last executing test programs: 5m56.137707329s ago: executing program 2 (id=629): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f00000000c0)=0x4e) 5m55.95634934s ago: executing program 2 (id=632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004, 0x2}, {@in6=@mcast2, 0x2000000, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x327, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffa}, {}, {0x25}, 0x70bd29, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x5e61, 0x0, @in=@rand_addr=0x64010101}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m55.349777566s ago: executing program 2 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_MARK={0x8}]}, 0xb8}, 0x1, 0xfffff000}, 0x0) 5m55.072794821s ago: executing program 2 (id=647): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m54.710491383s ago: executing program 2 (id=651): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x87, 0x0, @private1, @mcast2}}}}, 0x0) 5m54.152337865s ago: executing program 2 (id=659): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[], 0x48) 5m53.684162923s ago: executing program 32 (id=659): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[], 0x48) 1m54.450150179s ago: executing program 1 (id=3905): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x6) 1m54.213992993s ago: executing program 1 (id=3908): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 1m53.942527549s ago: executing program 1 (id=3912): r0 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {0x6efc, 0xfffffffd}}) 1m53.678525435s ago: executing program 1 (id=3916): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m53.248442339s ago: executing program 1 (id=3923): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005200)='./file0\x00', 0x204409, &(0x7f0000000040)={[{@compress_force}, {@clear_cache}, {@commit={'commit', 0x3d, 0x6}}, {@fatal_errors_bug}, {@notreelog}, {@space_cache_v1}]}, 0x2, 0x51ab, &(0x7f000000a440)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1m52.590271488s ago: executing program 1 (id=3934): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 1m52.268131777s ago: executing program 33 (id=3934): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 4.193017045s ago: executing program 6 (id=5368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pause() 3.225694481s ago: executing program 5 (id=5377): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1ff, @none, 0xb, 0x1}, 0x4) 3.07143828s ago: executing program 6 (id=5379): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000180)={'wlan1\x00'}) 2.845004683s ago: executing program 3 (id=5381): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x1, 0x2, @start={0x9, 0x1}}) 2.831083904s ago: executing program 5 (id=5382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a00000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000018000380"], 0xc8}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) 2.602314757s ago: executing program 6 (id=5384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xec, 0x19, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xec}}, 0x844) 2.56056907s ago: executing program 3 (id=5385): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, r0) 2.368694981s ago: executing program 5 (id=5388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0x1b, [0x6, 0x2, 0x9, 0x14, 0xd921, 0x2, 0x2, 0xfffffffc, 0x7, 0xfffffffb, 0x7, 0x38, 0xe45, 0x6, 0xa, 0x2, 0xac, 0xd, 0x8, 0x2, 0x1, 0xfffffffc, 0x6, 0x7, 0x5, 0x1, 0x5, 0x5, 0x400, 0x2, 0x3, 0x5, 0x2, 0x80000000, 0x80000040, 0x773, 0xfffffff8, 0x8, 0xffff, 0x0, 0x7, 0x40, 0x80, 0x0, 0x41, 0x8, 0x8, 0xfffffffc, 0x3, 0xc0a, 0x4, 0x0, 0x1a, 0xd3d9, 0x24, 0x9, 0x69a8be59, 0x9, 0x2, 0x7, 0x9, 0xf50, 0xfffff57f, 0x4, 0xd0, 0x1, 0x8, 0xebfe, 0x10001, 0x8, 0x4, 0x6, 0x3, 0x8, 0x4, 0x1, 0x7, 0x1, 0x2, 0x7, 0x7, 0xc, 0x5, 0xbf, 0x0, 0x28d, 0x6, 0x3, 0x38, 0x4, 0xfffffff8, 0x8000, 0x11a, 0x7, 0x800, 0x7cf2, 0x7fffffff, 0x3, 0x0, 0x6, 0x0, 0x7, 0x7, 0x1, 0x396bd1bf, 0x10000, 0x2, 0x5, 0x8, 0xe15, 0xf3, 0x7f, 0x800, 0x7, 0x0, 0x9, 0xcf, 0x7d7, 0x2, 0x2, 0x0, 0x1, 0xd1, 0x1, 0x10, 0x4, 0x3, 0x8]}}) 2.244101788s ago: executing program 3 (id=5389): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 2.139087665s ago: executing program 6 (id=5391): r0 = syz_open_procfs(0x0, &(0x7f0000000800)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1, 0x9a, 0x0) 1.980181034s ago: executing program 3 (id=5393): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0x8, 0x81, 0xffff, 0x4, 0x2, &(0x7f0000000200)="684fc1a8"}) 1.947444126s ago: executing program 5 (id=5395): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x50, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30900c72e7be44e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea36d445ecd3928f6ca291cb81d39aed37e6e3254b0b86c0ae79d7308d4e1dde03b8beb1a4452d898b97ca891ca36a15ab3f712153e4bb342d1be670f992a30d90a23e13aff5ce6794f9b2a37cc003462eb47e5979ec3acc9fd1842606adb0c4e86bbe75227a0b1fd8bba3bdf0a360057d44aa04f235f853d9e454a37bd0c458dfdbebcd592", @ANYRES64, @ANYRESOCT], 0x13, 0x6b2, &(0x7f0000000280)="$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") mount$nfs(&(0x7f0000000000)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xfd\x00\x1dlz)\x10\x8c\xd1\xd5_]Y&\xa4\xa2\x0f\xe2\xe1n\xc8~\x06\x05\x18\xcb\xccw\xf3\xb6I\xf1+k7\xba_\xa0\x96\x02)\xb9\x9c\x92\xf1\x00\xb2(?\x9f\x01f\xd2\xa1\xf6\xad\xc3\xca\x00\xef5)\xff\x8a9\xd3\xbfg\xbb\x0fTV\xdca3\x906Op\xcbFhS\xf0z\x88>2\x95\xb1\xae>\x1d\xd3\xc2\xda\n\x19\b\xfc\x93\x83\x91\xe5\xdb\xb8\xd1\x85rdV]\\ps\xe6\x1f\xd4Bo\xda\xbc\xb0x\xb2\xf0\x9c\x8a{&\x9d\xc7\x99\xa4e\x90\xf1{\x82:\xec\xb8\x0f\t\xfa\x15W\x13\x83-M\xe9MY\af\xd33\x0f\x87\x9d\xe3\x91\xe55?\x061\x1e\x85o\x87\xdaa\xb4\x06\xfe\xe9\xaa\xdb\r\x92h8\x81K\x7f\xe2\x99\xaf\xca\x91g\x18\xa7gC\xf8\xe0\xa0\x14\x8ak\xb1g\xb6\xb1SZ\xd7H,<\x85\xc1\xf8k\xedr\xae\x1b\xd8n\x9d\xa4@\xa7\'M\\}\x91xR\xe4\xfa\xa5\x816j&\xd9\xc6G/\x8a\xae\x1f\x9f\x04Nz[\xc90\a)\b\xf1\x94\xe7`\xcc\x84\rl\x01\xb3\x15\x87\x92\xfd,\xa8b\xf6+\xaaIRHvw\xf4\xacAzG\xec\x8b\xa2\xb0w\xe3\xd5Q\x97\xad\xaePS\x02\f\x8d\x03\x9eJT\x8fG\xff|\xe2\t\x1d\x06K\xd8_i\xd2\x0e\xd8\x8f\xe8\xbf\x95\x19\x9f\xd9m\x93\x97r\xb5\xbb\xa9L\xd7XX\xb41\xcbd\xec\x9e\xe3\xd3\xa7\x00\n17', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1.782018676s ago: executing program 0 (id=5396): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1.781390346s ago: executing program 6 (id=5397): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") mkdir(&(0x7f00000002c0)='./control\x00', 0x0) 1.714542789s ago: executing program 3 (id=5398): r0 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x1, '&'}, 0xa, 0x1) 1.515576731s ago: executing program 3 (id=5400): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.457725905s ago: executing program 4 (id=5401): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}}) 1.311014383s ago: executing program 0 (id=5402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0xfffffffffffffffe) 1.276388705s ago: executing program 5 (id=5403): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0}) 1.157110772s ago: executing program 4 (id=5404): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4008032, r0, 0x0) 972.132343ms ago: executing program 0 (id=5405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000}]}, 0x40}}, 0x0) 866.058029ms ago: executing program 4 (id=5406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, @in6=@mcast1, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 667.867971ms ago: executing program 0 (id=5407): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0}) 666.99412ms ago: executing program 6 (id=5408): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000036000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 645.470522ms ago: executing program 5 (id=5409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638977fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 615.451954ms ago: executing program 4 (id=5410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x2c, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 378.476887ms ago: executing program 0 (id=5411): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 313.867431ms ago: executing program 4 (id=5412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x7f}) 63.510196ms ago: executing program 4 (id=5413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000180)="2d740461", 0x0}, 0x20) 0s ago: executing program 0 (id=5414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ber 20 [ 339.165948][T12310] SET target dimension over the limit! [ 339.241349][ T27] audit: type=1326 audit(1770767827.039:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12307 comm="syz.1.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 339.513839][T12321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3525'. [ 340.147359][ T6571] usb 1-1: USB disconnect, device number 18 [ 341.071789][ T22] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 341.279212][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 341.287186][ T22] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 341.328852][ T22] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 341.358626][ T22] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 341.382778][ T22] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 341.431778][ T22] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 341.472531][ T22] usb 6-1: config 0 interface 0 has no altsetting 0 [ 341.521128][ T22] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 341.551500][ T22] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 341.570022][ T22] usb 6-1: Product: syz [ 341.599643][ T22] usb 6-1: Manufacturer: syz [ 341.604625][ T22] usb 6-1: SerialNumber: syz [ 341.632910][ T22] usb 6-1: config 0 descriptor?? [ 341.659847][ T22] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 341.725012][ T22] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 341.921456][T12363] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 341.947111][ T22] usb 6-1: USB disconnect, device number 13 [ 341.968069][ T22] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 342.005802][T12401] loop3: detected capacity change from 0 to 4096 [ 342.095437][T12401] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 342.260932][ T4268] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 342.724695][T12399] loop1: detected capacity change from 0 to 32768 [ 343.264987][T12409] loop4: detected capacity change from 0 to 32768 [ 343.416271][T12409] XFS (loop4): Mounting V5 Filesystem [ 343.500050][T12409] XFS (loop4): Ending clean mount [ 343.517027][T12409] XFS (loop4): Quotacheck needed: Please wait. [ 343.666768][T12409] XFS (loop4): Quotacheck: Done. [ 343.813181][T12456] netlink: 'syz.1.3586': attribute type 10 has an invalid length. [ 343.899927][T12456] team0: Port device wlan1 added [ 343.922747][ T4274] XFS (loop4): Unmounting Filesystem [ 344.039179][T12460] loop3: detected capacity change from 0 to 8 [ 344.096812][T12460] SQUASHFS error: Unable to read inode 0xa7 [ 344.411211][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3595'. [ 344.561928][ T6250] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 344.774084][ T6250] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.792508][ T6250] usb 6-1: not running at top speed; connect to a high speed hub [ 344.829197][ T6250] usb 6-1: config 106 has an invalid interface number: 8 but max is 0 [ 344.838359][ T6250] usb 6-1: config 106 has no interface number 0 [ 344.854478][ T6250] usb 6-1: config 106 interface 8 has no altsetting 0 [ 344.881318][ T6250] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 344.908371][ T6250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.940574][ T6250] usb 6-1: Product: syz [ 344.956205][ T6250] usb 6-1: Manufacturer: syz [ 344.974695][ T6250] usb 6-1: SerialNumber: syz [ 345.201277][ T6250] kalmia 6-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 345.238644][ T6250] kalmia: probe of 6-1:106.8 failed with error -22 [ 345.285696][ T6250] usb 6-1: USB disconnect, device number 14 [ 345.382816][T12504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3611'. [ 345.407676][T12504] unsupported nlmsg_type 40 [ 345.471878][T12508] ksmbd: Unknown IPC event: 4, ignore. [ 345.832681][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3619'. [ 345.881864][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3619'. [ 345.980498][T12530] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 346.053585][T12530] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 346.923207][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 346.923223][ T27] audit: type=1400 audit(1770767834.989:1782): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12562 comm="syz.4.3639" [ 347.057128][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 347.105890][T12568] loop1: detected capacity change from 0 to 1024 [ 347.136473][T12572] loop4: detected capacity change from 0 to 256 [ 347.243672][T12572] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 347.321544][ T6064] hfsplus: b-tree write err: -5, ino 4 [ 347.699939][T12586] x_tables: duplicate underflow at hook 1 [ 347.931499][T12592] loop3: detected capacity change from 0 to 2048 [ 347.967526][T12592] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 348.028565][T12592] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.053071][ T27] audit: type=1326 audit(1770767836.119:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 348.151997][ T27] audit: type=1326 audit(1770767836.119:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 348.194190][T12566] loop5: detected capacity change from 0 to 32768 [ 348.210193][ T27] audit: type=1326 audit(1770767836.119:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 348.259981][ T27] audit: type=1326 audit(1770767836.119:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12595 comm="syz.0.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 348.282508][T12566] XFS (loop5): Mounting V5 Filesystem [ 348.418200][T12566] XFS (loop5): Ending clean mount [ 348.485783][T12566] XFS (loop5): Quotacheck needed: Please wait. [ 348.599126][T12566] XFS (loop5): Quotacheck: Done. [ 348.697515][ T5797] XFS (loop5): Unmounting Filesystem [ 348.760679][T12623] netlink: 'syz.4.3663': attribute type 1 has an invalid length. [ 348.852581][T12622] loop1: detected capacity change from 0 to 2048 [ 348.983630][T12622] loop1: p1 < > p4 < > [ 349.364703][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 349.365179][ T5069] udevd[5069]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 349.564417][T12644] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.466867][T12681] openvswitch: netlink: Message has 4 unknown bytes. [ 350.594904][T12686] loop1: detected capacity change from 0 to 1024 [ 350.658119][T12686] hfsplus: xattr searching failed [ 350.701985][T12690] netlink: 'syz.5.3697': attribute type 7 has an invalid length. [ 351.131913][T12704] xt_TCPMSS: Only works on TCP SYN packets [ 351.721948][ T6253] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 351.811334][T12730] loop4: detected capacity change from 0 to 16 [ 351.842786][T12730] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 351.911846][ T6253] usb 1-1: Using ep0 maxpacket: 8 [ 351.928950][ T6253] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 351.957555][ T6253] usb 1-1: config 0 has no interface number 0 [ 351.977817][ T6253] usb 1-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 352.033211][ T6253] usb 1-1: config 0 interface 96 has no altsetting 0 [ 352.044508][T12734] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3717'. [ 352.059467][ T6253] usb 1-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 352.089126][ T6253] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.098275][T12734] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.3717'. [ 352.132159][ T6253] usb 1-1: Product: syz [ 352.136434][ T6253] usb 1-1: Manufacturer: syz [ 352.138845][T12737] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.141051][ T6253] usb 1-1: SerialNumber: syz [ 352.179171][ T6253] usb 1-1: config 0 descriptor?? [ 352.514768][T12744] loop5: detected capacity change from 0 to 4096 [ 352.530290][T12744] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 352.635943][ T6574] usb 1-1: USB disconnect, device number 19 [ 352.854200][T12720] loop3: detected capacity change from 0 to 40427 [ 352.879040][T12754] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 352.921782][T12720] F2FS-fs (loop3): build fault injection attr: rate: 684, type: 0x3ffff [ 352.952094][T12720] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 353.011263][T12720] F2FS-fs (loop3): invalid crc value [ 353.072711][T12720] F2FS-fs (loop3): Found nat_bits in checkpoint [ 353.262009][T12720] F2FS-fs (loop3): Start checkpoint disabled! [ 353.341866][T12720] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 353.391912][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 353.503581][T12768] IPv6: sit4: Disabled Multicast RS [ 353.744135][ T6064] kworker/u4:8: attempt to access beyond end of device [ 353.744135][ T6064] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 354.353523][T12798] loop4: detected capacity change from 0 to 64 [ 354.380259][ T6252] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 354.572496][ T6252] usb 1-1: Using ep0 maxpacket: 8 [ 354.584008][ T6252] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 354.603968][ T6252] usb 1-1: config 0 has no interface number 0 [ 354.615209][ T6252] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 354.681810][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.710348][ T6252] usb 1-1: Product: syz [ 354.721992][ T6252] usb 1-1: Manufacturer: syz [ 354.726644][ T6252] usb 1-1: SerialNumber: syz [ 354.786605][ T6252] usb 1-1: config 0 descriptor?? [ 355.015819][ T6252] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 355.029001][ T6252] usb 1-1: No valid video chain found. [ 355.055857][ T6252] usb 1-1: USB disconnect, device number 20 [ 355.525464][T12838] xt_socket: unknown flags 0x4c [ 356.219199][ T6574] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 356.422023][ T6574] usb 1-1: Using ep0 maxpacket: 8 [ 356.429346][ T6574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.451752][ T6574] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 356.494906][ T6574] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 356.527042][ T6574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.551617][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3787'. [ 356.556859][ T6574] usb 1-1: Product: syz [ 356.565867][T12879] netlink: 'syz.5.3788': attribute type 2 has an invalid length. [ 356.574105][ T6574] usb 1-1: Manufacturer: syz [ 356.578871][T12879] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3788'. [ 356.588354][ T6574] usb 1-1: SerialNumber: syz [ 356.607740][ T6574] usb 1-1: config 0 descriptor?? [ 356.735777][T12883] xt_hashlimit: max too large, truncated to 1048576 [ 357.071779][ T6574] usb 1-1: USB disconnect, device number 21 [ 357.346460][ T27] audit: type=1326 audit(1770767845.409:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.369068][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.430532][ T27] audit: type=1326 audit(1770767845.449:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.453134][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.546772][ T27] audit: type=1326 audit(1770767845.449:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.569363][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.642016][ T27] audit: type=1326 audit(1770767845.449:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.750519][ T27] audit: type=1326 audit(1770767845.449:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.865929][ T27] audit: type=1326 audit(1770767845.449:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.939458][ T27] audit: type=1326 audit(1770767845.449:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 357.939506][ T27] audit: type=1326 audit(1770767845.449:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12904 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc41df9bf79 code=0x7ffc0000 [ 359.242350][T12977] loop1: detected capacity change from 0 to 64 [ 359.304506][T12977] Trying to free block not in datazone [ 359.310515][T12977] Trying to free block not in datazone [ 359.376029][T12977] Trying to free block not in datazone [ 359.752190][T12992] openvswitch: netlink: EtherType 0 is less than min 600 [ 360.036088][T13003] overlayfs: empty lowerdir [ 361.287717][T13017] loop0: detected capacity change from 0 to 32768 [ 361.324729][T13017] JBD2: Ignoring recovery information on journal [ 361.389838][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'. [ 361.422698][T13017] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 361.592860][T13057] overlayfs: conflicting options: userxattr,metacopy=on [ 361.617729][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 362.477406][T13091] loop0: detected capacity change from 0 to 128 [ 362.604949][T13093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.682027][ T6253] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 362.874308][ T6253] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.890662][ T6253] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.925760][ T6253] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 362.970341][ T6253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.010795][ T6253] usb 5-1: config 0 descriptor?? [ 363.236575][T13080] loop3: detected capacity change from 0 to 32768 [ 363.273202][ T6253] usb 5-1: USB disconnect, device number 15 [ 363.331794][ T22] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 363.338817][T13080] UFO tlock:0xffffc9000289a048 [ 363.532697][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.550843][ T22] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 363.581749][ T22] usb 6-1: config 0 has no interface number 0 [ 363.588017][ T22] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 363.631447][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.668635][ T22] usb 6-1: config 0 descriptor?? [ 363.900808][ T22] usb 6-1: string descriptor 0 read error: -71 [ 363.922997][ T22] usb-storage 6-1:0.168: USB Mass Storage device detected [ 363.964869][ T22] usb-storage 6-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 364.004294][T13130] tmpfs: Bad value for 'mpol' [ 364.072934][ T22] usb 6-1: USB disconnect, device number 15 [ 364.192727][T13134] netlink: 'syz.4.3913': attribute type 1 has an invalid length. [ 364.356176][T13140] loop1: detected capacity change from 0 to 128 [ 364.397969][T13140] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 364.435174][T13140] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.513073][T13140] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 364.539522][T13140] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 364.679537][ T52] block nbd0: Attempted send on invalid socket [ 364.686784][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 364.817551][ T4265] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 364.838626][ T4265] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 365.101800][ T6252] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 365.238012][ T6250] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 365.291808][ T6252] usb 5-1: Using ep0 maxpacket: 16 [ 365.310362][ T6252] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 365.336739][ T6252] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 365.357783][ T6252] usb 5-1: config 0 has no interface number 0 [ 365.384629][ T6252] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 365.410751][ T6252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.433697][ T6250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 365.434784][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.453799][ T6250] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 365.471344][ T6252] usb 5-1: Product: syz [ 365.476030][ T6252] usb 5-1: Manufacturer: syz [ 365.480684][ T6252] usb 5-1: SerialNumber: syz [ 365.492210][ T6250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 365.503842][ T6250] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 365.514905][ T6252] usb 5-1: config 0 descriptor?? [ 365.530358][ T6250] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 365.543700][ T6250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.556159][ T6250] usb 1-1: config 0 descriptor?? [ 365.645661][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.725530][ T6252] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 365.741819][ T6252] usb 5-1: No valid video chain found. [ 365.768263][ T6252] usb 5-1: USB disconnect, device number 16 [ 365.788091][ T6250] hdpvr 1-1:0.0: firmware version 0x3 dated 3;~&X^ wΖ g/N `žx$="ܗ [ 365.806973][ T6250] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 365.889332][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.989453][ T6250] hdpvr 1-1:0.0: device init failed [ 366.007897][ T6250] hdpvr: probe of 1-1:0.0 failed with error -12 [ 366.060285][ T6250] usb 1-1: USB disconnect, device number 22 [ 366.143138][ T57] bond0: (slave netdevsim0): Releasing backup interface [ 366.165806][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.242730][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.258044][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.267808][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.286062][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.295264][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.303080][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.438827][ T22] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 366.458177][T13184] lo speed is unknown, defaulting to 1000 [ 366.651990][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 366.659007][ T22] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 366.700576][ T22] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 366.766808][ T22] usb 4-1: config 6 has no interface number 0 [ 366.776149][ T22] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.847265][ T22] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 366.886088][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.912506][ T22] usb 4-1: Product: syz [ 366.926370][ T22] usb 4-1: Manufacturer: syz [ 366.938894][ T22] usb 4-1: SerialNumber: syz [ 366.968366][ T22] hso 4-1:6.2: Failed to find INT IN ep [ 367.189270][ T22] usb 4-1: USB disconnect, device number 21 [ 367.311888][ T6250] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 367.502849][ T6250] usb 5-1: Using ep0 maxpacket: 8 [ 367.511422][ T6250] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 367.548254][ T6250] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 367.574611][ T6250] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.609591][ T6250] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 367.627538][ T6250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.636316][ T6250] usb 5-1: Product: syz [ 367.640531][ T6250] usb 5-1: Manufacturer: syz [ 367.645858][ T6250] usb 5-1: SerialNumber: syz [ 367.658006][ T6250] usb 5-1: config 0 descriptor?? [ 367.694731][ T6250] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 367.890425][ T6250] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 367.914724][ T6250] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 367.942317][ T6250] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 368.013196][T13184] chnl_net:caif_netlink_parms(): no params data found [ 368.021792][ T6252] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 368.122805][ T6250] usb 5-1: USB disconnect, device number 17 [ 368.206003][ T6252] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 368.231354][ T6252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.251959][ T6252] usb 6-1: Product: syz [ 368.256285][ T6252] usb 6-1: Manufacturer: syz [ 368.271394][ T6252] usb 6-1: SerialNumber: syz [ 368.289481][ T6252] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 368.312158][ T6252] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 368.378352][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 368.444486][T13239] netlink: 'syz.3.3958': attribute type 21 has an invalid length. [ 368.463702][T13239] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3958'. [ 368.485819][T13239] netlink: 'syz.3.3958': attribute type 5 has an invalid length. [ 368.498543][T13239] netlink: 'syz.3.3958': attribute type 6 has an invalid length. [ 368.510182][T13239] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3958'. [ 368.591298][T13184] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.614002][T13184] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.680170][T13184] device bridge_slave_0 entered promiscuous mode [ 368.753051][ T6574] usb 6-1: USB disconnect, device number 16 [ 368.760296][T13184] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.779903][T13184] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.809915][T13184] device bridge_slave_1 entered promiscuous mode [ 368.907694][T13227] loop0: detected capacity change from 0 to 32768 [ 368.929204][T13184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.987163][T13184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.108620][T13227] XFS (loop0): Mounting V5 Filesystem [ 369.167896][T13227] XFS (loop0): Ending clean mount [ 369.177073][T13184] team0: Port device team_slave_0 added [ 369.194003][T13227] XFS (loop0): Quotacheck needed: Please wait. [ 369.206014][T13261] netlink: 'syz.3.3963': attribute type 26 has an invalid length. [ 369.291292][T13227] XFS (loop0): Quotacheck: Done. [ 369.331853][ T6252] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 369.338942][ T6252] ath9k_htc: Failed to initialize the device [ 369.399925][ T6574] usb 6-1: ath9k_htc: USB layer deinitialized [ 369.584007][ T57] team0: Port device wlan1 removed [ 369.627267][T13184] team0: Port device team_slave_1 added [ 369.634376][ T4282] XFS (loop0): Unmounting Filesystem [ 370.070616][T13184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.087491][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.231006][T13184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.328620][T13184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.351834][T13184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.452216][T13184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.452263][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 370.744696][T13184] device hsr_slave_0 entered promiscuous mode [ 370.782669][T13184] device hsr_slave_1 entered promiscuous mode [ 370.853750][T13184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.871704][T13184] Cannot create hsr debugfs directory [ 370.908193][ T57] device hsr_slave_0 left promiscuous mode [ 370.942779][ T57] device hsr_slave_1 left promiscuous mode [ 370.961982][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.971926][T13312] xt_hashlimit: max too large, truncated to 1048576 [ 370.987703][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.014998][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.031785][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.043021][ T57] device bridge_slave_1 left promiscuous mode [ 371.049413][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.099491][ T57] device bridge_slave_0 left promiscuous mode [ 371.111783][ T6252] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 371.158075][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.252685][T13320] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 371.282770][ T57] device veth1_macvtap left promiscuous mode [ 371.288894][ T57] device veth0_macvtap left promiscuous mode [ 371.303613][ T6252] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.331896][ T6252] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.351322][ T57] device veth1_vlan left promiscuous mode [ 371.357927][ T6252] usb 6-1: config 1 has no interface number 0 [ 371.379212][ T6252] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.443247][ T6252] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.469691][ T6252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.483208][ T6252] usb 6-1: Product: syz [ 371.487455][ T6252] usb 6-1: Manufacturer: syz [ 371.501765][ T6252] usb 6-1: SerialNumber: syz [ 371.549376][ T6252] usb 6-1: selecting invalid altsetting 1 [ 371.910587][ T57] bond1 (unregistering): Released all slaves [ 371.923734][T13339] loop4: detected capacity change from 0 to 256 [ 371.950410][ T6252] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 371.960801][ T6252] cdc_ncm 6-1:1.1: bind() failure [ 372.012683][ T6252] usb 6-1: USB disconnect, device number 17 [ 372.038297][T13341] loop3: detected capacity change from 0 to 512 [ 372.153559][T13341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 372.231878][T13341] ext4 filesystem being mounted at /764/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.334705][T13341] EXT4-fs error (device loop3): ext4_xattr_block_list:713: inode #12: comm syz.3.3996: corrupted xattr block 6 [ 372.501284][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 372.532077][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 373.561387][ T57] team0 (unregistering): Port device team_slave_1 removed [ 373.612880][ T57] team0 (unregistering): Port device team_slave_0 removed [ 373.665954][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.721443][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.111506][ T57] bond0 (unregistering): Released all slaves [ 374.251826][T13378] netlink: 'syz.5.4012': attribute type 5 has an invalid length. [ 374.500663][T13384] netlink: 'syz.3.4013': attribute type 4 has an invalid length. [ 374.611926][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 374.904744][T13184] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.959196][T13184] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 374.988831][T13184] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.049745][T13184] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 375.257004][T13410] loop3: detected capacity change from 0 to 1024 [ 375.324900][T13410] hfsplus: Filesystem is marked locked, mounting read-only. [ 375.565004][T13184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.640741][T13184] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.667286][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.694275][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.754054][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.787397][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.841551][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.848765][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.952673][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.032425][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.080099][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.142540][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.149715][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.244065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.260729][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.306856][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.327044][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.372866][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.390919][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.400258][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.439464][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.497748][T13184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.526617][T13184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.571830][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.579951][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.608811][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.583597][ T27] audit: type=1326 audit(1770767865.649:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.3.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 377.636215][T13485] loop0: detected capacity change from 0 to 4096 [ 377.651457][T13482] loop4: detected capacity change from 0 to 4096 [ 377.668859][ T27] audit: type=1326 audit(1770767865.649:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.3.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 377.743434][T13453] loop5: detected capacity change from 0 to 32768 [ 377.747953][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.757447][T13482] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 377.773694][T13492] loop3: detected capacity change from 0 to 512 [ 377.787168][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.788475][ T27] audit: type=1326 audit(1770767865.649:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.3.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 377.809709][T13184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.838225][T13493] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 377.973403][T13485] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 377.985526][T13482] ntfs3: loop4: failed to convert "c46c" to cp1251 [ 377.995086][ T27] audit: type=1326 audit(1770767865.649:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.3.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 378.025459][T13492] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.4053: inode has both inline data and extents flags [ 378.088191][T13485] Remounting filesystem read-only [ 378.099871][T13492] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4053: couldn't read orphan inode 15 (err -117) [ 378.170128][T13492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.454552][T13503] No such timeout policy "syz0" [ 378.523847][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 378.616161][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.623536][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.208306][T13522] loop3: detected capacity change from 0 to 2048 [ 379.378971][T13528] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.444577][T13522] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 379.554381][T13522] Remounting filesystem read-only [ 379.760071][T13538] tmpfs: Bad value for 'mpol' [ 379.910216][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.911902][T13541] xt_TCPMSS: Only works on TCP SYN packets [ 379.922465][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.991105][T13184] device veth0_vlan entered promiscuous mode [ 380.016843][T13508] loop5: detected capacity change from 0 to 32768 [ 380.038652][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.072746][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.092037][T13508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 380.092037][T13508] [ 380.114627][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.132258][T13508] xtLookup: xtSearch returned -5 [ 380.138148][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.149184][T13508] free_index: error reading directory table [ 380.179970][T13184] device veth1_vlan entered promiscuous mode [ 380.198853][T13508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 380.198853][T13508] [ 380.254291][T13508] xtLookup: xtSearch returned -5 [ 380.280862][T13508] free_index: error reading directory table [ 380.302876][T13508] ERROR: (device loop5): xtSearch: XT_GETPAGE: xtree page corrupt [ 380.302876][T13508] [ 380.362229][T13508] xtLookup: xtSearch returned -5 [ 380.367332][T13508] free_index: error reading directory table [ 380.375027][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.412592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.469636][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.496719][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.545440][T13184] device veth0_macvtap entered promiscuous mode [ 380.567776][T13184] device veth1_macvtap entered promiscuous mode [ 380.625950][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.625975][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.625986][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.626000][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.626011][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.626025][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.626039][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.626052][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.630096][T13184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.630224][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.630974][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.631603][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 380.632737][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.651119][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.651145][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.651156][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.651169][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.651179][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.651193][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.651206][T13184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.651219][T13184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.714023][T13184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.714124][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 380.714887][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.726098][T13184] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.726137][T13184] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.726166][T13184] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.726193][T13184] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.950941][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.950968][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.951285][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 381.072181][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.072206][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.075178][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 381.413221][T13577] loop6: detected capacity change from 0 to 164 [ 381.762840][T13587] netlink: 'syz.5.4085': attribute type 10 has an invalid length. [ 382.804041][T13616] loop5: detected capacity change from 0 to 8 [ 382.944407][T13616] SQUASHFS error: zlib decompression failed, data probably corrupt [ 382.981809][T13616] SQUASHFS error: Failed to read block 0x13e: -5 [ 383.004326][T13616] SQUASHFS error: Unable to read metadata cache entry [13c] [ 383.054615][T13616] SQUASHFS error: Unable to read directory block [13c:26] [ 384.080834][T13666] loop0: detected capacity change from 0 to 256 [ 384.159803][T13666] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 384.310280][T13673] loop3: detected capacity change from 0 to 256 [ 384.426775][T13673] FAT-fs (loop3): Directory bread(block 64) failed [ 384.437476][T13679] netlink: 'syz.6.4123': attribute type 12 has an invalid length. [ 384.471948][T13673] FAT-fs (loop3): Directory bread(block 65) failed [ 384.478632][T13673] FAT-fs (loop3): Directory bread(block 66) failed [ 384.509102][T13673] FAT-fs (loop3): Directory bread(block 67) failed [ 384.556765][T13673] FAT-fs (loop3): Directory bread(block 68) failed [ 384.571712][T13673] FAT-fs (loop3): Directory bread(block 69) failed [ 384.619684][T13673] FAT-fs (loop3): Directory bread(block 70) failed [ 384.681736][T13673] FAT-fs (loop3): Directory bread(block 71) failed [ 384.688672][T13673] FAT-fs (loop3): Directory bread(block 72) failed [ 384.731849][T13673] FAT-fs (loop3): Directory bread(block 73) failed [ 384.959820][T13694] netlink: 'syz.0.4129': attribute type 10 has an invalid length. [ 385.012232][T13694] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4129'. [ 385.658413][ T27] audit: type=1326 audit(1770767873.719:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.0.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 385.733222][ T27] audit: type=1326 audit(1770767873.759:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.0.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 385.910114][ T27] audit: type=1326 audit(1770767873.759:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.0.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 385.998843][ T27] audit: type=1326 audit(1770767873.759:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.0.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 386.159215][ T27] audit: type=1326 audit(1770767873.759:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13717 comm="syz.0.4139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 386.777604][T13757] netlink: 'syz.0.4155': attribute type 11 has an invalid length. [ 387.198159][T13775] netlink: 'syz.4.4163': attribute type 10 has an invalid length. [ 387.217912][T13775] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4163'. [ 388.001721][ T127] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 388.195796][ T127] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.229281][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.262817][ T127] usb 6-1: Product: syz [ 388.267144][ T127] usb 6-1: Manufacturer: syz [ 388.289676][ T127] usb 6-1: SerialNumber: syz [ 388.315878][ T127] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.411896][ T127] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 388.586918][T13825] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4183'. [ 388.689424][ C1] usb 6-1: ath9k_htc: invalid pkt_len (fd10) [ 388.782487][T13831] MPI: mpi too large (107144 bits) [ 388.914762][ T6250] usb 6-1: USB disconnect, device number 18 [ 388.931818][T13835] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4187'. [ 389.491971][ T127] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 389.499483][ T127] ath9k_htc: Failed to initialize the device [ 389.524301][ T6250] usb 6-1: ath9k_htc: USB layer deinitialized [ 389.561888][ T6570] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 389.623244][T13852] loop0: detected capacity change from 0 to 4096 [ 389.693086][T13852] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 389.712100][T13862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 389.762028][ T6570] usb 5-1: Using ep0 maxpacket: 32 [ 389.767567][T13852] NILFS (loop0): mounting fs with errors [ 389.769633][ T6570] usb 5-1: unable to get BOS descriptor or descriptor too short [ 389.806943][ T6570] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 389.836489][ T6570] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.872402][T13867] x_tables: duplicate underflow at hook 4 [ 389.878470][ T6570] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.888629][T13852] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 389.927365][ T6570] usb 5-1: string descriptor 0 read error: -22 [ 389.951960][ T6570] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.992099][ T6570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.028958][ T6570] usb 5-1: 0:2 : does not exist [ 390.329173][ T6574] usb 5-1: USB disconnect, device number 18 [ 391.019544][T13888] loop3: detected capacity change from 0 to 4096 [ 391.224169][ T27] audit: type=1326 audit(1770767879.289:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 391.312745][ T27] audit: type=1326 audit(1770767879.289:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 391.399611][ T27] audit: type=1326 audit(1770767879.289:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 391.510546][ T4268] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 391.537273][ T27] audit: type=1326 audit(1770767879.289:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.0.4214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 391.578205][ T4268] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 392.404754][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4231'. [ 392.475502][T13940] netlink: 'syz.3.4231': attribute type 3 has an invalid length. [ 392.523426][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4231'. [ 392.568121][T13940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4231'. [ 392.921928][T13963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 393.061921][ T6574] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 393.224406][T13975] 9pnet_fd: Insufficient options for proto=fd [ 393.258334][ T6574] usb 6-1: Using ep0 maxpacket: 32 [ 393.268617][ T6574] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.340301][ T6574] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 393.379527][ T6574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.422776][ T6574] usb 6-1: config 0 descriptor?? [ 393.440963][ T6574] usb 6-1: bad CDC descriptors [ 393.663018][ T6250] usb 6-1: USB disconnect, device number 19 [ 394.031159][T14003] tmpfs: Bad value for 'mpol' [ 394.463688][T14020] loop0: detected capacity change from 0 to 256 [ 394.532991][T14020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 394.847044][T14035] dlm: no local IP address has been set [ 394.885475][T14035] dlm: cannot start dlm midcomms -107 [ 395.037971][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4272'. [ 395.050906][T14039] netlink: 'syz.4.4272': attribute type 1 has an invalid length. [ 395.071910][ T4333] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 395.171314][T14043] x_tables: duplicate entry at hook 3 [ 395.264432][ T4333] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 395.283269][ T4333] usb 4-1: config 0 has no interface number 0 [ 395.289444][ T4333] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.331906][ T4333] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 395.362198][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.370586][ T4333] usb 4-1: Product: syz [ 395.392426][ T4333] usb 4-1: Manufacturer: syz [ 395.401777][ T4333] usb 4-1: SerialNumber: syz [ 395.420013][ T4333] usb 4-1: config 0 descriptor?? [ 395.445294][T14019] loop5: detected capacity change from 0 to 32768 [ 395.454184][ T4333] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 395.488722][T14019] (syz.5.4264,14019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 395.530279][T14019] (syz.5.4264,14019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 395.613134][T14019] JBD2: Ignoring recovery information on journal [ 395.705973][ C0] yurex 4-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 395.848843][T14019] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 395.912323][ T127] usb 4-1: USB disconnect, device number 22 [ 395.930744][ T127] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 396.090048][ T5797] ocfs2: Unmounting device (7,5) on (node local) [ 397.050485][T14095] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 397.077980][T14095] Error parsing options; rc = [-22] [ 397.105996][T14100] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4301'. [ 397.161973][ T6570] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 397.351870][ T6570] usb 4-1: Using ep0 maxpacket: 32 [ 397.359289][ T6570] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 397.384546][ T6570] usb 4-1: config 0 has no interface number 0 [ 397.439357][ T6570] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 397.491091][ T6570] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 397.547745][ T6570] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 397.609178][ T6570] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 397.629062][ T6570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.667288][ T6570] usb 4-1: Product: syz [ 397.696269][ T6570] usb 4-1: Manufacturer: syz [ 397.730973][ T6570] usb 4-1: SerialNumber: syz [ 397.753679][ T6570] usb 4-1: config 0 descriptor?? [ 397.759474][T14092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.774904][T14092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.070627][ T4333] usb 4-1: USB disconnect, device number 23 [ 398.203293][T14134] loop5: detected capacity change from 0 to 2048 [ 398.310269][T14134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.510017][T14141] loop0: detected capacity change from 0 to 32768 [ 399.595677][T14141] XFS (loop0): Mounting V5 Filesystem [ 399.773276][T14141] XFS (loop0): Ending clean mount [ 399.984257][ T4282] XFS (loop0): Unmounting Filesystem [ 400.430144][T14214] loop3: detected capacity change from 0 to 128 [ 401.064186][T14226] loop0: detected capacity change from 0 to 4096 [ 401.079579][T14232] netlink: 'syz.5.4354': attribute type 6 has an invalid length. [ 401.151592][T14226] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 401.173166][T14232] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.4354'. [ 401.200623][T14226] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 401.258869][T14238] overlayfs: missing 'workdir' [ 401.275012][T14236] loop4: detected capacity change from 0 to 512 [ 401.305933][T14239] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.381964][T14236] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 401.393534][T14243] overlayfs: failed to resolve './file0': -2 [ 401.411801][T14236] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 401.494215][T14236] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 401.533387][T14236] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 401.552027][T14236] System zones: 0-2, 18-18, 34-35 [ 401.613346][T14236] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 401.698514][T14246] loop6: detected capacity change from 0 to 2048 [ 401.728595][T14253] netlink: 'syz.3.4363': attribute type 5 has an invalid length. [ 401.772972][T14246] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 401.781870][T14253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 401.832748][T14246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.892047][ T6250] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 401.963202][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 402.113750][ T6250] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 402.143105][ T6250] usb 6-1: config 8 has no interface number 0 [ 402.149286][ T6250] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 402.186487][ T6250] usb 6-1: config 8 interface 177 has no altsetting 0 [ 402.205359][ T6250] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 402.257154][ T6250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.298193][T14249] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 402.525887][T14269] loop4: detected capacity change from 0 to 1764 [ 402.539511][ T6250] usb 6-1: string descriptor 0 read error: -71 [ 402.555285][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 402.639486][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 402.680288][T14275] infiniband syz0: set active [ 402.718008][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.764605][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 402.794833][T14275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 402.897756][ T6570] lo speed is unknown, defaulting to 1000 [ 403.061739][ T6250] ir_toy 6-1:8.177: could not write reset command: -110 [ 403.068951][ T6250] ir_toy: probe of 6-1:8.177 failed with error -110 [ 403.089521][T14287] delete_channel: no stack [ 403.120133][ T6250] usb 6-1: USB disconnect, device number 20 [ 403.759373][T14309] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4389'. [ 403.784981][T14313] netlink: 'syz.5.4388': attribute type 10 has an invalid length. [ 404.161766][ T127] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 404.228062][T14326] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.361986][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 404.369398][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.413311][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 404.477616][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 404.512375][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 404.562119][ T127] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 404.589609][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 404.654206][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 404.684791][ T127] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 404.718308][ T127] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 404.791780][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.820255][ T127] usb 5-1: Product: syz [ 404.830377][ T127] usb 5-1: Manufacturer: syz [ 404.847882][ T127] usb 5-1: SerialNumber: syz [ 404.864680][T14349] loop5: detected capacity change from 0 to 8 [ 404.902987][ T127] usb 5-1: config 0 descriptor?? [ 404.908973][T14318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 405.006225][T14349] SQUASHFS error: Unable to read directory block [1d0:0] [ 405.072693][T14353] device sit0 entered promiscuous mode [ 405.114463][ T8245] udevd[8245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.136970][T14353] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4405'. [ 405.216653][T14355] netlink: 'syz.0.4406': attribute type 21 has an invalid length. [ 405.247250][T14355] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4406'. [ 405.289070][ T127] usb 5-1: USB disconnect, device number 19 [ 405.293905][T14355] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 405.688887][T14372] device vlan0 entered promiscuous mode [ 407.272699][T14430] 9p: Unknown access argument z: -22 [ 408.118422][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4449'. [ 408.689401][T14487] netlink: 'syz.4.4459': attribute type 1 has an invalid length. [ 408.721197][T14487] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4459'. [ 408.852100][T14495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4463'. [ 409.014901][T14501] misc userio: No port type given on /dev/userio [ 409.061806][ T6570] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 409.254023][ T6570] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 409.272464][ T6570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.299634][ T6570] usb 1-1: config 0 descriptor?? [ 409.460556][T14514] loop4: detected capacity change from 0 to 4096 [ 409.471938][ T6252] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 409.529889][T14518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 409.615466][T14514] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 409.694107][ T6252] usb 4-1: not running at top speed; connect to a high speed hub [ 409.719434][T14514] Remounting filesystem read-only [ 409.721088][ T6252] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 409.727840][ T6570] ath6kl: Failed to submit usb control message: -71 [ 409.750774][ T6570] ath6kl: unable to send the bmi data to the device: -71 [ 409.768409][ T6570] ath6kl: Unable to send get target info: -71 [ 409.791749][ T6252] usb 4-1: config 95 has no interface number 0 [ 409.792409][ T6570] ath6kl: Failed to init ath6kl core: -71 [ 409.831847][ T6252] usb 4-1: config 95 interface 1 has no altsetting 0 [ 409.861437][ T6252] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 409.901692][ T6252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.909772][ T6252] usb 4-1: Product: syz [ 409.928499][ T6570] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 409.972166][ T6252] usb 4-1: Manufacturer: syz [ 409.976846][ T6252] usb 4-1: SerialNumber: syz [ 410.002142][ T6570] usb 1-1: USB disconnect, device number 23 [ 410.311920][ T27] audit: type=1326 audit(1770767898.379:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14535 comm="syz.5.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 410.391852][ T27] audit: type=1326 audit(1770767898.409:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14535 comm="syz.5.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 410.404321][ T6252] usb 4-1: USB disconnect, device number 24 [ 410.521722][ T27] audit: type=1326 audit(1770767898.409:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14535 comm="syz.5.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 410.615328][ T27] audit: type=1326 audit(1770767898.409:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14535 comm="syz.5.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 410.824408][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.288326][T14562] loop6: detected capacity change from 0 to 4096 [ 411.371922][T14571] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.400123][T14562] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 411.454293][T14562] Remounting filesystem read-only [ 412.030016][T14589] loop6: detected capacity change from 0 to 736 [ 412.811756][T14619] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.292068][T14628] loop6: detected capacity change from 0 to 4096 [ 413.317853][T14628] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 413.517206][T14628] ntfs3: loop6: ino=0, attr_set_size [ 413.539927][T14634] loop5: detected capacity change from 0 to 4096 [ 413.574319][T14634] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 413.620512][T14636] loop3: detected capacity change from 0 to 8192 [ 413.682368][T14636] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 413.732704][T14636] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 413.746405][T14636] REISERFS (device loop3): using ordered data mode [ 413.758239][T14636] reiserfs: using flush barriers [ 413.807129][T14636] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 413.832099][T14634] ntfs3: loop5: failed to convert "c46c" to euc-jp [ 413.894502][T14636] REISERFS (device loop3): checking transaction log (loop3) [ 413.944176][T14636] REISERFS (device loop3): Using r5 hash to sort names [ 414.002310][T14636] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 414.071834][T14636] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 414.123563][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 414.135396][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 414.197074][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 414.235197][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 414.352786][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.365483][T14652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 414.436195][T14652] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.507262][T14652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.525457][T14655] loop5: detected capacity change from 0 to 4096 [ 414.559750][T14655] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 415.130826][T14674] loop4: detected capacity change from 0 to 1024 [ 415.193664][T14674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.200434][T14674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.204309][ T27] audit: type=1326 audit(1770767903.259:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 415.277835][T14674] EXT4-fs: Ignoring removed i_version option [ 415.304641][T14674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 415.333653][T14683] loop5: detected capacity change from 0 to 1024 [ 415.353600][ T27] audit: type=1326 audit(1770767903.329:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 415.449950][ T27] audit: type=1326 audit(1770767903.329:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 415.517943][T14674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 415.609079][ T27] audit: type=1326 audit(1770767903.329:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 415.716535][ T4348] hfsplus: b-tree write err: -5, ino 4 [ 415.728644][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 415.957710][T14706] loop3: detected capacity change from 0 to 128 [ 416.036139][T14706] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 416.192220][T14710] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4545'. [ 416.212045][T14710] 0X: renamed from caif0 [ 416.244055][T14710] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 416.632000][ T4333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 416.795047][T14732] netlink: 720 bytes leftover after parsing attributes in process `syz.5.4553'. [ 416.831849][ T4333] usb 7-1: Using ep0 maxpacket: 16 [ 416.843782][ T4333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.861881][ T4333] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 416.883831][ T4333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.918254][ T4333] usb 7-1: config 0 descriptor?? [ 416.969886][ T4333] xbox_remote_probe: Unexpected endpoint_in [ 417.009235][ T4333] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 417.262545][ T6570] usb 7-1: USB disconnect, device number 2 [ 417.933874][T14768] loop0: detected capacity change from 0 to 1024 [ 417.941594][T14768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.041072][T14768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.076180][T14768] EXT4-fs: Ignoring removed i_version option [ 418.128649][T14768] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 418.185747][T14768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 418.519477][T14796] SET target dimension over the limit! [ 418.526971][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 418.651780][ T6252] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 418.813234][T14806] ubi30: attaching mtd0 [ 418.817954][T14806] ubi30 error: ubi_attach_mtd_dev: bad VID header (10535) or data offsets (10599) [ 418.846673][ T6252] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 418.874427][ T6252] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 418.931989][ T6252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.960470][ T6252] usb 7-1: Product: syz [ 418.976657][ T6252] usb 7-1: Manufacturer: syz [ 418.990460][ T6252] usb 7-1: SerialNumber: syz [ 419.009929][T14810] netlink: 'syz.5.4586': attribute type 6 has an invalid length. [ 419.042265][ T6252] usb 7-1: config 0 descriptor?? [ 419.059304][ T6252] hub 7-1:0.0: bad descriptor, ignoring hub [ 419.082545][ T6252] hub: probe of 7-1:0.0 failed with error -5 [ 419.104550][ T6252] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 419.699980][T14834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 419.753871][T14834] infiniband syz0: set active [ 419.758760][T14834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.891287][ T127] lo speed is unknown, defaulting to 1000 [ 420.152454][T14851] loop5: detected capacity change from 0 to 256 [ 420.159318][T14853] loop0: detected capacity change from 0 to 764 [ 420.659261][T14866] devpts: called with bogus options [ 421.238275][ T6252] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 421.319981][T14891] netlink: 'syz.3.4619': attribute type 27 has an invalid length. [ 421.342118][T14891] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4619'. [ 421.451038][ T6252] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 421.481449][ T6252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.523170][ T6252] usb 5-1: config 0 descriptor?? [ 421.564175][ T6252] cp210x 5-1:0.0: cp210x converter detected [ 421.739208][ T6252] usb 5-1: cp210x converter now attached to ttyUSB0 [ 421.954839][ T6252] usb 5-1: USB disconnect, device number 20 [ 421.987562][ T6252] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.990470][T14919] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 422.029921][ T6252] cp210x 5-1:0.0: device disconnected [ 422.261291][T14927] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4632'. [ 422.673440][T14940] x_tables: duplicate entry at hook 2 [ 422.949363][T14951] netlink: 'syz.4.4643': attribute type 21 has an invalid length. [ 423.211890][ T6252] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 423.273671][T14964] netlink: 'syz.3.4650': attribute type 4 has an invalid length. [ 423.416859][ T6252] usb 6-1: Using ep0 maxpacket: 32 [ 423.428206][ T6252] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 423.450625][ T6252] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 423.469774][ T6252] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.511703][ T6252] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 423.531125][ T6252] usb 6-1: config 1 has no interface number 0 [ 423.537978][ T6252] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 423.580091][ T6252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.591758][ T6574] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 423.636054][ T6252] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 423.794069][ T6574] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.813710][ T6574] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 423.827737][T14963] loop0: detected capacity change from 0 to 32768 [ 423.836455][ T6252] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 423.851972][ T6574] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 423.856408][ T6252] snd_usb_pod 6-1:1.1: invalid control EP [ 423.894741][ T6574] usb 5-1: config 1 interface 0 has no altsetting 1 [ 423.904438][ T6252] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 423.907295][ T6570] usb 7-1: USB disconnect, device number 3 [ 423.913399][ T6252] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 423.918958][ T6574] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 423.940571][ T6574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.950139][ T6574] usb 5-1: Product: syz [ 423.954817][ T6574] usb 5-1: Manufacturer: syz [ 423.959458][ T6574] usb 5-1: SerialNumber: syz [ 423.960869][ T6252] snd_usb_pod: probe of 6-1:1.1 failed with error -22 [ 424.012685][T14963] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.026220][ T6574] smsusb:smsusb_probe: board id=8, interface number 0 [ 424.042218][T14963] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 424.051218][T14963] BTRFS info (device loop0): using free space tree [ 424.051942][ T4333] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 424.115879][T14959] loop6: detected capacity change from 0 to 40427 [ 424.136460][T14959] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 424.151282][ T22] usb 6-1: USB disconnect, device number 21 [ 424.188201][T14959] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 424.196886][ T6574] smsusb:smsusb_probe: Device initialized with return code -19 [ 424.248525][T14959] F2FS-fs (loop6): Found nat_bits in checkpoint [ 424.268474][ T4333] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 424.288310][ T4333] usb 4-1: config 0 has no interface number 0 [ 424.301016][ T4333] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 424.321437][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.333713][ T4333] usb 4-1: Product: syz [ 424.353116][ T4333] usb 4-1: Manufacturer: syz [ 424.362607][T14963] BTRFS info (device loop0): enabling ssd optimizations [ 424.378519][ T4333] usb 4-1: SerialNumber: syz [ 424.383409][T14959] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 424.404328][T14959] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 424.444698][ T4333] usb 4-1: config 0 descriptor?? [ 424.481908][ T4333] hub 4-1:0.132: bad descriptor, ignoring hub [ 424.488279][ T4333] hub: probe of 4-1:0.132 failed with error -5 [ 424.514717][ T6574] usb 5-1: USB disconnect, device number 21 [ 424.544313][ T4333] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input28 [ 424.584448][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.969801][ T5069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5069) [ 425.152270][ T6570] usb 4-1: USB disconnect, device number 25 [ 425.232012][ T6574] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 425.379510][T15008] binder: 15007:15008 ioctl 40046210 0 returned -14 [ 425.422305][ T6574] usb 6-1: Using ep0 maxpacket: 8 [ 425.429268][ T6574] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 425.457318][ T6574] usb 6-1: config 6 has no interface number 0 [ 425.481969][ T6574] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 425.511991][ T6574] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.558432][ T6574] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 425.591958][ T6574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.600037][ T6574] usb 6-1: Product: syz [ 425.627806][ T6574] usb 6-1: Manufacturer: syz [ 425.671943][ T6574] usb 6-1: SerialNumber: syz [ 425.677497][ T27] audit: type=1326 audit(1770767913.739:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 425.684721][ T6574] hso 6-1:6.2: Failed to find INT IN ep [ 425.760053][ T27] audit: type=1326 audit(1770767913.739:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 425.915905][ T27] audit: type=1326 audit(1770767913.769:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 425.984499][T15021] overlayfs: conflicting options: userxattr,redirect_dir=on [ 425.992143][ T27] audit: type=1326 audit(1770767913.769:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 425.998649][ T6574] usb 6-1: USB disconnect, device number 22 [ 426.047686][ T27] audit: type=1326 audit(1770767913.769:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 426.114709][ T27] audit: type=1326 audit(1770767913.809:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15011 comm="syz.4.4663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5a8ff9bf79 code=0x7ffc0000 [ 426.234434][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4670'. [ 426.246728][T15030] loop0: detected capacity change from 0 to 128 [ 426.283593][T15029] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 426.342187][T15029] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 426.376167][T15029] device bridge6 entered promiscuous mode [ 426.394881][T15034] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4672'. [ 427.254639][T15065] loop4: detected capacity change from 0 to 128 [ 427.352258][T15065] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 427.391823][T15065] FAT-fs (loop4): Filesystem has been set read-only [ 427.522106][T15074] netlink: 'syz.6.4692': attribute type 21 has an invalid length. [ 427.546691][T15074] netlink: 'syz.6.4692': attribute type 1 has an invalid length. [ 428.031815][T15094] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4701'. [ 428.131305][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4704'. [ 428.136285][T15098] netlink: 'syz.0.4703': attribute type 2 has an invalid length. [ 428.231920][T15098] device .*! entered promiscuous mode [ 428.395294][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4707'. [ 428.441996][T15106] openvswitch: netlink: Flow key attr not present in new flow. [ 428.710495][T15120] sctp: [Deprecated]: syz.6.4713 (pid 15120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.710495][T15120] Use struct sctp_sack_info instead [ 429.138013][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4720'. [ 429.187336][T15134] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4720'. [ 429.212248][T15134] netlink: 'syz.5.4720': attribute type 3 has an invalid length. [ 429.231799][T15134] netlink: 'syz.5.4720': attribute type 2 has an invalid length. [ 429.258118][T15134] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4720'. [ 429.266859][T15140] loop3: detected capacity change from 0 to 1024 [ 429.373333][ T127] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 429.594767][ T127] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 429.616427][ T127] usb 7-1: config 0 has no interface number 0 [ 429.663503][ T127] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 429.693186][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.708463][ T27] audit: type=1326 audit(1770767917.769:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.5.4730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 429.737614][ T127] usb 7-1: Product: syz [ 429.751863][ T127] usb 7-1: Manufacturer: syz [ 429.771832][ T127] usb 7-1: SerialNumber: syz [ 429.827955][ T27] audit: type=1326 audit(1770767917.829:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.5.4730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 429.851048][ T127] usb 7-1: config 0 descriptor?? [ 429.858198][ T127] hub 7-1:0.132: bad descriptor, ignoring hub [ 429.881794][ T127] hub: probe of 7-1:0.132 failed with error -5 [ 429.915809][ T127] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input29 [ 429.933459][ T27] audit: type=1326 audit(1770767917.829:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.5.4730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 430.027376][ T27] audit: type=1326 audit(1770767917.829:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.5.4730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 430.242335][ T6574] usb 7-1: USB disconnect, device number 4 [ 430.349922][ T6570] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 430.450629][T15173] delete_channel: no stack [ 430.561722][ T6570] usb 1-1: Using ep0 maxpacket: 32 [ 430.569276][ T6570] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 430.598171][ T6570] usb 1-1: config 0 has no interface number 0 [ 430.617368][ T6570] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 430.649312][ T6570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.675977][ T6570] usb 1-1: Product: syz [ 430.691908][ T6570] usb 1-1: Manufacturer: syz [ 430.696572][ T6570] usb 1-1: SerialNumber: syz [ 430.723057][ T6570] usb 1-1: config 0 descriptor?? [ 430.908390][ T27] audit: type=1326 audit(1770767918.969:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.3.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 430.937757][ T6570] mos7840 1-1:0.225: required endpoints missing [ 430.983862][ T27] audit: type=1326 audit(1770767918.969:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.3.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 431.007785][T15189] xt_NFQUEUE: number of total queues is 0 [ 431.037508][ T27] audit: type=1326 audit(1770767918.969:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.3.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 431.132586][ T27] audit: type=1326 audit(1770767918.969:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15184 comm="syz.3.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 431.155403][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.182035][ T6570] usb 1-1: USB disconnect, device number 24 [ 431.292564][T15195] netlink: 'syz.4.4750': attribute type 2 has an invalid length. [ 431.300400][T15195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4750'. [ 431.537960][T15206] netlink: 744 bytes leftover after parsing attributes in process `syz.5.4754'. [ 431.568473][T15207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4756'. [ 432.209925][T15231] netlink: 'syz.6.4766': attribute type 10 has an invalid length. [ 432.280884][T15231] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4766'. [ 432.298444][T15231] device dummy0 entered promiscuous mode [ 432.319562][T15231] bridge0: port 3(dummy0) entered blocking state [ 432.360794][T15231] bridge0: port 3(dummy0) entered disabled state [ 432.408562][T15231] bridge0: port 3(dummy0) entered blocking state [ 432.417311][T15231] bridge0: port 3(dummy0) entered forwarding state [ 433.141365][T15266] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4784'. [ 433.171566][T15268] loop4: detected capacity change from 0 to 512 [ 433.275093][T15272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4787'. [ 433.327564][T15268] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 433.433735][T15268] EXT4-fs (loop4): 1 truncate cleaned up [ 433.439471][T15268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 433.542453][T15268] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.4785: Logical block already allocated [ 433.554719][T15283] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 433.759546][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 434.104400][T15001] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 434.294522][T15001] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 434.306544][T15313] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4803'. [ 434.320222][T15001] usb 4-1: config 0 has no interface number 0 [ 434.338088][T15001] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 434.363734][T15001] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.443444][T15001] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 434.461559][T15001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.465993][T15318] ipt_CLUSTERIP: Please specify destination IP [ 434.483542][T15001] usb 4-1: Product: syz [ 434.491974][T15001] usb 4-1: Manufacturer: syz [ 434.502742][T15001] usb 4-1: SerialNumber: syz [ 434.532693][T15001] usb 4-1: config 0 descriptor?? [ 434.538467][T15292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.555182][T15001] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 434.571529][T15316] loop4: detected capacity change from 0 to 4096 [ 434.592435][T15001] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 434.592988][T15316] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 435.018914][ T22] usb 4-1: USB disconnect, device number 26 [ 435.042835][ T22] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 435.104246][ T22] cyberjack 4-1:0.69: device disconnected [ 435.349707][T15336] CIFS: VFS: Malformed UNC in devname [ 435.678550][T15324] loop6: detected capacity change from 0 to 32768 [ 435.740460][T15324] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 435.824286][T15324] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 435.971971][T15324] (syz.6.4810,15324,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 436.007651][T15324] (syz.6.4810,15324,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 436.051921][T15324] (syz.6.4810,15324,1):ocfs2_mknod:298 ERROR: status = -2 [ 436.072602][T15324] (syz.6.4810,15324,1):ocfs2_mknod:502 ERROR: status = -2 [ 436.100241][T15324] (syz.6.4810,15324,1):ocfs2_create:676 ERROR: status = -2 [ 436.673897][T13184] ocfs2: Unmounting device (7,6) on (node local) [ 436.932395][ T6574] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 437.121752][ T6574] usb 4-1: Using ep0 maxpacket: 16 [ 437.129015][ T6574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.175625][ T6574] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 437.211719][ T6574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.240677][ T6574] usb 4-1: Product: syz [ 437.262131][ T6574] usb 4-1: Manufacturer: syz [ 437.266845][ T6574] usb 4-1: SerialNumber: syz [ 437.314491][ T6574] usb 4-1: config 0 descriptor?? [ 437.350189][ T6574] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 437.371831][ T6574] gspca_stv06xx: st6422 sensor detected [ 437.535708][T15001] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 437.728913][T15392] loop4: detected capacity change from 0 to 64 [ 437.729684][T15001] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.777672][T15001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.830915][T15001] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 437.843845][ T6574] STV06xx: probe of 4-1:0.0 failed with error -71 [ 437.872004][T15001] usb 1-1: config 1 interface 0 has no altsetting 1 [ 437.881003][ T6574] usb 4-1: USB disconnect, device number 27 [ 437.905966][T15001] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 437.946617][T15001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.955608][T15001] usb 1-1: Product: syz [ 437.959912][T15001] usb 1-1: Manufacturer: syz [ 437.976349][T15001] usb 1-1: SerialNumber: syz [ 438.018625][T15001] smsusb:smsusb_probe: board id=8, interface number 0 [ 438.116586][T15395] loop5: detected capacity change from 0 to 4096 [ 438.128967][T15395] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 438.170747][T15395] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 438.194198][T15395] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 438.211096][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4846'. [ 438.225166][T15395] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 438.251871][T15001] smsusb:smsusb_probe: Device initialized with return code -19 [ 438.314630][T15395] ntfs: volume version 3.1. [ 438.332246][T15395] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 438.358255][T15395] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 438.384519][T15395] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 438.511596][T15395] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 438.533641][T15001] usb 1-1: USB disconnect, device number 25 [ 438.561936][T15395] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 438.598575][T15411] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 15411 comm: syz.3.4850) [ 438.807943][T15416] netlink: 'syz.3.4852': attribute type 11 has an invalid length. [ 438.892334][T15416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4852'. [ 438.951020][T15420] binfmt_misc: register: failed to install interpreter file ./file0 [ 439.230732][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4861'. [ 439.265783][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4861'. [ 440.057862][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.064306][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.231897][ T6574] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.240811][T15469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4879'. [ 440.275093][T15471] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4878'. [ 440.278420][T15469] netlink: 'syz.3.4879': attribute type 1 has an invalid length. [ 440.413704][ T6574] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 440.433127][ T6574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.465274][ T6574] usb 7-1: config 0 descriptor?? [ 440.894977][ T6574] ath6kl: Failed to submit usb control message: -71 [ 440.903038][ T6574] ath6kl: unable to send the bmi data to the device: -71 [ 440.931961][ T6574] ath6kl: Unable to send get target info: -71 [ 440.939061][ T6574] ath6kl: Failed to init ath6kl core: -71 [ 441.057450][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4892'. [ 441.066638][ T6574] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 441.087640][ T6574] usb 7-1: USB disconnect, device number 5 [ 441.122202][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4892'. [ 441.555835][T15513] loop5: detected capacity change from 0 to 1024 [ 441.590341][T15513] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 441.821909][ T6570] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 442.021800][ T6570] usb 5-1: Using ep0 maxpacket: 16 [ 442.043727][ T6570] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 442.101692][ T6570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.109769][ T6570] usb 5-1: Product: syz [ 442.148154][ T6570] usb 5-1: Manufacturer: syz [ 442.153232][ T6570] usb 5-1: SerialNumber: syz [ 442.170034][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4911'. [ 442.174940][ T6570] r8152-cfgselector 5-1: config 0 descriptor?? [ 442.371325][T15544] netlink: 'syz.3.4916': attribute type 1 has an invalid length. [ 442.541855][ T127] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 442.623453][ T6570] r8152-cfgselector 5-1: Unknown version 0x0000 [ 442.629878][ T6570] r8152-cfgselector 5-1: bad CDC descriptors [ 442.652669][ T6570] r8152-cfgselector 5-1: Unknown version 0x0000 [ 442.683696][ T6570] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 442.754565][ T127] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 442.774028][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.815160][ T127] usb 1-1: config 0 descriptor?? [ 442.854599][T15559] VFS: could not find a valid V7 on nullb0. [ 443.234227][ T127] ath6kl: Failed to submit usb control message: -71 [ 443.241066][ T127] ath6kl: unable to send the bmi data to the device: -71 [ 443.282091][ T127] ath6kl: Unable to send get target info: -71 [ 443.322033][ T127] ath6kl: Failed to init ath6kl core: -71 [ 443.402126][ T127] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 443.420924][ T127] usb 1-1: USB disconnect, device number 26 [ 443.522904][T15576] loop4: detected capacity change from 0 to 4096 [ 443.572027][T15576] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 443.629131][T15576] ntfs3: loop4: Failed to load $Extend. [ 443.836603][T15590] loop3: detected capacity change from 0 to 512 [ 443.871832][ T7] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 443.939234][T15590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 444.011823][T15590] ext4 filesystem being mounted at /956/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.072013][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 444.082866][ T7] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 444.151249][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.178698][ T7] usb 6-1: Product: syz [ 444.199695][ T7] usb 6-1: Manufacturer: syz [ 444.232407][ T7] usb 6-1: SerialNumber: syz [ 444.264927][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 444.272038][ T7] usb 6-1: config 0 descriptor?? [ 444.300710][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 444.491868][ T7] gspca_ov534_9: reg_w failed -71 [ 444.841390][T15620] netlink: 'syz.4.4951': attribute type 21 has an invalid length. [ 445.011901][ T7] gspca_ov534_9: Unknown sensor 0000 [ 445.011970][ T7] ov534_9: probe of 6-1:0.0 failed with error -22 [ 445.053623][ T7] usb 6-1: USB disconnect, device number 23 [ 445.708784][T15649] Error parsing options; rc = [-22] [ 445.769406][ T27] audit: type=1326 audit(1770767933.829:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 445.892225][ T27] audit: type=1326 audit(1770767933.839:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 445.960670][ T27] audit: type=1326 audit(1770767933.839:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 446.034014][ T27] audit: type=1326 audit(1770767933.839:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15651 comm="syz.0.4964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 446.226034][T15664] loop5: detected capacity change from 0 to 256 [ 446.235736][T15628] loop4: detected capacity change from 0 to 32768 [ 446.250988][T15660] loop0: detected capacity change from 0 to 4096 [ 446.391919][T15660] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 446.437433][T15664] FAT-fs (loop5): Directory bread(block 64) failed [ 446.470293][T15664] FAT-fs (loop5): Directory bread(block 65) failed [ 446.515367][T15664] FAT-fs (loop5): Directory bread(block 66) failed [ 446.554788][T15664] FAT-fs (loop5): Directory bread(block 67) failed [ 446.570298][T15660] ntfs3: loop0: failed to convert "c46c" to macroman [ 446.592121][T15664] FAT-fs (loop5): Directory bread(block 68) failed [ 446.616473][T15664] FAT-fs (loop5): Directory bread(block 69) failed [ 446.714362][T15664] FAT-fs (loop5): Directory bread(block 70) failed [ 446.720967][T15664] FAT-fs (loop5): Directory bread(block 71) failed [ 446.791837][T15664] FAT-fs (loop5): Directory bread(block 72) failed [ 446.822216][T15664] FAT-fs (loop5): Directory bread(block 73) failed [ 447.117412][T15680] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 447.131420][T15681] loop6: detected capacity change from 0 to 1024 [ 447.138605][T15680] netlink: 'syz.3.4980': attribute type 12 has an invalid length. [ 447.150641][T15679] device veth3 entered promiscuous mode [ 447.157514][T15681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.164396][T15680] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4980'. [ 447.178641][T15681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.219518][T15681] EXT4-fs: Ignoring removed i_version option [ 447.252236][T15681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 447.275345][T15683] rdma_rxe: rxe creation allowed on top of a real device only [ 447.326089][T15681] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 447.448510][T15686] loop4: detected capacity change from 0 to 512 [ 447.500576][T15686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 447.523073][T13184] EXT4-fs (loop6): unmounting filesystem. [ 447.541329][T15686] ext4 filesystem being mounted at /1068/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.808383][T15699] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.899348][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 448.008881][ T127] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 448.203906][ T127] usb 7-1: config 2 interface 0 has no altsetting 0 [ 448.220398][ T127] usb 7-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 448.270539][ T127] usb 7-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 448.290869][ T127] usb 7-1: Product: syz [ 448.306890][ T127] usb 7-1: Manufacturer: syz [ 448.321275][ T127] usb 7-1: SerialNumber: syz [ 448.364919][ T127] usb 7-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 448.416909][ T127] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.453021][ T127] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 448.470980][ T127] usb 7-1: media controller created [ 448.533699][ T127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.570885][T15725] netlink: 'syz.4.5000': attribute type 21 has an invalid length. [ 448.604547][ T127] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 448.631831][ T127] error writing reg: 0xff, val: 0x00 [ 448.713158][ T127] dvb_usb_mxl111sf: probe of 7-1:2.0 failed with error -22 [ 448.846038][T15732] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5002'. [ 448.913271][ T127] usb 7-1: USB disconnect, device number 6 [ 449.036695][T15740] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5005'. [ 449.143657][T15744] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5008'. [ 449.439149][T15751] loop5: detected capacity change from 0 to 1024 [ 449.568183][T15751] hfsplus: extend alloc file! (8192,512,17039360) [ 450.153229][T15772] vivid-006: disconnect [ 450.171362][T15771] vivid-006: reconnect [ 450.752957][T15796] loop6: detected capacity change from 0 to 1024 [ 450.810653][T15796] hfsplus: invalid length 256 has been corrected to 255 [ 450.869351][T15796] hfsplus: invalid length 256 has been corrected to 255 [ 451.037671][ T46] hfsplus: b-tree write err: -5, ino 4 [ 451.069179][ T46] hfsplus: invalid length 256 has been corrected to 255 [ 451.331061][ T27] audit: type=1326 audit(1770767939.389:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 451.357748][T15812] syz.3.5041 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 451.411773][ T27] audit: type=1326 audit(1770767939.429:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 451.525382][ T27] audit: type=1326 audit(1770767939.509:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 451.590929][T15814] loop4: detected capacity change from 0 to 4096 [ 451.655559][ T27] audit: type=1326 audit(1770767939.509:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15811 comm="syz.3.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19e99bf79 code=0x7ffc0000 [ 451.711887][T15814] ntfs: volume version 3.1. [ 452.081759][T15001] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 452.273630][T15001] usb 6-1: config 1 has an invalid interface number: 253 but max is 1 [ 452.313576][T15001] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.351744][T15001] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 452.381351][T15001] usb 6-1: config 1 has no interface number 2 [ 452.409938][T15001] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.491736][T15001] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.539051][T15001] usb 6-1: config 1 interface 1 has no altsetting 0 [ 452.563113][T15001] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.589064][T15001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.629529][T15001] usb 6-1: Product: syz [ 452.660601][T15001] usb 6-1: Manufacturer: syz [ 452.669735][T15001] usb 6-1: SerialNumber: syz [ 452.726103][T15001] cdc_ncm 6-1:1.253: CDC Union missing and no IAD found [ 452.741909][T15001] cdc_ncm 6-1:1.253: bind() failure [ 453.222622][ T6570] usb 6-1: USB disconnect, device number 24 [ 453.347316][T15871] comedi comedi3: comedi_config --init_data is deprecated [ 453.572009][T15852] loop0: detected capacity change from 0 to 32768 [ 453.618756][T15852] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.649454][T15852] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 453.696707][T15852] BTRFS info (device loop0): using free space tree [ 454.101510][T15852] BTRFS info (device loop0): enabling ssd optimizations [ 454.337803][T15914] overlayfs: unrecognized mount option "smackfstransmute=l-\]\" or missing value [ 454.442171][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 455.155918][T15937] netlink: 'syz.0.5085': attribute type 9 has an invalid length. [ 455.275252][T15939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5093'. [ 455.287997][T15941] No such timeout policy "syz1" [ 455.297138][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 455.351785][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 455.534337][T15947] netlink: 'syz.5.5097': attribute type 2 has an invalid length. [ 455.662350][T15948] ALSA: mixer_oss: invalid OSS volume '' [ 455.686107][T15918] loop3: detected capacity change from 0 to 32768 [ 455.752631][T15918] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 455.800083][T15918] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 456.106754][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 456.134245][T15967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5106'. [ 456.281306][T15974] loop5: detected capacity change from 0 to 256 [ 456.288616][T15973] QAT: failed to copy from user. [ 456.302083][T15975] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 456.362547][T15974] FAT-fs (loop5): Directory bread(block 64) failed [ 456.369190][T15974] FAT-fs (loop5): Directory bread(block 65) failed [ 456.432670][T15974] FAT-fs (loop5): Directory bread(block 66) failed [ 456.443273][T15974] FAT-fs (loop5): Directory bread(block 67) failed [ 456.449946][T15974] FAT-fs (loop5): Directory bread(block 68) failed [ 456.519372][T15974] FAT-fs (loop5): Directory bread(block 69) failed [ 456.542965][T15974] FAT-fs (loop5): Directory bread(block 70) failed [ 456.549561][T15974] FAT-fs (loop5): Directory bread(block 71) failed [ 456.583790][T15983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.602243][T15974] FAT-fs (loop5): Directory bread(block 72) failed [ 456.623861][T15974] FAT-fs (loop5): Directory bread(block 73) failed [ 457.310642][T16005] loop0: detected capacity change from 0 to 256 [ 457.396650][T16005] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 457.530260][T16005] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 457.598667][T16005] exFAT-fs (loop0): Filesystem has been set read-only [ 457.974878][T16028] loop5: detected capacity change from 0 to 128 [ 458.157718][T16024] lo speed is unknown, defaulting to 1000 [ 458.452039][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 458.643676][ T7] usb 5-1: config 2 interface 0 has no altsetting 0 [ 458.655829][ T7] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 458.684845][ T7] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 458.731513][ T7] usb 5-1: Product: syz [ 458.742204][ T7] usb 5-1: Manufacturer: syz [ 458.757193][ T7] usb 5-1: SerialNumber: syz [ 458.783947][ T7] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 458.852753][ T7] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.884697][ T7] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 458.913895][ T7] usb 5-1: media controller created [ 458.974866][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.072574][ T7] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 459.099378][ T7] error writing reg: 0xff, val: 0x00 [ 459.169952][ T7] dvb_usb_mxl111sf: probe of 5-1:2.0 failed with error -22 [ 459.405698][T15001] usb 5-1: USB disconnect, device number 23 [ 459.752450][T16073] xt_recent: Unsupported userspace flags (000000de) [ 460.629096][T16106] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5172'. [ 460.667594][T16110] IPVS: length: 218 != 24 [ 461.331790][T15002] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 461.551813][T15002] usb 5-1: Using ep0 maxpacket: 32 [ 461.575846][T15002] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.575883][T15002] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.577713][T15002] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 461.597851][T16142] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5189'. [ 461.645962][T16142] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5189'. [ 461.671913][T15002] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 461.680335][T15002] usb 5-1: Product: syz [ 461.694628][T15002] usb 5-1: Manufacturer: syz [ 461.709765][T15002] hub 5-1:4.0: USB hub found [ 461.877475][T16147] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32) [ 461.916111][T15002] hub 5-1:4.0: 2 ports detected [ 462.122567][T15002] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 462.129988][T15002] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 462.159365][T16154] loop6: detected capacity change from 0 to 64 [ 462.193295][T15002] usb 5-1: USB disconnect, device number 24 [ 462.716117][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5202'. [ 462.778084][T16165] netlink: 'syz.6.5202': attribute type 1 has an invalid length. [ 463.121265][T16177] loop6: detected capacity change from 0 to 1764 [ 463.182733][T16183] loop3: detected capacity change from 0 to 128 [ 463.202333][T16177] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 464.151661][ T27] audit: type=1326 audit(1770767952.209:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.5.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 464.240345][ T27] audit: type=1326 audit(1770767952.219:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.5.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 464.328051][ T27] audit: type=1326 audit(1770767952.239:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.5.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 464.399799][ T27] audit: type=1326 audit(1770767952.239:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.5.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 464.492983][ T27] audit: type=1326 audit(1770767952.239:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.5.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808099bf79 code=0x7ffc0000 [ 464.634930][T16220] lo speed is unknown, defaulting to 1000 [ 464.651934][ T27] audit: type=1326 audit(1770767952.719:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.6.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 464.731740][ T27] audit: type=1326 audit(1770767952.759:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.6.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 464.815582][ T27] audit: type=1326 audit(1770767952.759:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.6.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 464.853505][T16234] netlink: 'syz.3.5233': attribute type 11 has an invalid length. [ 464.891800][ T27] audit: type=1326 audit(1770767952.759:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.6.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 464.980492][T16236] rtc_cmos 00:00: Alarms can be up to one day in the future [ 464.988881][ T27] audit: type=1326 audit(1770767952.759:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.6.5231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 465.809358][T16230] loop0: detected capacity change from 0 to 32768 [ 465.877021][T16230] (syz.0.5232,16230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 465.945710][T16230] (syz.0.5232,16230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.024028][T16230] JBD2: Ignoring recovery information on journal [ 466.188761][T16230] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 466.539686][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5251'. [ 466.633989][T16273] loop6: detected capacity change from 0 to 1024 [ 466.655837][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 466.720237][T16273] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 466.761744][T16273] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 466.772521][T16273] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #3: comm syz.6.5252: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 466.892165][T16273] EXT4-fs (loop6): no journal found [ 466.897527][T16273] EXT4-fs (loop6): can't get journal size [ 466.953218][T16273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.078708][T13184] EXT4-fs (loop6): unmounting filesystem. [ 467.192666][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 467.202964][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 467.272501][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5258'. [ 467.566590][T16300] netlink: 'syz.0.5265': attribute type 19 has an invalid length. [ 467.626289][T16300] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5265'. [ 468.064048][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5273'. [ 469.279983][ T4283] Bluetooth: hci4: Invalid handle: 0x0f00 > 0x0eff [ 469.674607][T16380] xt_TCPMSS: Only works on TCP SYN packets [ 470.157010][T16396] loop3: detected capacity change from 0 to 512 [ 470.199540][T16396] EXT4-fs (loop3): orphan cleanup on readonly fs [ 470.206496][T16394] loop5: detected capacity change from 0 to 4096 [ 470.224321][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5309'. [ 470.262603][T16396] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.5310: corrupted inode contents [ 470.341283][T16394] ntfs: volume version 3.1. [ 470.357772][T16396] EXT4-fs (loop3): Remounting filesystem read-only [ 470.388189][T16396] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 470.420250][T16396] EXT4-fs (loop3): Remounting filesystem read-only [ 470.459962][T16396] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #15: comm syz.3.5310: corrupted inode contents [ 470.509752][T16396] EXT4-fs (loop3): Remounting filesystem read-only [ 470.529576][T16396] EXT4-fs error (device loop3): ext4_evict_inode:327: inode #15: comm syz.3.5310: mark_inode_dirty error [ 470.577404][T16396] EXT4-fs (loop3): Remounting filesystem read-only [ 470.588333][T16396] EXT4-fs (loop3): 1 orphan inode deleted [ 470.614938][T16396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 470.837810][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 470.913205][ T27] audit: type=1326 audit(1770767958.979:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.022398][ T27] audit: type=1326 audit(1770767958.979:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.124031][ T27] audit: type=1326 audit(1770767959.019:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.195673][ T27] audit: type=1326 audit(1770767959.019:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.342435][ T27] audit: type=1326 audit(1770767959.019:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.396777][ T27] audit: type=1326 audit(1770767959.099:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.536307][ T27] audit: type=1326 audit(1770767959.099:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.621692][ T27] audit: type=1326 audit(1770767959.309:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 471.685310][T16443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.761678][ T27] audit: type=1326 audit(1770767959.309:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.6.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 472.062789][T16455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5337'. [ 472.082555][T16457] netlink: 'syz.0.5338': attribute type 1 has an invalid length. [ 472.091118][T16455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5337'. [ 472.862640][T16488] netlink: 'syz.0.5352': attribute type 21 has an invalid length. [ 472.891233][T16488] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5352'. [ 473.542569][T15933] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 473.744269][T15933] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 473.776244][T15933] usb 5-1: config 0 has no interface number 0 [ 473.818642][T15933] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 473.869896][T15933] usb 5-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 473.897969][T15933] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 473.907965][ T27] audit: type=1326 audit(1770767961.969:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16519 comm="syz.6.5368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771899bf79 code=0x7ffc0000 [ 473.928202][T16518] loop5: detected capacity change from 0 to 1764 [ 473.940775][T16522] IPv6: Can't replace route, no match found [ 473.972643][T15933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.980713][T15933] usb 5-1: Product: syz [ 474.002507][T15933] usb 5-1: Manufacturer: syz [ 474.019058][T15933] usb 5-1: SerialNumber: syz [ 474.066002][T15933] usb 5-1: config 0 descriptor?? [ 474.092208][T16500] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.330423][T15933] kaweth 5-1:0.58: Firmware present in device. [ 474.541561][T15933] kaweth 5-1:0.58: Error reading configuration (-71), no net device created [ 474.569406][T15933] kaweth: probe of 5-1:0.58 failed with error -5 [ 474.616380][T15933] usb 5-1: USB disconnect, device number 25 [ 474.680094][T16536] loop3: detected capacity change from 0 to 64 [ 474.804983][T16536] Trying to free block not in datazone [ 474.843298][T16536] Trying to free block not in datazone [ 474.853366][T16536] Trying to free block not in datazone [ 474.859017][T16536] Trying to free block not in datazone [ 474.942354][T16536] minix_free_block (loop3:6): bit already cleared [ 474.949846][T16536] Trying to free block not in datazone [ 474.969795][T16536] Trying to free block not in datazone [ 475.315415][T16544] loop0: detected capacity change from 0 to 8192 [ 475.534746][T16553] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5384'. [ 476.310274][T16577] loop0: detected capacity change from 0 to 128 [ 476.338277][T16575] loop5: detected capacity change from 0 to 1024 [ 476.339519][T16579] loop6: detected capacity change from 0 to 256 [ 476.352518][T16583] openvswitch: netlink: Key type 316 is out of range max 32 [ 476.462408][T16579] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.611749][T16579] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 476.692378][ T11] hfsplus: b-tree write err: -5, ino 4 [ 476.713730][T16579] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 476.821279][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 476.821297][ T27] audit: type=1326 audit(1770767964.879:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 476.850381][ T129] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 476.900670][ T27] audit: type=1326 audit(1770767964.929:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 477.039024][ T27] audit: type=1326 audit(1770767964.929:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 477.073363][ T129] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 477.081524][ T129] usb 4-1: config 0 has no interface number 0 [ 477.102400][ T129] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 477.135475][ T27] audit: type=1326 audit(1770767964.929:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 477.160688][ T129] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 477.190267][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.210500][ T129] usb 4-1: Product: syz [ 477.218967][ T129] usb 4-1: Manufacturer: syz [ 477.224553][ T27] audit: type=1326 audit(1770767964.929:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16588 comm="syz.0.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49a0f9bf79 code=0x7ffc0000 [ 477.251767][ T129] usb 4-1: SerialNumber: syz [ 477.278847][ T129] usb 4-1: config 0 descriptor?? [ 477.292392][T16585] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.303120][ T129] usb-storage 4-1:0.20: USB Mass Storage device detected [ 477.393289][ T129] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 477.558802][ T129] scsi host1: usb-storage 4-1:0.20 [ 477.725706][T16612] loop0: detected capacity change from 0 to 64 [ 477.791173][T15002] usb 4-1: USB disconnect, device number 28 [ 477.797499][T16612] hfs: unable to locate alternate MDB [ 477.812914][T16612] hfs: continuing without an alternate MDB [ 477.951225][ T57] hfs: new node 0 already hashed? [ 477.960046][ T57] ------------[ cut here ]------------ [ 477.965998][ T57] WARNING: CPU: 0 PID: 57 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 477.974899][ T57] Modules linked in: [ 477.978836][ T57] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 477.986293][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 477.996626][ T57] Workqueue: writeback wb_workfn (flush-7:0) [ 478.002700][ T57] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 478.008376][ T57] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 478.028440][ T57] RSP: 0018:ffffc90001586e80 EFLAGS: 00010246 [ 478.034600][ T57] RAX: 000000000000001f RBX: ffff88805f05e0e0 RCX: 0d5d26a653d98000 [ 478.042654][ T57] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 478.050667][ T57] RBP: 0000000000000000 R08: ffffc90001586b87 R09: 1ffff920002b0d70 [ 478.058940][ T57] R10: dffffc0000000000 R11: fffff520002b0d71 R12: 0000000000000000 [ 478.067105][ T57] R13: ffff88805f05e000 R14: ffff88801f3f2200 R15: dffffc0000000000 [ 478.075169][ T57] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 478.084443][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.091342][ T57] CR2: 000055555ce56a28 CR3: 000000005b721000 CR4: 00000000003506f0 [ 478.099449][ T57] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.107521][ T57] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.115584][ T57] Call Trace: [ 478.118899][ T57] [ 478.121906][ T57] hfs_bmap_alloc+0x53d/0x5d0 [ 478.126650][ T57] ? hfs_bmap_reserve+0x420/0x420 [ 478.131775][ T57] hfs_btree_inc_height+0xfd/0xac0 [ 478.136941][ T57] ? hfs_brec_insert+0x6f6/0xbd0 [ 478.142159][ T57] ? hfs_brec_insert+0xbd0/0xbd0 [ 478.147157][ T57] ? do_raw_spin_unlock+0x11d/0x230 [ 478.153069][ T57] hfs_brec_insert+0x744/0xbd0 [ 478.157919][ T57] ? hfs_brec_keylen+0x350/0x350 [ 478.162969][ T57] __hfs_ext_write_extent+0x2a1/0x470 [ 478.168399][ T57] hfs_ext_write_extent+0x17b/0x200 [ 478.173695][ T57] ? verify_lock_unused+0x140/0x140 [ 478.178944][ T57] ? hfs_ext_keycmp+0x310/0x310 [ 478.183907][ T57] ? writeback_sb_inodes+0x46b/0x1850 [ 478.189341][ T57] hfs_write_inode+0xd8/0xa20 [ 478.194117][ T57] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 478.199584][ T57] ? __writeback_single_inode+0x4ae/0x1160 [ 478.205492][ T57] ? __lock_acquire+0x7d10/0x7d10 [ 478.210564][ T57] ? do_raw_spin_lock+0x128/0x2f0 [ 478.215684][ T57] ? __rwlock_init+0x140/0x140 [ 478.220595][ T57] __writeback_single_inode+0x75b/0x1160 [ 478.226426][ T57] writeback_sb_inodes+0xb30/0x1850 [ 478.231741][ T57] ? queue_io+0x5a0/0x5a0 [ 478.236143][ T57] ? rcu_is_watching+0x11/0xa0 [ 478.240979][ T57] wb_writeback+0x482/0xd50 [ 478.245605][ T57] ? percpu_ref_tryget+0x250/0x250 [ 478.250802][ T57] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 478.256910][ T57] ? _raw_spin_unlock_irq+0x1f/0x40 [ 478.262208][ T57] wb_workfn+0x423/0xee0 [ 478.266521][ T57] ? inode_wait_for_writeback+0x220/0x220 [ 478.272430][ T57] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 478.278463][ T57] ? read_lock_is_recursive+0x10/0x10 [ 478.283935][ T57] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 478.289877][ T57] ? _raw_spin_unlock+0x40/0x40 [ 478.294815][ T57] ? _raw_spin_unlock_irq+0x1f/0x40 [ 478.300067][ T57] ? process_one_work+0x7b0/0x1160 [ 478.305272][ T57] process_one_work+0x8a2/0x1160 [ 478.310266][ T57] ? worker_detach_from_pool+0x240/0x240 [ 478.315984][ T57] ? _raw_spin_lock_irq+0xb7/0xf0 [ 478.321051][ T57] ? _raw_spin_lock_irqsave+0x100/0x100 [ 478.326675][ T57] ? kthread_data+0x4b/0xc0 [ 478.331229][ T57] worker_thread+0xaa2/0x1270 [ 478.336029][ T57] kthread+0x29d/0x330 [ 478.340134][ T57] ? worker_clr_flags+0x1a0/0x1a0 [ 478.345242][ T57] ? kthread_blkcg+0xd0/0xd0 [ 478.349892][ T57] ret_from_fork+0x1f/0x30 [ 478.354403][ T57] [ 478.357457][ T57] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.364783][ T57] CPU: 0 PID: 57 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 478.372193][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 478.382366][ T57] Workqueue: writeback wb_workfn (flush-7:0) [ 478.388409][ T57] Call Trace: [ 478.391712][ T57] [ 478.394669][ T57] dump_stack_lvl+0x188/0x24e [ 478.399392][ T57] ? memcpy+0x3c/0x60 [ 478.403418][ T57] ? show_regs_print_info+0x12/0x12 [ 478.408660][ T57] ? load_image+0x400/0x400 [ 478.413215][ T57] panic+0x2e5/0x730 [ 478.417146][ T57] ? bpf_jit_dump+0xd0/0xd0 [ 478.421689][ T57] ? ret_from_fork+0x1f/0x30 [ 478.426318][ T57] __warn+0x2f8/0x4f0 [ 478.430433][ T57] ? hfs_bnode_create+0x37a/0x400 [ 478.435494][ T57] ? hfs_bnode_create+0x37a/0x400 [ 478.440569][ T57] report_bug+0x2ba/0x4f0 [ 478.444936][ T57] ? hfs_bnode_create+0x37a/0x400 [ 478.450009][ T57] handle_bug+0x3a/0x70 [ 478.454204][ T57] exc_invalid_op+0x16/0x40 [ 478.458748][ T57] asm_exc_invalid_op+0x16/0x20 [ 478.463645][ T57] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 478.469312][ T57] Code: aa a2 8a 89 ee e8 56 3b d6 07 e9 ab fd ff ff e8 4c 51 37 ff 48 89 df e8 04 8b eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 36 3b d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 478.488958][ T57] RSP: 0018:ffffc90001586e80 EFLAGS: 00010246 [ 478.495072][ T57] RAX: 000000000000001f RBX: ffff88805f05e0e0 RCX: 0d5d26a653d98000 [ 478.503169][ T57] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 478.511268][ T57] RBP: 0000000000000000 R08: ffffc90001586b87 R09: 1ffff920002b0d70 [ 478.519707][ T57] R10: dffffc0000000000 R11: fffff520002b0d71 R12: 0000000000000000 [ 478.527719][ T57] R13: ffff88805f05e000 R14: ffff88801f3f2200 R15: dffffc0000000000 [ 478.535825][ T57] hfs_bmap_alloc+0x53d/0x5d0 [ 478.540568][ T57] ? hfs_bmap_reserve+0x420/0x420 [ 478.545740][ T57] hfs_btree_inc_height+0xfd/0xac0 [ 478.550903][ T57] ? hfs_brec_insert+0x6f6/0xbd0 [ 478.555974][ T57] ? hfs_brec_insert+0xbd0/0xbd0 [ 478.560959][ T57] ? do_raw_spin_unlock+0x11d/0x230 [ 478.566200][ T57] hfs_brec_insert+0x744/0xbd0 [ 478.571196][ T57] ? hfs_brec_keylen+0x350/0x350 [ 478.576278][ T57] __hfs_ext_write_extent+0x2a1/0x470 [ 478.581695][ T57] hfs_ext_write_extent+0x17b/0x200 [ 478.586934][ T57] ? verify_lock_unused+0x140/0x140 [ 478.592172][ T57] ? hfs_ext_keycmp+0x310/0x310 [ 478.597248][ T57] ? writeback_sb_inodes+0x46b/0x1850 [ 478.602668][ T57] hfs_write_inode+0xd8/0xa20 [ 478.607393][ T57] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 478.612907][ T57] ? __writeback_single_inode+0x4ae/0x1160 [ 478.618777][ T57] ? __lock_acquire+0x7d10/0x7d10 [ 478.624009][ T57] ? do_raw_spin_lock+0x128/0x2f0 [ 478.629168][ T57] ? __rwlock_init+0x140/0x140 [ 478.633984][ T57] __writeback_single_inode+0x75b/0x1160 [ 478.639684][ T57] writeback_sb_inodes+0xb30/0x1850 [ 478.645050][ T57] ? queue_io+0x5a0/0x5a0 [ 478.649438][ T57] ? rcu_is_watching+0x11/0xa0 [ 478.654256][ T57] wb_writeback+0x482/0xd50 [ 478.658855][ T57] ? percpu_ref_tryget+0x250/0x250 [ 478.664013][ T57] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 478.670043][ T57] ? _raw_spin_unlock_irq+0x1f/0x40 [ 478.675278][ T57] wb_workfn+0x423/0xee0 [ 478.679579][ T57] ? inode_wait_for_writeback+0x220/0x220 [ 478.685351][ T57] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 478.691462][ T57] ? read_lock_is_recursive+0x10/0x10 [ 478.696872][ T57] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 478.702835][ T57] ? _raw_spin_unlock+0x40/0x40 [ 478.707825][ T57] ? _raw_spin_unlock_irq+0x1f/0x40 [ 478.713062][ T57] ? process_one_work+0x7b0/0x1160 [ 478.718205][ T57] process_one_work+0x8a2/0x1160 [ 478.723192][ T57] ? worker_detach_from_pool+0x240/0x240 [ 478.728866][ T57] ? _raw_spin_lock_irq+0xb7/0xf0 [ 478.733920][ T57] ? _raw_spin_lock_irqsave+0x100/0x100 [ 478.739590][ T57] ? kthread_data+0x4b/0xc0 [ 478.744147][ T57] worker_thread+0xaa2/0x1270 [ 478.748904][ T57] kthread+0x29d/0x330 [ 478.753016][ T57] ? worker_clr_flags+0x1a0/0x1a0 [ 478.758078][ T57] ? kthread_blkcg+0xd0/0xd0 [ 478.762720][ T57] ret_from_fork+0x1f/0x30 [ 478.767368][ T57] [ 478.770537][ T57] Kernel Offset: disabled [ 478.774961][ T57] Rebooting in 86400 seconds..