914239s ago: executing program 3 (id=2436): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m13.589300017s ago: executing program 3 (id=2439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x200, 0x2a0, 0x98, 0x130, 0x130, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x48}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0x0, 'lo\x00', 'lo\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xbfffff8e, 0x70, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x80, 0x3}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@ip={@empty, @multicast2, 0xff, 0xffffff00, 'vlan1\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 1m13.018921831s ago: executing program 3 (id=2442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @local, 0x101}}}, 0x90) 1m12.547086083s ago: executing program 33 (id=2442): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @local, 0x101}}}, 0x90) 4.101936842s ago: executing program 4 (id=3329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}, {0x8, 0xd, 0x0, 0x0, 0x101}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.545857649s ago: executing program 4 (id=3338): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 3.343223681s ago: executing program 1 (id=3343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x5, 0x10001, 0x7fff, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 3.260623106s ago: executing program 4 (id=3344): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.075943562s ago: executing program 5 (id=3347): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xb, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) 3.057220148s ago: executing program 1 (id=3348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 2.817594523s ago: executing program 1 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}, {0x8, 0xd, 0x0, 0x0, 0x101}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.816592073s ago: executing program 5 (id=3359): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1) 2.771290265s ago: executing program 4 (id=3351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.633719139s ago: executing program 5 (id=3353): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1}}]}}, 0x0) 2.456795146s ago: executing program 2 (id=3355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x40}}, 0x0) 2.255520739s ago: executing program 2 (id=3357): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000080)) 2.201612079s ago: executing program 1 (id=3358): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x4) 2.094038519s ago: executing program 2 (id=3360): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x550, 0x0, 0x0, 0x148, 0x0, 0x148, 0x4b8, 0x240, 0x240, 0x4b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x9, 0x10000, 0x81, 'netbios-ns\x00', 'syz0\x00', {0xd7b1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) 2.041039969s ago: executing program 1 (id=3362): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[]) 1.944345771s ago: executing program 2 (id=3363): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1}) 1.844722773s ago: executing program 2 (id=3365): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$FITRIM(r0, 0xc0185879, 0x0) 1.56383674s ago: executing program 6 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xb25, 0xffffff21, 0x25dfdbff, {}, [{0x34, 0x1, [@m_vlan={0xffffffffffffffdb, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 1.383434746s ago: executing program 6 (id=3368): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 948.685876ms ago: executing program 5 (id=3369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @private=0xa010101}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x3}) 948.468036ms ago: executing program 6 (id=3370): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 639.043378ms ago: executing program 4 (id=3371): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 570.635746ms ago: executing program 5 (id=3372): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x1e8, 0x194, 0x194, 0x1e8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {0x7f}, 0x6}, 0x0, 0xa0, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x4], [0x0, 0x4e22], 0x0, 0x40, 0x7a, 0x13}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x3, 0x3, 0x5, 0x2, 0x1, 0x3], 0x6}}}, @common=@addrtype={{0x30}, {0xaa892d8b304f53, 0x1c4, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xda7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 507.486594ms ago: executing program 6 (id=3373): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 403.449854ms ago: executing program 2 (id=3374): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 292.062134ms ago: executing program 5 (id=3375): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000340)={0x234, 0x7d, 0x0, {{0x500, 0xf3, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{evbox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x234) 249.707666ms ago: executing program 6 (id=3376): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 211.091299ms ago: executing program 4 (id=3377): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x0) 105.390159ms ago: executing program 6 (id=3378): openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3379): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) kernel console output (not intermixed with test programs): ocess `syz.1.1768'. [ 219.051275][ T8552] trusted_key: encrypted_key: keylen parameter is missing [ 219.084559][ T8518] loop2: detected capacity change from 0 to 32768 [ 219.101154][ T8518] XFS: attr2 mount option is deprecated. [ 219.219612][ T8518] XFS (loop2): Mounting V5 Filesystem [ 219.328542][ T8518] XFS (loop2): Ending clean mount [ 219.389835][ T8518] XFS (loop2): Quotacheck needed: Please wait. [ 219.491027][ T8518] XFS (loop2): Quotacheck: Done. [ 219.779110][ T4271] XFS (loop2): Unmounting Filesystem [ 219.824257][ T8581] netlink: 'syz.5.1787': attribute type 13 has an invalid length. [ 219.873142][ T8581] netlink: 'syz.5.1787': attribute type 17 has an invalid length. [ 220.205315][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.307504][ T8581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.607921][ T8601] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.865685][ T8652] Zero length message leads to an empty skb [ 222.404457][ T8674] netlink: 'syz.2.1833': attribute type 4 has an invalid length. [ 223.143134][ T3653] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 223.271626][ T8669] loop1: detected capacity change from 0 to 32768 [ 223.338017][ T3653] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 223.381022][ T3653] usb 5-1: config 0 has no interface number 0 [ 223.417705][ T3653] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 223.438528][ T8683] loop2: detected capacity change from 0 to 32768 [ 223.468700][ T3653] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.495449][ T8683] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1838 (8683) [ 223.518714][ T8669] XFS (loop1): Mounting V5 Filesystem [ 223.519675][ T3653] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 223.563118][ T3653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.579523][ T3653] usb 5-1: Product: syz [ 223.593159][ T3653] usb 5-1: Manufacturer: syz [ 223.597814][ T3653] usb 5-1: SerialNumber: syz [ 223.623794][ T3653] usb 5-1: config 0 descriptor?? [ 223.639920][ T8683] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.651186][ T8683] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 223.660490][ T8683] BTRFS info (device loop2): enabling auto defrag [ 223.667711][ T8683] BTRFS info (device loop2): use no compression [ 223.674607][ T8683] BTRFS info (device loop2): max_inline at 4096 [ 223.681723][ T8683] BTRFS info (device loop2): using free space tree [ 223.693736][ T8669] XFS (loop1): Ending clean mount [ 223.839203][ T3653] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 223.848560][ T3653] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 223.856608][ T3653] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 223.867778][ T3653] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 223.877156][ T3653] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 223.888505][ T3653] usb 5-1: USB disconnect, device number 7 [ 223.904417][ T3653] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 223.915107][ T3653] keyspan 5-1:0.133: device disconnected [ 224.031957][ T4270] XFS (loop1): Unmounting Filesystem [ 224.051658][ T8691] loop5: detected capacity change from 0 to 32768 [ 224.060181][ T8683] BTRFS info (device loop2): enabling ssd optimizations [ 224.102350][ T8691] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1842 (8691) [ 224.235224][ T4271] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.244548][ T8691] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.286193][ T8691] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 224.378903][ T8691] BTRFS info (device loop5): force clearing of disk cache [ 224.399634][ T8691] BTRFS info (device loop5): metadata ratio 0 [ 224.446883][ T8691] BTRFS info (device loop5): enabling ssd optimizations [ 224.474183][ T8691] BTRFS info (device loop5): using spread ssd allocation scheme [ 224.482018][ T8691] BTRFS info (device loop5): using free space tree [ 224.550850][ T8732] loop3: detected capacity change from 0 to 512 [ 224.667673][ T8732] EXT4-fs (loop3): orphan cleanup on readonly fs [ 224.763674][ T8732] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 224.802227][ T8732] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 224.834701][ T8732] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1851: attempt to clear invalid blocks 2 len 1 [ 224.931316][ T8732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1851: invalid indirect mapped block 1819239214 (level 0) [ 224.946094][ T8691] BTRFS info (device loop5): rebuilding free space tree [ 224.988170][ T8732] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1851: invalid indirect mapped block 1819239214 (level 1) [ 225.079537][ T8732] EXT4-fs (loop3): 1 truncate cleaned up [ 225.108327][ T8732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 225.196061][ T8732] EXT4-fs error (device loop3): __ext4_remount:6644: comm syz.3.1851: Abort forced by user [ 225.268995][ T8732] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 225.408123][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 225.440112][ T7895] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.694046][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 225.694064][ T26] audit: type=1326 audit(1773239413.270:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 225.854220][ T26] audit: type=1326 audit(1773239413.320:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 225.971800][ T26] audit: type=1326 audit(1773239413.320:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 226.073691][ T26] audit: type=1326 audit(1773239413.320:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 226.161005][ T26] audit: type=1326 audit(1773239413.320:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 226.273119][ T26] audit: type=1326 audit(1773239413.360:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 226.353996][ T26] audit: type=1326 audit(1773239413.360:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 226.463140][ T26] audit: type=1326 audit(1773239413.360:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 226.720897][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 226.769407][ T8814] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1874'. [ 226.903338][ T3653] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 227.011362][ T8826] QAT: Invalid ioctl 1075883590 [ 227.043296][ T8826] QAT: Invalid ioctl 1075883590 [ 227.053580][ T8826] QAT: Invalid ioctl 1075883590 [ 227.069021][ T8826] QAT: Invalid ioctl 1075883590 [ 227.095927][ T8826] QAT: Invalid ioctl 1075883590 [ 227.107527][ T3653] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 227.129660][ T8826] QAT: Invalid ioctl 1075883590 [ 227.135021][ T3653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.148628][ T8826] QAT: Invalid ioctl 1075883590 [ 227.158425][ T3653] usb 6-1: Product: syz [ 227.162673][ T3653] usb 6-1: Manufacturer: syz [ 227.168256][ T8826] QAT: Invalid ioctl 1075883590 [ 227.173590][ T8826] QAT: Invalid ioctl 1075883590 [ 227.178588][ T3653] usb 6-1: SerialNumber: syz [ 227.185332][ T8826] QAT: Invalid ioctl 1075883590 [ 227.187162][ T8831] loop3: detected capacity change from 0 to 64 [ 227.212597][ T3653] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 227.288592][ T3653] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 227.290826][ T8831] hfs: unable to locate alternate MDB [ 227.383130][ T8831] hfs: continuing without an alternate MDB [ 227.439412][ T8836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.735207][ T128] usb 6-1: USB disconnect, device number 8 [ 227.912748][ T8850] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 227.938749][ T8850] netlink: 'syz.3.1894': attribute type 2 has an invalid length. [ 227.980239][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'. [ 228.389751][ T8870] loop5: detected capacity change from 0 to 64 [ 228.403330][ T3653] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 228.431181][ T3653] ath9k_htc: Failed to initialize the device [ 228.464104][ T128] usb 6-1: ath9k_htc: USB layer deinitialized [ 229.128652][ T8893] device netdevsim0 entered promiscuous mode [ 229.181930][ T8893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.245442][ T8899] loop1: detected capacity change from 0 to 128 [ 229.271554][ T8899] qnx6: invalid mount options. [ 229.421036][ T26] audit: type=1326 audit(1773239416.990:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 229.493104][ T128] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.523273][ T26] audit: type=1326 audit(1773239416.990:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8903 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 229.686541][ T128] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 229.702227][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.767077][ T128] usb 5-1: config 0 descriptor?? [ 229.798768][ T128] cp210x 5-1:0.0: cp210x converter detected [ 230.146582][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1929'. [ 230.210847][ T128] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 230.233404][ T128] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 230.241147][ T128] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 230.291682][ T128] usb 5-1: cp210x converter now attached to ttyUSB0 [ 230.310600][ T128] usb 5-1: USB disconnect, device number 8 [ 230.343618][ T128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.372208][ T128] cp210x 5-1:0.0: device disconnected [ 230.644690][ T8908] loop1: detected capacity change from 0 to 40427 [ 230.675605][ T8908] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 230.695698][ T8908] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 230.779580][ T8908] F2FS-fs (loop1): invalid crc value [ 230.836854][ T8908] F2FS-fs (loop1): Found nat_bits in checkpoint [ 230.838309][ T8919] loop2: detected capacity change from 0 to 32768 [ 231.154107][ T8908] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 231.161224][ T8908] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.909728][ T8970] netlink: 'syz.4.1950': attribute type 7 has an invalid length. [ 231.953083][ T8970] netlink: 'syz.4.1950': attribute type 8 has an invalid length. [ 231.983145][ T128] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.187512][ T128] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 232.206274][ T128] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 232.232659][ T128] usb 4-1: Product: syz [ 232.242798][ T128] usb 4-1: SerialNumber: syz [ 232.260960][ T128] usb 4-1: config 0 descriptor?? [ 232.480675][ T128] hso 4-1:0.0: Can't find BULK IN endpoint [ 232.525617][ T14] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 232.659842][ T8966] loop5: detected capacity change from 0 to 32768 [ 232.691323][ T128] usb 4-1: USB disconnect, device number 13 [ 232.733756][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.748628][ T14] usb 3-1: not running at top speed; connect to a high speed hub [ 232.800890][ T14] usb 3-1: config 4 has an invalid interface number: 175 but max is 0 [ 232.821264][ T14] usb 3-1: config 4 has no interface number 0 [ 232.850293][ T14] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.17 [ 232.878432][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.904237][ T14] usb 3-1: Product: syz [ 232.908480][ T14] usb 3-1: Manufacturer: syz [ 232.925143][ T14] usb 3-1: SerialNumber: syz [ 233.167728][ T14] usb 3-1: NDI device with a latency value of 1 [ 233.187434][ T14] ftdi_sio 3-1:4.175: FTDI USB Serial Device converter detected [ 233.225044][ T14] ftdi_sio ttyUSB0: unknown device type: 0xdc17 [ 233.252780][ T14] usb 3-1: USB disconnect, device number 9 [ 233.305860][ T14] ftdi_sio 3-1:4.175: device disconnected [ 233.563484][ T9006] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.611184][ T9012] netlink: 'syz.3.1969': attribute type 13 has an invalid length. [ 233.637333][ T9012] netlink: 'syz.3.1969': attribute type 17 has an invalid length. [ 233.800083][ T9012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.839626][ T9012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.438923][ T9029] loop4: detected capacity change from 0 to 4096 [ 234.476515][ T9029] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 234.564766][ T9029] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 234.888351][ T9046] loop2: detected capacity change from 0 to 4096 [ 236.002086][ T9051] loop1: detected capacity change from 0 to 32768 [ 236.044452][ T9051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1987 (9051) [ 236.080767][ T9051] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.080849][ T9051] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 236.080919][ T9051] BTRFS info (device loop1): enabling auto defrag [ 236.080939][ T9051] BTRFS info (device loop1): use no compression [ 236.080980][ T9051] BTRFS info (device loop1): max_inline at 4096 [ 236.081000][ T9051] BTRFS info (device loop1): using free space tree [ 236.190637][ T9051] BTRFS info (device loop1): enabling ssd optimizations [ 236.265735][ T4270] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 236.503478][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 236.503493][ T26] audit: type=1326 audit(1773239424.080:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 236.630201][ T26] audit: type=1326 audit(1773239424.080:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 236.693401][ T4380] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (4380) [ 236.843403][ T26] audit: type=1326 audit(1773239424.080:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 236.982008][ T26] audit: type=1326 audit(1773239424.080:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 237.063124][ T26] audit: type=1326 audit(1773239424.080:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 237.133122][ T26] audit: type=1326 audit(1773239424.080:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 237.178619][ T9128] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.203694][ T26] audit: type=1326 audit(1773239424.080:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 237.304922][ T26] audit: type=1326 audit(1773239424.080:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.3.2009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4720d9c799 code=0x7ffc0000 [ 237.373953][ T9128] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 237.411104][ T9128] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.442681][ T9128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.476122][ T9128] usb 3-1: Product: syz [ 237.480365][ T9128] usb 3-1: Manufacturer: syz [ 237.508393][ T9128] usb 3-1: SerialNumber: syz [ 237.959140][ T9128] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 237.992442][ T9128] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 238.042915][ T9128] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 238.076244][ T9128] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 238.108539][ T9128] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 238.158873][ T9128] lan78xx: probe of 3-1:1.0 failed with error -71 [ 238.185119][ T9128] usb 3-1: USB disconnect, device number 10 [ 238.208627][ T9165] misc userio: Invalid payload size [ 238.372202][ T9145] loop5: detected capacity change from 0 to 32768 [ 238.429207][ T3653] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 238.484615][ T9145] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 238.638524][ T3653] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.663139][ T3653] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.721310][ T3653] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 238.741780][ T3653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.771701][ T3653] usb 4-1: config 0 descriptor?? [ 238.799261][ T7895] ocfs2: Unmounting device (7,5) on (node local) [ 239.022145][ T3653] usb 4-1: USB disconnect, device number 14 [ 239.306129][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.530088][ T9202] loop1: detected capacity change from 0 to 1024 [ 239.612443][ T9204] loop4: detected capacity change from 0 to 512 [ 239.670846][ T9204] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 239.755821][ T9204] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 239.824249][ T9204] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 239.832397][ T9204] System zones: 0-2, 18-18, 34-34 [ 239.899729][ T9204] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2050: bad orphan inode 15 [ 239.946922][ T9204] ext4_test_bit(bit=14, block=18) = 1 [ 239.962664][ T9204] is_bad_inode(inode)=0 [ 239.979123][ T9204] NEXT_ORPHAN(inode)=2264924160 [ 240.023080][ T9204] max_ino=32 [ 240.026355][ T9204] i_nlink=0 [ 240.053150][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.2050: corrupted inode contents [ 240.110324][ T9204] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #15: comm syz.4.2050: mark_inode_dirty error [ 240.136280][ T9204] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #15: comm syz.4.2050: corrupted inode contents [ 240.158593][ T9187] loop5: detected capacity change from 0 to 32768 [ 240.177764][ T9204] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2945: inode #15: comm syz.4.2050: mark_inode_dirty error [ 240.260954][ T9204] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2948: inode #15: comm syz.4.2050: mark inode dirty (error -117) [ 240.280824][ T9187] XFS (loop5): Mounting V5 Filesystem [ 240.297045][ T9204] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 240.316798][ T9204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 240.422334][ T9204] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.2050: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=262156, rec_len=0, size=4096 fake=0 [ 240.449187][ T9187] XFS (loop5): Ending clean mount [ 240.491136][ T9187] XFS (loop5): Quotacheck needed: Please wait. [ 240.595640][ T9187] XFS (loop5): Quotacheck: Done. [ 240.653159][ T3653] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 240.672475][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 240.857229][ T3653] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.872159][ T3653] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.906228][ T3653] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.939032][ T3653] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 240.968194][ T3653] usb 4-1: Product: syz [ 240.970320][ T9239] loop2: detected capacity change from 0 to 4096 [ 240.978318][ T3653] usb 4-1: Manufacturer: syz [ 240.994213][ T7895] XFS (loop5): Unmounting Filesystem [ 241.001348][ T3653] hub 4-1:4.0: USB hub found [ 241.033156][ T9239] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 241.090114][ T9239] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 241.172528][ T9239] ntfs: volume version 3.1. [ 241.207531][ T3653] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 241.343832][ T9249] loop4: detected capacity change from 0 to 1024 [ 241.447310][ T9249] syz.4.2068: attempt to access beyond end of device [ 241.447310][ T9249] loop4: rw=0, sector=393226, nr_sectors = 2 limit=1024 [ 241.583483][ T128] usb 4-1: USB disconnect, device number 15 [ 242.121670][ T9270] ntfs3: loop1: try to read out of volume at offset 0x0 [ 242.171592][ T9275] loop3: detected capacity change from 0 to 16 [ 242.185305][ T9275] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 242.310474][ T9275] overlayfs: upper fs is r/o, try multi-lower layers mount [ 242.393055][ T3653] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 242.604929][ T3653] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 242.626605][ T3653] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 242.673162][ T3653] usb 3-1: config 8 has no interface number 0 [ 242.698587][ T3653] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping [ 242.729993][ T3653] usb 3-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 242.752013][ T3653] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 242.799109][ T3653] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 242.843192][ T3653] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 242.852337][ T3653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.901198][ T3653] usb 3-1: NFC: intf ffff888074ea2000 id ffffffff8d4055e0 [ 243.446646][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 243.895654][ T9313] loop3: detected capacity change from 0 to 32768 [ 243.984238][ T9313] XFS (loop3): Mounting V5 Filesystem [ 244.062394][ T9340] program syz.1.2108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.062627][ T3653] usb 3-1: USB disconnect, device number 11 [ 244.155607][ T9313] XFS (loop3): Ending clean mount [ 244.206097][ T9313] XFS (loop3): Quotacheck needed: Please wait. [ 244.316759][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 244.316777][ T26] audit: type=1326 audit(1773239431.890:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 244.353221][ T9313] XFS (loop3): Quotacheck: Done. [ 244.472887][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 244.498670][ T9348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.524738][ T26] audit: type=1326 audit(1773239431.900:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 244.593283][ T26] audit: type=1326 audit(1773239431.900:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 244.688165][ T26] audit: type=1326 audit(1773239431.900:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.1.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 244.750562][ T4272] XFS (loop3): Unmounting Filesystem [ 245.258391][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'. [ 245.333126][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2121'. [ 245.962002][ T9386] netlink: 'syz.4.2131': attribute type 6 has an invalid length. [ 246.170551][ T9364] loop1: detected capacity change from 0 to 32768 [ 246.247436][ T9398] x_tables: duplicate entry at hook 2 [ 246.375125][ T9364] XFS (loop1): Mounting V5 Filesystem [ 246.578493][ T9364] XFS (loop1): Ending clean mount [ 246.596249][ T9364] XFS (loop1): Quotacheck needed: Please wait. [ 246.613604][ T9415] loop5: detected capacity change from 0 to 1024 [ 246.720410][ T9364] XFS (loop1): Quotacheck: Done. [ 246.807795][ T9422] loop4: detected capacity change from 0 to 4096 [ 246.823723][ T9415] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 246.836575][ T9422] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 246.906673][ T9415] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 246.936761][ T9415] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.2140: Failed to acquire dquot type 0 [ 246.992787][ T9415] EXT4-fs error (device loop5): mb_free_blocks:1824: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 247.034442][ T9422] ntfs3: loop4: no free space to extend mft [ 247.046405][ T4270] XFS (loop1): Unmounting Filesystem [ 247.089485][ T9415] EXT4-fs (loop5): 1 truncate cleaned up [ 247.128964][ T9415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 247.161572][ T9415] EXT4-fs (loop5): unmounting filesystem. [ 247.233706][ T4274] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 247.257016][ T4274] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 247.314271][ T4274] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 247.450286][ T9431] tmpfs: Bad value for 'nr_blocks' [ 247.753191][ T9441] x_tables: unsorted underflow at hook 2 [ 247.767203][ T9443] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2154'. [ 248.023176][ T9451] libceph: resolve '400' (ret=-3): failed [ 248.172718][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2159'. [ 248.411628][ T9462] netlink: 'syz.4.2163': attribute type 6 has an invalid length. [ 248.704099][ T9439] loop2: detected capacity change from 0 to 32768 [ 248.731002][ T9439] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2153 (9439) [ 248.780209][ T9439] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 248.843168][ T9439] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 248.851866][ T9439] BTRFS info (device loop2): using free space tree [ 248.999199][ T9481] loop3: detected capacity change from 0 to 1024 [ 249.083684][ T9481] EXT4-fs (loop3): bad geometry: first data block 0 is beyond end of filesystem (0) [ 249.189323][ T9497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2176'. [ 249.295082][ T9439] BTRFS info (device loop2): enabling ssd optimizations [ 249.415269][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.490347][ T9513] trusted_key: encrypted_key: master key parameter is missing [ 249.510123][ T9512] Invalid ELF header magic: != ELF [ 249.652522][ T128] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 249.838649][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2184'. [ 249.853193][ T128] usb 6-1: Using ep0 maxpacket: 32 [ 249.866706][ T128] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 249.899095][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.923273][ T128] usb 6-1: Product: syz [ 249.927509][ T128] usb 6-1: Manufacturer: syz [ 249.932146][ T128] usb 6-1: SerialNumber: syz [ 249.955417][ T128] usb 6-1: config 0 descriptor?? [ 250.383233][ T128] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 250.421996][ T128] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 250.524033][ T128] peak_usb: probe of 6-1:0.0 failed with error -71 [ 250.553618][ T128] usb 6-1: USB disconnect, device number 9 [ 250.729102][ T9551] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2196'. [ 251.227183][ T9568] loop5: detected capacity change from 0 to 256 [ 251.265085][ T9568] exfat: Deprecated parameter 'utf8' [ 251.270511][ T9568] exfat: Deprecated parameter 'namecase' [ 251.337170][ T9568] exfat: Deprecated parameter 'namecase' [ 251.418791][ T9568] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 251.753301][ T9588] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 251.759889][ T9588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.806133][ T9588] vhci_hcd vhci_hcd.0: Device attached [ 251.867124][ T9591] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 251.873707][ T9591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.914522][ T9591] vhci_hcd vhci_hcd.0: Device attached [ 251.931732][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 251.959142][ T9592] vhci_hcd: connection closed [ 251.959243][ T9589] vhci_hcd: connection closed [ 251.974354][ T4340] vhci_hcd: stop threads [ 252.003840][ T4340] vhci_hcd: release socket [ 252.013087][ T4340] vhci_hcd: disconnect device [ 252.032037][ T4340] vhci_hcd: stop threads [ 252.043032][ T4340] vhci_hcd: release socket [ 252.062630][ T4340] vhci_hcd: disconnect device [ 252.073423][ T3653] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 252.422665][ T9617] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2227'. [ 252.940157][ T9637] netlink: 'syz.5.2237': attribute type 2 has an invalid length. [ 253.402098][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2243'. [ 253.433312][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2243'. [ 254.159693][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 254.437385][ T9683] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2259'. [ 254.742416][ T9693] netlink: 'syz.3.2264': attribute type 11 has an invalid length. [ 255.643099][ T9519] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 255.683186][ T4287] Bluetooth: hci4: command 0x0405 tx timeout [ 255.772564][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778979][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.833123][ T8751] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 255.842767][ T9519] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 255.860489][ T9519] usb 4-1: config 0 has no interface number 0 [ 255.868355][ T9519] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 255.913220][ T9519] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 255.945088][ T9519] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.972363][ T9519] usb 4-1: config 0 interface 11 has no altsetting 0 [ 255.988225][ T9519] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 256.003769][ T9519] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.022451][ T9519] usb 4-1: config 0 descriptor?? [ 256.028589][ T9721] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 256.043071][ T8751] usb 6-1: Using ep0 maxpacket: 8 [ 256.053505][ T8751] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 256.066785][ T9519] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 256.103685][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 256.112141][ T8751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.133144][ T8751] usb 6-1: Product: syz [ 256.137376][ T8751] usb 6-1: Manufacturer: syz [ 256.152676][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 256.182825][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 256.192932][ T8751] usb 6-1: SerialNumber: syz [ 256.202362][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.209278][ T8751] usb 6-1: config 0 descriptor?? [ 256.221998][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 256.230037][ T9749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.235579][ T8751] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 256.249942][ T9519] keyspan 4-1:0.11: unsupported endpoint type 1 [ 256.263094][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 256.269172][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.282183][ T8751] dvb-usb: bulk message failed: -22 (2/0) [ 256.288740][ T9749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.303181][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 256.312067][ T8751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.347074][ T9519] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 256.356103][ T8751] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 256.378890][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 256.398680][ T8751] usb 6-1: media controller created [ 256.408849][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 256.449129][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 256.479286][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 256.498821][ T8751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.510090][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 256.520693][ T9519] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 256.539960][ T9519] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 256.552012][ T8751] dvb-usb: bulk message failed: -22 (1/0) [ 256.559291][ T8751] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 256.602808][ T9519] usb 4-1: USB disconnect, device number 16 [ 256.617284][ T9519] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 256.649438][ T8751] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 256.670492][ T9519] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 256.718488][ T9760] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2298'. [ 256.720776][ T8751] dvb-usb: schedule remote query interval to 50 msecs. [ 256.748712][ T9519] keyspan 4-1:0.11: device disconnected [ 256.760748][ T8751] dvb-usb: bulk message failed: -22 (2/0) [ 256.769777][ T8751] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 256.790983][ T8751] usb 6-1: USB disconnect, device number 10 [ 256.927279][ T8751] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 257.203819][ T3653] vhci_hcd: vhci_device speed not set [ 257.256994][ T9778] loop2: detected capacity change from 0 to 256 [ 257.294729][ T4314] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 257.314822][ T9778] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d) [ 257.503369][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 257.514712][ T4314] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 257.538905][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.572581][ T4314] usb 5-1: config 0 has no interface number 0 [ 257.595479][ T4314] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 642 [ 257.624946][ T4314] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.636248][ T9788] tmpfs: Bad value for 'mpol' [ 257.651822][ T4314] usb 5-1: config 0 interface 196 has no altsetting 0 [ 257.679278][ T4314] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 257.696582][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.713477][ T4314] usb 5-1: Product: syz [ 257.729469][ T4314] usb 5-1: Manufacturer: syz [ 257.741033][ T4314] usb 5-1: SerialNumber: syz [ 257.762158][ T4314] usb 5-1: config 0 descriptor?? [ 257.777379][ T9769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.861977][ T9792] loop2: detected capacity change from 0 to 2048 [ 257.910310][ T9792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.006986][ T4314] ipheth 5-1:0.196: Unable to find endpoints [ 258.034789][ T4314] usb 5-1: USB disconnect, device number 9 [ 258.055026][ T8751] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 258.264675][ T8751] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.304255][ T8751] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 258.309066][ T9800] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 258.323116][ T8751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.362354][ T9784] loop3: detected capacity change from 0 to 32768 [ 258.363167][ T8751] usb 6-1: Product: syz [ 258.372105][ T9800] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2316'. [ 258.388912][ T9784] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2308 (9784) [ 258.396519][ T8751] usb 6-1: Manufacturer: syz [ 258.425081][ T8751] usb 6-1: SerialNumber: syz [ 258.447642][ T8751] usb 6-1: config 0 descriptor?? [ 258.464249][ T8751] asix: probe of 6-1:0.0 failed with error -22 [ 258.520646][ T9784] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 258.555917][ T9784] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 258.596220][ T9784] BTRFS info (device loop3): force zlib compression, level 3 [ 258.643223][ T9784] BTRFS info (device loop3): force clearing of disk cache [ 258.650415][ T9784] BTRFS info (device loop3): setting nodatasum [ 258.677569][ T9784] BTRFS info (device loop3): allowing degraded mounts [ 258.696911][ T3653] usb 6-1: USB disconnect, device number 11 [ 258.714546][ T9784] BTRFS info (device loop3): enabling disk space caching [ 258.721991][ T9784] BTRFS info (device loop3): disk space caching is enabled [ 258.772744][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 259.135301][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 259.150268][ T9784] BTRFS info (device loop3): rebuilding free space tree [ 259.174674][ T9841] ptrace attach of "./syz-executor exec"[4270] was attempted by "./syz-executor exec"[9841] [ 259.221473][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 259.286982][ T9784] BTRFS info (device loop3): disabling free space tree [ 259.303249][ T9784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 259.350867][ T9784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 259.458454][ T9845] loop2: detected capacity change from 0 to 2048 [ 259.520031][ T9845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.688917][ T4272] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 260.057740][ T9862] x_tables: duplicate underflow at hook 2 [ 260.411643][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 260.454416][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2335'. [ 260.484136][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 260.553569][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 261.518337][ T9876] loop1: detected capacity change from 0 to 32768 [ 261.581828][ T9876] [ 261.581828][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.581828][ T9876] [ 261.591442][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.621023][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.655606][ T9910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.673865][ T9910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.700932][ T9876] [ 261.700932][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.700932][ T9876] [ 261.744439][ T9876] [ 261.744439][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.744439][ T9876] [ 261.795618][ T9876] [ 261.795618][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.795618][ T9876] [ 261.833513][ T9876] [ 261.833513][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.833513][ T9876] [ 261.894204][ T9876] [ 261.894204][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.894204][ T9876] [ 261.944767][ T9876] [ 261.944767][ T9876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.944767][ T9876] [ 261.981810][ T107] [ 261.981810][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 261.981810][ T107] [ 262.084468][ T4270] [ 262.084468][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.084468][ T4270] [ 262.104661][ T4270] [ 262.104661][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 262.104661][ T4270] [ 262.108857][ T9896] loop3: detected capacity change from 0 to 32768 [ 262.149876][ T9896] (syz.3.2354,9896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 262.191650][ T9896] (syz.3.2354,9896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 262.250594][ T9896] JBD2: Ignoring recovery information on journal [ 262.293157][ T9122] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.356369][ T9896] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.392562][ T9896] (syz.3.2354,9896,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 262.513383][ T9122] usb 3-1: Using ep0 maxpacket: 32 [ 262.520991][ T9122] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 262.583051][ T9122] usb 3-1: config 0 has no interface number 0 [ 262.590106][ T9122] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.614202][ T9122] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.625086][ T9122] usb 3-1: config 0 interface 85 has no altsetting 0 [ 262.630735][ T9896] (syz.3.2354,9896,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 262.635444][ T9122] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 262.677917][ T9122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.691288][ T9122] usb 3-1: Product: syz [ 262.696944][ T9122] usb 3-1: Manufacturer: syz [ 262.701727][ T9122] usb 3-1: SerialNumber: syz [ 262.730271][ T9122] usb 3-1: config 0 descriptor?? [ 262.870019][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 263.193263][ T9122] appletouch 3-1:0.85: Failed to request geyser raw mode [ 263.200491][ T9122] appletouch: probe of 3-1:0.85 failed with error -5 [ 263.233194][ T9122] usb 3-1: USB disconnect, device number 12 [ 263.426165][ T9946] netlink: 'syz.3.2378': attribute type 21 has an invalid length. [ 263.444958][ T9946] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2378'. [ 263.483431][ T9946] netlink: 'syz.3.2378': attribute type 4 has an invalid length. [ 263.505945][ T9946] netlink: 'syz.3.2378': attribute type 5 has an invalid length. [ 263.523222][ T9946] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2378'. [ 263.718590][ T9955] netlink: 'syz.4.2382': attribute type 1 has an invalid length. [ 263.719197][ T9956] cgroup: subsys name conflicts with all [ 263.727132][ T9955] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2382'. [ 263.807840][ T9958] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 264.243579][ T9976] QAT: failed to copy from user. [ 264.383887][ T26] audit: type=1326 audit(1773239451.960:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 264.468241][ T26] audit: type=1326 audit(1773239451.970:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 264.553925][ T26] audit: type=1326 audit(1773239451.970:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 264.621451][ T26] audit: type=1326 audit(1773239451.970:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.2.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479ab9c799 code=0x7ffc0000 [ 264.670242][ T9992] comedi comedi4: bad chanlist[0]=0x00400006 chan=6 range length=2 [ 264.939400][T10004] loop3: detected capacity change from 0 to 256 [ 265.045793][T10004] FAT-fs (loop3): Directory bread(block 64) failed [ 265.052500][T10004] FAT-fs (loop3): Directory bread(block 65) failed [ 265.088865][T10004] FAT-fs (loop3): Directory bread(block 66) failed [ 265.141003][T10004] FAT-fs (loop3): Directory bread(block 67) failed [ 265.172241][T10004] FAT-fs (loop3): Directory bread(block 68) failed [ 265.191230][T10004] FAT-fs (loop3): Directory bread(block 69) failed [ 265.226188][T10004] FAT-fs (loop3): Directory bread(block 70) failed [ 265.241376][T10004] FAT-fs (loop3): Directory bread(block 71) failed [ 265.267008][T10004] FAT-fs (loop3): Directory bread(block 72) failed [ 265.293267][T10004] FAT-fs (loop3): Directory bread(block 73) failed [ 265.733086][ T128] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 265.830936][T10037] trusted_key: encrypted_key: insufficient parameters specified [ 265.923413][ T128] usb 6-1: Using ep0 maxpacket: 16 [ 265.931562][ T128] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.970385][ T128] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 265.992165][ T128] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 266.029513][ T128] usb 6-1: config 0 interface 0 has no altsetting 0 [ 266.050199][ T128] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 266.088915][ T128] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.107418][ T128] usb 6-1: Product: syz [ 266.112128][ T128] usb 6-1: Manufacturer: syz [ 266.137990][ T128] usb 6-1: SerialNumber: syz [ 266.171227][ T128] usb 6-1: config 0 descriptor?? [ 266.193281][T10022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 266.212325][ T26] audit: type=1326 audit(1773239453.780:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.293139][ T26] audit: type=1326 audit(1773239453.790:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.383305][ T26] audit: type=1326 audit(1773239453.790:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.383349][ T26] audit: type=1326 audit(1773239453.790:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.383382][ T26] audit: type=1326 audit(1773239453.790:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.383417][ T26] audit: type=1326 audit(1773239453.790:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10045 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 266.419892][T10022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 266.424247][ T128] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 266.658627][ T8757] usb 6-1: USB disconnect, device number 12 [ 266.720824][ T3622] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 267.116546][T10061] loop3: detected capacity change from 0 to 164 [ 267.173211][ T3653] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 267.300378][ T4272] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 267.341890][ T4272] ISOFS: unable to read i-node block [ 267.361711][ T4272] ISOFS: unable to read i-node block [ 267.379902][ T3653] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 267.393152][ T3653] usb 5-1: config 0 has no interface number 0 [ 267.409523][ T3653] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 267.431070][ T3653] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 267.444951][ T3653] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.460057][ T3653] usb 5-1: config 0 interface 11 has no altsetting 0 [ 267.468147][ T3653] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 267.483098][ T4314] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 267.496487][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.540917][ T3653] usb 5-1: config 0 descriptor?? [ 267.553559][T10057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 267.577258][ T3653] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 267.587764][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 267.601139][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 267.617188][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 267.625979][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 267.634001][ T3653] keyspan 5-1:0.11: unsupported endpoint type 1 [ 267.640645][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 267.649754][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 267.657961][T10069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.678137][ T3653] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 267.696101][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 267.704421][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 267.712230][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 267.720805][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 267.729552][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 267.738860][ T4314] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 267.747356][ T3653] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 267.759229][ T4314] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 267.772242][ T4314] usb 3-1: config 0 has no interface number 0 [ 267.783590][ T3653] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 267.795278][ T4314] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 267.832579][ T3653] usb 5-1: USB disconnect, device number 10 [ 267.852110][ T4314] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.877311][ T3653] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 267.900001][T10071] loop5: detected capacity change from 0 to 64 [ 267.903700][ T3653] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 267.916265][ T4314] usb 3-1: config 0 interface 52 has no altsetting 0 [ 267.938670][ T4314] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 267.964435][ T3653] keyspan 5-1:0.11: device disconnected [ 267.981431][ T4314] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 268.010092][ T4314] usb 3-1: Manufacturer: syz [ 268.034304][ T4314] usb 3-1: config 0 descriptor?? [ 268.057711][ T4314] hub 3-1:0.52: bad descriptor, ignoring hub [ 268.077774][ T4314] hub: probe of 3-1:0.52 failed with error -5 [ 268.138683][T10064] loop1: detected capacity change from 0 to 32768 [ 268.307250][T10064] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 268.359730][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.372352][ T4314] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input16 [ 268.483279][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.584151][ T4314] usb 3-1: USB disconnect, device number 13 [ 268.613798][ T4270] XFS (loop1): Unmounting Filesystem [ 268.697392][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.855987][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.152224][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.164177][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.172389][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.226798][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.236711][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.263437][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.852772][T10087] chnl_net:caif_netlink_parms(): no params data found [ 269.871860][T10084] loop4: detected capacity change from 0 to 32768 [ 269.950028][T10084] [ 269.950028][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.950028][T10084] [ 270.040843][T10084] [ 270.040843][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.040843][T10084] [ 270.044432][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 270.044448][ T26] audit: type=1326 audit(1773239457.610:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 270.110802][T10114] loop5: detected capacity change from 0 to 256 [ 270.131244][T10084] [ 270.131244][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.131244][T10084] [ 270.153647][T10084] [ 270.153647][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.153647][T10084] [ 270.173195][T10084] [ 270.173195][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.173195][T10084] [ 270.229274][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.236925][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.243610][T10114] FAT-fs (loop5): Directory bread(block 64) failed [ 270.246371][T10087] device bridge_slave_0 entered promiscuous mode [ 270.260065][ T26] audit: type=1326 audit(1773239457.670:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 270.293926][T10114] FAT-fs (loop5): Directory bread(block 65) failed [ 270.300627][T10114] FAT-fs (loop5): Directory bread(block 66) failed [ 270.319508][T10114] FAT-fs (loop5): Directory bread(block 67) failed [ 270.333280][T10084] [ 270.333280][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.333280][T10084] [ 270.389643][T10114] FAT-fs (loop5): Directory bread(block 68) failed [ 270.402895][ T26] audit: type=1326 audit(1773239457.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 270.405137][T10084] [ 270.405137][T10084] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.405137][T10084] [ 270.428339][T10114] FAT-fs (loop5): Directory bread(block 69) failed [ 270.443999][T10114] FAT-fs (loop5): Directory bread(block 70) failed [ 270.451002][T10114] FAT-fs (loop5): Directory bread(block 71) failed [ 270.464818][ T107] [ 270.464818][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.464818][ T107] [ 270.479875][ T26] audit: type=1326 audit(1773239457.670:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10110 comm="syz.1.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccc99c799 code=0x7ffc0000 [ 270.503940][T10114] FAT-fs (loop5): Directory bread(block 72) failed [ 270.506826][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.510503][T10114] FAT-fs (loop5): Directory bread(block 73) failed [ 270.538790][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.560198][T10087] device bridge_slave_1 entered promiscuous mode [ 270.663318][ T8757] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 270.686249][ T4274] [ 270.686249][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.686249][ T4274] [ 270.713114][ T4274] [ 270.713114][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 270.713114][ T4274] [ 270.718320][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.833617][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.840804][T10114] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006a61) [ 270.842766][ T26] audit: type=1800 audit(1773239458.410:131): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2454" name="blkio.bfq.idle_time" dev="loop5" ino=1048634 res=0 errno=0 [ 270.905705][ T8757] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 270.923458][ T8757] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 270.942799][T10087] team0: Port device team_slave_0 added [ 270.952798][ T8757] usb 3-1: config 0 has no interface number 1 [ 270.969612][ T8757] usb 3-1: config 0 has no interface number 2 [ 270.986728][ T8757] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 271.016437][ T8757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.037619][ T8757] usb 3-1: config 0 descriptor?? [ 271.244445][T10087] team0: Port device team_slave_1 added [ 271.267273][ T8757] usb 3-1: Could not set interface, error -71 [ 271.283270][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 271.313782][ T8757] usb 3-1: USB disconnect, device number 14 [ 271.570595][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.588610][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.642223][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.694945][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.702000][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.760969][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.119677][T10087] device hsr_slave_0 entered promiscuous mode [ 272.193755][T10087] device hsr_slave_1 entered promiscuous mode [ 272.213118][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.220776][T10087] Cannot create hsr debugfs directory [ 272.474342][T10167] mmap: syz.4.2463 (10167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 272.758583][ T57] device hsr_slave_0 left promiscuous mode [ 272.785975][ T57] device hsr_slave_1 left promiscuous mode [ 272.833373][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.841176][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.851560][T10172] loop2: detected capacity change from 0 to 512 [ 272.872018][T10172] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 272.898392][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.918225][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.960676][T10172] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.973758][ T57] device bridge_slave_1 left promiscuous mode [ 272.980101][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.017894][T10172] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 273.026328][T10172] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 273.063792][T10172] EXT4-fs (loop2): 1 truncate cleaned up [ 273.070839][ T57] device bridge_slave_0 left promiscuous mode [ 273.083416][T10172] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 273.106625][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.163651][T10172] EXT4-fs (loop2): unmounting filesystem. [ 273.240009][T10164] loop1: detected capacity change from 0 to 32768 [ 273.251065][ T57] device veth1_macvtap left promiscuous mode [ 273.278662][ T57] device veth0_macvtap left promiscuous mode [ 273.305739][T10164] (syz.1.2471,10164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 273.315995][ T57] device veth1_vlan left promiscuous mode [ 273.360600][T10164] (syz.1.2471,10164,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 273.383421][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 273.460438][T10164] JBD2: Ignoring recovery information on journal [ 273.576537][T10164] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 273.903633][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 274.491609][T10212] loop1: detected capacity change from 0 to 4096 [ 274.948169][T10218] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 275.249481][ T57] team0 (unregistering): Port device team_slave_1 removed [ 275.367900][ T57] team0 (unregistering): Port device team_slave_0 removed [ 275.428509][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.453244][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 275.545867][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.588602][T10232] loop1: detected capacity change from 0 to 512 [ 275.636205][T10232] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 275.646285][T10232] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.698382][T10232] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 275.736940][T10232] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 275.751091][T10232] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.2497: Failed to acquire dquot type 0 [ 275.861340][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 276.161153][ T57] bond0 (unregistering): Released all slaves [ 276.526254][T10247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.764440][T10254] netlink: 'syz.2.2506': attribute type 41 has an invalid length. [ 276.871571][T10260] loop5: detected capacity change from 0 to 512 [ 276.877046][T10087] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.931397][T10087] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.958007][T10260] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 277.006961][T10087] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.043313][T10260] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.065777][T10087] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.180221][T10260] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 277.215119][T10260] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 277.274072][T10260] EXT4-fs error (device loop5): ext4_acquire_dquot:6835: comm syz.5.2508: Failed to acquire dquot type 0 [ 277.298757][T10272] loop4: detected capacity change from 0 to 512 [ 277.427584][T10272] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 277.451364][ T7895] EXT4-fs (loop5): unmounting filesystem. [ 277.473437][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.500872][T10276] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 277.523438][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 277.544264][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.562483][T10272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 277.565221][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.622695][T10272] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 277.632088][T10272] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 277.647011][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.663459][T10272] EXT4-fs (loop4): 1 truncate cleaned up [ 277.669325][T10272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 277.684694][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.688592][T10272] EXT4-fs (loop4): unmounting filesystem. [ 277.729156][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.772650][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.779853][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.813625][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.881374][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.912809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.936808][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.944008][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.970378][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.019770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.049041][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.102480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.134013][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.152111][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.200623][T10087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.220643][T10087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.238544][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.254097][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.267714][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.282583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.302103][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.353095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.440759][T10304] [U] [ 278.444037][T10304] [U] [ 278.446761][T10304] [U] [ 278.449507][T10304] [U] [ 278.478461][T10304] [U] [ 278.481237][T10304] [U] [ 278.483971][T10304] [U] [ 278.486690][T10304] [U] [ 278.519271][T10304] [U] [ 278.522063][T10304] [U] [ 278.524802][T10304] [U] [ 278.581159][T10303] [U] [ 278.741806][ T26] audit: type=1400 audit(1773239466.310:132): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=10314 comm="syz.1.2527" [ 279.230656][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.248608][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.293089][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.113313][ T9122] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.219466][T10324] loop5: detected capacity change from 0 to 32768 [ 280.282512][T10324] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 280.282512][T10324] [ 280.305502][ T9122] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.327429][T10324] jfs_create: dtInsert returned -EIO [ 280.328042][ T9122] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 280.360787][T10324] ERROR: (device loop5): jfs_create: [ 280.360787][T10324] [ 280.372629][ T9122] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 280.402368][ T9122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.460826][ T9122] usb 5-1: config 0 descriptor?? [ 280.466368][ T4314] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 280.476717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.495949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.591224][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.615077][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.653352][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 280.661732][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.680717][T10087] device veth0_vlan entered promiscuous mode [ 280.698337][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.714012][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.730384][T10087] device veth1_vlan entered promiscuous mode [ 280.756511][ T4314] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 280.783288][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.791391][ T4314] usb 3-1: Product: syz [ 280.825639][ T4314] usb 3-1: Manufacturer: syz [ 280.831854][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.842810][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.856601][ T4314] usb 3-1: SerialNumber: syz [ 280.869686][ T4314] usb 3-1: config 0 descriptor?? [ 280.880074][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.894540][ T4314] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 280.902140][ T9122] Bluetooth: Can't get version to change to load ram patch err [ 280.903982][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2550'. [ 280.917743][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.931929][ T9122] Bluetooth: Loading patch file failed [ 280.937607][ T4314] usb 3-1: selecting invalid altsetting 1 [ 280.947906][ T9122] ath3k: probe of 5-1:0.0 failed with error -71 [ 280.959409][T10087] device veth0_macvtap entered promiscuous mode [ 280.977298][ T9122] usb 5-1: USB disconnect, device number 11 [ 280.993609][T10087] device veth1_macvtap entered promiscuous mode [ 281.088951][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.130580][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.146460][T10384] xt_cgroup: invalid path, errno=-2 [ 281.157644][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.188473][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.229790][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.267528][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.276486][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.293987][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.307692][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.340223][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.378172][ T8757] usb 3-1: USB disconnect, device number 15 [ 281.443172][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.491702][T10087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.508189][T10087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.520105][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.535850][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.547411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.579902][T10087] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.616507][T10087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.641058][T10087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.677770][T10087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.925789][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.944078][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.976693][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.056925][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.068434][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.135858][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.279950][T10415] netlink: 'syz.1.2565': attribute type 1 has an invalid length. [ 282.298185][T10415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2565'. [ 282.370756][T10418] netlink: 'syz.4.2566': attribute type 2 has an invalid length. [ 282.400988][T10421] loop6: detected capacity change from 0 to 1024 [ 282.557087][T10421] hfsplus: failed to extend attributes file [ 283.105155][T10443] ubi31: attaching mtd0 [ 283.133436][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2576'. [ 283.141152][T10443] ubi31: scanning is finished [ 283.177148][T10443] ubi31: empty MTD device detected [ 283.186071][T10449] overlayfs: missing 'lowerdir' [ 283.364481][T10443] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 283.372245][T10443] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 283.406045][T10443] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 283.452441][T10443] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 283.500830][T10443] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 283.534938][T10461] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 283.546004][T10443] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 283.583099][T10443] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2753169428 [ 283.633658][T10443] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 283.703019][T10453] ubi31: background thread "ubi_bgt31d" started, PID 10453 [ 283.849751][T10427] loop5: detected capacity change from 0 to 32768 [ 283.893654][T10427] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2568 (10427) [ 284.039741][T10427] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 284.114395][T10427] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 284.158771][T10427] BTRFS info (device loop5): force zlib compression, level 3 [ 284.188524][T10427] BTRFS info (device loop5): force clearing of disk cache [ 284.244436][T10427] BTRFS info (device loop5): setting nodatasum [ 284.323174][T10427] BTRFS info (device loop5): allowing degraded mounts [ 284.330814][T10427] BTRFS info (device loop5): enabling disk space caching [ 284.393515][T10427] BTRFS info (device loop5): disk space caching is enabled [ 284.531280][T10493] netlink: 'syz.6.2592': attribute type 32 has an invalid length. [ 284.747034][T10427] BTRFS info (device loop5): rebuilding free space tree [ 284.834615][T10427] BTRFS info (device loop5): disabling free space tree [ 284.841570][T10427] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.906605][T10427] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 285.175568][ T7895] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 285.342775][ T4380] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop5 scanned by udevd (4380) [ 285.889471][T10544] openvswitch: netlink: Message has 1 unknown bytes. [ 286.248638][T10513] loop6: detected capacity change from 0 to 40427 [ 286.305093][T10553] loop5: detected capacity change from 0 to 1024 [ 286.329472][T10513] F2FS-fs (loop6): invalid crc value [ 286.350261][T10556] loop2: detected capacity change from 0 to 256 [ 286.394095][T10513] F2FS-fs (loop6): Found nat_bits in checkpoint [ 286.504127][T10553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.556607][T10553] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.2607: inode #12: comm syz.5.2607: iget: illegal inode # [ 286.582240][T10553] EXT4-fs (loop5): Remounting filesystem read-only [ 286.643733][T10556] FAT-fs (loop2): Directory bread(block 64) failed [ 286.645977][T10513] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 286.723950][T10556] FAT-fs (loop2): Directory bread(block 65) failed [ 286.730663][T10556] FAT-fs (loop2): Directory bread(block 66) failed [ 286.773261][T10556] FAT-fs (loop2): Directory bread(block 67) failed [ 286.795506][ T7895] EXT4-fs (loop5): unmounting filesystem. [ 286.822857][T10556] FAT-fs (loop2): Directory bread(block 68) failed [ 286.853478][T10556] FAT-fs (loop2): Directory bread(block 69) failed [ 286.899675][T10556] FAT-fs (loop2): Directory bread(block 70) failed [ 286.964294][T10556] FAT-fs (loop2): Directory bread(block 71) failed [ 286.971041][T10556] FAT-fs (loop2): Directory bread(block 72) failed [ 287.051740][T10556] FAT-fs (loop2): Directory bread(block 73) failed [ 287.873227][ T8757] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 287.983527][T10599] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 288.088829][ T8757] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.112654][ T8757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.140522][ T26] audit: type=1326 audit(1773239475.710:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 288.148657][ T8757] usb 2-1: Product: syz [ 288.213021][ T8757] usb 2-1: Manufacturer: syz [ 288.217697][ T8757] usb 2-1: SerialNumber: syz [ 288.242822][ T26] audit: type=1326 audit(1773239475.740:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 288.276061][ T8757] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.355880][ T8757] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.392321][ T26] audit: type=1326 audit(1773239475.740:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 288.478945][ T26] audit: type=1326 audit(1773239475.740:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.4.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 288.754288][T10624] netlink: 'syz.2.2632': attribute type 27 has an invalid length. [ 288.783118][T10624] netlink: 'syz.2.2632': attribute type 3 has an invalid length. [ 288.836748][T10624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2632'. [ 288.997151][ T4352] usb 2-1: USB disconnect, device number 10 [ 289.449252][ T8757] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 289.464204][ T8757] ath9k_htc: Failed to initialize the device [ 289.470820][ T4352] usb 2-1: ath9k_htc: USB layer deinitialized [ 289.762203][T10659] overlayfs: './file0' not a directory [ 289.960688][T10667] loop2: detected capacity change from 0 to 512 [ 290.006868][T10667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.092314][T10667] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2651: inode has both inline data and extents flags [ 290.124679][T10667] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2651: couldn't read orphan inode 15 (err -117) [ 290.207280][T10667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 290.336789][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 290.840235][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2665'. [ 291.260426][T10722] loop1: detected capacity change from 0 to 164 [ 291.320408][T10722] rock: directory entry would overflow storage [ 291.334199][T10722] rock: sig=0x66, size=4, remaining=3 [ 291.395406][T10722] rock: directory entry would overflow storage [ 291.401640][T10722] rock: sig=0x66, size=4, remaining=3 [ 291.437195][T10728] netlink: 'syz.5.2675': attribute type 4 has an invalid length. [ 291.446654][T10724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.563936][T10728] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2675'. [ 292.258148][T10752] loop1: detected capacity change from 0 to 128 [ 292.286930][T10752] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 292.340560][T10752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.341586][T10757] SET target dimension over the limit! [ 292.637847][T10763] loop5: detected capacity change from 0 to 256 [ 292.738564][T10763] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 292.923935][T10763] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 292.959261][T10763] exFAT-fs (loop5): Filesystem has been set read-only [ 292.967703][ T8757] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 293.175259][ T8757] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 293.214366][ T8757] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 293.230401][ T8757] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 293.263070][ T8757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.271142][ T8757] usb 5-1: Product: syz [ 293.283077][ T8757] usb 5-1: Manufacturer: syz [ 293.287803][ T8757] usb 5-1: SerialNumber: syz [ 293.312564][ T8757] usb 5-1: config 0 descriptor?? [ 293.351208][ T8757] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 293.770704][ T8757] usb 5-1: USB disconnect, device number 12 [ 294.241598][T10815] loop6: detected capacity change from 0 to 512 [ 294.314725][T10818] loop1: detected capacity change from 0 to 512 [ 294.333434][T10815] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 294.352827][T10815] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.399705][T10815] EXT4-fs error (device loop6): ext4_xattr_block_get:543: inode #15: comm syz.6.2709: corrupted xattr block 33 [ 294.417692][T10815] fscrypt (loop6, inode 15): Error -117 getting encryption context [ 294.422588][T10818] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 294.493376][T10818] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 294.504135][T10818] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2710: bad orphan inode 13 [ 294.518808][T10818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 294.696964][T10087] EXT4-fs (loop6): unmounting filesystem. [ 294.700582][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 294.773327][T10833] loop4: detected capacity change from 0 to 512 [ 294.835815][T10833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.879417][T10833] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.191672][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2721'. [ 295.220938][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 295.223083][ T4352] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 295.415683][T10856] loop2: detected capacity change from 0 to 256 [ 295.428337][ T4352] usb 2-1: Using ep0 maxpacket: 32 [ 295.442870][ T4352] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 295.454697][T10856] exfat: Deprecated parameter 'namecase' [ 295.473100][T10856] exfat: Deprecated parameter 'utf8' [ 295.479500][ T4352] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 295.494596][ T4352] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 295.515858][ T4352] usb 2-1: config 9 has no interface number 0 [ 295.523451][ T4352] usb 2-1: config 9 interface 221 altsetting 64 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 295.550355][T10856] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 295.569480][ T4352] usb 2-1: config 9 interface 221 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 295.580235][ T4352] usb 2-1: config 9 interface 221 has no altsetting 0 [ 295.620865][ T4352] usb 2-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 295.658686][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.698696][ T4352] usb 2-1: Product: syz [ 295.703486][ T4352] usb 2-1: Manufacturer: syz [ 295.723305][ T4352] usb 2-1: SerialNumber: syz [ 295.743200][ T9121] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 295.758285][T10867] tmpfs: Bad value for 'mpol' [ 295.935083][ T9121] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.970759][ T4352] usb 2-1: USB disconnect, device number 11 [ 295.976669][ T9121] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.031002][ T9121] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 296.048702][ T9121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.104288][ T9121] usb 6-1: SerialNumber: syz [ 296.128382][ T9121] usb 6-1: 0:2 : does not exist [ 296.150335][ T9121] usb 6-1: unit 64 not found! [ 296.226893][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.377047][ T8757] usb 6-1: USB disconnect, device number 13 [ 296.855825][T10906] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 297.503300][T10930] comedi comedi0: dt2815: I/O port conflict (0x3,2) [ 297.514713][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 297.570747][T10936] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 298.275211][T10968] loop1: detected capacity change from 0 to 256 [ 298.339382][T10968] FAT-fs (loop1): Directory bread(block 64) failed [ 298.376564][T10968] FAT-fs (loop1): Directory bread(block 65) failed [ 298.407083][T10968] FAT-fs (loop1): Directory bread(block 66) failed [ 298.479843][T10968] FAT-fs (loop1): Directory bread(block 67) failed [ 298.490052][T10968] FAT-fs (loop1): Directory bread(block 68) failed [ 298.523242][T10968] FAT-fs (loop1): Directory bread(block 69) failed [ 298.534518][T10968] FAT-fs (loop1): Directory bread(block 70) failed [ 298.541100][T10968] FAT-fs (loop1): Directory bread(block 71) failed [ 298.560546][T10968] FAT-fs (loop1): Directory bread(block 72) failed [ 298.577347][T10980] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 298.581860][T10968] FAT-fs (loop1): Directory bread(block 73) failed [ 298.617153][T10980] overlayfs: missing 'lowerdir' [ 298.719659][T10968] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.044888][T10991] loop6: detected capacity change from 0 to 4096 [ 299.063433][ T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 299.077778][T10991] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 299.180789][T10991] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 299.201633][T10991] ntfs3: loop6: Failed to load $Extend. [ 299.235858][T10991] ntfs3: loop6: no free space to extend mft [ 299.273265][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 299.284421][ T14] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 299.311232][ T14] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 299.336514][ T14] usb 6-1: config 1 has no interface number 1 [ 299.352931][ T14] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 299.408282][ T14] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.456993][ T14] usb 6-1: config 1 interface 105 has no altsetting 0 [ 299.475821][ T14] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 299.540085][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.583058][ T14] usb 6-1: Product: syz [ 299.587382][ T14] usb 6-1: Manufacturer: syz [ 299.592013][ T14] usb 6-1: SerialNumber: syz [ 299.617715][T10987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 299.825116][T11021] netlink: 920 bytes leftover after parsing attributes in process `syz.2.2797'. [ 299.879132][ T14] aqc111: probe of 6-1:1.105 failed with error -22 [ 300.115878][ T14] usb 6-1: USB disconnect, device number 14 [ 300.249106][T11038] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2805'. [ 300.793311][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2814'. [ 300.822825][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'. [ 300.872469][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2814'. [ 301.230637][T11068] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2819'. [ 301.313234][T11068] device bond_slave_0 entered promiscuous mode [ 301.320069][T11068] device bond_slave_1 entered promiscuous mode [ 301.338544][T11045] loop6: detected capacity change from 0 to 32768 [ 301.368574][T11070] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 301.886248][T11060] loop5: detected capacity change from 0 to 32768 [ 301.939487][T11060] (syz.5.2815,11060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.003677][T11060] (syz.5.2815,11060,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.111264][T11060] JBD2: Ignoring recovery information on journal [ 302.186722][T11060] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 302.326252][T11092] loop4: detected capacity change from 0 to 512 [ 302.420077][T11092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 302.443806][T11092] ext4 filesystem being mounted at /617/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.470140][ T7895] ocfs2: Unmounting device (7,5) on (node local) [ 302.756794][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 303.505387][T11134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 304.036924][T11152] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.073713][T11122] loop5: detected capacity change from 0 to 32768 [ 304.144294][T11122] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 304.292676][T11122] (syz.5.2842,11122,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 304.413280][T11122] (syz.5.2842,11122,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 304.421007][T11164] loop6: detected capacity change from 0 to 4096 [ 304.428714][T11122] (syz.5.2842,11122,0):ocfs2_mknod:298 ERROR: status = -2 [ 304.458461][T11122] (syz.5.2842,11122,0):ocfs2_mknod:502 ERROR: status = -2 [ 304.476724][T11122] (syz.5.2842,11122,0):ocfs2_create:676 ERROR: status = -2 [ 304.545537][T11170] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.630679][ T7895] ocfs2: Unmounting device (7,5) on (node local) [ 305.328460][T11192] loop5: detected capacity change from 0 to 64 [ 305.720955][T11160] loop4: detected capacity change from 0 to 32768 [ 305.772721][T11160] XFS: attr2 mount option is deprecated. [ 305.859684][T11160] XFS (loop4): Mounting V5 Filesystem [ 305.987521][T11160] XFS (loop4): Ending clean mount [ 306.020748][T11160] XFS (loop4): Quotacheck needed: Please wait. [ 306.116877][T11160] XFS (loop4): Quotacheck: Done. [ 306.305179][ T4274] XFS (loop4): Unmounting Filesystem [ 306.765474][T11242] loop6: detected capacity change from 0 to 1024 [ 306.780967][T11244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2887'. [ 307.507674][T11273] loop2: detected capacity change from 0 to 256 [ 307.633270][T11273] FAT-fs (loop2): Directory bread(block 64) failed [ 307.666903][T11273] FAT-fs (loop2): Directory bread(block 65) failed [ 307.693277][T11273] FAT-fs (loop2): Directory bread(block 66) failed [ 307.733274][T11273] FAT-fs (loop2): Directory bread(block 67) failed [ 307.740012][T11273] FAT-fs (loop2): Directory bread(block 68) failed [ 307.795679][T11273] FAT-fs (loop2): Directory bread(block 69) failed [ 307.827917][T11273] FAT-fs (loop2): Directory bread(block 70) failed [ 307.843449][T11273] FAT-fs (loop2): Directory bread(block 71) failed [ 307.873562][T11273] FAT-fs (loop2): Directory bread(block 72) failed [ 307.896906][T11273] FAT-fs (loop2): Directory bread(block 73) failed [ 307.978415][T11273] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.074737][T11285] loop4: detected capacity change from 0 to 8 [ 308.491340][T11295] libceph: resolve '0' (ret=-3): failed [ 308.786046][T11264] loop6: detected capacity change from 0 to 40427 [ 308.830112][T11264] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 1) [ 308.849032][T11264] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 308.879526][T11264] F2FS-fs (loop6): invalid crc value [ 308.898745][T11264] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 308.948727][T11264] F2FS-fs (loop6): Found nat_bits in checkpoint [ 309.147000][T11264] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 309.193512][T11264] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 309.254770][T11264] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 309.261885][T11264] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 309.489362][T11332] loop1: detected capacity change from 0 to 8 [ 309.576208][T11332] SQUASHFS error: Failed to read block 0x71: -5 [ 309.604935][ T26] audit: type=1800 audit(1773239497.180:137): pid=11332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2920" name="file0" dev="loop1" ino=1 res=0 errno=0 [ 309.630089][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2922'. [ 310.102177][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2928'. [ 310.152292][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2928'. [ 310.231963][T11356] loop6: detected capacity change from 0 to 136 [ 310.280628][T11358] netlink: 'syz.1.2931': attribute type 2 has an invalid length. [ 310.289317][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2932'. [ 310.301474][T11356] Attempt to read inode for relocated directory [ 310.383279][T11358] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 310.482401][T11364] cgroup: Unknown subsys name 'pcr' [ 310.763220][T11371] device wlan0 left promiscuous mode [ 311.070530][T11384] loop2: detected capacity change from 0 to 2048 [ 311.119922][T11384] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 311.145854][T11388] loop4: detected capacity change from 0 to 16 [ 311.172036][T11384] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 311.190376][T11388] erofs: (device loop4): erofs_init_device: empty device tag @ pos 0 [ 311.237802][T11391] loop1: detected capacity change from 0 to 256 [ 311.246541][T11384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.320204][T11391] FAT-fs (loop1): Directory bread(block 64) failed [ 311.352171][T11391] FAT-fs (loop1): Directory bread(block 65) failed [ 311.367240][T11384] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 1 [ 311.389280][T11391] FAT-fs (loop1): Directory bread(block 66) failed [ 311.416552][T11391] FAT-fs (loop1): Directory bread(block 67) failed [ 311.447488][T11391] FAT-fs (loop1): Directory bread(block 68) failed [ 311.478100][T11391] FAT-fs (loop1): Directory bread(block 69) failed [ 311.505100][T11391] FAT-fs (loop1): Directory bread(block 70) failed [ 311.535709][T11391] FAT-fs (loop1): Directory bread(block 71) failed [ 311.558284][T11391] FAT-fs (loop1): Directory bread(block 72) failed [ 311.584416][T11391] FAT-fs (loop1): Directory bread(block 73) failed [ 312.826249][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2967'. [ 313.010494][T11449] loop1: detected capacity change from 0 to 2048 [ 313.077236][T11449] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 313.152539][T11449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.723744][T11474] ip6gretap0: refused to change device tx_queue_len [ 313.908342][T11441] loop2: detected capacity change from 0 to 32768 [ 313.958028][T11441] (syz.2.2966,11441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 313.989583][T11484] binder: 11483:11484 ioctl c00c620f 0 returned -14 [ 314.007579][T11441] (syz.2.2966,11441,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 314.066326][T11441] JBD2: Ignoring recovery information on journal [ 314.198520][T11441] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 314.600730][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 314.622404][T11503] loop1: detected capacity change from 0 to 2048 [ 314.715911][T11503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.798758][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2993'. [ 316.544021][T11573] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 316.620794][ T26] audit: type=1326 audit(1773239504.190:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 316.673034][ T26] audit: type=1326 audit(1773239504.220:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 316.813535][ T26] audit: type=1326 audit(1773239504.240:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 316.857352][T11540] loop1: detected capacity change from 0 to 32768 [ 316.879460][T11540] (syz.1.3003,11540,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 316.935288][ T26] audit: type=1326 audit(1773239504.240:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 316.956464][T11540] (syz.1.3003,11540,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 317.060387][ T26] audit: type=1326 audit(1773239504.240:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 317.090376][T11540] JBD2: Ignoring recovery information on journal [ 317.123495][T11588] loop4: detected capacity change from 0 to 4096 [ 317.139545][T11588] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 317.209261][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219596][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.341855][T11540] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 317.646325][T11606] netlink: 'syz.5.3031': attribute type 6 has an invalid length. [ 317.710020][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 318.340251][ T26] audit: type=1326 audit(1773239505.910:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.6.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcf19c799 code=0x7ffc0000 [ 318.386236][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3042'. [ 318.423103][ T26] audit: type=1326 audit(1773239505.910:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.6.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcf19c799 code=0x7ffc0000 [ 318.517350][ T26] audit: type=1326 audit(1773239505.970:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.6.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0dcf19c799 code=0x7ffc0000 [ 318.630087][ T26] audit: type=1326 audit(1773239505.970:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.6.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcf19c799 code=0x7ffc0000 [ 318.735907][ T26] audit: type=1326 audit(1773239505.970:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.6.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dcf19c799 code=0x7ffc0000 [ 319.283049][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 319.381492][T11676] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 319.391719][T11675] loop1: detected capacity change from 0 to 512 [ 319.434422][T11675] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.551041][T11675] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 319.691696][T11683] loop5: detected capacity change from 0 to 1024 [ 319.797344][T11683] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 319.846444][T11686] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 319.921165][T11686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.261554][ T7895] EXT4-fs (loop5): unmounting filesystem. [ 320.562555][T11709] loop4: detected capacity change from 0 to 4096 [ 320.595145][T11709] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 321.483047][ T6857] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 321.601121][T11703] loop6: detected capacity change from 0 to 32768 [ 321.678437][ T6857] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 321.694506][T11703] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 321.694506][T11703] [ 321.708161][ T6857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.753067][T11703] ialloc: diAlloc returned -5! [ 321.756733][ T6857] usb 3-1: Product: syz [ 321.782469][ T6857] usb 3-1: Manufacturer: syz [ 321.795539][ T6857] usb 3-1: SerialNumber: syz [ 321.839171][ T6857] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 321.912894][ T6857] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.123217][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3092'. [ 322.132805][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3092'. [ 322.228118][T11766] binder: 11763:11766 ioctl c0046209 100000000000000 returned -22 [ 322.405684][ T4352] usb 3-1: USB disconnect, device number 16 [ 323.043386][ T6857] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 323.050473][ T6857] ath9k_htc: Failed to initialize the device [ 323.100965][ T4352] usb 3-1: ath9k_htc: USB layer deinitialized [ 323.141664][T11794] loop2: detected capacity change from 0 to 256 [ 323.301612][T11796] loop6: detected capacity change from 0 to 4096 [ 323.349893][T11796] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 323.420855][T11796] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 323.469979][T11796] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 323.521063][T11796] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 323.543037][T11807] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3112'. [ 323.641742][T11796] ntfs: volume version 3.1. [ 323.724635][T11796] ntfs: (device loop6): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 323.763381][T11796] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 323.827223][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3117'. [ 323.952291][T11816] loop4: detected capacity change from 0 to 4096 [ 323.997723][T11816] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 324.135543][T11826] xt_TCPMSS: Only works on TCP SYN packets [ 324.425103][T11834] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 324.694685][ T26] audit: type=1326 audit(1773239512.270:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.4.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 324.765619][ T26] audit: type=1326 audit(1773239512.300:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.4.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 324.866345][ T26] audit: type=1326 audit(1773239512.300:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.4.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 324.888739][ C1] vkms_vblank_simulate: vblank timer overrun [ 324.941879][T11859] xt_TCPMSS: Only works on TCP SYN packets [ 324.967083][ T26] audit: type=1326 audit(1773239512.300:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11846 comm="syz.4.3133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 324.989448][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.305309][T11871] loop6: detected capacity change from 0 to 32768 [ 326.362625][T11871] XFS (loop6): Mounting V5 Filesystem [ 326.500041][T11871] XFS (loop6): Ending clean mount [ 326.504088][T11871] XFS (loop6): Quotacheck needed: Please wait. [ 326.584058][T11871] XFS (loop6): Quotacheck: Done. [ 326.826503][T10087] XFS (loop6): Unmounting Filesystem [ 327.122482][T11932] loop4: detected capacity change from 0 to 128 [ 327.129294][T11929] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967287 out of range (51000000..2150000000) [ 327.169597][T11932] EXT4-fs: inline encryption not supported [ 327.208808][T11932] EXT4-fs (loop4): Test dummy encryption mode enabled [ 327.275275][T11932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 327.325614][T11932] ext4 filesystem being mounted at /684/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.705426][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 328.619268][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'. [ 329.028027][T11986] xt_TCPMSS: Only works on TCP SYN packets [ 329.738396][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3211'. [ 330.890209][T12062] loop2: detected capacity change from 0 to 256 [ 330.924120][T12062] exfat: Deprecated parameter 'utf8' [ 330.929497][T12062] exfat: Deprecated parameter 'utf8' [ 330.960930][T12064] loop6: detected capacity change from 0 to 1024 [ 330.967898][T12062] exfat: Deprecated parameter 'namecase' [ 330.970057][ T26] audit: type=1326 audit(1773239518.550:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 331.000361][T12066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.031281][ T26] audit: type=1326 audit(1773239518.590:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 331.032072][T12066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.053615][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.081676][T12062] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 331.129861][ T26] audit: type=1326 audit(1773239518.590:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 331.186571][ T4321] hfsplus: b-tree write err: -5, ino 25 [ 331.188495][T12066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.192327][ T4321] hfsplus: b-tree write err: -5, ino 4 [ 331.220892][ T4321] hfsplus: b-tree write err: -5, ino 2 [ 331.227075][ T26] audit: type=1326 audit(1773239518.590:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.4.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759c799 code=0x7ffc0000 [ 331.251549][ T4321] hfsplus: b-tree write err: -5, ino 26 [ 331.271468][T12066] device netdevsim0 left promiscuous mode [ 331.401017][T12074] loop6: detected capacity change from 0 to 256 [ 331.429672][T12074] exfat: Deprecated parameter 'namecase' [ 331.505177][T12074] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5474c335, utbl_chksum : 0xe619d30d) [ 332.482183][T12078] loop2: detected capacity change from 0 to 32768 [ 332.597868][T12078] JBD2: Ignoring recovery information on journal [ 332.687814][T12078] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 332.733206][ T6857] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 332.930483][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 332.944892][ T6857] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 332.972201][ T6857] usb 5-1: config 0 has no interface number 0 [ 332.989274][ T6857] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.047147][ T6857] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 333.074627][ T6857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.108195][ T6857] usb 5-1: Product: syz [ 333.112449][ T6857] usb 5-1: Manufacturer: syz [ 333.134370][ T6857] usb 5-1: SerialNumber: syz [ 333.147804][ T6857] usb 5-1: config 0 descriptor?? [ 333.224935][ T6857] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 333.390078][ C1] yurex 5-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 333.591502][ T9121] usb 5-1: USB disconnect, device number 13 [ 333.621406][ T9121] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 333.937157][T12159] IPv6: Can't replace route, no match found [ 333.944505][T12157] tmpfs: Unknown parameter 'no' [ 333.998790][T12163] loop2: detected capacity change from 0 to 2048 [ 334.020840][T12163] EXT4-fs: Ignoring removed bh option [ 334.049305][T12163] EXT4-fs: Ignoring removed nobh option [ 334.186143][T12167] xt_hashlimit: size too large, truncated to 1048576 [ 334.202267][T12163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 334.216468][T12163] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.242237][T12163] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.3280: corrupted xattr block 128 [ 334.263925][T12163] EXT4-fs (loop2): Remounting filesystem read-only [ 334.447890][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 334.592857][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.634161][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.677713][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.707783][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.734159][T12181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.780878][T12181] device bridge1 left promiscuous mode [ 334.864914][T12190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 335.235417][T12202] overlayfs: missing 'workdir' [ 336.016444][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3312'. [ 336.033645][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3312'. [ 336.380306][T12250] loop5: detected capacity change from 0 to 2048 [ 336.409143][T12250] EXT4-fs: Ignoring removed bh option [ 336.443256][T12250] EXT4-fs: Ignoring removed nobh option [ 336.563926][T12250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 336.589720][T12250] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.633089][T12250] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.3318: corrupted xattr block 128 [ 336.687418][T12250] EXT4-fs (loop5): Remounting filesystem read-only [ 336.841680][ T7895] EXT4-fs (loop5): unmounting filesystem. [ 336.968825][T12273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.040680][T12273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.077207][T12273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.553162][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 337.587294][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 337.650559][T12302] comedi comedi2: comedi_parport: I/O port conflict (0xafff,3) [ 337.800749][T12306] loop4: detected capacity change from 0 to 512 [ 337.856570][T12306] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 337.974016][T12306] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 337.992338][T12306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3344: bg 0: block 248: padding at end of block bitmap is not set [ 338.015524][T12306] Quota error (device loop4): write_blk: dquota write failed [ 338.023702][T12306] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 338.034203][T12306] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.3344: Failed to acquire dquot type 1 [ 338.047401][T12306] EXT4-fs (loop4): 1 truncate cleaned up [ 338.053503][T12306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.228311][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.286117][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 338.314725][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 338.484539][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 338.603160][ T4352] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 338.815119][ T4352] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 338.836693][ T4352] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 338.867058][ T4352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.880077][ T4352] usb 6-1: Product: syz [ 338.885340][ T4352] usb 6-1: Manufacturer: syz [ 338.890172][ T4352] usb 6-1: SerialNumber: syz [ 338.925109][ T14] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.937189][ T4352] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.009305][ T4352] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 339.127066][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 339.160500][ T14] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 339.180136][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.195814][ T14] usb 5-1: Product: syz [ 339.200043][ T14] usb 5-1: Manufacturer: syz [ 339.210158][ T14] usb 5-1: SerialNumber: syz [ 339.217141][ T14] usb 5-1: config 0 descriptor?? [ 339.230370][ T9121] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 339.245935][T12327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.258138][ T14] gspca_main: sq930x-2.14.0 probing 2770:930c [ 339.274892][T12327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.313626][ T8757] usb 6-1: USB disconnect, device number 15 [ 339.400565][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3367'. [ 339.423139][ T9121] usb 2-1: Using ep0 maxpacket: 8 [ 339.431620][ T9121] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.466174][ T9121] usb 2-1: config 179 has no interface number 0 [ 339.483771][ T9121] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 339.522626][ T9121] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 339.536009][ T9121] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.548264][ T9121] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 339.560315][ T9121] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.586745][ T9121] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.592744][T12352] loop2: detected capacity change from 0 to 32768 [ 339.597767][ T9121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.605692][T12358] loop6: detected capacity change from 0 to 764 [ 339.627498][T12346] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 339.628487][T12352] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3365 (12352) [ 339.657129][ T14] gspca_sq930x: ucbus_write failed -71 [ 339.676207][T12358] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 339.718816][T12352] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 339.755075][T12358] Symlink component flag not implemented [ 339.762255][T12358] Symlink component flag not implemented (7) [ 339.779421][T12352] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 339.810917][T12352] BTRFS info (device loop2): using free space tree [ 339.913167][ T14] gspca_sq930x: Sensor ov9630 not yet treated [ 339.936478][ T14] sq930x: probe of 5-1:0.0 failed with error -22 [ 339.975392][ T14] usb 5-1: USB disconnect, device number 14 [ 340.083054][ T4352] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 340.100387][ T4352] ath9k_htc: Failed to initialize the device [ 340.107100][ T8757] usb 6-1: ath9k_htc: USB layer deinitialized [ 340.169009][ T128] usb 2-1: USB disconnect, device number 12 [ 340.169105][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 340.183909][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 340.204829][T12352] BTRFS info (device loop2): enabling ssd optimizations [ 340.317922][T12383] loop4: detected capacity change from 0 to 64 [ 340.376548][T12383] hfs: unable to locate alternate MDB [ 340.399047][T12383] hfs: continuing without an alternate MDB [ 340.516015][ T26] audit: type=1800 audit(1773239528.090:156): pid=12383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3371" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 340.516902][ T4271] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 340.832786][ T4351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4351) [ 340.865787][ T4321] hfs: new node 0 already hashed? [ 340.890727][ T4321] ------------[ cut here ]------------ [ 340.896711][ T4321] WARNING: CPU: 0 PID: 4321 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 340.905811][ T4321] Modules linked in: [ 340.909772][ T4321] CPU: 0 PID: 4321 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 340.917397][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.927569][ T4321] Workqueue: writeback wb_workfn (flush-7:4) [ 340.933663][ T4321] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 340.939348][ T4321] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 340.959101][ T4321] RSP: 0018:ffffc90004576e80 EFLAGS: 00010246 [ 340.965260][ T4321] RAX: 000000000000001f RBX: ffff88807702c0e0 RCX: 226c34f72518a800 [ 340.973352][ T4321] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 340.981356][ T4321] RBP: 0000000000000000 R08: ffffc90004576b87 R09: 1ffff920008aed70 [ 340.989432][ T4321] R10: dffffc0000000000 R11: fffff520008aed71 R12: 0000000000000000 [ 340.997485][ T4321] R13: ffff88807702c000 R14: ffff88802539df00 R15: dffffc0000000000 [ 341.005583][ T4321] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 341.014598][ T4321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.021250][ T4321] CR2: 0000001b33220ff8 CR3: 0000000052878000 CR4: 00000000003506f0 [ 341.029344][ T4321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.037377][ T4321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 341.045454][ T4321] Call Trace: [ 341.048774][ T4321] [ 341.051749][ T4321] hfs_bmap_alloc+0x53d/0x5d0 [ 341.056520][ T4321] ? hfs_bmap_reserve+0x420/0x420 [ 341.061607][ T4321] hfs_btree_inc_height+0xfd/0xac0 [ 341.066825][ T4321] ? hfs_brec_insert+0x6f6/0xbd0 [ 341.071819][ T4321] ? hfs_brec_insert+0xbd0/0xbd0 [ 341.076859][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 341.082103][ T4321] hfs_brec_insert+0x744/0xbd0 [ 341.087069][ T4321] ? hfs_brec_keylen+0x350/0x350 [ 341.092057][ T4321] __hfs_ext_write_extent+0x2a1/0x470 [ 341.097522][ T4321] hfs_ext_write_extent+0x17b/0x200 [ 341.102760][ T4321] ? verify_lock_unused+0x140/0x140 [ 341.108049][ T4321] ? hfs_ext_keycmp+0x310/0x310 [ 341.112986][ T4321] ? writeback_sb_inodes+0x46b/0x1850 [ 341.118438][ T4321] hfs_write_inode+0xd8/0xa20 [ 341.123217][ T4321] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 341.128645][ T4321] ? __writeback_single_inode+0x4ae/0x1160 [ 341.134574][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 341.139651][ T4321] ? do_raw_spin_lock+0x128/0x2f0 [ 341.144765][ T4321] ? __rwlock_init+0x140/0x140 [ 341.149582][ T4321] __writeback_single_inode+0x75b/0x1160 [ 341.155313][ T4321] writeback_sb_inodes+0xb30/0x1850 [ 341.160591][ T4321] ? queue_io+0x5a0/0x5a0 [ 341.165106][ T4321] ? rcu_is_watching+0x11/0xa0 [ 341.169923][ T4321] wb_writeback+0x482/0xd50 [ 341.174530][ T4321] ? percpu_ref_tryget+0x250/0x250 [ 341.179684][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 341.185764][ T4321] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.191010][ T4321] wb_workfn+0x423/0xee0 [ 341.195346][ T4321] ? inode_wait_for_writeback+0x220/0x220 [ 341.201128][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 341.207201][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 341.212626][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.218608][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 341.223542][ T4321] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.228802][ T4321] ? process_one_work+0x7b0/0x1160 [ 341.234014][ T4321] process_one_work+0x8a2/0x1160 [ 341.239014][ T4321] ? worker_detach_from_pool+0x240/0x240 [ 341.244735][ T4321] ? _raw_spin_lock_irq+0xb7/0xf0 [ 341.249803][ T4321] ? _raw_spin_lock_irqsave+0x100/0x100 [ 341.255481][ T4321] ? kthread_data+0x4b/0xc0 [ 341.260042][ T4321] worker_thread+0xaa2/0x1270 [ 341.264814][ T4321] kthread+0x29d/0x330 [ 341.268951][ T4321] ? worker_clr_flags+0x1a0/0x1a0 [ 341.274140][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 341.278788][ T4321] ret_from_fork+0x1f/0x30 [ 341.283339][ T4321] [ 341.286405][ T4321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.293708][ T4321] CPU: 0 PID: 4321 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 341.301280][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.311370][ T4321] Workqueue: writeback wb_workfn (flush-7:4) [ 341.317406][ T4321] Call Trace: [ 341.320715][ T4321] [ 341.323667][ T4321] dump_stack_lvl+0x188/0x24e [ 341.328380][ T4321] ? memcpy+0x3c/0x60 [ 341.332388][ T4321] ? show_regs_print_info+0x12/0x12 [ 341.337625][ T4321] ? load_image+0x400/0x400 [ 341.342177][ T4321] panic+0x2e5/0x730 [ 341.346110][ T4321] ? bpf_jit_dump+0xd0/0xd0 [ 341.350654][ T4321] ? ret_from_fork+0x1f/0x30 [ 341.355289][ T4321] __warn+0x2f8/0x4f0 [ 341.359308][ T4321] ? hfs_bnode_create+0x37a/0x400 [ 341.364375][ T4321] ? hfs_bnode_create+0x37a/0x400 [ 341.369438][ T4321] report_bug+0x2ba/0x4f0 [ 341.373822][ T4321] ? hfs_bnode_create+0x37a/0x400 [ 341.378884][ T4321] handle_bug+0x3a/0x70 [ 341.383067][ T4321] exc_invalid_op+0x16/0x40 [ 341.387596][ T4321] asm_exc_invalid_op+0x16/0x20 [ 341.392459][ T4321] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 341.398112][ T4321] Code: ac a2 8a 89 ee e8 26 a9 d6 07 e9 ab fd ff ff e8 1c 4e 37 ff 48 89 df e8 d4 f8 eb 07 48 c7 c7 c0 ac a2 8a 89 ee e8 06 a9 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 341.417737][ T4321] RSP: 0018:ffffc90004576e80 EFLAGS: 00010246 [ 341.423828][ T4321] RAX: 000000000000001f RBX: ffff88807702c0e0 RCX: 226c34f72518a800 [ 341.431811][ T4321] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 341.439787][ T4321] RBP: 0000000000000000 R08: ffffc90004576b87 R09: 1ffff920008aed70 [ 341.447763][ T4321] R10: dffffc0000000000 R11: fffff520008aed71 R12: 0000000000000000 [ 341.455738][ T4321] R13: ffff88807702c000 R14: ffff88802539df00 R15: dffffc0000000000 [ 341.463736][ T4321] hfs_bmap_alloc+0x53d/0x5d0 [ 341.468436][ T4321] ? hfs_bmap_reserve+0x420/0x420 [ 341.473477][ T4321] hfs_btree_inc_height+0xfd/0xac0 [ 341.478599][ T4321] ? hfs_brec_insert+0x6f6/0xbd0 [ 341.483551][ T4321] ? hfs_brec_insert+0xbd0/0xbd0 [ 341.488505][ T4321] ? do_raw_spin_unlock+0x11d/0x230 [ 341.493709][ T4321] hfs_brec_insert+0x744/0xbd0 [ 341.498521][ T4321] ? hfs_brec_keylen+0x350/0x350 [ 341.503503][ T4321] __hfs_ext_write_extent+0x2a1/0x470 [ 341.508905][ T4321] hfs_ext_write_extent+0x17b/0x200 [ 341.514119][ T4321] ? verify_lock_unused+0x140/0x140 [ 341.519420][ T4321] ? hfs_ext_keycmp+0x310/0x310 [ 341.524290][ T4321] ? writeback_sb_inodes+0x46b/0x1850 [ 341.529675][ T4321] hfs_write_inode+0xd8/0xa20 [ 341.534371][ T4321] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 341.539758][ T4321] ? __writeback_single_inode+0x4ae/0x1160 [ 341.545576][ T4321] ? __lock_acquire+0x7d10/0x7d10 [ 341.550606][ T4321] ? do_raw_spin_lock+0x128/0x2f0 [ 341.555634][ T4321] ? __rwlock_init+0x140/0x140 [ 341.560414][ T4321] __writeback_single_inode+0x75b/0x1160 [ 341.566092][ T4321] writeback_sb_inodes+0xb30/0x1850 [ 341.571387][ T4321] ? queue_io+0x5a0/0x5a0 [ 341.575756][ T4321] ? rcu_is_watching+0x11/0xa0 [ 341.580543][ T4321] wb_writeback+0x482/0xd50 [ 341.585070][ T4321] ? percpu_ref_tryget+0x250/0x250 [ 341.590198][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 341.596227][ T4321] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.601438][ T4321] wb_workfn+0x423/0xee0 [ 341.605716][ T4321] ? inode_wait_for_writeback+0x220/0x220 [ 341.611458][ T4321] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 341.617454][ T4321] ? read_lock_is_recursive+0x10/0x10 [ 341.622838][ T4321] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 341.628740][ T4321] ? _raw_spin_unlock+0x40/0x40 [ 341.633600][ T4321] ? _raw_spin_unlock_irq+0x1f/0x40 [ 341.638822][ T4321] ? process_one_work+0x7b0/0x1160 [ 341.643942][ T4321] process_one_work+0x8a2/0x1160 [ 341.648897][ T4321] ? worker_detach_from_pool+0x240/0x240 [ 341.654542][ T4321] ? _raw_spin_lock_irq+0xb7/0xf0 [ 341.659578][ T4321] ? _raw_spin_lock_irqsave+0x100/0x100 [ 341.665134][ T4321] ? kthread_data+0x4b/0xc0 [ 341.669658][ T4321] worker_thread+0xaa2/0x1270 [ 341.674365][ T4321] kthread+0x29d/0x330 [ 341.678452][ T4321] ? worker_clr_flags+0x1a0/0x1a0 [ 341.683483][ T4321] ? kthread_blkcg+0xd0/0xd0 [ 341.688105][ T4321] ret_from_fork+0x1f/0x30 [ 341.692545][ T4321] [ 341.695690][ T4321] Kernel Offset: disabled [ 341.700115][ T4321] Rebooting in 86400 seconds..