last executing test programs: 1m50.245275485s ago: executing program 2 (id=3896): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="88", 0x1}], 0x1, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x884}}], 0x1, 0x4) 1m49.852755246s ago: executing program 2 (id=3904): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000280)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'cp861'}}, {@creator={'creator', 0x3d, "5a957218"}}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}, {@file_umask={'file_umask', 0x3d, 0x2}}]}, 0x2, 0x36d, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x8043, 0x8) 1m49.406076837s ago: executing program 2 (id=3912): r0 = io_uring_setup(0x164f, &(0x7f0000000000)={0x0, 0x8bce, 0x8, 0x0, 0x225}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000280)={0x0, 0x0, 0x3}, 0x1) 1m48.980953896s ago: executing program 2 (id=3918): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@type={'type', 0x3d, "f1aefc87"}}, {}, {@nodecompose}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$eJzs3U9sHFcZAPBvJpu1N0jutk3TgJBiNVIFjUhsr0pSCakBIeRDhCK49GolTmNlk1a2i9wKkQ1QkDhxQj1wKELm0BNCCKmcEOWMhMSFk++RuHGIELBo/uzueL121onjdZvfT5qdN/vevPfNl/mzOxtrAnhqLb4RxzuRxOK5KxvZ8tZmq7212brdK0fEVESkEbViFkkjIvkk4nIUU3w+e7PsLtltnFfvf5zUPvioVSzVyilvn+613g4jW3YipvsLxyJitij+Z4wO09H95VPez7VBf48o6cedJexsL3Ewad0dOoPKUYfGduMft8CRdbe4bu7QjDgRxdU1+xwQ5dnh4WeGydvz3NQ5vDgAAADgSRn5Xb7qmQfxIDZi5nDCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+GpHhmYFJOaa88G0nv+f/1yjP16xMO9zG9fyOffeeZSQcCAAAAAAAAAI/lzIN4EBsx01vuJvlv/i/lCyfz18/FO7EWy7Ea52MjlmI91mM15iOiWemovrG0vr46v3PNX0S2ZrfbvVuuuTByzYXtcXWGAx31Pw12NAIAAAAAAACAp9YPY3Hw+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFScSxYpZPJ3vlZqS1iJiOiHoy229en2iwB+BPkw4AAAAAnrxGOZ9J/lcUukn+nf9U/r1/Ot6JO7EeK7Ee7ViO6/m9gOJbf/q3Tqu9tdm6nU07O/76P/cVR95jFPceRo88l7d4ob/GYnwrvhvnYjauxmqsxPdiKdZjOWbjm3lpKZJolncvmlubjejFujPey9uWrg7HdqZSzno7nUfSiBuxksd2Pq7Ve6GnZbvTldH+UI8YGvFelp3k9dKYObpeieHn5fxoaOZbfryfkbky91k2nq3mfWfuR+8n/+4WHjrSfKT9e1AnB6Nki8MjPVLOT5TzLNc/ebI53+ettO2Z6PwsW+rtfaf2znnEl//+56s30zu3bt5YO3d0dqNHNLxPtCqZeHGsTLSzTHQeIxPTjxP/wbhc7kLN/ll0f2fLl/J1Z2Ilvh1vxfVYjosxF/NxKebitViIVixU8vrC3nnNj7V0f8fa2S+Vheya9NPKtenQTO1WkeX12Upeq2e6Zl5XfWeQpefGyFJSj6EsvVbM/jEylNoXykI2xo/uDa44kzeciflKJp7fOxO/+m92ql9r37m1enPp7THHe7mcZ4ft+9vPzb8+kA3av3Jzs/3luewfK4rLRnXvyOqe79UN5ate/uJSKzvbVleP/Hgu6h52pGY9nbo3qqei7sWRo7TyutOVum2fcuKtaPc/hZQO/SAFYAwnXjlRb9xv/LXxYePHjZuNK9PfmLo09cV6HP9L7Y/Hfpv+Jv1a8kp8GD+ImUlHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnwVr7753a6ndXl49goVID7jDeyOreqko3qmPaHMmjkA2Ph2Fqb32qN9F8bimXVavTyLmRuwaz+EWonYIY03FiKor/XcaEWk/noi4dQQecAc8KRfWb799Ye3d976ycnvpzeU3l+8sXLr4+sXWV+fvXrix0l6eK17LxrUJBwscqMHHgElHAgAAAAAAAAAAAIzrMP68YcSwSWcC2woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Oi2+Ecc7kcT83Pm5bHlrs9XOpl550LIWEWlEJN+PSD6JuBzFFM1Kd8lu47x6/+NfvvzBR61BX7Ve+3Rovd//q9vd51Z0yilmI+JYOX+4qbH6u1bpr7OfXvqS/hZmCTvbSxxM2v8DAAD//7sjDnk=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m48.634807805s ago: executing program 2 (id=3923): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920723f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1}, 0x44) 1m47.771310293s ago: executing program 2 (id=3934): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000027c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f3800006d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782e260373cf285246f619e46fc5a25a6c6e12338f"], 0x0, 0x0, 0x0) 1m47.09999613s ago: executing program 32 (id=3934): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000027c0)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f3800006d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="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"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782e260373cf285246f619e46fc5a25a6c6e12338f"], 0x0, 0x0, 0x0) 16.344157545s ago: executing program 3 (id=5131): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000002c0)='GPL\x00', 0x2}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x1000000, 0x0, @val=@iter={&(0x7f0000000140)=@cgroup, 0x10}}, 0x40) 15.93284683s ago: executing program 3 (id=5135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1b, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 15.64534076s ago: executing program 3 (id=5138): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15.475116352s ago: executing program 3 (id=5141): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 14.789332856s ago: executing program 3 (id=5149): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) ioctl$NBD_DO_IT(r0, 0xab03) 14.16472917s ago: executing program 3 (id=5156): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000940)={{}, {0x20}, 0x0, 0x4}) 13.431494728s ago: executing program 33 (id=5156): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000940)={{}, {0x20}, 0x0, 0x4}) 5.959816868s ago: executing program 4 (id=5246): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x68, 0x14, 0x1, 0x70bd2b, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0xfffffffffffffe93}}, @mark={0xc, 0x15, {0x0, 0x100}}]}, 0x68}}, 0x4004040) 5.704571079s ago: executing program 4 (id=5248): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40186f40, &(0x7f0000000000)={0xff7ffffb, 0x0, 0x102, 0x8, 'syz0\x00', 0x210002}) 5.397550601s ago: executing program 4 (id=5251): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 3.117005358s ago: executing program 6 (id=5264): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) 2.900454981s ago: executing program 0 (id=5266): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) 2.679830274s ago: executing program 6 (id=5268): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESDEC], 0xf9, 0x30b, &(0x7f0000000440)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a30c1, 0x9c37611dc13d0d83) 2.516365349s ago: executing program 0 (id=5270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.439009241s ago: executing program 5 (id=5271): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2000c12, &(0x7f0000000580)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@overriderock}, {@session={'session', 0x3d, 0x62}}, {@session={'session', 0x3d, 0x57}}, {@showassoc}, {}, {@showassoc}, {@overriderock}, {@check_relaxed}]}, 0xfe, 0xa36, &(0x7f00000018c0)="$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") rename(&(0x7f0000000180)='./file0/../file0\x00', 0x0) 2.307677574s ago: executing program 6 (id=5272): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) 2.276005259s ago: executing program 1 (id=5273): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffdfff, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000140)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.020828623s ago: executing program 0 (id=5274): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0xffffffffffffffe7) 1.90306183s ago: executing program 1 (id=5275): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x2, 0x1, {0x7, 0x1043, 0x4, 0x5}}) 1.881985843s ago: executing program 6 (id=5276): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) 1.874951901s ago: executing program 5 (id=5277): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7fff, 0x4) 1.607203265s ago: executing program 4 (id=5278): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_setup(0x665c, &(0x7f0000000700)={0x0, 0xe70a, 0x2, 0x3, 0x1d6}) 1.605544495s ago: executing program 6 (id=5279): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) 1.590442939s ago: executing program 5 (id=5280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001700090025bd700001dcdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1.366805793s ago: executing program 1 (id=5281): r0 = fanotify_init(0xf00, 0x1) fanotify_mark(r0, 0x1, 0x40009975, 0xffffffffffffffff, 0x0) 1.273731451s ago: executing program 5 (id=5282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1044}, 0x0) 1.219664628s ago: executing program 0 (id=5283): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8901, &(0x7f0000000000)) 1.141538253s ago: executing program 1 (id=5284): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r0, 0x800c6f40, &(0x7f0000000040)={""/4, 0x4}) 786.349117ms ago: executing program 1 (id=5285): r0 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) io_uring_enter(r0, 0x0, 0x0, 0xf, 0x0, 0x0) 786.211733ms ago: executing program 4 (id=5286): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 754.983931ms ago: executing program 0 (id=5287): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 738.523943ms ago: executing program 5 (id=5288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x1, 0x400000d, 0xa, 0xffff, 0xa}}) 670.507221ms ago: executing program 6 (id=5289): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x6, 0x7, 0x7ffc0002}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={0x0, 0x1, 0xfa6}) 460.987463ms ago: executing program 4 (id=5290): r0 = openat$dsp(0xffffff9c, &(0x7f0000000400), 0x103002, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000440)) 434.050047ms ago: executing program 1 (id=5291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f00000001c0), 0x0}, 0x20) 353.301615ms ago: executing program 5 (id=5292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x18, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) 0s ago: executing program 0 (id=5293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r0, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES64], 0x84}}, 0x0) kernel console output (not intermixed with test programs): oop2): failed to convert "076c" to cp949 [ 351.091894][T13436] ntfs3(loop2): ino=20, mi_enum_attr [ 351.437582][ T1203] usb 5-1: No status endpoint found [ 351.678757][ T5931] usb 5-1: USB disconnect, device number 11 [ 351.839319][T13471] netlink: 'syz.1.3354': attribute type 8 has an invalid length. [ 352.271890][T13479] bond3: entered allmulticast mode [ 352.344816][T13479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.408672][T13522] loop4: detected capacity change from 0 to 256 [ 353.449792][T13522] vfat: Deprecated parameter 'posix' [ 353.487346][T13522] FAT-fs: "posix" option is obsolete, not supported now [ 353.508063][T13504] loop1: detected capacity change from 0 to 32768 [ 353.596577][ T6122] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 353.622271][T13504] Dev loop1 Sun disklabel: Csum bad, label corrupted [ 354.065543][T13534] dvmrp1: entered allmulticast mode [ 354.338732][T13510] loop0: detected capacity change from 0 to 40427 [ 354.427457][T13510] F2FS-fs (loop0): Image doesn't support compression [ 354.464435][T13510] F2FS-fs (loop0): build fault injection rate: 684 [ 354.502602][T13510] F2FS-fs (loop0): build fault injection type: 0x35f7 [ 354.586133][T13510] F2FS-fs (loop0): invalid crc value [ 355.023895][T13510] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.080198][T13510] F2FS-fs (loop0): Start checkpoint disabled! [ 355.185072][T13510] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 355.226475][T13510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 355.381267][T13510] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 355.418082][T13572] QAT: Invalid ioctl 21531 [ 355.951537][T13586] loop1: detected capacity change from 0 to 4096 [ 356.055553][T13592] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.887567][T13617] netlink: 798 bytes leftover after parsing attributes in process `syz.2.3425'. [ 356.994901][T13623] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 357.154285][ T5978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 357.223056][T13625] bond2 (unregistering): Released all slaves [ 357.306409][ T5978] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 357.326957][ T5978] usb 6-1: config 0 has no interface number 0 [ 357.357919][ T5978] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 357.398819][ T5978] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.451400][ T5978] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 357.467619][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.507001][ T5978] usb 6-1: Product: syz [ 357.512263][ T5978] usb 6-1: Manufacturer: syz [ 357.556388][ T5978] usb 6-1: SerialNumber: syz [ 357.663755][ T5978] usb 6-1: config 0 descriptor?? [ 357.676887][T13619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 357.734368][ T5978] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 357.796343][ T5978] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 357.983850][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 358.186370][ T5978] usb 6-1: USB disconnect, device number 11 [ 358.236490][ T5978] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 358.271472][ T5978] cyberjack 6-1:0.69: device disconnected [ 358.342481][T13661] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3446'. [ 358.438601][T13665] loop2: detected capacity change from 0 to 512 [ 358.558641][T13665] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 358.634862][T13665] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.768927][T13672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.967848][ T997] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 359.374779][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 359.547524][T13700] loop5: detected capacity change from 0 to 128 [ 359.547773][T13699] netlink: 'syz.1.3465': attribute type 1 has an invalid length. [ 359.569281][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.580424][ T5978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 359.596204][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 359.604586][T13700] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 359.642864][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 359.675049][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 359.679568][T13700] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.705017][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 359.724537][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.758118][ T9] usb 5-1: config 0 descriptor?? [ 359.775556][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 359.785591][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.821399][ T5978] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 359.855002][ T5978] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 359.864836][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.884435][ T5978] usb 1-1: Product: syz [ 359.888781][ T5978] usb 1-1: Manufacturer: syz [ 359.898674][ T5978] usb 1-1: SerialNumber: syz [ 359.925279][ T5978] usb 1-1: config 0 descriptor?? [ 359.984534][ T9] hdpvr 5-1:0.0: firmware version 0x1e dated »–¸&S¶1;¨“ÃO·X^„œ wÒΖŠ g/ƒ µn#»† [ 360.203949][ T9] hdpvr 5-1:0.0: device init failed [ 360.213884][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 360.264374][ T9] usb 5-1: USB disconnect, device number 12 [ 360.349846][ T5978] usb 1-1: USB disconnect, device number 11 [ 360.448102][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3472'. [ 360.585882][T13688] loop2: detected capacity change from 0 to 40427 [ 360.614302][T13688] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 360.622096][T13688] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 360.673768][T13688] F2FS-fs (loop2): invalid crc value [ 361.110406][T13688] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 361.177276][T13688] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 361.242095][T13688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 361.440518][T13688] syz.2.3457: attempt to access beyond end of device [ 361.440518][T13688] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.114590][T13788] loop4: detected capacity change from 0 to 1024 [ 363.979109][T13819] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3520'. [ 364.344373][T13826] loop0: detected capacity change from 0 to 512 [ 364.384278][T13826] EXT4-fs (loop0): blocks per group (8192) and clusters per group (2304) inconsistent [ 364.505637][T13835] xt_limit: Overflow, try lower: 2147483649/3300 [ 364.829492][T13831] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 364.880783][T13843] loop2: detected capacity change from 0 to 1024 [ 364.913934][T13843] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 364.976568][T13843] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 365.009485][T13843] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.3535: iget: special inode unallocated [ 365.086595][T13849] xt_l2tp: v2 doesn't support IP mode [ 365.091701][T13843] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 365.094211][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 365.109943][ C0] EXT4-fs (loop2): initial error at time 1774482262: ext4_get_journal_inode:5863: inode 32 [ 365.120028][ C0] EXT4-fs (loop2): last error at time 1774482262: ext4_get_journal_inode:5863: inode 32 [ 365.135255][T13843] EXT4-fs (loop2): Remounting filesystem read-only [ 365.141960][T13843] EXT4-fs (loop2): no journal found [ 365.174288][T13843] EXT4-fs (loop2): can't get journal size [ 365.190941][T13843] EXT4-fs (loop2): filesystem is read-only [ 365.241158][T13843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 365.560193][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.814327][T13871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 365.821425][T13871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.897400][T13871] vhci_hcd vhci_hcd.0: Device attached [ 365.937319][T13875] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 365.943898][T13875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.087468][T13875] vhci_hcd vhci_hcd.0: Device attached [ 366.100391][T13876] vhci_hcd: connection closed [ 366.103364][T13872] vhci_hcd: connection closed [ 366.103946][ T147] vhci_hcd vhci_hcd.1: stop threads [ 366.124595][T13882] netlink: 'syz.5.3549': attribute type 2 has an invalid length. [ 366.144304][ T5978] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 366.163047][T13874] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 366.173499][ T147] vhci_hcd vhci_hcd.1: release socket [ 366.179320][T13884] loop0: detected capacity change from 0 to 1764 [ 366.217058][ T147] vhci_hcd vhci_hcd.1: disconnect device [ 366.243149][ T147] vhci_hcd vhci_hcd.1: stop threads [ 366.275911][ T147] vhci_hcd vhci_hcd.1: release socket [ 366.301978][ T147] vhci_hcd vhci_hcd.1: disconnect device [ 366.332332][T13890] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 366.338916][T13890] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 366.454599][T13890] vhci_hcd vhci_hcd.0: Device attached [ 366.504666][T13893] vhci_hcd vhci_hcd.0: port 0 already used [ 366.513560][T13891] vhci_hcd: connection closed [ 366.514939][ T36] vhci_hcd vhci_hcd.4: stop threads [ 366.544347][ T36] vhci_hcd vhci_hcd.4: release socket [ 366.549785][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 367.171744][T13915] loop5: detected capacity change from 0 to 1764 [ 367.392051][T13926] xt_l2tp: v2 doesn't support IP mode [ 367.497067][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 367.639148][T13932] xt_ecn: cannot match TCP bits for non-tcp packets [ 367.729850][ T24] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 367.744243][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.782836][ T24] usb 1-1: Product: syz [ 367.805390][ T24] usb 1-1: Manufacturer: syz [ 367.828167][ T24] usb 1-1: SerialNumber: syz [ 367.857711][ T24] usb 1-1: config 0 descriptor?? [ 367.900853][ T24] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 368.030551][T13934] loop4: detected capacity change from 0 to 4096 [ 368.069026][T13934] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 368.119729][ T24] (null): failure setting delay to 10us [ 368.138796][ T24] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 368.204722][ T24] usb 1-1: USB disconnect, device number 12 [ 368.208226][T13934] ntfs3(loop4): ino=19, mi_enum_attr [ 368.263708][T13934] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 368.294707][T13934] ntfs3(loop4): ino=18, mi_enum_attr [ 368.597971][T13951] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 368.600565][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3579'. [ 368.628656][T13954] loop2: detected capacity change from 0 to 8 [ 368.740054][T13954] SQUASHFS error: Failed to read block 0x1ec: -5 [ 368.802119][T13954] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 369.527119][T13980] loop2: detected capacity change from 0 to 64 [ 369.596752][T13986] netlink: 'syz.0.3598': attribute type 1 has an invalid length. [ 369.858330][T13990] loop5: detected capacity change from 0 to 64 [ 369.974485][ T30] audit: type=1800 audit(1774482267.361:140): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3599" name=E91F7189591E9233614B dev="loop5" ino=22 res=0 errno=0 [ 370.038063][T14001] loop4: detected capacity change from 0 to 8 [ 370.138442][T14001] SQUASHFS error: Unable to read inode 0xa7 [ 370.344016][T14003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3606'. [ 370.404400][T14003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3606'. [ 370.934386][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 371.109485][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 371.154601][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 371.205500][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.242933][ T9] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 371.283008][ T5978] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 371.651177][T14046] loop2: detected capacity change from 0 to 1764 [ 371.706751][T14039] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.261759][T14062] loop5: detected capacity change from 0 to 64 [ 372.526235][ T9] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 372.559024][ T9] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 372.597797][ T9] stv0680 2-1:4.0: last error: 86, command = 0x78 [ 372.633046][ T9] usb 2-1: USB disconnect, device number 10 [ 372.764362][T14076] netlink: 'syz.2.3642': attribute type 1 has an invalid length. [ 372.830177][T14078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.171518][T14088] loop0: detected capacity change from 0 to 1024 [ 373.247519][T14088] hfsplus: b-tree write err: -5, ino 2 [ 373.375768][ T36] hfsplus: b-tree write err: -5, ino 25 [ 373.389005][ T36] hfsplus: b-tree write err: -5, ino 4 [ 373.411070][T14089] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.434694][ T5834] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 373.442798][ T36] hfsplus: b-tree write err: -5, ino 2 [ 373.483523][ T36] hfsplus: b-tree write err: -5, ino 26 [ 373.682469][ T5834] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 373.702409][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.743157][ T5834] usb 6-1: Product: syz [ 373.756367][ T5834] usb 6-1: Manufacturer: syz [ 373.777046][ T5834] usb 6-1: SerialNumber: syz [ 373.808869][ T5834] usb 6-1: config 0 descriptor?? [ 373.843883][ T5834] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 374.164309][T14123] tipc: Can't bind to reserved service type 0 [ 374.204417][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 374.254484][ T5834] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 374.261724][ T5834] sq905c 6-1:0.0: Reading version command failed [ 374.276738][ T5834] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 374.324800][ T5834] usb 6-1: USB disconnect, device number 12 [ 374.374333][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 374.386405][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 374.405518][ T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 374.422454][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.439056][ T24] usb 4-1: Product: syz [ 374.456955][ T24] usb 4-1: Manufacturer: syz [ 374.461607][ T24] usb 4-1: SerialNumber: syz [ 374.718684][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 374.766769][ T24] usb 4-1: USB disconnect, device number 17 [ 374.939824][T14119] loop0: detected capacity change from 0 to 32768 [ 374.981138][T14121] loop4: detected capacity change from 0 to 32768 [ 375.118514][ T5974] Dev loop4 SGI disklabel: csum bad, label corrupted [ 375.129696][T14121] Dev loop4 SGI disklabel: csum bad, label corrupted [ 375.681560][T14153] loop0: detected capacity change from 0 to 8 [ 375.787609][T14156] tmpfs: Bad value for 'mpol' [ 376.119223][T14162] loop0: detected capacity change from 0 to 64 [ 376.344055][T14169] loop5: detected capacity change from 0 to 64 [ 376.545745][T14163] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 376.854993][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 376.967572][T14149] loop1: detected capacity change from 0 to 32768 [ 377.049187][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.057742][T14185] netlink: 'syz.3.3694': attribute type 6 has an invalid length. [ 377.065688][ T24] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 377.065733][ T24] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 377.065766][ T24] usb 1-1: config 63 has no interface number 0 [ 377.065809][ T24] usb 1-1: config 63 interface 66 has no altsetting 0 [ 377.101072][T14149] XFS (loop1): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 377.119236][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 377.132721][T14193] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 377.136584][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 377.159462][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.184250][ T24] usb 1-1: Product: 垡뷇닊å†çƒ«ä²¯æž–ã£—ë µä“ [ 377.194252][ T24] usb 1-1: SerialNumber: syz [ 377.269481][T14200] netlink: 'syz.5.3700': attribute type 3 has an invalid length. [ 377.278110][T14200] netlink: 'syz.5.3700': attribute type 1 has an invalid length. [ 377.285959][T14200] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3700'. [ 377.318347][T14200] NCSI netlink: No device for ifindex 0 [ 377.428500][ T24] uvcvideo 1-1:63.66: Found UVC 0.00 device 垡뷇닊å†çƒ«ä²¯æž–ã£—ë µä“ (174f:8acf) [ 377.453984][ T5822] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.477684][ T24] uvcvideo 1-1:63.66: No valid video chain found. [ 377.574672][ T24] usb 1-1: USB disconnect, device number 13 [ 377.838110][T14212] netlink: 'syz.4.3705': attribute type 5 has an invalid length. [ 377.852211][T14214] nfs: Unknown parameter 'ntext' [ 378.018985][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.273009][T14228] vlan0: entered promiscuous mode [ 378.431878][T14232] netlink: 'syz.5.3714': attribute type 21 has an invalid length. [ 378.464607][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3714'. [ 378.575754][T14240] ptrace attach of "./syz-executor exec"[5823] was attempted by ""[14240] [ 379.396336][T14261] bond2 (unregistering): Released all slaves [ 379.899589][T14234] loop1: detected capacity change from 0 to 32768 [ 379.939087][T14234] (syz.1.3715,14234,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 379.984312][T14234] (syz.1.3715,14234,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 380.101518][T14234] JBD2: Ignoring recovery information on journal [ 380.326951][T14234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 380.414654][T14281] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 380.451084][T14292] netlink: 'syz.4.3739': attribute type 5 has an invalid length. [ 380.658267][T14298] ip6t_srh: unknown srh match flags 4000 [ 380.782109][T14300] loop4: detected capacity change from 0 to 1024 [ 380.849840][ T5822] ocfs2: Unmounting device (7,1) on (node local) [ 381.136862][ T147] hfsplus: b-tree write err: -5, ino 25 [ 381.142838][ T147] hfsplus: b-tree write err: -5, ino 4 [ 381.184983][ T147] hfsplus: b-tree write err: -5, ino 2 [ 381.417363][T14315] loop2: detected capacity change from 0 to 128 [ 381.443046][ T30] audit: type=1326 audit(1774482278.831:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 381.445549][T14283] loop0: detected capacity change from 0 to 32768 [ 381.497512][T14315] FAT-fs (loop2): Directory bread(block 162) failed [ 381.533538][T14315] FAT-fs (loop2): Directory bread(block 163) failed [ 381.562373][T14315] FAT-fs (loop2): Directory bread(block 164) failed [ 381.569398][ T30] audit: type=1326 audit(1774482278.881:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 381.600403][T14283] jfs_lookup: iget failed on inum 4 [ 381.607646][T14315] FAT-fs (loop2): Directory bread(block 165) failed [ 381.624646][T14315] FAT-fs (loop2): Directory bread(block 166) failed [ 381.639189][T14315] FAT-fs (loop2): Directory bread(block 167) failed [ 381.653411][ T30] audit: type=1326 audit(1774482278.881:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 381.689699][T14315] FAT-fs (loop2): Directory bread(block 168) failed [ 381.721787][T14315] FAT-fs (loop2): Directory bread(block 169) failed [ 381.735528][T14315] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.757810][ T30] audit: type=1326 audit(1774482278.891:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 381.848441][ T30] audit: type=1326 audit(1774482278.901:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 381.985603][ T30] audit: type=1326 audit(1774482278.901:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 382.109895][ T30] audit: type=1326 audit(1774482278.901:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 382.214949][ T30] audit: type=1326 audit(1774482278.901:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 382.345442][ T30] audit: type=1326 audit(1774482278.901:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.4.3751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff63979c799 code=0x7ffc0000 [ 382.524589][T14344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.096958][T14365] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3777'. [ 383.197849][T14371] /dev/nullb0: Can't open blockdev [ 383.464652][T14381] loop3: detected capacity change from 0 to 64 [ 383.958736][T14395] loop3: detected capacity change from 0 to 256 [ 384.034090][T14398] loop4: detected capacity change from 0 to 256 [ 384.085705][T14398] exfat: Deprecated parameter 'namecase' [ 384.153677][T14398] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d) [ 384.232107][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3796'. [ 384.240008][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3795'. [ 384.281495][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3795'. [ 384.486673][T14406] netlink: 'syz.3.3797': attribute type 11 has an invalid length. [ 384.558471][T14410] loop4: detected capacity change from 0 to 16 [ 384.621632][T14414] ip6t_srh: unknown srh invflags 7F00 [ 384.624824][T14410] erofs (device loop4): mounted with root inode @ nid 36. [ 384.715860][T14410] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 384.723684][T14410] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 384.759357][T14410] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 384.803864][T14410] erofs (device loop4): inconsistent algorithmtype 1 for nid 89 [ 384.855218][T14410] erofs (device loop4): read error -117 @ 1 of nid 89 [ 384.864240][ T30] audit: type=1800 audit(1774482282.251:150): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3799" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 384.998292][T14422] SET target dimension over the limit! [ 385.093550][T14391] loop2: detected capacity change from 0 to 32768 [ 385.172447][T14391] (syz.2.3790,14391,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 385.267955][T14424] loop3: detected capacity change from 0 to 2048 [ 385.281931][T14391] (syz.2.3790,14391,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 385.361842][T14424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.457815][T14391] JBD2: Ignoring recovery information on journal [ 385.744566][T14391] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 386.188980][T14449] loop1: detected capacity change from 0 to 4096 [ 386.232526][T14453] loop5: detected capacity change from 0 to 1024 [ 386.259547][T14456] netlink: 520 bytes leftover after parsing attributes in process `syz.4.3822'. [ 386.278651][ T5818] ocfs2: Unmounting device (7,2) on (node local) [ 386.438248][T14449] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 386.498304][ T36] hfsplus: b-tree write err: -5, ino 25 [ 386.504115][ T36] hfsplus: b-tree write err: -5, ino 4 [ 386.541130][ T36] hfsplus: b-tree write err: -5, ino 2 [ 387.012883][T14470] ipvlan0: left promiscuous mode [ 387.028338][T14470] ipvlan0: left allmulticast mode [ 387.033500][T14470] veth0_vlan: left allmulticast mode [ 387.315420][T14479] openvswitch: netlink: IPv6 tunnel dst address is zero [ 387.457607][T14486] netlink: 'syz.1.3836': attribute type 9 has an invalid length. [ 387.494448][T14486] netlink: 'syz.1.3836': attribute type 7 has an invalid length. [ 387.502276][T14486] netlink: 'syz.1.3836': attribute type 8 has an invalid length. [ 388.856406][T14484] loop5: detected capacity change from 0 to 32768 [ 388.915790][T14484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3835 (14484) [ 389.025624][T14484] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 389.069220][T14484] BTRFS info (device loop5): using crc32c checksum algorithm [ 389.157471][ T5834] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 389.286690][T14540] loop1: detected capacity change from 0 to 8 [ 389.316559][T14484] BTRFS info (device loop5): enabling ssd optimizations [ 389.340625][T14540] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 389.354903][T14484] BTRFS info (device loop5): turning on flush-on-commit [ 389.361939][T14484] BTRFS info (device loop5): enabling free space tree [ 389.403406][T14540] cramfs: Error -3 while decompressing! [ 389.430258][ T6134] udevd[6134]: incorrect cramfs checksum on /dev/loop1 [ 389.437689][T14540] cramfs: ffffffff9b2b0088(18)->ffff88807f512000(4096) [ 389.444406][ T5834] usb 1-1: unable to get BOS descriptor or descriptor too short [ 389.446336][T14484] BTRFS info (device loop5): enabling auto defrag [ 389.464477][ T5834] usb 1-1: not running at top speed; connect to a high speed hub [ 389.465064][T14540] cramfs: Error -3 while decompressing! [ 389.475554][ T5834] usb 1-1: config 6 has an invalid interface number: 209 but max is 0 [ 389.499678][T14540] cramfs: ffffffff9b2b0088(18)->ffff88807f512000(4096) [ 389.514245][ T5834] usb 1-1: config 6 has no interface number 0 [ 389.520401][ T5834] usb 1-1: config 6 interface 209 altsetting 132 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 389.529603][ T6134] udevd[6134]: incorrect cramfs checksum on /dev/loop1 [ 389.545243][T14484] BTRFS info (device loop5): use lzo compression, level 1 [ 389.556222][ T30] audit: type=1800 audit(1774482286.941:151): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3856" name="file1" dev="loop1" ino=324 res=0 errno=0 [ 389.594584][ T5834] usb 1-1: config 6 interface 209 has no altsetting 0 [ 389.600925][T14484] BTRFS info (device loop5): max_inline set to 4096 [ 389.626391][ T5834] usb 1-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=fe.1e [ 389.654326][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.662620][ T5834] usb 1-1: Product: syz [ 389.714216][ T5834] usb 1-1: Manufacturer: syz [ 389.718869][ T5834] usb 1-1: SerialNumber: syz [ 390.017140][ T5834] uvcvideo 1-1:6.209: Found UVC 0.00 device syz (174f:8a12) [ 390.054252][ T5834] uvcvideo 1-1:6.209: No valid video chain found. [ 390.067382][ T5820] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.094784][ T5834] usb 1-1: USB disconnect, device number 14 [ 390.257641][T14556] loop4: detected capacity change from 0 to 2048 [ 390.313756][T14556] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 390.384964][T14561] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 390.447530][T14556] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 390.501771][T14556] Remounting filesystem read-only [ 390.584828][T14522] loop3: detected capacity change from 0 to 32768 [ 390.649295][T14522] [ 390.649295][T14522] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 390.649295][T14522] [ 391.028886][ T5823] [ 391.028886][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.028886][ T5823] [ 391.113460][ T5823] [ 391.113460][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 391.113460][ T5823] [ 391.392785][T14586] loop3: detected capacity change from 0 to 16 [ 391.433298][T14586] erofs (device loop3): mounted with root inode @ nid 36. [ 391.511421][T14586] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 391.544849][T14586] erofs (device loop3): readahead error at folio 1 @ nid 89 [ 391.600030][T14586] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 391.644303][T14586] erofs (device loop3): inconsistent algorithmtype 1 for nid 89 [ 391.684629][T14586] erofs (device loop3): read error -117 @ 1 of nid 89 [ 391.714696][ T30] audit: type=1800 audit(1774482289.111:152): pid=14586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3874" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 391.812103][T14597] loop2: detected capacity change from 0 to 512 [ 391.895834][T14597] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 391.936715][T14597] System zones: 0-2, 18-18, 34-35 [ 392.105042][T14597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.165917][T14597] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.542615][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.892414][T14635] mmap: syz.3.3900 (14635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 393.089929][T14642] loop2: detected capacity change from 0 to 64 [ 393.332217][T14644] bond2 (unregistering): Released all slaves [ 393.538769][T14660] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 393.867869][T14666] loop4: detected capacity change from 0 to 2048 [ 393.880982][T14666] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.005288][T14672] loop2: detected capacity change from 0 to 1024 [ 394.167431][ T5818] hfsplus: bad catalog entry type [ 394.184213][T14675] loop1: detected capacity change from 0 to 2048 [ 394.253762][T14675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.553763][T14686] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 394.796363][T14689] loop1: detected capacity change from 0 to 1024 [ 394.854901][ T36] hfsplus: b-tree write err: -5, ino 25 [ 394.872823][ T36] hfsplus: b-tree write err: -5, ino 4 [ 394.924398][ T36] hfsplus: b-tree write err: -5, ino 2 [ 395.144854][T14699] No source specified [ 395.212029][T14701] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 395.428625][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.600162][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.685760][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.946112][ T49] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.294340][ T5978] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 396.489550][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.505543][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 396.523804][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.543024][ T49] bridge_slave_1: left allmulticast mode [ 396.551019][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.571803][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.582716][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.590352][ T49] bridge_slave_1: left promiscuous mode [ 396.596839][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.617067][T14739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.636564][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.646071][ T5978] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.729379][ T5978] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.802392][ T5978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.852126][T14744] loop3: detected capacity change from 0 to 1024 [ 396.858646][ T49] bridge_slave_0: left allmulticast mode [ 396.858701][ T49] bridge_slave_0: left promiscuous mode [ 396.858946][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.861386][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.895688][T14746] cgroup: noprefix used incorrectly [ 396.920704][ T5978] usb 5-1: Product: syz [ 396.962675][ T5978] usb 5-1: Manufacturer: syz [ 396.975030][ T5978] usb 5-1: SerialNumber: syz [ 397.081372][ T5978] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 397.109346][ T5978] cdc_ncm 5-1:1.0: bind() failure [ 397.202779][ T997] hfsplus: b-tree write err: -5, ino 25 [ 397.216647][ T997] hfsplus: b-tree write err: -5, ino 4 [ 397.234741][ T997] hfsplus: b-tree write err: -5, ino 2 [ 397.291623][ T5978] cdc_mbim 5-1:1.1: CDC Union missing and no IAD found [ 397.314107][ T5978] cdc_mbim 5-1:1.1: bind() failure [ 397.476891][ T24] usb 5-1: USB disconnect, device number 13 [ 397.718912][T14728] loop1: detected capacity change from 0 to 32768 [ 397.860260][T14728] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 397.860260][T14728] [ 397.900962][T14728] ERROR: (device loop1): remounting filesystem as read-only [ 397.920519][T14728] ialloc: diAlloc returned -5! [ 398.582945][T14758] loop3: detected capacity change from 0 to 32768 [ 398.625065][T14758] (syz.3.3959,14758,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.679410][T14758] (syz.3.3959,14758,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 398.699967][T14759] loop0: detected capacity change from 0 to 32768 [ 398.714496][ T5844] Bluetooth: hci4: command tx timeout [ 398.754603][T14759] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 398.806288][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.822897][T14758] JBD2: Ignoring recovery information on journal [ 398.976284][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.991729][T14758] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 399.023276][T14759] XFS (loop0): Ending clean mount [ 399.044044][T14759] XFS (loop0): Quotacheck needed: Please wait. [ 399.047450][ T49] bond0 (unregistering): Released all slaves [ 399.137210][ T49] bond1 (unregistering): Released all slaves [ 399.180450][T14759] XFS (loop0): Quotacheck: Done. [ 399.243553][ T49] bond2 (unregistering): Released all slaves [ 399.275380][ T49] bond3 (unregistering): Released all slaves [ 399.357457][ T5821] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 399.366269][T14766] ip6gre1: entered allmulticast mode [ 399.374533][ T5823] ocfs2: Unmounting device (7,3) on (node local) [ 399.450052][T14734] wg1 speed is unknown, defaulting to 1000 [ 399.674063][T14800] loop5: detected capacity change from 0 to 16 [ 399.703512][T14800] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 399.728880][ T49] : left promiscuous mode [ 400.595694][T14827] netlink: 'syz.3.3980': attribute type 10 has an invalid length. [ 400.634779][T14817] loop1: detected capacity change from 0 to 4096 [ 400.684220][T14817] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 400.794989][ T5844] Bluetooth: hci4: command tx timeout [ 401.476901][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 401.662830][T14734] chnl_net:caif_netlink_parms(): no params data found [ 401.690196][ T24] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 401.723451][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.758607][ T24] usb 5-1: Product: syz [ 401.812135][ T24] usb 5-1: Manufacturer: syz [ 401.822487][ T24] usb 5-1: SerialNumber: syz [ 401.865494][ T24] usb 5-1: config 0 descriptor?? [ 401.917886][ T24] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 014 [ 402.134810][ T49] hsr_slave_0: left promiscuous mode [ 402.164313][ T49] hsr_slave_1: left promiscuous mode [ 402.195750][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.224641][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.254865][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.287395][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.337086][ T24] (null): failure reading functionality [ 402.357830][ T24] i2c i2c-2: failure reading functionality [ 402.385622][ T24] i2c i2c-2: connected i2c-tiny-usb device [ 402.421160][ T24] usb 5-1: USB disconnect, device number 14 [ 402.426437][ T49] veth1_macvtap: left promiscuous mode [ 402.454448][ T49] veth0_macvtap: left promiscuous mode [ 402.474315][ T49] veth1_vlan: left allmulticast mode [ 402.480004][ T49] veth1_vlan: left promiscuous mode [ 402.519762][ T49] veth0_vlan: left promiscuous mode [ 402.854472][ T1203] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 402.865475][ T49] pim6reg (unregistering): left allmulticast mode [ 402.874908][ T5844] Bluetooth: hci4: command tx timeout [ 402.921988][T14871] loop0: detected capacity change from 0 to 32768 [ 402.936324][T14871] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3998 (14871) [ 403.021264][ T1203] usb 6-1: Using ep0 maxpacket: 32 [ 403.029333][T14871] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.037543][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 403.052365][T14871] BTRFS info (device loop0): using sha256 checksum algorithm [ 403.055996][ T1203] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 403.074549][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 403.089110][ T1203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 403.153968][ T1203] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 403.169451][ T1203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.193974][ T1203] usb 6-1: Product: syz [ 403.202031][ T1203] usb 6-1: Manufacturer: syz [ 403.209694][ T1203] usb 6-1: SerialNumber: syz [ 403.219899][T14871] BTRFS info (device loop0): enabling ssd optimizations [ 403.229127][T14871] BTRFS info (device loop0): turning on async discard [ 403.236413][T14871] BTRFS info (device loop0): enabling free space tree [ 403.263209][ T1203] usb 6-1: config 0 descriptor?? [ 403.292123][ T1203] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 403.323854][ T5821] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.516210][ T49] team0 (unregistering): Port device team_slave_1 removed [ 403.605685][ T49] team0 (unregistering): Port device team_slave_0 removed [ 403.650830][ T24] usb 6-1: USB disconnect, device number 13 [ 404.271498][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.342702][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.364464][T14734] bridge_slave_0: entered allmulticast mode [ 404.377075][T14734] bridge_slave_0: entered promiscuous mode [ 404.415456][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.444327][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.481447][T14734] bridge_slave_1: entered allmulticast mode [ 404.517957][T14734] bridge_slave_1: entered promiscuous mode [ 404.741960][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.828455][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.954423][ T5844] Bluetooth: hci4: command tx timeout [ 405.041425][T14939] loop3: detected capacity change from 0 to 1024 [ 405.072165][T14734] team0: Port device team_slave_0 added [ 405.108225][T14939] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 405.220959][T14939] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 405.265595][T14734] team0: Port device team_slave_1 added [ 405.481577][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.481623][ T49] IPVS: stop unused estimator thread 0... [ 405.494935][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.494990][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.764406][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.771410][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.914200][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.350422][T14734] hsr_slave_0: entered promiscuous mode [ 406.406003][T14734] hsr_slave_1: entered promiscuous mode [ 406.443677][T14734] debugfs: 'hsr0' already exists in 'hsr' [ 406.473964][T14734] Cannot create hsr debugfs directory [ 406.558345][T14984] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 406.603620][T14984] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4038'. [ 406.613451][T14988] comedi comedi0: rti802: I/O port conflict (0xfffffffffffff1f8,4) [ 407.620024][T14734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.770713][T14734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.833401][T14987] loop1: detected capacity change from 0 to 32768 [ 407.853140][T14734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.896215][T14734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.016316][T14987] ialloc: diAlloc returned -5! [ 408.264281][T14998] loop0: detected capacity change from 0 to 32768 [ 408.349207][T14998] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 408.401708][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.429444][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.466369][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.473667][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.597551][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.605302][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.722363][T14998] XFS (loop0): Ending clean mount [ 408.783726][T14998] XFS (loop0): Quotacheck needed: Please wait. [ 408.893121][T14998] XFS (loop0): Quotacheck: Done. [ 409.333389][ T5821] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.001447][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.257001][T15089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4065'. [ 410.469534][T15097] netlink: 'syz.3.4077': attribute type 28 has an invalid length. [ 410.811665][ T30] audit: type=1400 audit(1774482308.201:153): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F pid=15106 comm="syz.1.4081" [ 410.876760][T15112] loop4: detected capacity change from 0 to 8 [ 411.019496][T15112] SQUASHFS error: Unable to read inode 0xa7 [ 411.489101][T14734] veth0_vlan: entered promiscuous mode [ 411.563947][T14734] veth1_vlan: entered promiscuous mode [ 411.692832][T14734] veth0_macvtap: entered promiscuous mode [ 411.732502][T14734] veth1_macvtap: entered promiscuous mode [ 411.765776][ T5978] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 411.800986][T15138] netlink: 'syz.4.4093': attribute type 2 has an invalid length. [ 411.838780][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.891961][T15138] hmaÓË224): entered promiscuous mode [ 411.935975][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.955898][ T5978] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.976543][ T5978] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 411.984658][ T147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.994373][ T5978] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 411.994417][ T5978] usb 6-1: Manufacturer: syz [ 411.994445][ T5978] usb 6-1: SerialNumber: syz [ 412.161762][ T147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.211750][ T147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.243750][ T147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.259903][ T5978] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 412.280905][ T5978] usb 6-1: USB disconnect, device number 14 [ 412.603600][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.654218][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.791105][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.807426][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.889313][T15163] loop3: detected capacity change from 0 to 2048 [ 412.990890][T15163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.368260][T15175] netlink: 'syz.0.4110': attribute type 21 has an invalid length. [ 413.410406][T15175] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.899141][T15194] loop5: detected capacity change from 0 to 256 [ 413.935319][T15194] exfat: Deprecated parameter 'utf8' [ 413.941181][T15194] exfat: Deprecated parameter 'utf8' [ 413.967992][T15194] exfat: Deprecated parameter 'utf8' [ 414.025335][T15194] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 414.053242][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 414.720182][T15214] netlink: 'syz.6.4129': attribute type 1 has an invalid length. [ 415.018969][T15228] loop0: detected capacity change from 0 to 16 [ 415.106762][T15228] erofs (device loop0): mounted with root inode @ nid 36. [ 415.293620][T15231] loop4: detected capacity change from 0 to 4096 [ 415.517707][T15231] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 415.631322][T15231] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 416.495833][T15274] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4158'. [ 416.694282][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 416.803885][T15282] fuse: Invalid rootmode [ 416.894541][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 416.914415][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 416.949041][ T24] usb 5-1: config 197 has an invalid interface number: 211 but max is 0 [ 416.984448][ T24] usb 5-1: config 197 has no interface number 0 [ 416.995988][ T24] usb 5-1: config 197 interface 211 has no altsetting 0 [ 417.051862][ T24] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 417.061856][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.091971][ T24] usb 5-1: Product: syz [ 417.106653][ T24] usb 5-1: Manufacturer: syz [ 417.111389][ T24] usb 5-1: SerialNumber: syz [ 417.325714][T15299] loop0: detected capacity change from 0 to 64 [ 417.403176][ T24] upd78f0730 5-1:197.211: upd78f0730 converter detected [ 417.448967][ T24] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 417.485722][ T24] usb 5-1: USB disconnect, device number 15 [ 417.535460][ T24] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 417.569104][ T24] upd78f0730 5-1:197.211: device disconnected [ 417.782095][T15312] netlink: 'syz.0.4175': attribute type 10 has an invalid length. [ 417.843418][T15312] macvlan0: entered promiscuous mode [ 417.861260][T15312] macvlan0: entered allmulticast mode [ 417.910181][T15312] veth1_vlan: entered allmulticast mode [ 417.963942][T15312] team0: Port device macvlan0 added [ 418.014588][T15320] comedi comedi0: pcl812: I/O port conflict (0x8001,16) [ 419.759518][T15392] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 419.794252][T15392] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 419.802680][T15391] loop1: detected capacity change from 0 to 1764 [ 419.974513][T15397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4200'. [ 420.153874][T15337] loop6: detected capacity change from 0 to 32768 [ 420.237802][T15337] (syz.6.4186,15337,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 420.284662][T15337] (syz.6.4186,15337,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 420.421421][T15337] JBD2: Ignoring recovery information on journal [ 420.566550][T15337] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 420.648495][T15337] (syz.6.4186,15337,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 421.004930][T15337] (syz.6.4186,15337,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 421.133547][T15337] (syz.6.4186,15337,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 421.205321][T15337] (syz.6.4186,15337,0):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 421.279258][T15337] (syz.6.4186,15337,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 421.294461][T15337] (syz.6.4186,15337,0):ocfs2_quota_read:201 ERROR: status = -5 [ 421.334657][T15337] Quota error (device loop6): find_block_dqentry: Can't read quota tree block 6 [ 421.380597][T15337] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 421.445865][T15337] (syz.6.4186,15337,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 421.498243][T15337] (syz.6.4186,15337,0):ocfs2_mknod:318 ERROR: status = -5 [ 421.533143][T15337] (syz.6.4186,15337,0):ocfs2_mknod:506 ERROR: status = -5 [ 421.577447][T15337] (syz.6.4186,15337,0):ocfs2_mkdir:662 ERROR: status = -5 [ 421.989821][T14734] ocfs2: Unmounting device (7,6) on (node local) [ 423.178644][T15506] sctp: [Deprecated]: syz.3.4247 (pid 15506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.178644][T15506] Use struct sctp_sack_info instead [ 423.182171][T15507] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4246'. [ 423.304785][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4246'. [ 423.378449][T15507] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4246'. [ 423.433261][T15507] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4246'. [ 423.501103][T15507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4246'. [ 423.604057][T15521] loop6: detected capacity change from 0 to 64 [ 423.919117][T15530] loop3: detected capacity change from 0 to 64 [ 424.244984][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4260'. [ 424.645179][T15550] delete_channel: no stack [ 425.412633][T15579] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.623371][T15535] loop6: detected capacity change from 0 to 32768 [ 425.706733][T15535] (syz.6.4257,15535,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.726692][T15586] netlink: 'syz.4.4279': attribute type 10 has an invalid length. [ 425.759632][T15535] (syz.6.4257,15535,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.815073][T15585] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.846663][T15535] JBD2: Ignoring recovery information on journal [ 425.885024][T15586] macvlan0: entered promiscuous mode [ 425.893118][T15586] macvlan0: entered allmulticast mode [ 425.902934][T15586] veth1_vlan: entered allmulticast mode [ 425.913925][T15586] team0: Port device macvlan0 added [ 425.999017][T15535] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 426.697440][T14734] ocfs2: Unmounting device (7,6) on (node local) [ 427.283967][T15629] loop0: detected capacity change from 0 to 4096 [ 427.443842][T15629] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 427.554394][T15629] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 428.393100][T15672] netlink: get zone limit has 4 unknown bytes [ 428.574477][ T5978] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 428.668309][T15682] loop1: detected capacity change from 0 to 128 [ 428.743306][T15682] FAT-fs (loop1): Directory bread(block 162) failed [ 428.764350][T15682] FAT-fs (loop1): Directory bread(block 163) failed [ 428.781746][ T5978] usb 6-1: Using ep0 maxpacket: 8 [ 428.798176][T15682] FAT-fs (loop1): Directory bread(block 164) failed [ 428.817560][ T5978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 428.830191][T15682] FAT-fs (loop1): Directory bread(block 165) failed [ 428.850012][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.885882][T15682] FAT-fs (loop1): Directory bread(block 166) failed [ 428.892638][T15682] FAT-fs (loop1): Directory bread(block 167) failed [ 428.950270][T15682] FAT-fs (loop1): Directory bread(block 168) failed [ 428.961750][ T5978] pvrusb2: Hardware description: Terratec Grabster AV400 [ 428.990118][ T5978] pvrusb2: ********** [ 429.009349][T15682] FAT-fs (loop1): Directory bread(block 169) failed [ 429.011885][ T5978] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 429.054455][T15682] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.074634][ T5978] pvrusb2: Important functionality might not be entirely working. [ 429.111626][T15682] FAT-fs (loop1): Directory bread(block 162) failed [ 429.114193][ T5978] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 429.151617][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4321'. [ 429.175076][T15682] FAT-fs (loop1): Directory bread(block 163) failed [ 429.184418][ T5978] pvrusb2: ********** [ 429.190858][T15682] syz.1.4315: attempt to access beyond end of device [ 429.190858][T15682] loop1: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 429.213552][ T2339] pvrusb2: Invalid write control endpoint [ 429.264483][T15682] syz.1.4315: attempt to access beyond end of device [ 429.264483][T15682] loop1: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 429.323135][T15698] netlink: 'syz.3.4322': attribute type 2 has an invalid length. [ 429.404455][T15652] loop4: detected capacity change from 0 to 32768 [ 429.484410][T15652] (syz.4.4304,15652,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 429.519732][ T5915] usb 6-1: USB disconnect, device number 15 [ 429.543091][ T2339] pvrusb2: Invalid write control endpoint [ 429.568105][T15652] (syz.4.4304,15652,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 429.583064][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 429.640050][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 429.681785][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 429.712303][T15700] loop6: detected capacity change from 0 to 4096 [ 429.722926][ T2339] pvrusb2: Device being rendered inoperable [ 429.736516][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 429.747724][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 429.759038][ T2339] pvrusb2: Attached sub-driver cx25840 [ 429.765057][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 429.776076][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 429.786691][T15652] JBD2: Ignoring recovery information on journal [ 429.886699][T15709] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.977173][T15700] NILFS error (device loop6): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 430.042703][T15714] loop0: detected capacity change from 0 to 64 [ 430.050219][T15652] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 430.079750][T15700] Remounting filesystem read-only [ 430.687420][ T5819] ocfs2: Unmounting device (7,4) on (node local) [ 430.923250][T15734] team0: entered promiscuous mode [ 430.967504][T15734] team_slave_0: entered promiscuous mode [ 430.994395][T15734] team_slave_1: entered promiscuous mode [ 431.024490][T15734] team0: left allmulticast mode [ 431.054325][T15734] team_slave_0: left allmulticast mode [ 431.068372][T15734] team_slave_1: left allmulticast mode [ 431.080667][T15739] loop6: detected capacity change from 0 to 256 [ 431.155349][T15739] exfat: Deprecated parameter 'utf8' [ 431.223326][T15739] exfat: Deprecated parameter 'namecase' [ 431.267026][T15739] exfat: Deprecated parameter 'utf8' [ 431.438968][T15739] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 431.594954][T15739] Invalid source name [ 431.890400][T15764] netlink: 204476 bytes leftover after parsing attributes in process `syz.3.4348'. [ 432.238893][T15778] netlink: 200 bytes leftover after parsing attributes in process `syz.6.4355'. [ 433.060336][T15802] overlay: Bad value for 'workdir' [ 433.511723][T15776] loop5: detected capacity change from 0 to 32768 [ 433.538912][T15814] loop6: detected capacity change from 0 to 2048 [ 433.557226][T15818] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 433.633459][T15776] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.689432][T15814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.776982][T15776] XFS (loop5): Ending clean mount [ 433.995763][T14734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.174671][ T5820] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 434.608510][ T5834] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 434.690165][T15859] usb usb9: usbfs: process 15859 (syz.4.4391) did not claim interface 0 before use [ 434.804278][ T5834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.833752][T15861] loop1: detected capacity change from 0 to 2048 [ 434.843826][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.892680][T15861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.894788][ T5834] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 434.957674][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 434.968834][ T5834] usb 7-1: SerialNumber: syz [ 435.222024][ T5834] usb 7-1: 0:2 : does not exist [ 435.323474][T15877] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 435.425568][ T5834] usb 7-1: USB disconnect, device number 2 [ 435.637896][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.709119][T15889] loop4: detected capacity change from 0 to 256 [ 436.919002][T15926] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 437.217166][T15936] netlink: 3980 bytes leftover after parsing attributes in process `syz.3.4428'. [ 437.458358][T15905] loop5: detected capacity change from 0 to 32768 [ 437.459572][T15942] netlink: 'syz.1.4429': attribute type 10 has an invalid length. [ 437.523994][T15942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4429'. [ 437.543417][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.569737][T15942] dummy0: entered allmulticast mode [ 437.604258][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.605311][T15942] bridge0: port 3(dummy0) entered blocking state [ 437.670019][T15942] bridge0: port 3(dummy0) entered disabled state [ 437.700197][T15942] dummy0: entered promiscuous mode [ 437.747459][T15905] JBD2: Ignoring recovery information on journal [ 438.011203][T15905] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 438.111972][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 438.400348][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 438.501385][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 438.583057][T15905] (syz.5.4411,15905,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 438.623412][ T5844] Bluetooth: hci4: Malformed LE Event: 0x1b [ 438.639501][T15905] (syz.5.4411,15905,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 438.704896][T15905] (syz.5.4411,15905,0):ocfs2_quota_read:201 ERROR: status = -5 [ 438.749492][T15905] Quota error (device loop5): find_block_dqentry: Can't read quota tree block 6 [ 438.771074][T15905] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 438.814635][T15905] (syz.5.4411,15905,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 438.853436][T15905] (syz.5.4411,15905,1):ocfs2_mknod:318 ERROR: status = -5 [ 438.893138][T15905] (syz.5.4411,15905,1):ocfs2_mknod:506 ERROR: status = -5 [ 438.925880][T15905] (syz.5.4411,15905,1):ocfs2_mkdir:662 ERROR: status = -5 [ 438.984419][ T5931] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 439.155923][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 439.190029][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 97, changing to 7 [ 439.244614][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24929, setting to 1024 [ 439.296520][ T5820] ocfs2: Unmounting device (7,5) on (node local) [ 439.305006][ T5931] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 439.330005][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.346482][ T5931] usb 5-1: Product: syz [ 439.366731][ T5931] usb 5-1: Manufacturer: syz [ 439.386475][ T5931] usb 5-1: SerialNumber: syz [ 439.424738][ T5931] usb 5-1: config 0 descriptor?? [ 439.441751][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.459286][ T5931] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 439.510841][ T5931] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 439.754997][ T5931] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 439.868991][ T5931] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 439.894863][ T5931] em28xx 5-1:0.0: board has no eeprom [ 439.994754][ T5931] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 440.002641][ T5931] em28xx 5-1:0.0: dvb set to isoc mode. [ 440.031022][ T5834] em28xx 5-1:0.0: Binding DVB extension [ 440.069523][ T5931] usb 5-1: USB disconnect, device number 16 [ 440.107868][ T5931] em28xx 5-1:0.0: Disconnecting em28xx [ 440.415521][T16025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.427693][ T5834] em28xx 5-1:0.0: Registering input extension [ 440.484357][ T5931] em28xx 5-1:0.0: Closing input extension [ 440.595863][ T5931] em28xx 5-1:0.0: Freeing device [ 440.904394][T16040] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.103469][T16047] loop6: detected capacity change from 0 to 512 [ 441.192547][T16047] EXT4-fs: Ignoring removed orlov option [ 441.240142][T16047] EXT4-fs: Ignoring removed i_version option [ 441.276241][T16047] EXT4-fs: inline encryption not supported [ 441.334609][T16047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e854e01d, mo2=0003] [ 441.343490][T16047] System zones: 1-12 [ 441.380990][T16047] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4477: inode has both inline data and extents flags [ 441.476775][T16047] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.479924][T16061] openvswitch: netlink: Actions may not be safe on all matching packets [ 441.484252][T16047] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4477: couldn't read orphan inode 15 (err -117) [ 441.497565][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 441.497604][ C0] EXT4-fs (loop6): initial error at time 1774482338: ext4_orphan_get:1391: inode 15 [ 441.497658][ C0] EXT4-fs (loop6): last error at time 1774482338: ext4_orphan_get:1391: inode 15 [ 441.544286][T16047] loop6: lost filesystem error report for type 5 error -117 [ 441.552450][T16047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.867108][T14734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.496560][T16086] netlink: 'syz.6.4493': attribute type 3 has an invalid length. [ 442.524401][T16086] netlink: 666 bytes leftover after parsing attributes in process `syz.6.4493'. [ 442.866035][T16066] loop4: detected capacity change from 0 to 32768 [ 443.030481][T16073] loop3: detected capacity change from 0 to 32768 [ 443.116194][T16100] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 443.129261][T16073] jfs_mkdir: dtInsert returned -EIO [ 443.172936][T16073] ERROR: (device loop3): txAbort: [ 443.172936][T16073] [ 443.219497][T16073] ERROR: (device loop3): remounting filesystem as read-only [ 443.739912][T16116] openvswitch: netlink: IP tunnel dst address not specified [ 444.305149][T16133] netlink: 'syz.5.4514': attribute type 10 has an invalid length. [ 444.335130][T16133] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4514'. [ 444.502771][T16102] loop6: detected capacity change from 0 to 32768 [ 445.357414][T16156] loop1: detected capacity change from 0 to 8192 [ 445.476935][T16165] loop5: detected capacity change from 0 to 1764 [ 446.071395][T16178] xt_hashlimit: invalid rate [ 446.146141][T16181] [U] [ 446.149181][T16181] [U] [ 446.151905][T16181] [U] [ 446.154634][T16181] [U] [ 446.192636][T16181] [U] [ 446.195415][T16181] [U] [ 446.198139][T16181] [U] [ 446.200863][T16181] [U] [ 446.216237][T16161] comedi comedi2: reset error (fatal) [ 446.258058][T16181] [U] [ 446.260839][T16181] [U] [ 446.263658][T16181] [U] [ 446.288542][T16179] [U] [ 446.704596][T16201] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4547'. [ 447.084348][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 447.112199][ T5844] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 447.258752][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 447.284760][ T9] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 447.305072][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.313128][ T9] usb 7-1: Product: syz [ 447.314850][T16191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.327836][ T9] usb 7-1: Manufacturer: syz [ 447.332489][ T9] usb 7-1: SerialNumber: syz [ 447.505759][ T9] usb 7-1: config 0 descriptor?? [ 447.536488][ T9] as10x_usb: device has been detected [ 447.553180][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 447.676048][ T9] usb 7-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 447.724548][T16205] random: crng reseeded on system resumption [ 447.760359][ T9] as10x_usb: error during firmware upload part1 [ 447.855414][ T9] Registered device Sky IT Digital Key (green led) [ 447.886957][ T9] usb 7-1: USB disconnect, device number 3 [ 447.901412][ T30] audit: type=1326 audit(1774482345.291:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16238 comm="syz.1.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e639c799 code=0x7ffc0000 [ 447.976170][T16242] comedi comedi2: s526: I/O port conflict (0x4,64) [ 448.016508][ T30] audit: type=1326 audit(1774482345.291:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16238 comm="syz.1.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e639c799 code=0x7ffc0000 [ 448.027127][ T9] Unregistered device Sky IT Digital Key (green led) [ 448.114502][ T30] audit: type=1326 audit(1774482345.331:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16238 comm="syz.1.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f86e639c799 code=0x7ffc0000 [ 448.120454][ T9] as10x_usb: device has been disconnected [ 448.144450][ T30] audit: type=1326 audit(1774482345.331:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16238 comm="syz.1.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e639c799 code=0x7ffc0000 [ 448.192081][ T30] audit: type=1326 audit(1774482345.331:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16238 comm="syz.1.4568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e639c799 code=0x7ffc0000 [ 448.204321][T16247] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4570'. [ 448.407724][T16253] netlink: 'syz.0.4574': attribute type 7 has an invalid length. [ 448.752152][T16263] loop6: detected capacity change from 0 to 1024 [ 448.868505][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4581'. [ 449.087706][T16275] loop3: detected capacity change from 0 to 764 [ 449.158191][T15378] hfsplus: b-tree write err: -5, ino 8 [ 449.199529][T16275] Symlink component flag not implemented [ 449.234976][T16275] Symlink component flag not implemented (15) [ 450.242852][T16316] Lens A: ================= START STATUS ================= [ 450.279698][T16316] Lens A: Focus, Absolute: 1023 [ 450.328901][T16316] Lens A: ================== END STATUS ================== [ 450.594465][T16324] netlink: 'syz.5.4609': attribute type 1 has an invalid length. [ 450.674451][T16327] netlink: 'syz.3.4611': attribute type 3 has an invalid length. [ 450.700271][T16322] loop6: detected capacity change from 0 to 4096 [ 450.706957][T16327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4611'. [ 450.802457][T16328] bond1: Removing last arp target with arp_interval on [ 450.865662][T16328] bond1: entered promiscuous mode [ 450.874358][T16328] bond1: entered allmulticast mode [ 450.880038][T16328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.889229][T16322] ntfs3(loop6): ino=5, "/" indx_read_ra [ 451.079574][T16335] loop5: detected capacity change from 0 to 1024 [ 451.367966][T15384] hfsplus: b-tree write err: -5, ino 25 [ 451.397164][T15384] hfsplus: b-tree write err: -5, ino 4 [ 451.439692][T15384] hfsplus: b-tree write err: -5, ino 2 [ 451.466637][ T30] audit: type=1326 audit(1774482348.841:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16344 comm="syz.3.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a8b9c799 code=0x7ffc0000 [ 451.592672][ T30] audit: type=1326 audit(1774482348.841:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16344 comm="syz.3.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a8b9c799 code=0x7ffc0000 [ 451.703912][ T30] audit: type=1326 audit(1774482348.891:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16344 comm="syz.3.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f07a8b9c799 code=0x7ffc0000 [ 451.798010][ T30] audit: type=1326 audit(1774482348.891:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16344 comm="syz.3.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07a8b9c799 code=0x7ffc0000 [ 451.915354][T16320] loop4: detected capacity change from 0 to 32768 [ 452.054627][T16320] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 452.251139][T16320] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 452.307111][T16320] XFS (loop4): Ending clean mount [ 452.714773][ T5819] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 453.070119][T16397] loop6: detected capacity change from 0 to 2048 [ 453.104472][T16397] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 453.163833][T16401] loop1: detected capacity change from 0 to 512 [ 453.222944][T16403] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 453.280210][T16401] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 453.348906][T16397] NILFS (loop6): error -2 truncating bmap (ino=16) [ 453.358148][T16401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 453.454614][T16401] EXT4-fs (loop1): orphan cleanup on readonly fs [ 453.484449][T16401] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 453.515160][T16401] EXT4-fs warning (device loop1): ext4_enable_quotas:7232: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 453.597486][T16401] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 453.644527][T16401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.4644: bg 0: block 40: padding at end of block bitmap is not set [ 453.711296][T16371] loop0: detected capacity change from 0 to 32768 [ 453.715622][T16401] loop1: lost filesystem error report for type 5 error -117 [ 453.724183][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 453.738098][ C1] EXT4-fs (loop1): initial error at time 1774482351: ext4_validate_block_bitmap:440 [ 453.747567][ C1] EXT4-fs (loop1): last error at time 1774482351: ext4_validate_block_bitmap:440 [ 453.803268][T16401] EXT4-fs (loop1): Remounting filesystem read-only [ 453.874443][T16401] EXT4-fs (loop1): 1 truncate cleaned up [ 453.884379][T16371] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 453.975331][T16401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.137006][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.160548][T16371] XFS (loop0): Ending clean mount [ 454.166691][T16429] bond2: Removing last arp target with arp_interval on [ 454.176154][T16429] bond2: entered promiscuous mode [ 454.181272][T16429] bond2: entered allmulticast mode [ 454.187521][T16429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.392075][ T5821] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 455.122345][T16460] loop5: detected capacity change from 0 to 512 [ 455.173036][T16464] MTD: Couldn't look up './file0': -15 [ 455.351806][T16460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.395813][T16474] xt_TPROXY: Can be used only with -p tcp or -p udp [ 455.434937][T16460] ext4 filesystem being mounted at /733/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.700280][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.152807][T16501] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.4685'. [ 456.384455][T16509] netlink: 'syz.1.4689': attribute type 4 has an invalid length. [ 456.601741][T16505] loop0: detected capacity change from 0 to 8192 [ 456.662349][T16505] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.700581][T16517] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 456.737379][T16505] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 456.797059][T16505] FAT-fs (loop0): Filesystem has been set read-only [ 457.434455][ T5931] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 457.558150][ T1203] Process accounting resumed [ 457.588980][T16537] loop1: detected capacity change from 0 to 4096 [ 457.599529][T16511] loop5: detected capacity change from 0 to 32768 [ 457.638511][ T5931] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 457.659464][T16511] (syz.5.4690,16511,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 457.686341][T16537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.699176][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.749878][ T5931] usb 1-1: Product: syz [ 457.756305][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4708'. [ 457.765559][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4708'. [ 457.777894][ T5931] usb 1-1: Manufacturer: syz [ 457.818709][ T5931] usb 1-1: SerialNumber: syz [ 457.825390][T16511] (syz.5.4690,16511,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 457.857130][ T5931] usb 1-1: config 0 descriptor?? [ 457.917183][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.004709][T16511] JBD2: Ignoring recovery information on journal [ 458.203136][T16511] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 458.423036][ T5931] usb 1-1: USB disconnect, device number 15 [ 458.610979][ T5820] ocfs2: Unmounting device (7,5) on (node local) [ 458.765830][T16572] loop3: detected capacity change from 0 to 512 [ 458.913264][T16572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.009770][T16572] ext4 filesystem being mounted at /817/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.094415][ T5978] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 459.261938][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.279388][ T5978] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 459.317314][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.360830][ T5978] usb 7-1: config 0 descriptor?? [ 459.381259][ T5978] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 459.394358][T16590] loop5: detected capacity change from 0 to 512 [ 459.800047][ T5978] gspca_stv06xx: I2C: Read error writing address: -71 [ 459.857781][ T5978] usb 7-1: USB disconnect, device number 4 [ 460.217887][T16617] loop4: detected capacity change from 0 to 2048 [ 460.252723][T16617] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 460.291966][T16621] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.337116][T16617] NILFS (loop4): error -2 truncating bmap (ino=16) [ 460.372998][ T5915] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 460.569606][ T5915] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 460.617383][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.631910][T16631] netlink: 'syz.3.4748': attribute type 4 has an invalid length. [ 460.646184][T16631] netlink: 'syz.3.4748': attribute type 1 has an invalid length. [ 460.654045][T16631] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4748'. [ 460.678046][ T5915] usb 6-1: config 0 descriptor?? [ 460.857521][ T5834] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 461.072284][ T5834] usb 7-1: unable to get BOS descriptor or descriptor too short [ 461.086561][ T5834] usb 7-1: not running at top speed; connect to a high speed hub [ 461.111686][ T5834] usb 7-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 461.124917][ T5915] ath6kl: Failed to submit usb control message: -71 [ 461.137741][ T5915] ath6kl: unable to send the bmi data to the device: -71 [ 461.145222][ T5834] usb 7-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.161873][ T5915] ath6kl: Unable to send get target info: -71 [ 461.169113][ T5834] usb 7-1: config 1 interface 0 has no altsetting 0 [ 461.176469][ T5915] ath6kl: Failed to init ath6kl core: -71 [ 461.209194][ T5834] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 461.222647][ T5915] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 461.242726][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.263185][ T5834] usb 7-1: Product: syz [ 461.271149][ T5834] usb 7-1: Manufacturer: syz [ 461.278439][ T5915] usb 6-1: USB disconnect, device number 16 [ 461.307497][ T5834] usb 7-1: SerialNumber: syz [ 461.337709][T16627] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 461.416495][T16652] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4754'. [ 461.645565][ T5834] usbhid 7-1:1.0: can't add hid device: -71 [ 461.658653][ T5844] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 461.677579][ T5834] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 461.702313][ T5834] usb 7-1: USB disconnect, device number 5 [ 462.032720][T16670] netlink: 'syz.1.4764': attribute type 4 has an invalid length. [ 462.061332][T16670] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4764'. [ 462.457807][T16685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.479718][T16687] netlink: 'syz.0.4772': attribute type 1 has an invalid length. [ 462.870475][T16702] netlink: 'syz.5.4780': attribute type 1 has an invalid length. [ 463.420784][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4789'. [ 463.439583][T16721] netlink: 'syz.1.4790': attribute type 1 has an invalid length. [ 463.470831][T16721] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4790'. [ 463.530999][T16720] IPv6: sit1: Disabled Multicast RS [ 463.900835][T16731] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 464.132508][ T30] audit: type=1400 audit(1774482361.521:163): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16739 comm="syz.1.4799" [ 464.440913][T16752] loop4: detected capacity change from 0 to 256 [ 464.587571][T16752] FAT-fs (loop4): Directory bread(block 64) failed [ 464.634314][T16752] FAT-fs (loop4): Directory bread(block 65) failed [ 464.640980][T16752] FAT-fs (loop4): Directory bread(block 66) failed [ 464.711944][T16752] FAT-fs (loop4): Directory bread(block 67) failed [ 464.723764][T16752] FAT-fs (loop4): Directory bread(block 68) failed [ 464.774245][T16752] FAT-fs (loop4): Directory bread(block 69) failed [ 464.780942][T16752] FAT-fs (loop4): Directory bread(block 70) failed [ 464.854987][T16752] FAT-fs (loop4): Directory bread(block 71) failed [ 464.903385][T16752] FAT-fs (loop4): Directory bread(block 72) failed [ 464.934209][T16752] FAT-fs (loop4): Directory bread(block 73) failed [ 465.007452][T16772] xfrm1: entered allmulticast mode [ 465.847761][T16796] loop1: detected capacity change from 0 to 4096 [ 465.890304][T16796] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 465.966474][T16796] ntfs3(loop1): ino=1a, mi_enum_attr [ 465.984048][T16796] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 466.024579][T16796] ntfs3(loop1): ino=1a, mi_enum_attr [ 466.036695][T16796] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 466.166933][T16812] netlink: 408 bytes leftover after parsing attributes in process `syz.5.4834'. [ 466.399976][ T5844] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 466.410726][ T5844] Bluetooth: hci2: Injecting HCI hardware error event [ 466.420514][ T5844] Bluetooth: hci2: hardware error 0x00 [ 466.919413][T16829] geneve2: entered promiscuous mode [ 466.993459][T16841] loop3: detected capacity change from 0 to 1024 [ 467.186406][T16841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.253625][T16850] netlink: 'syz.0.4849': attribute type 2 has an invalid length. [ 467.254409][T16841] ext4 filesystem being mounted at /843/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.302194][T16850] netlink: 'syz.0.4849': attribute type 2 has an invalid length. [ 467.379658][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 467.431065][T16841] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.4848: directory missing '..' [ 467.643234][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 467.777363][T16868] loop5: detected capacity change from 0 to 1024 [ 467.780955][T16863] loop4: detected capacity change from 0 to 4096 [ 468.235064][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 468.414231][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 468.459229][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 468.478724][ T9] usb 7-1: config 179 has no interface number 0 [ 468.498475][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 468.523844][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 468.556403][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.575586][T16890] loop4: detected capacity change from 0 to 128 [ 468.614540][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 468.625398][T16890] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 468.635003][ T5844] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 468.681813][ T9] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 468.728939][T16890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.754313][ T9] usb 7-1: config 179 interface 65 has no altsetting 0 [ 468.786730][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 468.826366][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.927657][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input25 [ 469.112264][ T9] usb 7-1: USB disconnect, device number 6 [ 469.174212][ T5834] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 469.282469][T16910] loop0: detected capacity change from 0 to 2048 [ 469.371170][ T5834] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 469.393610][T16910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.421168][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.448926][ T30] audit: type=1800 audit(1774482366.841:164): pid=16910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4881" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 469.487368][ T5834] usb 4-1: config 0 descriptor?? [ 469.517850][ T5834] usb 4-1: Invalid firmware size=18. [ 469.729785][ T24] usb 4-1: USB disconnect, device number 18 [ 469.824392][T16922] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 470.530983][T16952] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 50294 out of range (51000000..2150000000) [ 470.628517][T16957] binder: 16955:16957 ioctl 40046210 0 returned -14 [ 470.684409][T16959] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 472.071503][T16969] loop5: detected capacity change from 0 to 32768 [ 472.428300][ T5915] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 472.631215][ T5915] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 472.661612][ T5915] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.733240][ T5915] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 472.774169][ T5915] usb 7-1: config 1 has no interface number 1 [ 472.806559][ T5915] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 472.870390][ T5915] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.899142][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.944272][ T5915] usb 7-1: Product: syz [ 472.962020][ T5915] usb 7-1: Manufacturer: syz [ 472.991548][ T5915] usb 7-1: SerialNumber: syz [ 473.271413][ T5915] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 473.301616][ T5915] usb 7-1: MIDIStreaming interface descriptor not found [ 473.534567][T17053] loop5: detected capacity change from 0 to 256 [ 473.545736][ T5915] usb 7-1: USB disconnect, device number 7 [ 473.551450][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4948'. [ 473.580458][T17054] bridge_slave_1: left allmulticast mode [ 473.600572][T17054] bridge_slave_1: left promiscuous mode [ 473.614479][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.658652][T17054] bridge_slave_0: left allmulticast mode [ 473.689592][T17053] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 473.711607][T17054] bridge_slave_0: left promiscuous mode [ 473.734851][T17053] FAT-fs (loop5): Filesystem has been set read-only [ 473.741599][T17053] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 473.757609][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.769020][ T7454] udevd[7454]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.903582][T17059] loop1: detected capacity change from 0 to 512 [ 473.947372][T17059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.086683][T17059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.166963][T17037] loop4: detected capacity change from 0 to 32768 [ 474.224682][T17059] ext4 filesystem being mounted at /846/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.243493][T17037] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4942 (17037) [ 474.310565][T17037] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 474.377652][T17037] BTRFS info (device loop4): using blake2b checksum algorithm [ 474.592730][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.717411][T17037] BTRFS info (device loop4): enabling ssd optimizations [ 474.774302][T17037] BTRFS info (device loop4): turning on async discard [ 474.781139][T17037] BTRFS info (device loop4): enabling free space tree [ 474.969543][T17102] loop3: detected capacity change from 0 to 256 [ 474.973352][T17104] IPv6: sit1: Disabled Multicast RS [ 475.007587][T17102] exfat: Deprecated parameter 'utf8' [ 475.025041][T17102] exfat: Deprecated parameter 'utf8' [ 475.030521][T17102] exfat: Deprecated parameter 'utf8' [ 475.089541][T17102] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 475.109246][ T5819] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 475.258747][T17102] exfat: Deprecated parameter 'utf8' [ 475.264100][T17102] exfat: Deprecated parameter 'utf8' [ 475.306545][T17102] exfat: Deprecated parameter 'utf8' [ 475.795374][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4972'. [ 476.243554][T17099] loop6: detected capacity change from 0 to 32768 [ 476.298451][T17099] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4964 (17099) [ 476.405034][T17099] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 476.432413][T17108] loop0: detected capacity change from 0 to 32768 [ 476.455084][T17099] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 476.462711][T17099] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 476.523707][T17108] (syz.0.4967,17108,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 476.652673][T17108] (syz.0.4967,17108,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 476.722469][T17099] BTRFS info (device loop6): rebuilding free space tree [ 476.743477][T17108] JBD2: Ignoring recovery information on journal [ 476.791769][T17099] BTRFS info (device loop6): disabling free space tree [ 476.814241][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.864303][T17099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 476.911912][T17158] ksmbd: Unknown IPC event: 1, ignore. [ 476.935033][T17099] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 476.946835][T17108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 476.981737][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 477.024087][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 477.032465][ T24] usb 2-1: config 179 has no interface number 0 [ 477.041121][T17099] BTRFS info (device loop6): allowing degraded mounts [ 477.084833][T17099] BTRFS info (device loop6): enabling ssd optimizations [ 477.086955][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 477.150406][T17099] BTRFS info (device loop6): turning on async discard [ 477.151848][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 477.173720][T17099] BTRFS info (device loop6): enabling disk space caching [ 477.218612][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 477.230405][T17099] BTRFS info (device loop6): force clearing of disk cache [ 477.248201][ T24] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 477.275753][T17099] BTRFS info (device loop6): use zlib compression, level 3 [ 477.293430][ T24] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 477.330350][ T24] usb 2-1: config 179 interface 65 has no altsetting 0 [ 477.358250][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 477.389474][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.470613][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26 [ 477.548486][ T5821] ocfs2: Unmounting device (7,0) on (node local) [ 477.574925][T14734] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 477.613867][ T5172] input input26: unable to receive magic message: -110 [ 477.814298][ T5172] input input26: unable to receive magic message: -71 [ 477.918941][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 477.941106][ T24] usb 2-1: USB disconnect, device number 11 [ 477.947377][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 478.141227][T17180] CIFS mount error: No usable UNC path provided in device string! [ 478.141227][T17180] [ 478.194679][T17180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 478.426393][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'. [ 478.906146][T17198] loop1: detected capacity change from 0 to 16 [ 478.944747][T17198] erofs (device loop1): mounted with root inode @ nid 36. [ 479.582014][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5016'. [ 479.640026][T17228] loop5: detected capacity change from 0 to 8 [ 479.648369][T17222] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5014'. [ 479.693890][T17222] bridge_slave_1: default FDB implementation only supports local addresses [ 479.727320][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5019'. [ 479.761806][T17228] SQUASHFS error: Unable to read directory block [2c0:35] [ 479.810301][T17228] SQUASHFS error: Unable to read directory block [2c0:35] [ 480.134919][T17245] loop6: detected capacity change from 0 to 512 [ 480.147315][T17248] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 480.194680][T17242] wireguard0: entered promiscuous mode [ 480.236847][T17245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.315912][T17242] wireguard0: entered allmulticast mode [ 480.336035][T17245] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.738449][T14734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.956267][T17270] loop1: detected capacity change from 0 to 512 [ 481.001752][T17270] EXT4-fs: Ignoring removed bh option [ 481.038670][T17270] EXT4-fs (loop1): orphan cleanup on readonly fs [ 481.140002][T17270] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #11: block 1: comm syz.1.5038: lblock 0 mapped to illegal pblock 1 (length 1) [ 481.158986][T17270] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.164170][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 481.180051][ C0] EXT4-fs (loop1): initial error at time 1774482378: ext4_map_blocks:776: inode 11: block 1 [ 481.190251][ C0] EXT4-fs (loop1): last error at time 1774482378: ext4_map_blocks:776: inode 11: block 1 [ 481.191789][T17270] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 481.286555][T17270] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.5038: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 481.380251][T17270] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.406719][T17270] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.1.5038: ea_inode dec ref err=-117 [ 481.427741][T17286] dlm: no locking on control device [ 481.474932][T17270] EXT4-fs (loop1): 1 orphan inode deleted [ 481.491490][T17270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 481.571014][T17291] netlink: 'syz.4.5047': attribute type 12 has an invalid length. [ 481.771174][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.873194][T17300] loop3: detected capacity change from 0 to 128 [ 481.925932][T17300] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 482.018796][T17300] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 482.477700][T17317] netlink: 'syz.5.5060': attribute type 12 has an invalid length. [ 482.509846][T17317] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5060'. [ 482.549358][T17321] netlink: 'syz.0.5062': attribute type 3 has an invalid length. [ 482.585974][T17321] netlink: 'syz.0.5062': attribute type 1 has an invalid length. [ 482.598155][T17321] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5062'. [ 482.862996][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5067'. [ 482.885752][T17337] netlink: 'syz.6.5069': attribute type 21 has an invalid length. [ 482.903696][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5067'. [ 482.975949][T17337] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5069'. [ 483.031589][T17336] loop1: detected capacity change from 0 to 4096 [ 483.321531][T17336] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 483.382525][T17336] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 483.426351][T17351] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5076'. [ 484.656699][T17383] wireguard0: entered promiscuous mode [ 484.662316][T17383] wireguard0: entered allmulticast mode [ 485.024395][T17405] misc userio: Invalid payload size [ 485.264641][T17413] netlink: 'syz.6.5107': attribute type 6 has an invalid length. [ 485.272592][T17413] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5107'. [ 485.712935][T17427] loop6: detected capacity change from 0 to 1764 [ 485.904274][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 486.089024][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 486.137797][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.179856][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.198935][ T24] usb 1-1: SerialNumber: syz [ 486.500151][T17456] loop4: detected capacity change from 0 to 1024 [ 486.559514][T17458] loop1: detected capacity change from 0 to 256 [ 486.702218][ T49] hfsplus: b-tree write err: -5, ino 25 [ 486.727780][T17458] FAT-fs (loop1): Directory bread(block 64) failed [ 486.732187][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 486.737317][T17464] netlink: 'syz.6.5132': attribute type 64 has an invalid length. [ 486.753467][ T49] hfsplus: b-tree write err: -5, ino 4 [ 486.763817][T17458] FAT-fs (loop1): Directory bread(block 65) failed [ 486.769334][ T49] hfsplus: b-tree write err: -5, ino 2 [ 486.780202][T17458] FAT-fs (loop1): Directory bread(block 66) failed [ 486.807085][T17464] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5132'. [ 486.808679][ T24] usb 1-1: USB disconnect, device number 16 [ 486.837218][T17458] FAT-fs (loop1): Directory bread(block 67) failed [ 486.843988][T17458] FAT-fs (loop1): Directory bread(block 68) failed [ 486.924259][T17458] FAT-fs (loop1): Directory bread(block 69) failed [ 486.936452][T17458] FAT-fs (loop1): Directory bread(block 70) failed [ 486.966121][T17458] FAT-fs (loop1): Directory bread(block 71) failed [ 486.994369][T17458] FAT-fs (loop1): Directory bread(block 72) failed [ 487.001498][T17458] FAT-fs (loop1): Directory bread(block 73) failed [ 487.170101][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5136'. [ 487.234233][ T5915] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 487.450733][T17480] loop3: detected capacity change from 0 to 128 [ 487.457213][ T5915] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.484476][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.500070][T17480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 487.526020][ T5915] usb 6-1: config 0 descriptor?? [ 487.537215][ T5915] cp210x 6-1:0.0: cp210x converter detected [ 487.558331][T17480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.723498][T17480] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 487.817405][T17480] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed [ 487.991668][ T5915] usb 6-1: cp210x converter now attached to ttyUSB0 [ 488.015669][ T5915] usb 6-1: USB disconnect, device number 17 [ 488.028061][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 488.036688][ T5915] cp210x 6-1:0.0: device disconnected [ 488.119870][ T5823] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 488.144555][ T5823] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh [ 488.194352][ T1203] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 488.366608][ T1203] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 488.391314][ T1203] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 488.411393][ T1203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.435050][ T1203] usb 7-1: Product: syz [ 488.448754][ T1203] usb 7-1: Manufacturer: syz [ 488.455582][ T1203] usb 7-1: SerialNumber: syz [ 488.496560][ T1203] usb 7-1: config 0 descriptor?? [ 488.502430][T17492] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 488.514360][T17492] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 488.574744][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 488.594594][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 488.615460][ T1203] port100 7-1:0.0: NFC: Could not get supported command types [ 488.751018][T17508] loop4: detected capacity change from 0 to 4096 [ 488.787958][ T5915] usb 7-1: USB disconnect, device number 8 [ 488.903439][T15378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.984835][T17508] ntfs3(loop4): ino=1e, "file1" attr_set_size_ex [ 489.017874][T17508] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 489.216042][T15378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.343989][T15378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.656510][T15378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.789012][T17533] loop4: detected capacity change from 0 to 256 [ 489.873674][T17533] FAT-fs (loop4): Directory bread(block 64) failed [ 489.899668][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 489.913555][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 489.915047][T17533] FAT-fs (loop4): Directory bread(block 65) failed [ 489.929535][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 489.958586][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 489.975500][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.995618][T17533] FAT-fs (loop4): Directory bread(block 66) failed [ 490.002705][T17533] FAT-fs (loop4): Directory bread(block 67) failed [ 490.042536][T17533] FAT-fs (loop4): Directory bread(block 68) failed [ 490.064913][ T1203] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 490.095965][T17533] FAT-fs (loop4): Directory bread(block 69) failed [ 490.102670][T17533] FAT-fs (loop4): Directory bread(block 70) failed [ 490.111146][T17533] FAT-fs (loop4): Directory bread(block 71) failed [ 490.158064][T17533] FAT-fs (loop4): Directory bread(block 72) failed [ 490.208774][T17533] FAT-fs (loop4): Directory bread(block 73) failed [ 490.247565][T17536] wg1 speed is unknown, defaulting to 1000 [ 490.275176][ T1203] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 490.298107][ T1203] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 490.323223][T17533] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.328107][ T1203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 490.372813][ T1203] usb 6-1: Product: syz [ 490.403452][ T1203] usb 6-1: Manufacturer: syz [ 490.418921][ T1203] usb 6-1: SerialNumber: syz [ 490.462855][ T1203] usb 6-1: config 0 descriptor?? [ 490.496003][ T1203] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 490.503993][ T1203] pctv452e: pctv452e_power_ctrl: 1 [ 490.503993][ T1203] [ 490.534413][ T1203] usb 6-1: selecting invalid altsetting 3 [ 490.540191][ T1203] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 490.540191][ T1203] [ 490.573057][ T1203] dvb-usb: bulk message failed: -22 (5/0) [ 490.615310][ T1203] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 490.659121][T17549] loop0: detected capacity change from 0 to 4096 [ 490.659394][ T1203] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 490.737671][ T1203] usb 6-1: USB disconnect, device number 18 [ 490.804047][T17549] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 490.826989][T17549] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 491.237603][T17561] openvswitch: netlink: IP tunnel dst address not specified [ 491.572642][T15378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.578629][ T30] audit: type=1326 audit(1774482388.971:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 491.652392][T15378] bond0 (unregistering): Released all slaves [ 491.692407][ T30] audit: type=1326 audit(1774482389.001:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 491.693836][T15378] bond1 (unregistering): Released all slaves [ 491.783150][ T30] audit: type=1326 audit(1774482389.001:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 491.861961][T17578] loop0: detected capacity change from 0 to 1764 [ 491.874188][ T30] audit: type=1326 audit(1774482389.001:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 491.959707][ T30] audit: type=1326 audit(1774482389.001:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 492.040305][ T30] audit: type=1326 audit(1774482389.001:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 492.093716][ T5837] Bluetooth: hci5: command tx timeout [ 492.191880][ T30] audit: type=1326 audit(1774482389.001:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 492.314278][ T30] audit: type=1326 audit(1774482389.011:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 492.344811][ T30] audit: type=1326 audit(1774482389.011:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17570 comm="syz.0.5187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77e839c799 code=0x7ffc0000 [ 492.498070][T17595] netlink: 'syz.0.5195': attribute type 16 has an invalid length. [ 492.528999][T17595] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5195'. [ 492.667795][T17590] loop5: detected capacity change from 0 to 4096 [ 492.906390][T17590] ntfs3(loop5): ino=1e, "file1" attr_set_size_ex [ 492.912887][T17590] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 493.092423][T17610] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 493.403085][T17536] chnl_net:caif_netlink_parms(): no params data found [ 493.579004][T17626] xt_ecn: cannot match TCP bits for non-tcp packets [ 493.849096][T17631] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 494.155893][ T5837] Bluetooth: hci5: command tx timeout [ 494.178090][T17642] netlink: zone id is out of range [ 494.299700][T17649] vivid-000: ================= START STATUS ================= [ 494.338420][T17649] vivid-000: Generate PTS: true [ 494.418939][T17649] vivid-000: Generate SCR: true [ 494.434973][T17642] netlink: set zone limit has 4 unknown bytes [ 494.453926][T17649] tpg source WxH: 320x240 (HSV) [ 494.490170][T17649] tpg field: 1 [ 494.500286][T17649] tpg crop: (0,0)/320x240 [ 494.515936][T17649] tpg compose: (0,0)/320x240 [ 494.533388][T17649] tpg colorspace: 8 [ 494.548721][T17649] tpg transfer function: 0/2 [ 494.566836][T17649] tpg HSV encoding: 0/0 [ 494.577524][T17649] tpg quantization: 2/2 [ 494.594362][T17649] tpg RGB range: 0/2 [ 494.596073][T15378] hsr_slave_0: left promiscuous mode [ 494.608665][T17649] vivid-000: ================== END STATUS ================== [ 494.632691][T15378] hsr_slave_1: left promiscuous mode [ 494.655218][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.662658][T15378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.765547][T15378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.773639][T17621] loop0: detected capacity change from 0 to 32768 [ 494.834465][T15378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.913971][T15378] veth1_macvtap: left promiscuous mode [ 494.953971][T15378] veth0_macvtap: left promiscuous mode [ 494.960627][T15378] veth1_vlan: left promiscuous mode [ 495.201928][T17673] usb usb8: usbfs: process 17673 (syz.6.5226) did not claim interface 0 before use [ 496.044724][ T5931] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 496.226800][ T5931] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.244453][ T5837] Bluetooth: hci5: command tx timeout [ 496.257722][ T5931] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.269144][T15378] team0 (unregistering): Port device team_slave_1 removed [ 496.272466][ T5931] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 496.309116][T15378] team0 (unregistering): Port device team_slave_0 removed [ 496.337246][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 496.354798][ T5931] usb 6-1: SerialNumber: syz [ 496.412283][ T5931] usb 6-1: 0:2 : does not exist [ 496.688027][T17536] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.701154][T17536] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.727943][T17536] bridge_slave_0: entered allmulticast mode [ 496.763898][T17536] bridge_slave_0: entered promiscuous mode [ 496.785106][T17536] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.792380][T17536] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.818560][ T5931] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 496.827266][T17536] bridge_slave_1: entered allmulticast mode [ 496.858683][ T5834] usb 6-1: USB disconnect, device number 19 [ 496.868914][T17536] bridge_slave_1: entered promiscuous mode [ 497.000551][ T5931] usb 1-1: too many configurations: 203, using maximum allowed: 8 [ 497.041495][ T5931] usb 1-1: config index 0 descriptor too short (expected 65280, got 72) [ 497.063687][ T5931] usb 1-1: config index 1 descriptor too short (expected 65280, got 72) [ 497.087918][ T5931] usb 1-1: config index 2 descriptor too short (expected 65280, got 72) [ 497.108968][ T5931] usb 1-1: config index 3 descriptor too short (expected 65280, got 72) [ 497.129043][ T5931] usb 1-1: config index 4 descriptor too short (expected 65280, got 72) [ 497.162179][ T5931] usb 1-1: config index 5 descriptor too short (expected 65280, got 72) [ 497.196094][ T5931] usb 1-1: config index 6 descriptor too short (expected 65280, got 72) [ 497.196873][T17536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.215631][ T5931] usb 1-1: config index 7 descriptor too short (expected 65280, got 72) [ 497.233731][ T5931] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 497.248206][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.264586][ T5931] usb 1-1: Product: syz [ 497.269468][ T5931] usb 1-1: Manufacturer: syz [ 497.274086][ T5931] usb 1-1: SerialNumber: syz [ 497.292870][T17536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.335947][ T5931] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 497.409420][ T5834] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 497.493138][T17536] team0: Port device team_slave_0 added [ 497.549391][T17536] team0: Port device team_slave_1 added [ 498.001279][T17536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.129776][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.326947][ T5837] Bluetooth: hci5: command tx timeout [ 498.415852][T17536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.440071][T17739] loop6: detected capacity change from 0 to 64 [ 498.527407][T17536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.646971][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.986257][T17536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.257537][ T24] usb 1-1: USB disconnect, device number 17 [ 499.275677][ T5834] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 499.283359][ T5834] ath9k_htc: Failed to initialize the device [ 499.298145][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 499.512448][T17536] hsr_slave_0: entered promiscuous mode [ 499.541053][T17536] hsr_slave_1: entered promiscuous mode [ 499.585393][T17536] debugfs: 'hsr0' already exists in 'hsr' [ 499.591194][T17536] Cannot create hsr debugfs directory [ 499.708365][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5260'. [ 499.878133][T17723] loop4: detected capacity change from 0 to 32768 [ 499.897975][T17723] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5251 (17723) [ 500.014860][T17723] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 500.056126][T17723] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 500.077319][T17723] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 500.313974][T17785] loop6: detected capacity change from 0 to 128 [ 500.455137][T17723] BTRFS info (device loop4): rebuilding free space tree [ 500.594348][T17723] BTRFS info (device loop4): disabling free space tree [ 500.664273][T17723] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 500.674003][T17723] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 500.676697][T17795] loop5: detected capacity change from 0 to 1764 [ 500.830825][T17723] BTRFS info (device loop4): allowing degraded mounts [ 500.880733][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.883065][T17723] BTRFS info (device loop4): enabling ssd optimizations [ 500.908314][T17802] vivid-000: ================= START STATUS ================= [ 500.914867][T17723] BTRFS info (device loop4): turning on async discard [ 500.944223][T17802] vivid-000: Generate PTS: true [ 500.944311][T17723] BTRFS info (device loop4): enabling disk space caching [ 500.949176][T17802] vivid-000: Generate SCR: true [ 500.949265][T17802] tpg source WxH: 320x180 (Y'CbCr) [ 500.972147][T17723] BTRFS info (device loop4): force clearing of disk cache [ 501.005462][T17723] BTRFS info (device loop4): use zlib compression, level 3 [ 501.056289][T17802] tpg field: 1 [ 501.070237][T17802] tpg crop: (0,0)/320x180 [ 501.120789][T17802] tpg compose: (0,0)/320x180 [ 501.151527][T17802] tpg colorspace: 8 [ 501.168386][ T5819] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 501.173566][T17802] tpg transfer function: 0/2 [ 501.203375][T17802] tpg Y'CbCr encoding: 0/1 [ 501.244090][T17802] tpg quantization: 2/2 [ 501.279472][T17802] tpg RGB range: 0/2 [ 501.283528][T17802] vivid-000: ================== END STATUS ================== [ 501.337758][T17536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.400705][T17812] loop6: detected capacity change from 0 to 512 [ 501.418137][T17536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.502848][T17536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.557656][T17812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.587424][T17812] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.640326][T17536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.767839][T17812] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 502.238169][T14734] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.258963][T17846] loop0: detected capacity change from 0 to 64 [ 502.299561][T17536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.367329][T17846] hfs: unable to locate alternate MDB [ 502.372769][T17846] hfs: continuing without an alternate MDB [ 502.421197][T17536] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.516005][T15378] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.523315][T15378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.535934][ T30] audit: type=1800 audit(1774482399.901:174): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5287" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 502.655145][T15371] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.662394][T15371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.774902][ T30] audit: type=1326 audit(1774482400.041:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cd9c799 code=0x7ffc0000 [ 502.801887][T15373] [ 502.804237][T15373] ====================================================== [ 502.811259][T15373] WARNING: possible circular locking dependency detected [ 502.818286][T15373] syzkaller #0 Not tainted [ 502.822712][T15373] ------------------------------------------------------ [ 502.829736][T15373] kworker/u8:10/15373 is trying to acquire lock: [ 502.836197][T15373] ffff88802a7a8df8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 502.847324][T15373] [ 502.847324][T15373] but task is already holding lock: [ 502.854782][T15373] ffff88802e03e0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 502.864703][T15373] [ 502.864703][T15373] which lock already depends on the new lock. [ 502.864703][T15373] [ 502.875109][T15373] [ 502.875109][T15373] the existing dependency chain (in reverse order) is: [ 502.884123][T15373] [ 502.884123][T15373] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 502.892258][T15373] __mutex_lock+0x1a2/0x1b90 [ 502.897407][T15373] hfs_find_init+0x273/0x330 [ 502.902553][T15373] hfs_ext_read_extent+0x19d/0x9d0 [ 502.908201][T15373] hfs_extend_file+0x4ff/0xcf0 [ 502.913497][T15373] hfs_bmap_reserve+0x2ab/0x3a0 [ 502.918876][T15373] hfs_cat_create+0x348/0x980 [ 502.924082][T15373] hfs_mkdir+0x7d/0x100 [ 502.928769][T15373] vfs_mkdir+0x361/0x850 [ 502.933543][T15373] filename_mkdirat+0x48b/0x5e0 [ 502.938947][T15373] __x64_sys_mkdirat+0x89/0xc0 [ 502.944259][T15373] do_syscall_64+0x106/0xf80 [ 502.949429][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.955859][T15373] [ 502.955859][T15373] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 502.965536][T15373] __lock_acquire+0x14b8/0x2630 [ 502.970940][T15373] lock_acquire+0x1cf/0x380 [ 502.976010][T15373] __mutex_lock+0x1a2/0x1b90 [ 502.981130][T15373] hfs_extend_file+0xa6/0xcf0 [ 502.986341][T15373] hfs_bmap_reserve+0x2ab/0x3a0 [ 502.991716][T15373] __hfs_ext_write_extent+0x3c4/0x510 [ 502.997622][T15373] hfs_ext_write_extent+0x1b7/0x200 [ 503.003361][T15373] hfs_write_inode+0xce/0xab0 [ 503.008593][T15373] __writeback_single_inode+0xd00/0x13c0 [ 503.014766][T15373] writeback_sb_inodes+0x766/0x1c70 [ 503.020590][T15373] wb_writeback+0x1c0/0xbe0 [ 503.025649][T15373] wb_workfn+0x142/0xc00 [ 503.030453][T15373] process_one_work+0xa23/0x19a0 [ 503.035919][T15373] worker_thread+0x5ef/0xe50 [ 503.041037][T15373] kthread+0x370/0x450 [ 503.045629][T15373] ret_from_fork+0x754/0xd80 [ 503.050781][T15373] ret_from_fork_asm+0x1a/0x30 [ 503.056075][T15373] [ 503.056075][T15373] other info that might help us debug this: [ 503.056075][T15373] [ 503.066378][T15373] Possible unsafe locking scenario: [ 503.066378][T15373] [ 503.073841][T15373] CPU0 CPU1 [ 503.079195][T15373] ---- ---- [ 503.084641][T15373] lock(&tree->tree_lock#2/1); [ 503.089531][T15373] lock(&HFS_I(tree->inode)->extents_lock); [ 503.098069][T15373] lock(&tree->tree_lock#2/1); [ 503.113041][T15373] lock(&HFS_I(tree->inode)->extents_lock); [ 503.119040][T15373] [ 503.119040][T15373] *** DEADLOCK *** [ 503.119040][T15373] [ 503.127280][T15373] 3 locks held by kworker/u8:10/15373: [ 503.132748][T15373] #0: ffff888020280148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 503.143600][T15373] #1: ffffc90003a37d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 503.155588][T15373] #2: ffff88802e03e0b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 503.165797][T15373] [ 503.165797][T15373] stack backtrace: [ 503.171703][T15373] CPU: 1 UID: 0 PID: 15373 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 503.171747][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.171771][T15373] Workqueue: writeback wb_workfn (flush-7:0) [ 503.171827][T15373] Call Trace: [ 503.171839][T15373] [ 503.171853][T15373] dump_stack_lvl+0x100/0x190 [ 503.171904][T15373] print_circular_bug.cold+0x178/0x1c7 [ 503.171962][T15373] check_noncircular+0x146/0x160 [ 503.172009][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172057][T15373] __lock_acquire+0x14b8/0x2630 [ 503.172113][T15373] ? __pfx_stack_trace_save+0x10/0x10 [ 503.172160][T15373] lock_acquire+0x1cf/0x380 [ 503.172209][T15373] ? hfs_extend_file+0xa6/0xcf0 [ 503.172249][T15373] ? __pfx___might_resched+0x10/0x10 [ 503.172283][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172323][T15373] ? add_lock_to_list+0x99/0x110 [ 503.172369][T15373] __mutex_lock+0x1a2/0x1b90 [ 503.172399][T15373] ? hfs_extend_file+0xa6/0xcf0 [ 503.172438][T15373] ? hfs_extend_file+0xa6/0xcf0 [ 503.172475][T15373] ? hfs_find_init+0xb3/0x330 [ 503.172522][T15373] ? hfs_ext_write_extent+0x192/0x200 [ 503.172561][T15373] ? __pfx___mutex_lock+0x10/0x10 [ 503.172590][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172630][T15373] ? lock_acquire+0x1cf/0x380 [ 503.172680][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172730][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172770][T15373] ? trace_contention_end+0x140/0x180 [ 503.172801][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172841][T15373] ? __mutex_lock+0x26a/0x1b90 [ 503.172874][T15373] ? hfs_extend_file+0xa6/0xcf0 [ 503.172908][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.172948][T15373] hfs_extend_file+0xa6/0xcf0 [ 503.172988][T15373] ? __pfx_hfs_extend_file+0x10/0x10 [ 503.173024][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173072][T15373] hfs_bmap_reserve+0x2ab/0x3a0 [ 503.173110][T15373] __hfs_ext_write_extent+0x3c4/0x510 [ 503.173146][T15373] ? hfs_find_init+0x273/0x330 [ 503.173193][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173236][T15373] hfs_ext_write_extent+0x1b7/0x200 [ 503.173275][T15373] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 503.173317][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173357][T15373] ? mpage_writepages+0x177/0x1e0 [ 503.173403][T15373] ? __pfx_mpage_writepages+0x10/0x10 [ 503.173452][T15373] hfs_write_inode+0xce/0xab0 [ 503.173493][T15373] ? __pfx_hfs_write_inode+0x10/0x10 [ 503.173534][T15373] ? __lock_acquire+0x4a5/0x2630 [ 503.173598][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 503.173641][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 503.173684][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173734][T15373] __writeback_single_inode+0xd00/0x13c0 [ 503.173783][T15373] ? __pfx___writeback_single_inode+0x10/0x10 [ 503.173826][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173866][T15373] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.173901][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.173945][T15373] writeback_sb_inodes+0x766/0x1c70 [ 503.173998][T15373] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 503.174043][T15373] ? do_raw_spin_lock+0x128/0x260 [ 503.174105][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174144][T15373] ? rcu_is_watching+0x12/0xc0 [ 503.174182][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174225][T15373] ? queue_io+0x287/0x550 [ 503.174264][T15373] wb_writeback+0x1c0/0xbe0 [ 503.174313][T15373] ? __pfx_wb_writeback+0x10/0x10 [ 503.174361][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174400][T15373] ? mark_held_locks+0x40/0x70 [ 503.174450][T15373] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.174499][T15373] wb_workfn+0x142/0xc00 [ 503.174543][T15373] ? try_to_wake_up+0x160/0x1a80 [ 503.174590][T15373] ? __pfx_wb_workfn+0x10/0x10 [ 503.174634][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174676][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174723][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174762][T15373] ? rcu_is_watching+0x12/0xc0 [ 503.174802][T15373] process_one_work+0xa23/0x19a0 [ 503.174845][T15373] ? __pfx_process_one_work+0x10/0x10 [ 503.174876][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174924][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.174967][T15373] worker_thread+0x5ef/0xe50 [ 503.175007][T15373] ? kthread+0x13a/0x450 [ 503.175034][T15373] ? __pfx_worker_thread+0x10/0x10 [ 503.175065][T15373] kthread+0x370/0x450 [ 503.175092][T15373] ? __pfx_kthread+0x10/0x10 [ 503.175153][T15373] ret_from_fork+0x754/0xd80 [ 503.175185][T15373] ? __pfx_ret_from_fork+0x10/0x10 [ 503.175215][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.175254][T15373] ? rcu_is_watching+0x12/0xc0 [ 503.175290][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.175329][T15373] ? __switch_to+0x7b4/0x1120 [ 503.175367][T15373] ? __pfx_kthread+0x10/0x10 [ 503.175421][T15373] ret_from_fork_asm+0x1a/0x30 [ 503.175470][T15373] [ 503.220348][ T30] audit: type=1326 audit(1774482400.061:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cd9c799 code=0x7ffc0000 [ 503.269788][T15373] hfs: new node 0 already hashed? [ 503.293433][ T30] audit: type=1326 audit(1774482400.061:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f691cd9c799 code=0x7ffc0000 [ 503.452448][T15373] ------------[ cut here ]------------ [ 503.470541][ T30] audit: type=1326 audit(1774482400.061:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cd9c799 code=0x7ffc0000 [ 503.470895][T15373] 1 [ 503.470904][T15373] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:10/15373 [ 503.476920][ T30] audit: type=1326 audit(1774482400.061:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17849 comm="syz.6.5289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691cd9c799 code=0x7ffc0000 [ 503.482945][T15373] Modules linked in: [ 503.785340][T15373] CPU: 1 UID: 0 PID: 15373 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 503.795526][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.805836][T15373] Workqueue: writeback wb_workfn (flush-7:0) [ 503.811885][T15373] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 503.818016][T15373] Code: 0d 99 6a 0a e9 bf 86 d0 01 e8 93 58 e1 00 4c 89 f7 e8 fb 98 6a 0a e8 86 58 e1 00 89 ee 48 c7 c7 00 7c d1 8b e8 e8 e3 fa ff 90 <0f> 0b 90 e9 c1 89 d0 01 e8 6a 58 e1 00 e8 15 fb 4d 00 e9 1d 8c d0 [ 503.838234][T15373] RSP: 0018:ffffc90003a37030 EFLAGS: 00010282 [ 503.844399][T15373] RAX: 000000000000001f RBX: ffff88807c0cc900 RCX: 0000000000000000 [ 503.852431][T15373] RDX: 000000000000001f RSI: ffffffff81e7aae9 RDI: fffff52000746df7 [ 503.860617][T15373] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 503.868693][T15373] R10: 0000000080000000 R11: 7866705f5f203f20 R12: dffffc0000000000 [ 503.876828][T15373] R13: ffff88802e03e000 R14: ffff88802e03e0e0 R15: 0000000000000000 [ 503.885469][T15373] FS: 0000000000000000(0000) GS:ffff88812443f000(0000) knlGS:0000000000000000 [ 503.894922][T15373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.901734][T15373] CR2: 00007f259cbe8c38 CR3: 000000000e598000 CR4: 0000000000350ef0 [ 503.909792][T15373] Call Trace: [ 503.913132][T15373] [ 503.916132][T15373] ? _raw_spin_unlock+0x28/0x50 [ 503.921116][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.926924][T15373] ? hfs_bnode_put+0x208/0x480 [ 503.931774][T15373] hfs_bmap_alloc+0x5a7/0x6b0 [ 503.936539][T15373] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 503.941769][T15373] ? __asan_memcpy+0x3c/0x60 [ 503.946693][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.952374][T15373] ? hfs_bnode_read.part.0+0x298/0x330 [ 503.957987][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.963701][T15373] ? folio_mark_accessed+0xf3/0x1040 [ 503.969222][T15373] hfs_btree_inc_height.isra.0+0xff/0x820 [ 503.975027][T15373] ? rcu_is_watching+0x12/0xc0 [ 503.979862][T15373] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 503.986765][T15373] ? do_raw_spin_unlock+0x145/0x1e0 [ 503.992514][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.998318][T15373] ? _raw_spin_unlock+0x28/0x50 [ 504.003207][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.009031][T15373] ? hfs_bnode_put+0x208/0x480 [ 504.013923][T15373] hfs_brec_insert+0x8ba/0xc20 [ 504.018890][T15373] ? __pfx_hfs_brec_insert+0x10/0x10 [ 504.024305][T15373] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 504.029387][T15373] __hfs_ext_write_extent+0x3ef/0x510 [ 504.034893][T15373] ? hfs_find_init+0x273/0x330 [ 504.039715][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.045442][T15373] hfs_ext_write_extent+0x1b7/0x200 [ 504.050715][T15373] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 504.056572][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.062253][T15373] ? mpage_writepages+0x177/0x1e0 [ 504.067451][T15373] ? __pfx_mpage_writepages+0x10/0x10 [ 504.074219][T15373] hfs_write_inode+0xce/0xab0 [ 504.078953][T15373] ? __pfx_hfs_write_inode+0x10/0x10 [ 504.084367][T15373] ? __lock_acquire+0x4a5/0x2630 [ 504.089974][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 504.096522][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 504.102474][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.108223][T15373] __writeback_single_inode+0xd00/0x13c0 [ 504.113953][T15373] ? __pfx___writeback_single_inode+0x10/0x10 [ 504.120136][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.125843][T15373] ? do_raw_spin_unlock+0x145/0x1e0 [ 504.131380][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.137128][T15373] writeback_sb_inodes+0x766/0x1c70 [ 504.142388][T15373] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 504.148156][T15373] ? do_raw_spin_lock+0x128/0x260 [ 504.153247][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.158992][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.163839][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.169655][T15373] ? queue_io+0x287/0x550 [ 504.174031][T15373] wb_writeback+0x1c0/0xbe0 [ 504.178650][T15373] ? __pfx_wb_writeback+0x10/0x10 [ 504.183767][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.190003][T15373] ? mark_held_locks+0x40/0x70 [ 504.195320][T15373] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.200595][T15373] wb_workfn+0x142/0xc00 [ 504.204961][T15373] ? try_to_wake_up+0x160/0x1a80 [ 504.209939][T15373] ? __pfx_wb_workfn+0x10/0x10 [ 504.214905][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.220584][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.226493][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.232196][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.237412][T15373] process_one_work+0xa23/0x19a0 [ 504.242926][T15373] ? __pfx_process_one_work+0x10/0x10 [ 504.248499][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.254266][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.259966][T15373] worker_thread+0x5ef/0xe50 [ 504.264706][T15373] ? kthread+0x13a/0x450 [ 504.269067][T15373] ? __pfx_worker_thread+0x10/0x10 [ 504.274263][T15373] kthread+0x370/0x450 [ 504.278348][T15373] ? __pfx_kthread+0x10/0x10 [ 504.283021][T15373] ret_from_fork+0x754/0xd80 [ 504.287744][T15373] ? __pfx_ret_from_fork+0x10/0x10 [ 504.293377][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.299622][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.304461][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.310348][T15373] ? __switch_to+0x7b4/0x1120 [ 504.315325][T15373] ? __pfx_kthread+0x10/0x10 [ 504.319973][T15373] ret_from_fork_asm+0x1a/0x30 [ 504.324846][T15373] [ 504.327919][T15373] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 504.335348][T15373] CPU: 1 UID: 0 PID: 15373 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 504.345020][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.355116][T15373] Workqueue: writeback wb_workfn (flush-7:0) [ 504.361172][T15373] Call Trace: [ 504.364468][T15373] [ 504.367463][T15373] dump_stack_lvl+0x100/0x190 [ 504.372207][T15373] vpanic+0x552/0x970 [ 504.376232][T15373] ? __pfx_vpanic+0x10/0x10 [ 504.382245][T15373] ? lock_release+0x263/0x320 [ 504.386989][T15373] panic+0xd1/0xe0 [ 504.390731][T15373] ? __pfx_panic+0x10/0x10 [ 504.395345][T15373] ? check_panic_on_warn+0x1f/0x90 [ 504.400628][T15373] check_panic_on_warn.cold+0x19/0x34 [ 504.406221][T15373] ? hfs_bnode_create.cold+0x41/0x49 [ 504.411521][T15373] __warn.cold+0x191/0x348 [ 504.415951][T15373] __report_bug+0x296/0x3d0 [ 504.420478][T15373] ? hfs_bnode_create.cold+0x41/0x49 [ 504.425782][T15373] ? __pfx___report_bug+0x10/0x10 [ 504.430919][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.436581][T15373] ? irq_work_queue+0xce/0x100 [ 504.441474][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.447125][T15373] ? __wake_up_klogd+0xe2/0x140 [ 504.451984][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.457649][T15373] ? vprintk_emit+0x1c9/0x6b0 [ 504.462351][T15373] ? __pfx_vprintk_emit+0x10/0x10 [ 504.467392][T15373] ? hfs_bnode_create.cold+0x41/0x49 [ 504.472690][T15373] report_bug+0xb2/0x220 [ 504.476963][T15373] ? hfs_bnode_create.cold+0x41/0x49 [ 504.482266][T15373] handle_bug+0x16a/0x2a0 [ 504.486696][T15373] exc_invalid_op+0x17/0x50 [ 504.491213][T15373] asm_exc_invalid_op+0x1a/0x20 [ 504.496081][T15373] RIP: 0010:hfs_bnode_create.cold+0x41/0x49 [ 504.502105][T15373] Code: 0d 99 6a 0a e9 bf 86 d0 01 e8 93 58 e1 00 4c 89 f7 e8 fb 98 6a 0a e8 86 58 e1 00 89 ee 48 c7 c7 00 7c d1 8b e8 e8 e3 fa ff 90 <0f> 0b 90 e9 c1 89 d0 01 e8 6a 58 e1 00 e8 15 fb 4d 00 e9 1d 8c d0 [ 504.522892][T15373] RSP: 0018:ffffc90003a37030 EFLAGS: 00010282 [ 504.529167][T15373] RAX: 000000000000001f RBX: ffff88807c0cc900 RCX: 0000000000000000 [ 504.537270][T15373] RDX: 000000000000001f RSI: ffffffff81e7aae9 RDI: fffff52000746df7 [ 504.545350][T15373] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 504.553341][T15373] R10: 0000000080000000 R11: 7866705f5f203f20 R12: dffffc0000000000 [ 504.561434][T15373] R13: ffff88802e03e000 R14: ffff88802e03e0e0 R15: 0000000000000000 [ 504.569452][T15373] ? vprintk_emit+0x1c9/0x6b0 [ 504.574171][T15373] ? _raw_spin_unlock+0x28/0x50 [ 504.579055][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.584712][T15373] ? hfs_bnode_put+0x208/0x480 [ 504.589540][T15373] hfs_bmap_alloc+0x5a7/0x6b0 [ 504.594333][T15373] ? __pfx_hfs_bmap_alloc+0x10/0x10 [ 504.599647][T15373] ? __asan_memcpy+0x3c/0x60 [ 504.604264][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.609920][T15373] ? hfs_bnode_read.part.0+0x298/0x330 [ 504.615432][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.621123][T15373] ? folio_mark_accessed+0xf3/0x1040 [ 504.626488][T15373] hfs_btree_inc_height.isra.0+0xff/0x820 [ 504.632237][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.637028][T15373] ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10 [ 504.643372][T15373] ? do_raw_spin_unlock+0x145/0x1e0 [ 504.648605][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.654292][T15373] ? _raw_spin_unlock+0x28/0x50 [ 504.659179][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.664841][T15373] ? hfs_bnode_put+0x208/0x480 [ 504.669735][T15373] hfs_brec_insert+0x8ba/0xc20 [ 504.674521][T15373] ? __pfx_hfs_brec_insert+0x10/0x10 [ 504.679826][T15373] ? hfs_bmap_reserve+0x2c5/0x3a0 [ 504.684963][T15373] __hfs_ext_write_extent+0x3ef/0x510 [ 504.690453][T15373] ? hfs_find_init+0x273/0x330 [ 504.695336][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.701010][T15373] hfs_ext_write_extent+0x1b7/0x200 [ 504.706252][T15373] ? __pfx_hfs_ext_write_extent+0x10/0x10 [ 504.712000][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.717700][T15373] ? mpage_writepages+0x177/0x1e0 [ 504.722765][T15373] ? __pfx_mpage_writepages+0x10/0x10 [ 504.728194][T15373] hfs_write_inode+0xce/0xab0 [ 504.732906][T15373] ? __pfx_hfs_write_inode+0x10/0x10 [ 504.738217][T15373] ? __lock_acquire+0x4a5/0x2630 [ 504.743223][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 504.749065][T15373] ? __writeback_single_inode+0x454/0x13c0 [ 504.754981][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.760643][T15373] __writeback_single_inode+0xd00/0x13c0 [ 504.766409][T15373] ? __pfx___writeback_single_inode+0x10/0x10 [ 504.772505][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.778160][T15373] ? do_raw_spin_unlock+0x145/0x1e0 [ 504.783381][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.789044][T15373] writeback_sb_inodes+0x766/0x1c70 [ 504.794281][T15373] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 504.799979][T15373] ? do_raw_spin_lock+0x128/0x260 [ 504.805050][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.810790][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.815569][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.821221][T15373] ? queue_io+0x287/0x550 [ 504.825588][T15373] wb_writeback+0x1c0/0xbe0 [ 504.830216][T15373] ? __pfx_wb_writeback+0x10/0x10 [ 504.835279][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.840936][T15373] ? mark_held_locks+0x40/0x70 [ 504.845738][T15373] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.850972][T15373] wb_workfn+0x142/0xc00 [ 504.855244][T15373] ? try_to_wake_up+0x160/0x1a80 [ 504.860203][T15373] ? __pfx_wb_workfn+0x10/0x10 [ 504.864990][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.870645][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.876295][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.881945][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.886732][T15373] process_one_work+0xa23/0x19a0 [ 504.891747][T15373] ? __pfx_process_one_work+0x10/0x10 [ 504.897129][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.902785][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.908442][T15373] worker_thread+0x5ef/0xe50 [ 504.913053][T15373] ? kthread+0x13a/0x450 [ 504.917297][T15373] ? __pfx_worker_thread+0x10/0x10 [ 504.922420][T15373] kthread+0x370/0x450 [ 504.926501][T15373] ? __pfx_kthread+0x10/0x10 [ 504.931127][T15373] ret_from_fork+0x754/0xd80 [ 504.935727][T15373] ? __pfx_ret_from_fork+0x10/0x10 [ 504.940847][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.946495][T15373] ? rcu_is_watching+0x12/0xc0 [ 504.951274][T15373] ? srso_alias_return_thunk+0x5/0xfbef5 [ 504.956928][T15373] ? __switch_to+0x7b4/0x1120 [ 504.961627][T15373] ? __pfx_kthread+0x10/0x10 [ 504.966250][T15373] ret_from_fork_asm+0x1a/0x30 [ 504.971045][T15373] [ 504.974157][T15373] Kernel Offset: disabled [ 504.978561][T15373] Rebooting in 86400 seconds..