last executing test programs: 2m16.792586591s ago: executing program 4 (id=3122): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@remote]}]}}}], 0x18}, 0x0) 2m16.4473837s ago: executing program 4 (id=3127): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x6}) 2m16.206526666s ago: executing program 4 (id=3132): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x8, &(0x7f0000000bc0), 0x0, 0x55a3, &(0x7f0000005640)="$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") ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000c00)={{r0}, 0x0, 0x4, @unused=[0xd, 0x1, 0x8, 0xd2f7], @name="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"}) 2m14.103318495s ago: executing program 4 (id=3151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20200}}, 0x20}}, 0x0) 2m13.41201559s ago: executing program 4 (id=3161): r0 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047453, 0x0) 2m13.161839521s ago: executing program 4 (id=3165): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 1m58.036441739s ago: executing program 32 (id=3165): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 1m55.193999414s ago: executing program 0 (id=3405): r0 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{0x40}, {}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x5}]}) 1m55.049408312s ago: executing program 0 (id=3409): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/1, 0x1) 1m54.760059746s ago: executing program 0 (id=3413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) 1m54.505935398s ago: executing program 0 (id=3416): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) removexattr(0x0, 0x0) 1m54.246852535s ago: executing program 0 (id=3420): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000027010000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000020000026080000000000008500000007000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m53.967885667s ago: executing program 0 (id=3423): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) 1m38.815861166s ago: executing program 33 (id=3423): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) 1.854047228s ago: executing program 7 (id=4725): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000580)) 1.758449511s ago: executing program 6 (id=4726): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x80405600, &(0x7f0000000100)) 1.728032625s ago: executing program 5 (id=4727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdc00, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8401}, 0x0) 1.650527137s ago: executing program 1 (id=4728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000b90400000000001000008500000036000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.63278091s ago: executing program 2 (id=4729): r0 = socket(0x1, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) 1.551828309s ago: executing program 7 (id=4730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001"], 0x1c}}, 0x0) 1.4950165s ago: executing program 3 (id=4731): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000015280), 0x101, 0x0) pwrite64(r0, &(0x7f0000018080)='\n', 0x1, 0xa2b0) 1.396222031s ago: executing program 1 (id=4732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 1.395503009s ago: executing program 5 (id=4733): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) 1.336452821s ago: executing program 6 (id=4734): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x1f, 0xa, 0x81, 0x0, 0x9, 0x1, 0x5, 0x80, 0x41, 0x4, [0x8, 0x4, 0xe18, 0x972d, 0x3, 0x7, 0x6, 0x3]}}) 1.306970087s ago: executing program 2 (id=4735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.238042316s ago: executing program 7 (id=4736): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000b40)={0xdfe, "0c3a89069e0a2e4dc55547bd655974fe0f3649587a72a772b549b94720033033", 0x1, 0xa, 0x3b38, 0x2000, 0x2}) 1.196361935s ago: executing program 3 (id=4737): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="8932ed20", 0x4, 0x6000c804, 0x0, 0x0) 1.075334268s ago: executing program 6 (id=4738): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x40000001, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.036999965s ago: executing program 2 (id=4739): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@ifindex, r0, 0x2f, 0x2030, 0x0, @void, @void, @value}, 0x20) 1.014292937s ago: executing program 1 (id=4740): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0x6, 0x4) 973.214991ms ago: executing program 3 (id=4741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a000000140007800800114008000000050015000c00000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 963.136659ms ago: executing program 5 (id=4742): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt(r0, 0x6, 0x6, &(0x7f0000000000)="add20ac4", 0x4) 938.708631ms ago: executing program 7 (id=4743): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xe5, 0x0, 0x4, 0x0, 0x2, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) 797.162768ms ago: executing program 6 (id=4744): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x3, 0x1, 0x20800000, 0x8, 0xffffffff, 0x2, 0xa}) 752.900471ms ago: executing program 2 (id=4745): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="e9b7ad", 0x3}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 703.205206ms ago: executing program 1 (id=4746): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000000c0)=0x745, 0x4) 647.773348ms ago: executing program 3 (id=4747): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 647.157836ms ago: executing program 7 (id=4748): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) 560.45216ms ago: executing program 5 (id=4749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 501.998322ms ago: executing program 6 (id=4750): r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='GZ', 0x2, 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) 429.046871ms ago: executing program 1 (id=4751): r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0xa294f4c1f49d5a17) sendfile(r0, r0, &(0x7f0000000000)=0x7fffffffffffffff, 0x9) 380.872883ms ago: executing program 2 (id=4752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001"], 0xfc}}, 0x0) 380.253442ms ago: executing program 3 (id=4753): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x891a, 0x0) 333.227871ms ago: executing program 7 (id=4754): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0xb, 0x2b2, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) 236.864168ms ago: executing program 5 (id=4755): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d00000006000000418bb5f945"], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) 144.40344ms ago: executing program 6 (id=4756): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0)=0xa, 0x4) 105.258916ms ago: executing program 1 (id=4757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 105.15691ms ago: executing program 3 (id=4758): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 52.868578ms ago: executing program 2 (id=4759): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x38088d0, &(0x7f0000000940)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d332c696f636861727365743d63703836312c71756965742c706172743d3078303030303030303030303030303030352c00b454e1fe0bfdbd8a9f4cf5b09b5225df4a58fdcdf2235844b876d7e738627992e1007e4cbebffab1831821ea201d708653044c13be581fd94195dc9f5d95696535dc9a88aa10d6710602e8a9b411c5303f175485885b653502"], 0x11, 0x2b6, &(0x7f0000000200)="$eJzs3U9rE0EYx/HfbNI22lK3tiJ4rBb0Ilov4iUieRGeRG0iFENFrfjnVMWTiN69+xZ8EV4U34CePPkC6mllZifZJLvZTUOTber3Aw2b7D47z2T/zDyBsgLw37rV+Pn52m/7Z6SKKtK7G1IgqSZVJZ3R2dqznd3t3Xarmbejiouwf0ZxpElts7XTygq1cS7CC+27qpZ6P8NkRFF081fZSaB07urPEEgL/up062tTzyzf6zHj9g45j1lj9rWvF1ouOw8AQLn8+B/4cX7Jz9+DQNrww/6RHP/HtV92AhMX5a7tGf9dlRUZe3xPuVVJvedKOLs+6FSJo7Q8N/B+XvGZ1TfBNEVVpcslOPFgu926vPWo3Qz0RnWvZ7M199qMT92OgmzXM2rTHCP03WTPKBddH+ZsHzbj/J9L6st/dcwWx2a+mu/mjgn1Sc3u/K8aGXuY3JEKB45UnP+V4Xt0vQztVvK3jXq9HvRtsuIaOedb8Ap6WcuuSNQ5o1bU/wNBWJSnizo9EBX37mpB1Gpm1Gbn3ZCotb4o25vu2Ty8vUkzH8xts64/+qJGz/w/sPltKPfKTK4asxEPBe4bj/szn91c1e0zTI0c6cul+y0uDEv9b/49DQfwXvd1XctPX756WGm3W0/swr2MhcdL3U/m3kqZ25S8oL3kkwVFTmrjzqA0zcQuHeoO7f2jcGN7lR2Jg3KsFxrfpnsilbFQ8v0JU5Ec9LIzQUnsvMvE9V9Sr1TjyZ59CTPn6SP+EOD3GNk5dreCS2KjeEYu6eSBKrjF4RVcuuZK1Yyu5jp/Uboweouhz/OYMA390F1+/wcAAAAAAAAAAAAAAAAAAJg10/h3grL7CAAAAAAAAAAAAAAAAAAAAADArOs+/1ed5/9qtOf/Dj6K5TCf//txRzz/F5i8fwEAAP//FZd8vg==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x141042, 0x0) 0s ago: executing program 5 (id=4760): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpquota}]}, 0x0, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x80000001) kernel console output (not intermixed with test programs): non-tcp packets [ 328.741545][T18809] loop5: detected capacity change from 0 to 128 [ 328.908919][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'. [ 329.416314][T18855] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 329.431033][T18849] loop3: detected capacity change from 0 to 2048 [ 329.518241][T18849] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3316: bad orphan inode 8192 [ 329.589573][T18849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.678646][T18870] loop5: detected capacity change from 0 to 1024 [ 329.703137][T18870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.769718][T18870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.800237][ T5831] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /552/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=1, rec_len=0, size=2048 fake=0 [ 329.873139][T18887] loop1: detected capacity change from 0 to 2048 [ 329.926863][T18887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.962977][ T1201] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 330.018648][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.046356][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.164165][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 330.184065][ T1201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 330.229638][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 330.269434][ T1201] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 330.306154][ T1201] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 330.334721][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.383163][ T1201] usb 3-1: config 0 descriptor?? [ 330.501114][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 330.605360][ T1201] hdpvr 3-1:0.0: firmware version 0x8 dated [ 330.696032][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 330.717990][ T5892] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 330.731054][ T5892] usb 4-1: config 0 has no interface number 0 [ 330.740102][T18936] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 330.747503][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.790169][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 330.810922][ T1201] hdpvr 3-1:0.0: device init failed [ 330.812547][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 330.816220][ T1201] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 330.838615][ T1201] usb 3-1: USB disconnect, device number 16 [ 330.889329][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 330.940802][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 330.964527][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 330.998597][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 331.019627][ T5892] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 4097, setting to 1024 [ 331.051011][ T5892] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 331.061807][ T5892] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.105350][ T5892] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 331.150819][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.166941][ T5892] usb 4-1: Product: syz [ 331.171543][ T5892] usb 4-1: Manufacturer: syz [ 331.176147][ T5892] usb 4-1: SerialNumber: syz [ 331.192505][ T5892] usb 4-1: config 0 descriptor?? [ 331.211532][T18905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 331.219485][T18905] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 331.252412][ T5892] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 331.270681][ T5892] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 331.318226][ T5892] scsi host1: microtekX6 [ 331.545895][ T5892] usb 4-1: USB disconnect, device number 9 [ 331.611701][T18987] trusted_key: encrypted_key: hex blob is missing [ 331.783752][T18996] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3350'. [ 331.807805][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3350'. [ 332.053262][T19006] loop1: detected capacity change from 0 to 512 [ 332.138481][T19013] netlink: 'syz.0.3356': attribute type 1 has an invalid length. [ 332.177141][T19013] netlink: 'syz.0.3356': attribute type 2 has an invalid length. [ 332.222810][T19006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.319099][T19006] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 332.544559][T19034] loop2: detected capacity change from 0 to 128 [ 332.559475][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.616399][T19034] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 332.777393][T19034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.120719][ T30] kauditd_printk_skb: 2039 callbacks suppressed [ 333.120739][ T30] audit: type=1400 audit(1746495589.674:2140): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=19062 comm="syz.3.3369" [ 333.124341][T19067] loop1: detected capacity change from 0 to 16 [ 333.146722][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.237367][T19076] loop2: detected capacity change from 0 to 256 [ 333.277756][T19067] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 333.410825][T19076] MINIX-fs: mounting file system with errors, running fsck is recommended [ 333.686610][T19098] netlink: 'syz.3.3378': attribute type 3 has an invalid length. [ 333.780698][T19098] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3378'. [ 334.008402][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.024735][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.046143][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.061027][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.069957][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.101134][T19124] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 334.205082][T19111] wg1 speed is unknown, defaulting to 1000 [ 334.241452][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 334.430686][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 334.444800][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 334.455389][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 334.521795][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.556790][ T5886] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 334.594776][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.603462][T19177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3391'. [ 334.615412][ T5886] usb 6-1: Product: syz [ 334.624418][ T5886] usb 6-1: Manufacturer: syz [ 334.633622][ T5886] usb 6-1: SerialNumber: syz [ 334.644921][ T5886] usb 6-1: config 0 descriptor?? [ 334.695906][ T5886] radioshark 6-1:0.0: Invalid radioSHARK device [ 334.703791][ T5886] radioshark 6-1:0.0: probe with driver radioshark failed with error -22 [ 334.713122][ T5886] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 334.759559][T19169] veth0_to_bond: entered allmulticast mode [ 334.769573][T19169] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 334.924704][ T5886] usb 6-1: USB disconnect, device number 14 [ 335.148616][T19111] chnl_net:caif_netlink_parms(): no params data found [ 335.345884][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3400'. [ 335.390917][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3400'. [ 335.715206][T19111] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.750836][T19111] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.771968][T19111] bridge_slave_0: entered allmulticast mode [ 335.792056][T19111] bridge_slave_0: entered promiscuous mode [ 335.831979][T19111] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.868143][T19111] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.907693][T19111] bridge_slave_1: entered allmulticast mode [ 335.953085][T19111] bridge_slave_1: entered promiscuous mode [ 336.008333][T19351] loop2: detected capacity change from 0 to 8192 [ 336.127907][ T5839] Bluetooth: hci6: command tx timeout [ 336.147060][T19111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.171950][T19111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.498625][T19111] team0: Port device team_slave_0 added [ 336.537871][T19111] team0: Port device team_slave_1 added [ 336.707851][T19471] loop2: detected capacity change from 0 to 64 [ 336.734575][T19111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.780737][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.875369][T19484] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3425'. [ 336.901656][T19111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.926003][T19111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.934128][T19111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.018179][T19365] loop1: detected capacity change from 0 to 32768 [ 337.024912][T19111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.104446][T19495] netlink: 'syz.2.3426': attribute type 1 has an invalid length. [ 337.120729][T19365] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 337.133408][T19495] netlink: 'syz.2.3426': attribute type 2 has an invalid length. [ 337.141526][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3426'. [ 337.310758][T19365] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 337.338614][T19365] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 337.412131][T19365] OCFS2: File system is now read-only. [ 337.417639][T19365] (syz.1.3410,19365,0):ocfs2_search_chain:1838 ERROR: status = -30 [ 337.441764][T19111] hsr_slave_0: entered promiscuous mode [ 337.456516][T19111] hsr_slave_1: entered promiscuous mode [ 337.463459][T19365] (syz.1.3410,19365,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 337.481766][T19111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.499933][T19365] (syz.1.3410,19365,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 337.509562][T19111] Cannot create hsr debugfs directory [ 337.529161][T19537] netlink: 'syz.3.3432': attribute type 3 has an invalid length. [ 337.542179][T19365] (syz.1.3410,19365,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 337.581350][T19365] (syz.1.3410,19365,0):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 337.609441][T19365] (syz.1.3410,19365,0):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 337.639005][T19365] (syz.1.3410,19365,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 337.696787][T19365] (syz.1.3410,19365,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 337.747845][T19365] (syz.1.3410,19365,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 337.804328][T19365] (syz.1.3410,19365,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 337.819565][T19365] (syz.1.3410,19365,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 337.859284][T19365] (syz.1.3410,19365,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 337.914647][T19365] (syz.1.3410,19365,0):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -30 [ 337.985958][T19365] (syz.1.3410,19365,0):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -30 [ 338.026302][T19365] (syz.1.3410,19365,0):ocfs2_expand_inline_dir:2856 ERROR: status = -30 [ 338.056758][T19365] (syz.1.3410,19365,0):ocfs2_extend_dir:3203 ERROR: status = -30 [ 338.075295][T19365] (syz.1.3410,19365,0):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30 [ 338.105594][T19365] (syz.1.3410,19365,0):ocfs2_mknod:298 ERROR: status = -30 [ 338.147069][T19365] (syz.1.3410,19365,0):ocfs2_mknod:502 ERROR: status = -30 [ 338.179978][T19605] netlink: 'syz.3.3438': attribute type 1 has an invalid length. [ 338.210060][ T5839] Bluetooth: hci6: command tx timeout [ 338.215086][T19605] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3438'. [ 338.311942][ T5822] (syz-executor,5822,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 338.350546][T19530] loop5: detected capacity change from 0 to 32768 [ 338.369551][ T5822] ocfs2: Unmounting device (7,1) on (node local) [ 338.435802][T19530] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3430 (19530) [ 338.501596][T19530] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 338.524162][T19530] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 338.560952][T19530] BTRFS info (device loop5): disk space caching is enabled [ 338.609644][T19530] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 338.657860][T19479] infiniband syz!: set down [ 338.712874][T19479] infiniband syz!: added team_slave_0 [ 338.752527][T19479] syz!: rxe_create_cq: returned err = -12 [ 338.766748][T19479] infiniband syz!: Couldn't create ib_mad CQ [ 338.806573][T19479] infiniband syz!: Couldn't open port 1 [ 338.819591][T19649] netlink: 'syz.3.3442': attribute type 5 has an invalid length. [ 338.882145][T19649] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3442'. [ 338.950961][T19111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.967469][T19479] RDS/IB: syz!: added [ 338.972502][T19111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.980110][T19530] BTRFS info (device loop5): rebuilding free space tree [ 339.001300][T19479] smc: adding ib device syz! with port count 1 [ 339.038286][T19111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.045221][T19479] smc: ib device syz! port 1 has pnetid [ 339.092170][T19530] BTRFS info (device loop5): disabling free space tree [ 339.123337][T19530] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 339.130698][T19111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.145635][T19530] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 339.463789][ T5820] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 339.556293][T19111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.706969][T19111] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.774457][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.781660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.842782][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.849941][T12081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.890803][ T1201] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.058104][ T1201] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 340.087522][T19706] bridge1: entered promiscuous mode [ 340.098712][ T1201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.117541][T19706] bridge1: entered allmulticast mode [ 340.138892][ T1201] usb 4-1: Product: syz [ 340.153422][ T1201] usb 4-1: Manufacturer: syz [ 340.158030][ T1201] usb 4-1: SerialNumber: syz [ 340.172841][T19111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.202173][ T1201] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 340.255026][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.281032][ T5838] Bluetooth: hci6: command tx timeout [ 340.412924][T19722] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3457'. [ 340.517226][ T30] audit: type=1326 audit(1746495597.074:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 340.553996][ C0] usb 4-1: ath: unknown panic pattern! [ 340.658564][ T30] audit: type=1326 audit(1746495597.074:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 340.762314][ T30] audit: type=1326 audit(1746495597.144:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 340.890728][ T30] audit: type=1326 audit(1746495597.144:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 341.060803][ T30] audit: type=1326 audit(1746495597.154:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.5.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 341.545964][T19111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.078364][ T2335] pvrusb2: request_firmware fatal error with code=-110 [ 342.185319][ T2335] pvrusb2: Failure uploading firmware1 [ 342.240837][ T2335] pvrusb2: Device initialization was not successful. [ 342.247544][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 342.365416][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 342.375812][ T5838] Bluetooth: hci6: command tx timeout [ 342.396426][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 342.476378][T19774] netlink: 'syz.3.3471': attribute type 21 has an invalid length. [ 342.511088][ T5917] pvrusb2: Device being rendered inoperable [ 342.560800][T19774] netlink: 'syz.3.3471': attribute type 20 has an invalid length. [ 344.015246][T19111] veth0_vlan: entered promiscuous mode [ 344.115870][T19111] veth1_vlan: entered promiscuous mode [ 344.447800][T19111] veth0_macvtap: entered promiscuous mode [ 344.623972][T19111] veth1_macvtap: entered promiscuous mode [ 344.790301][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.013457][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.110718][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.211097][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.340465][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.445730][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.540760][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.629496][T19842] loop2: detected capacity change from 0 to 2048 [ 345.663443][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.781607][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.866809][T19842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.917262][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.014636][T19111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.204720][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.404669][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.520741][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.585139][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.660736][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.728470][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.781920][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.814018][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.849782][T19111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.908517][T19111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.968191][T19111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.204515][T19867] loop3: detected capacity change from 0 to 1764 [ 347.403531][T19864] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 347.469987][T19864] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.511061][T19867] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 347.540195][T19879] fuse: Unknown parameter 'smackfsdef' [ 347.686747][T19111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.760765][T19111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.776956][ T1201] usb 4-1: USB disconnect, device number 10 [ 347.793604][ T10] ath9k_htc: Failed to initialize the device [ 347.801480][ T10] sched: DL replenish lagged too much [ 347.845694][ T1201] usb 4-1: ath9k_htc: USB layer deinitialized [ 347.850202][T19111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.900756][T19111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.277838][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.469016][T19904] loop5: detected capacity change from 0 to 4096 [ 348.495868][T19904] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 348.506452][T19909] loop1: detected capacity change from 0 to 256 [ 348.593264][T19909] FAT-fs (loop1): Directory bread(block 64) failed [ 348.612767][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.617687][T19904] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 348.651806][T19909] FAT-fs (loop1): Directory bread(block 65) failed [ 348.658472][T19909] FAT-fs (loop1): Directory bread(block 66) failed [ 348.691208][T19909] FAT-fs (loop1): Directory bread(block 67) failed [ 348.699997][T19904] ntfs3(loop5): ino=19, mi_enum_attr [ 348.716227][T19909] FAT-fs (loop1): Directory bread(block 68) failed [ 348.760188][T19909] FAT-fs (loop1): Directory bread(block 69) failed [ 348.791191][T19909] FAT-fs (loop1): Directory bread(block 70) failed [ 348.811784][T19909] FAT-fs (loop1): Directory bread(block 71) failed [ 348.818564][T19904] ntfs3(loop5): failed to convert "c46c" to koi8-r [ 348.822798][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.838805][T19909] FAT-fs (loop1): Directory bread(block 72) failed [ 348.848814][T19904] ntfs3(loop5): ino=20, mi_enum_attr [ 348.858920][T19909] FAT-fs (loop1): Directory bread(block 73) failed [ 349.158834][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.209878][T19882] loop2: detected capacity change from 0 to 32768 [ 349.344844][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.356915][T19882] [ 349.356915][T19882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.356915][T19882] [ 349.378605][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.417048][T19882] jfs_rename did not expect dtDelete to return rc = -5 [ 349.437708][T19882] ERROR: (device loop2): jfs_rename: [ 349.437708][T19882] [ 349.562179][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 349.631950][ T1309] [ 349.631950][ T1309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.631950][ T1309] [ 349.665785][ T1309] [ 349.665785][ T1309] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.665785][ T1309] [ 349.725999][ T115] [ 349.725999][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.725999][ T115] [ 349.771835][ T5825] [ 349.771835][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.771835][ T5825] [ 349.791524][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 349.806710][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.835155][ T5825] [ 349.835155][ T5825] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 349.835155][ T5825] [ 349.845877][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.867271][ T53] bridge_slave_1: left allmulticast mode [ 349.873589][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.891320][ T53] bridge_slave_1: left promiscuous mode [ 349.906350][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.918542][ T5886] usb 6-1: config 0 descriptor?? [ 349.978955][ T53] bridge_slave_0: left allmulticast mode [ 349.995723][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.997911][ T5886] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 350.171318][ T5178] bcm5974 6-1:0.0: could not read from device [ 350.229535][ T5178] bcm5974 6-1:0.0: could not read from device [ 350.253190][ T5886] usb 6-1: USB disconnect, device number 15 [ 350.282798][ T5178] bcm5974 6-1:0.0: could not read from device [ 350.448785][ T5883] udevd[5883]: Error opening device "/dev/input/event4": No such file or directory [ 350.480907][ T5883] udevd[5883]: Unable to EVIOCGABS device "/dev/input/event4" [ 350.488561][ T5883] udevd[5883]: Unable to EVIOCGABS device "/dev/input/event4" [ 350.546717][T19943] loop1: detected capacity change from 0 to 32768 [ 350.566357][ T5883] udevd[5883]: Unable to EVIOCGABS device "/dev/input/event4" [ 350.605512][T19943] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3512 (19943) [ 350.607444][ T5883] udevd[5883]: Unable to EVIOCGABS device "/dev/input/event4" [ 350.679561][T19943] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 350.720867][T19943] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 350.787139][T19943] BTRFS info (device loop1): using free-space-tree [ 351.068761][T19943] BTRFS info (device loop1): rebuilding free space tree [ 351.279482][ T5822] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 351.412553][T20031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'. [ 352.457913][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.521705][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.543426][ T53] bond0 (unregistering): Released all slaves [ 352.596533][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.606189][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.622669][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.636995][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.649880][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.797305][ T53] bond1 (unregistering): Released all slaves [ 352.849520][ T53] bond2 (unregistering): Released all slaves [ 353.122891][T20064] wg1 speed is unknown, defaulting to 1000 [ 353.472178][ T30] audit: type=1326 audit(1746495610.024:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.3.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 353.480841][T20104] netlink: 'syz.1.3543': attribute type 13 has an invalid length. [ 353.593230][ T30] audit: type=1326 audit(1746495610.024:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.3.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 353.615697][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.820698][ T30] audit: type=1326 audit(1746495610.064:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20101 comm="syz.3.3542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 353.970940][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'. [ 354.116579][T20104] gretap0: refused to change device tx_queue_len [ 354.132894][T20104] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 354.760974][ T5838] Bluetooth: hci2: command tx timeout [ 355.431123][T20120] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 355.459722][T20188] loop3: detected capacity change from 0 to 256 [ 355.586919][T20188] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 355.628413][T20120] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 355.656235][T20120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.693562][T20120] usb 3-1: config 0 has no interface number 0 [ 355.724945][T20120] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 355.742002][T20120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.760792][T20120] usb 3-1: Product: syz [ 355.765062][T20120] usb 3-1: Manufacturer: syz [ 355.769686][T20120] usb 3-1: SerialNumber: syz [ 355.841644][T20120] usb 3-1: config 0 descriptor?? [ 356.398356][T20120] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 356.435658][T20120] usb 3-1: No valid video chain found. [ 356.490934][T20120] usb 3-1: USB disconnect, device number 17 [ 356.566226][T20254] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 356.842563][ T5838] Bluetooth: hci2: command tx timeout [ 356.929019][ T5886] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 357.161309][T20296] netlink: 'syz.3.3581': attribute type 21 has an invalid length. [ 357.182762][ T5886] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 357.216085][ T53] hsr_slave_0: left promiscuous mode [ 357.222925][ T5886] usb 2-1: config 0 has no interface number 0 [ 357.229035][ T5886] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x2 has invalid maxpacket 6400, setting to 64 [ 357.285585][T20298] loop2: detected capacity change from 0 to 2048 [ 357.300926][ T53] hsr_slave_1: left promiscuous mode [ 357.310299][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.337428][ T5886] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 357.370498][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.379981][T20298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.393780][ T5886] usb 2-1: New USB device found, idVendor=e828, idProduct=cea8, bcdDevice=50.03 [ 357.423058][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.482903][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.509156][ T5886] usb 2-1: Product: syz [ 357.529927][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.537668][ T5886] usb 2-1: Manufacturer: syz [ 357.556668][ T5886] usb 2-1: SerialNumber: syz [ 357.612698][ T5886] usb 2-1: config 0 descriptor?? [ 357.623576][T20260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.671262][T20260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.698458][ T53] veth1_macvtap: left promiscuous mode [ 357.722064][ T53] veth0_macvtap: left promiscuous mode [ 357.727905][ T53] veth1_vlan: left promiscuous mode [ 357.771063][ T53] veth0_vlan: left promiscuous mode [ 357.938710][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.962774][ T5886] usb 2-1: MIDIStreaming interface descriptor not found [ 358.090135][ T5886] usb 2-1: USB disconnect, device number 12 [ 358.270291][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.336681][T20369] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3595'. [ 358.392720][T20369] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3595'. [ 358.613215][T20374] loop2: detected capacity change from 0 to 2048 [ 358.643277][T20374] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 358.690920][T20379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3600'. [ 358.749337][T20386] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.913222][T20391] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3603'. [ 358.924216][ T5838] Bluetooth: hci2: command tx timeout [ 359.006030][T20397] loop6: detected capacity change from 0 to 24 [ 359.023101][T20397] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 359.050159][T20399] loop2: detected capacity change from 0 to 2048 [ 359.069097][T20399] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504 [ 359.113290][T20397] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 359.120698][T20399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.784568][ T53] team0 (unregistering): Port device team_slave_1 removed [ 359.850600][ T53] team0 (unregistering): Port device team_slave_0 removed [ 360.897419][T20535] xt_CONNSECMARK: invalid mode: 0 [ 361.010677][ T5838] Bluetooth: hci2: command tx timeout [ 361.048931][T20064] chnl_net:caif_netlink_parms(): no params data found [ 361.106614][T20549] loop1: detected capacity change from 0 to 1024 [ 361.212466][T20559] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3627'. [ 361.255135][T20559] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.3627'. [ 361.407996][T20587] loop6: detected capacity change from 0 to 256 [ 361.445252][T20588] loop5: detected capacity change from 0 to 64 [ 361.490859][T20587] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.588167][T20587] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 361.810829][T20064] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.818028][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.867441][T20064] bridge_slave_0: entered allmulticast mode [ 361.930599][T20064] bridge_slave_0: entered promiscuous mode [ 361.970972][T20636] loop2: detected capacity change from 0 to 2048 [ 361.996895][T20064] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.016441][T20636] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 362.030867][ T6309] udevd[6309]: incorrect nilfs2 checksum on /dev/loop2 [ 362.041916][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.049182][T20064] bridge_slave_1: entered allmulticast mode [ 362.133645][T20064] bridge_slave_1: entered promiscuous mode [ 362.145092][ T5955] udevd[5955]: incorrect nilfs2 checksum on /dev/loop2 [ 362.168630][T20661] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.282493][T20670] netlink: 'syz.1.3639': attribute type 10 has an invalid length. [ 362.575005][T20670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.643197][T20670] team0: Port device bond0 added [ 362.682258][T20064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.738783][T20064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.792329][T20711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3645'. [ 362.841032][T20711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3645'. [ 362.881284][T20711] netlink: 'syz.5.3645': attribute type 6 has an invalid length. [ 363.354827][T20064] team0: Port device team_slave_0 added [ 363.396597][T20064] team0: Port device team_slave_1 added [ 363.525254][T20780] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3656'. [ 363.537286][T20775] overlayfs: conflicting options: userxattr,verity=on [ 363.555964][ T3008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.707960][T20783] netlink: 'syz.5.3658': attribute type 7 has an invalid length. [ 363.755252][T20790] loop2: detected capacity change from 0 to 1024 [ 363.774408][T20790] EXT4-fs: inline encryption not supported [ 363.857540][T20790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.058009][ T3008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.138358][T20064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.139465][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.161380][T20064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.187284][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.220377][T20717] loop3: detected capacity change from 0 to 32768 [ 364.291972][T20064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.323287][T20064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.330288][T20064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.408844][T20064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.550830][ T3008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.071121][T20861] loop2: detected capacity change from 0 to 4096 [ 365.117417][T20861] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 365.159011][ T3008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.184944][ T30] audit: type=1326 audit(1746495621.744:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.5.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 365.316634][ T30] audit: type=1326 audit(1746495621.744:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.5.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 365.324980][T20064] hsr_slave_0: entered promiscuous mode [ 365.451607][ T30] audit: type=1326 audit(1746495621.744:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.5.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 365.472624][T20064] hsr_slave_1: entered promiscuous mode [ 365.483030][T20064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.490601][T20064] Cannot create hsr debugfs directory [ 365.557509][ T30] audit: type=1326 audit(1746495621.744:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.5.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 365.579986][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.670419][ T30] audit: type=1326 audit(1746495621.744:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20905 comm="syz.5.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff983b8e969 code=0x7ffc0000 [ 365.770466][T20937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3682'. [ 366.122848][T20983] netlink: 'syz.5.3688': attribute type 5 has an invalid length. [ 366.167072][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3688'. [ 366.180828][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 366.380955][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 366.391006][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 366.427828][ T9] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.479474][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 366.505107][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 366.524937][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.538963][T21020] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 366.560452][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 366.578151][ T9] usb 2-1: Product: syz [ 366.586162][ T9] usb 2-1: Manufacturer: syz [ 366.597532][T21020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.613467][ T9] usb 2-1: SerialNumber: syz [ 366.620972][ T5826] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 366.794459][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 366.829472][ T5826] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 366.880686][ T5826] usb 4-1: config 0 has no interface number 0 [ 366.915926][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 366.953917][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.962937][ T3008] bridge_slave_1: left allmulticast mode [ 366.968853][ T3008] bridge_slave_1: left promiscuous mode [ 367.005875][ T5826] usb 4-1: Product: syz [ 367.013344][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.021007][ T5826] usb 4-1: Manufacturer: syz [ 367.026897][ T5826] usb 4-1: SerialNumber: syz [ 367.058060][ T5826] usb 4-1: config 0 descriptor?? [ 367.064237][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 367.070249][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 367.097761][ T3008] bridge_slave_0: left allmulticast mode [ 367.113915][ T3008] bridge_slave_0: left promiscuous mode [ 367.118404][ T9] usb 2-1: USB disconnect, device number 13 [ 367.119756][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.296590][ T5826] usb 4-1: USB disconnect, device number 11 [ 367.787384][T21093] loop1: detected capacity change from 0 to 128 [ 367.821611][T21063] loop6: detected capacity change from 0 to 32768 [ 367.902220][T21081] loop5: detected capacity change from 0 to 32768 [ 367.907195][T21093] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.934169][T21063] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 368.025150][T21093] ext4 filesystem being mounted at /656/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.056964][T21063] XFS (loop6): Ending clean mount [ 368.060078][T21093] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 4095 (only 1 groups) [ 368.109315][T21081] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 368.159294][T21063] XFS (loop6): Quotacheck needed: Please wait. [ 368.258615][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.306708][T21063] XFS (loop6): Quotacheck: Done. [ 368.318601][T21081] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_32bit,nocow [ 368.318601][T21081] allowing incompatible features above 0.0: (unknown version) [ 368.360368][T21081] bcachefs (loop5): initializing new filesystem [ 368.368389][T21081] bcachefs (loop5): going read-write [ 368.424830][T21081] bcachefs (loop5): marking superblocks [ 368.450519][T19111] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 368.536801][T21081] bcachefs (loop5): initializing freespace [ 368.579144][T21081] bcachefs (loop5): done initializing freespace [ 368.603458][T21081] bcachefs (loop5): reading snapshots table [ 368.609434][T21081] bcachefs (loop5): reading snapshots done [ 368.670006][T21081] bcachefs (loop5): done starting filesystem [ 368.690769][ T5886] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 368.879625][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.896297][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.904655][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.939289][ T5886] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 368.949930][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 368.959339][ T5886] usb 4-1: SerialNumber: syz [ 368.966972][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.994445][ T5820] bcachefs (loop5): shutting down [ 369.000908][ T3008] bond0 (unregistering): Released all slaves [ 369.001218][ T5886] usb 4-1: 0:2 : does not exist [ 369.010698][ T5820] bcachefs (loop5): going read-only [ 369.017022][ T5820] bcachefs (loop5): finished waiting for writes to stop [ 369.050072][ T3008] bond1 (unregistering): Released all slaves [ 369.062380][ T5820] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 369.122751][ T5820] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 369.134706][T21084] netlink: 'syz.2.3700': attribute type 6 has an invalid length. [ 369.171146][ T5820] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 369.212507][ T5820] bcachefs (loop5): marking filesystem clean [ 369.376997][T20064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.445736][T20120] usb 4-1: USB disconnect, device number 12 [ 369.543265][T20064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 369.614208][ T5820] bcachefs (loop5): shutdown complete [ 369.830806][T20064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 369.884391][T20064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.174790][T21224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 370.406585][T21231] usb usb1: check_ctrlrecip: process 21231 (syz.1.3720) requesting ep 01 but needs 81 [ 370.464740][T21231] usb usb1: usbfs: process 21231 (syz.1.3720) did not claim interface 0 before use [ 370.648312][T20064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.732214][T20064] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.795630][T12081] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.802835][T12081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.860090][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.867293][T12081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.153840][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 371.153889][T21259] netlink: 'syz.2.3728': attribute type 6 has an invalid length. [ 371.192942][T21197] loop6: detected capacity change from 0 to 32768 [ 371.204449][T21197] bcachefs (/dev/loop6): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 10) [ 371.204601][T21197] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size [ 371.288391][ T3008] hsr_slave_0: left promiscuous mode [ 371.308822][ T3008] hsr_slave_1: left promiscuous mode [ 371.309522][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.339455][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.368963][ T3008] batman_adv: batadv0: Removing interface: vlan1 [ 372.002560][ T1201] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 372.220013][ T1201] usb 3-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 372.266427][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 372.298374][ T1201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024 [ 372.343189][ T1201] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.387723][ T1201] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 372.420964][ T1201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.465940][ T1201] usb 3-1: config 0 descriptor?? [ 372.479279][ T30] audit: type=1326 audit(1746495629.034:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21312 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 372.529198][ T30] audit: type=1326 audit(1746495629.034:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21312 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 372.585388][ T30] audit: type=1326 audit(1746495629.034:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21312 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 372.607836][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.638599][T21320] loop3: detected capacity change from 0 to 512 [ 372.647963][ T30] audit: type=1326 audit(1746495629.034:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21312 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 372.678688][ T30] audit: type=1326 audit(1746495629.034:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21312 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 372.722600][ T1201] ath6kl: Failed to submit usb control message: -71 [ 372.729275][ T1201] ath6kl: unable to send the bmi data to the device: -71 [ 372.742056][ T1201] ath6kl: Unable to send get target info: -71 [ 372.777334][ T1201] ath6kl: Failed to init ath6kl core: -71 [ 372.833075][T21320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.852184][ T1201] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 372.893077][T21320] ext4 filesystem being mounted at /641/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.902702][ T1201] usb 3-1: USB disconnect, device number 18 [ 373.078763][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.414355][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 373.485680][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 373.505432][ T63] smc: removing ib device syz! [ 374.147754][T21342] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 374.529142][T21389] bridge_slave_0: left allmulticast mode [ 374.569926][T21389] bridge_slave_0: left promiscuous mode [ 374.613647][T21394] loop6: detected capacity change from 0 to 64 [ 374.632783][T21389] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.727230][T21389] bridge_slave_1: left allmulticast mode [ 374.758607][T21389] bridge_slave_1: left promiscuous mode [ 374.791129][T21389] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.867078][T21389] bond0: (slave bond_slave_0): Releasing backup interface [ 374.971602][T21389] bond0: (slave bond_slave_1): Releasing backup interface [ 375.073232][T21389] team0: Port device team_slave_0 removed [ 375.195418][T21389] team0: Port device team_slave_1 removed [ 375.236108][T21389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.288402][T21389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.353827][T21389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.427276][T21389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.470172][T21431] loop1: detected capacity change from 0 to 16 [ 375.502506][T21431] erofs (device loop1): mounted with root inode @ nid 36. [ 375.566561][ T1201] srz1: Port: 1 Link DOWN [ 375.571860][T21429] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.069699][T20064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.190826][T21460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3780'. [ 377.042120][T21502] loop5: detected capacity change from 0 to 164 [ 377.188342][T21508] loop3: detected capacity change from 0 to 1024 [ 377.371978][T20064] veth0_vlan: entered promiscuous mode [ 377.412274][T20064] veth1_vlan: entered promiscuous mode [ 377.579826][T20064] veth0_macvtap: entered promiscuous mode [ 377.680288][T20064] veth1_macvtap: entered promiscuous mode [ 377.769363][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.830699][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.868591][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.889420][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.910704][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.957993][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.010937][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 378.032330][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.075809][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.110702][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.139234][T21541] loop2: detected capacity change from 0 to 8192 [ 378.163944][T20064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.191058][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 378.277056][ T9] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 378.290175][ T9] usb 6-1: config 0 has no interface number 0 [ 378.358723][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 378.363080][T21564] loop1: detected capacity change from 0 to 512 [ 378.389003][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.407954][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.419725][ T9] usb 6-1: Product: syz [ 378.424457][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.434881][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.442316][ T9] usb 6-1: Manufacturer: syz [ 378.459577][ T9] usb 6-1: SerialNumber: syz [ 378.473643][T21564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.486480][T21564] ext4 filesystem being mounted at /684/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.493992][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.499534][ T9] usb 6-1: config 0 descriptor?? [ 378.537881][T21564] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.3805: invalid size [ 378.550234][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.574447][ T9] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 378.588377][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.598723][T20064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.612439][T20064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.624493][T20064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.628445][ T9] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 378.740139][ T9] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 378.792052][T20064] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.826265][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.841068][T20064] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.861092][T20064] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.881544][T20064] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.983792][ T9] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 379.150422][ T9] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 379.271851][ T9] usb 6-1: USB disconnect, device number 16 [ 379.325319][ T9] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 379.496149][T21610] bond0: (slave team0): Releasing backup interface [ 379.541636][T21618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.644401][T21610] bridge_slave_0: left allmulticast mode [ 379.681032][T21610] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.854817][T21610] bridge_slave_1: left allmulticast mode [ 379.910372][T21610] bridge_slave_1: left promiscuous mode [ 379.966223][T21610] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.006168][T21628] loop2: detected capacity change from 0 to 4096 [ 380.030455][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 380.055477][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 380.077296][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 380.091011][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 380.099791][T21610] bond0: (slave bond_slave_0): Releasing backup interface [ 380.116314][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 380.134494][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 380.156702][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 380.165257][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 380.192045][T21610] bond0: (slave bond_slave_1): Releasing backup interface [ 380.209292][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 380.275229][T21628] ntfs3(loop2): try to read out of volume at offset 0x3fffffe0c00 [ 380.332723][T21610] team0: Port device team_slave_0 removed [ 380.383157][T21610] team0: Port device team_slave_1 removed [ 380.409234][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.437960][T21610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.475330][T21610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.508615][T21610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.576970][T21610] macsec0: left allmulticast mode [ 380.602064][T21610] macsec0: left promiscuous mode [ 380.618374][T21610] bridge0: port 3(macsec0) entered disabled state [ 380.757182][T21657] loop5: detected capacity change from 0 to 256 [ 380.803935][T21657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 380.966055][ T5892] wg1 speed is unknown, defaulting to 1000 [ 380.973790][T12081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.015029][T12081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.196315][T12081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.248759][T12081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.665644][T21707] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 381.714788][T21707] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 381.740877][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3839'. [ 381.750175][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3839'. [ 381.824693][T21707] overlayfs: missing 'lowerdir' [ 382.870784][ T30] audit: type=1326 audit(1746495639.404:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21776 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 382.989126][ T30] audit: type=1326 audit(1746495639.404:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21776 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 383.125203][ T30] audit: type=1326 audit(1746495639.464:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21776 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 383.243040][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3863'. [ 383.262888][ T30] audit: type=1326 audit(1746495639.464:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21776 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 383.315245][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3863'. [ 383.457294][ T30] audit: type=1326 audit(1746495639.464:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21776 comm="syz.3.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 383.769025][T21829] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 383.818074][T21829] netlink: 666 bytes leftover after parsing attributes in process `syz.7.3867'. [ 383.894520][T21861] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 384.570270][T21785] loop6: detected capacity change from 0 to 32768 [ 384.715398][T21785] read_mapping_page failed! [ 384.870845][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 385.032029][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 385.099321][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.141648][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.167573][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.189936][ T5892] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 385.251229][T21938] netlink: 'syz.2.3892': attribute type 16 has an invalid length. [ 385.254322][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.294856][T21938] netlink: 'syz.2.3892': attribute type 17 has an invalid length. [ 385.347456][ T5892] usb 4-1: config 0 descriptor?? [ 385.397995][ T5892] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 385.487530][ T5178] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 385.528180][T21949] loop7: detected capacity change from 0 to 1024 [ 385.573763][T21949] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 385.616468][ T5178] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 385.625664][ T5892] usb 4-1: USB disconnect, device number 13 [ 385.676568][T21949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 385.715763][T21949] System zones: 0-1, 3-36 [ 385.720463][T21949] EXT4-fs (loop7): orphan cleanup on readonly fs [ 385.824217][T21949] EXT4-fs (loop7): 1 orphan inode deleted [ 385.854280][T21949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.116218][T20064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.304504][T22005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3902'. [ 386.490914][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 386.668458][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 386.687126][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 386.719103][ T9] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 386.758057][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.789126][ T9] usb 7-1: Product: syz [ 386.800478][ T9] usb 7-1: Manufacturer: syz [ 386.826635][ T9] usb 7-1: SerialNumber: syz [ 386.864023][ T9] usb 7-1: config 0 descriptor?? [ 386.870031][T22000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 386.998943][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 387.082039][ T30] audit: type=1326 audit(1746495643.634:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22039 comm="syz.1.3911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x0 [ 387.246773][ T9] usb 7-1: USB disconnect, device number 2 [ 387.252730][ C0] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 387.268187][T22036] loop2: detected capacity change from 0 to 4096 [ 387.512594][T22066] batadv1: entered promiscuous mode [ 388.057639][T22099] netlink: 'syz.6.3920': attribute type 1 has an invalid length. [ 388.077899][T22100] loop5: detected capacity change from 0 to 256 [ 388.130839][T22099] netlink: 'syz.6.3920': attribute type 2 has an invalid length. [ 388.219252][T22013] loop7: detected capacity change from 0 to 40427 [ 388.236592][T22100] FAT-fs (loop5): Directory bread(block 64) failed [ 388.267463][T22100] FAT-fs (loop5): Directory bread(block 65) failed [ 388.271202][T22013] F2FS-fs (loop7): Fix alignment : done, start(4096) end(16896) block(12288) [ 388.318703][T22100] FAT-fs (loop5): Directory bread(block 66) failed [ 388.338496][T22013] F2FS-fs (loop7): Invalid log sectorsize (0) [ 388.381167][T22100] FAT-fs (loop5): Directory bread(block 67) failed [ 388.389454][T22013] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 388.427638][T22100] FAT-fs (loop5): Directory bread(block 68) failed [ 388.460265][T22013] F2FS-fs (loop7): invalid crc value [ 388.483981][T22100] FAT-fs (loop5): Directory bread(block 69) failed [ 388.502438][T22123] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3926'. [ 388.515950][T22124] netlink: 'syz.3.3925': attribute type 10 has an invalid length. [ 388.524544][T22100] FAT-fs (loop5): Directory bread(block 70) failed [ 388.546581][T22013] F2FS-fs (loop7): SIT is corrupted data# 5 7 vs 11 [ 388.563385][T22100] FAT-fs (loop5): Directory bread(block 71) failed [ 388.569553][T22124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3925'. [ 388.569993][T22100] FAT-fs (loop5): Directory bread(block 72) failed [ 388.596582][T22124] team0: entered promiscuous mode [ 388.611184][T22013] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 388.630086][T22100] FAT-fs (loop5): Directory bread(block 73) failed [ 388.667894][T22124] team0: entered allmulticast mode [ 388.697899][T22135] loop1: detected capacity change from 0 to 256 [ 388.727989][T22135] exfat: Deprecated parameter 'utf8' [ 388.742371][T22124] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.779289][T22135] exfat: Deprecated parameter 'utf8' [ 388.785872][T22124] bridge0: port 1(team0) entered blocking state [ 388.818384][T22124] bridge0: port 1(team0) entered disabled state [ 388.857777][T22135] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 389.809054][T22179] loop3: detected capacity change from 0 to 4096 [ 390.229990][T22221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 390.310891][T22221] netlink: 'syz.2.3947': attribute type 5 has an invalid length. [ 390.318672][T22221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3947'. [ 390.465502][T22221] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 390.526033][T22221] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 390.553788][T22221] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 390.592016][T22221] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 390.630491][T22221] geneve3: entered promiscuous mode [ 390.681368][T22221] geneve3: entered allmulticast mode [ 390.756679][T22250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3956'. [ 391.020581][T22267] IPv6: sit1: Disabled Multicast RS [ 391.338784][T22293] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3968'. [ 392.033031][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 392.237117][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 392.271558][T22351] netlink: 'syz.5.3985': attribute type 1 has an invalid length. [ 392.281568][ T9] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 392.324833][T22351] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3985'. [ 392.350879][ T9] usb 3-1: config 4 has no interface number 0 [ 392.357030][ T9] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 392.428098][ T9] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 392.493979][ T9] usb 3-1: config 4 interface 51 has no altsetting 0 [ 392.571388][ T9] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 392.580476][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.653060][ T9] usb 3-1: Product: syz [ 392.657266][ T9] usb 3-1: Manufacturer: syz [ 392.689634][ T9] usb 3-1: SerialNumber: syz [ 392.775312][T22380] loop5: detected capacity change from 0 to 1024 [ 392.775659][T22317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.790946][T22317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.880889][T22385] loop7: detected capacity change from 0 to 256 [ 393.061301][T22317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.068637][T22317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.157923][ T9] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 66:16:11:e2:ab:15 [ 393.336169][ T5917] usb 3-1: USB disconnect, device number 19 [ 393.372448][ T5917] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 393.417198][T22427] lo speed is unknown, defaulting to 1000 [ 393.591371][T22427] lo speed is unknown, defaulting to 1000 [ 393.598082][T22427] lo speed is unknown, defaulting to 1000 [ 393.674168][T22427] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 393.825168][T22427] lo speed is unknown, defaulting to 1000 [ 393.921293][T22427] lo speed is unknown, defaulting to 1000 [ 393.942818][T22427] lo speed is unknown, defaulting to 1000 [ 394.059597][T22427] lo speed is unknown, defaulting to 1000 [ 394.076722][T22465] bond0: option ad_select: unable to set because the bond device is up [ 394.146661][T22427] lo speed is unknown, defaulting to 1000 [ 394.147131][T22470] loop2: detected capacity change from 0 to 64 [ 394.205489][T22427] lo speed is unknown, defaulting to 1000 [ 394.854807][T22515] loop7: detected capacity change from 0 to 1764 [ 394.930756][ T5917] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 394.977236][T22521] loop3: detected capacity change from 0 to 1024 [ 394.997977][T22521] EXT4-fs: Ignoring removed nobh option [ 395.004154][T22515] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 395.028486][T22521] EXT4-fs: Ignoring removed bh option [ 395.092919][T22525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.130819][ T5917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.167134][ T5917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 395.199881][T22521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.249980][ T5917] usb 6-1: config 1 has no interface number 0 [ 395.336803][ T5917] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.393083][ T5917] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.36 [ 395.426409][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.457951][ T5917] usb 6-1: Product: syz [ 395.473655][ T5917] usb 6-1: Manufacturer: syz [ 395.499351][ T5917] usb 6-1: SerialNumber: syz [ 395.556929][ T5917] cdc_ncm 6-1:1.1: skipping garbage [ 395.589534][ T5917] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 395.609556][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.661133][ T5917] cdc_ncm 6-1:1.1: bind() failure [ 395.661862][T22562] loop2: detected capacity change from 0 to 1024 [ 395.818200][ T5917] usb 6-1: USB disconnect, device number 17 [ 395.842056][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 396.063064][ T9] usb 8-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 396.104537][ T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 396.137412][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.187104][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.225901][ T9] usb 8-1: SerialNumber: syz [ 396.258345][ T9] usb 8-1: bad CDC descriptors [ 396.371748][T20120] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 396.417406][T22593] loop1: detected capacity change from 0 to 8192 [ 396.449125][T22616] netlink: 'syz.6.4040': attribute type 10 has an invalid length. [ 396.475905][T22593] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.503929][ T5917] usb 8-1: USB disconnect, device number 2 [ 396.529984][T22615] loop2: detected capacity change from 0 to 2048 [ 396.548016][T22616] team0: Device ipvlan1 failed to register rx_handler [ 396.565158][T22615] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 396.577883][T20120] usb 4-1: config 0 has an invalid interface number: 58 but max is 0 [ 396.608127][T20120] usb 4-1: config 0 has no interface number 0 [ 396.618944][ T5955] udevd[5955]: incorrect nilfs2 checksum on /dev/loop2 [ 396.648562][T20120] usb 4-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 396.680117][T22631] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.731182][T20120] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 396.761258][T20120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.786716][T20120] usb 4-1: Product: syz [ 396.812481][T20120] usb 4-1: Manufacturer: syz [ 396.817132][T20120] usb 4-1: SerialNumber: syz [ 396.822153][T22634] netlink: 'syz.5.4042': attribute type 11 has an invalid length. [ 396.860293][T20120] usb 4-1: config 0 descriptor?? [ 396.865477][T22634] netlink: 'syz.5.4042': attribute type 11 has an invalid length. [ 396.921993][T22634] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4042'. [ 397.177966][T20120] kaweth 4-1:0.58: Firmware present in device. [ 397.299251][T20120] kaweth 4-1:0.58: Error reading configuration (-71), no net device created [ 397.333801][T20120] kaweth 4-1:0.58: probe with driver kaweth failed with error -5 [ 397.387942][T20120] usb 4-1: USB disconnect, device number 14 [ 398.344289][ T5886] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 398.462279][T22729] loop6: detected capacity change from 0 to 1024 [ 398.530702][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 398.542720][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 398.554504][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 398.573967][ T5886] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 398.575734][T22729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-080000000000 r/w without journal. Quota mode: none. [ 398.583401][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.620692][ T5886] usb 6-1: Product: syz [ 398.625005][ T5886] usb 6-1: Manufacturer: syz [ 398.629808][ T5886] usb 6-1: SerialNumber: syz [ 398.644945][ T5886] usb 6-1: config 0 descriptor?? [ 398.695892][ T5886] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 398.827469][T22729] EXT4-fs error (device loop6): ext4_generic_delete_entry:2670: inode #2: block 16: comm syz.6.4062: bad entry in directory: inode out of bounds - offset=24, inode=983051, rec_len=20, size=1024 fake=0 [ 398.873167][ T5886] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 398.878015][T22729] EXT4-fs error (device loop6) in ext4_delete_entry:2741: Corrupt filesystem [ 398.901468][ T5886] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 398.932745][T22729] EXT4-fs warning (device loop6): ext4_rename_delete:3728: inode #2: comm syz.6.4062: Deleting old file: nlink 4, error=-117 [ 398.979452][ T5886] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 399.007561][T22682] loop1: detected capacity change from 0 to 32768 [ 399.077035][T22682] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4051 (22682) [ 399.177487][T22682] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 399.212180][T20120] usb 6-1: USB disconnect, device number 18 [ 399.220067][T22753] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 399.229248][T22682] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 399.229795][T19111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-080000000000. [ 399.265745][T22682] BTRFS info (device loop1): disk space caching is enabled [ 399.306060][T22682] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 399.580891][T22682] BTRFS info (device loop1): rebuilding free space tree [ 399.657519][T22682] BTRFS info (device loop1): disabling free space tree [ 399.683291][T22682] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 399.734008][T22682] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 399.764522][T22798] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4072'. [ 399.802718][T22798] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 399.822381][T22795] loop7: detected capacity change from 0 to 764 [ 399.852001][T22795] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 399.915110][T22682] BTRFS info (device loop1): balance: start -sstripes=0..32767 [ 399.968288][T22682] BTRFS info (device loop1): relocating block group 1048576 flags system [ 400.219218][T22682] BTRFS info (device loop1): balance: ended with status: 0 [ 400.329636][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 400.511017][ T5822] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 400.763920][T22844] veth1_macvtap: left promiscuous mode [ 400.827803][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4084'. [ 401.941068][T22911] kernel profiling enabled (shift: 6) [ 402.189381][T22925] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4107'. [ 402.325027][T22930] binder: 22928:22930 ioctl 8913 0 returned -22 [ 403.097857][T22969] loop6: detected capacity change from 0 to 1764 [ 403.174200][T22976] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4122'. [ 403.439973][T22992] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 403.808401][T22932] loop3: detected capacity change from 0 to 32768 [ 403.861117][T22932] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4108 (22932) [ 403.975551][T22932] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 404.045475][T22932] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 404.116708][T22932] BTRFS info (device loop3): disk space caching is enabled [ 404.150825][T22932] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 404.502001][T23059] loop1: detected capacity change from 0 to 256 [ 404.527584][T22932] BTRFS info (device loop3): rebuilding free space tree [ 404.642062][T22932] BTRFS info (device loop3): disabling free space tree [ 404.670881][T22932] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 404.695959][T22932] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 404.767728][T23059] FAT-fs (loop1): Directory bread(block 64) failed [ 404.780820][T23059] FAT-fs (loop1): Directory bread(block 65) failed [ 404.787485][T23059] FAT-fs (loop1): Directory bread(block 66) failed [ 404.863440][T23059] FAT-fs (loop1): Directory bread(block 67) failed [ 404.913919][T23059] FAT-fs (loop1): Directory bread(block 68) failed [ 404.920503][T23059] FAT-fs (loop1): Directory bread(block 69) failed [ 405.017136][T23059] FAT-fs (loop1): Directory bread(block 70) failed [ 405.070821][T23059] FAT-fs (loop1): Directory bread(block 71) failed [ 405.098407][T23059] FAT-fs (loop1): Directory bread(block 72) failed [ 405.135758][T23059] FAT-fs (loop1): Directory bread(block 73) failed [ 405.178455][ T5831] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 405.701006][T23123] xt_limit: Overflow, try lower: 65536/2147483648 [ 406.561166][ T5917] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 406.750193][ T5917] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 406.770740][ T5917] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 406.830793][ T5917] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.880846][ T5917] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.910992][ T5886] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 406.921202][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.949630][ T5917] usb 3-1: Product: syz [ 406.969852][ T5917] usb 3-1: Manufacturer: syz [ 407.011167][ T5917] usb 3-1: SerialNumber: syz [ 407.093301][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 407.113740][ T5886] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 407.134280][ T5886] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 407.167671][ T5886] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 407.188546][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.224956][ T5886] usb 7-1: Product: syz [ 407.237941][ T5886] usb 7-1: Manufacturer: syz [ 407.289237][ T5886] usb 7-1: SerialNumber: syz [ 407.322604][ T5886] usb 7-1: config 0 descriptor?? [ 407.358437][T23179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 407.367882][T23179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 407.493844][ T5917] usb 3-1: 0:2 : does not exist [ 407.542056][ T5917] usb 3-1: USB disconnect, device number 20 [ 407.552191][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 407.616043][T23179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 407.628042][ T6309] udevd[6309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.676196][T23179] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 407.760744][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 407.783386][ T9] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 407.799489][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.834589][ T9] usb 6-1: config 0 has no interface number 0 [ 407.873738][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 407.896442][ T5886] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 407.903970][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.933361][ T5886] asix 7-1:0.0: probe with driver asix failed with error -71 [ 407.945785][ T9] usb 6-1: Product: syz [ 407.959973][ T9] usb 6-1: Manufacturer: syz [ 407.964061][ T5886] usb 7-1: USB disconnect, device number 3 [ 408.002907][ T9] usb 6-1: SerialNumber: syz [ 408.074253][ T9] usb 6-1: config 0 descriptor?? [ 408.104166][ T9] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 408.151097][ T9] usb 6-1: No valid video chain found. [ 408.345070][ T5886] usb 6-1: USB disconnect, device number 19 [ 408.525487][T23295] netlink: 'syz.2.4189': attribute type 1 has an invalid length. [ 409.664849][T23354] netlink: 'syz.1.4204': attribute type 74 has an invalid length. [ 410.000181][T23377] loop5: detected capacity change from 0 to 8 [ 410.107982][T23386] loop3: detected capacity change from 0 to 256 [ 410.322441][T23386] FAT-fs (loop3): Directory bread(block 64) failed [ 410.360983][T23386] FAT-fs (loop3): Directory bread(block 65) failed [ 410.367750][T23386] FAT-fs (loop3): Directory bread(block 66) failed [ 410.418735][T23405] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4219'. [ 410.430437][T23401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.434596][T23386] FAT-fs (loop3): Directory bread(block 67) failed [ 410.434734][T23386] FAT-fs (loop3): Directory bread(block 68) failed [ 410.434768][T23386] FAT-fs (loop3): Directory bread(block 69) failed [ 410.434857][T23386] FAT-fs (loop3): Directory bread(block 70) failed [ 410.434890][T23386] FAT-fs (loop3): Directory bread(block 71) failed [ 410.434978][T23386] FAT-fs (loop3): Directory bread(block 72) failed [ 410.435009][T23386] FAT-fs (loop3): Directory bread(block 73) failed [ 410.760863][T23418] loop2: detected capacity change from 0 to 256 [ 410.808650][T23426] overlayfs: missing 'lowerdir' [ 410.932529][T23418] FAT-fs (loop2): Directory bread(block 64) failed [ 410.978851][T23418] FAT-fs (loop2): Directory bread(block 65) failed [ 411.012046][T23418] FAT-fs (loop2): Directory bread(block 66) failed [ 411.018625][T23418] FAT-fs (loop2): Directory bread(block 67) failed [ 411.046205][T23418] FAT-fs (loop2): Directory bread(block 68) failed [ 411.080822][T23418] FAT-fs (loop2): Directory bread(block 69) failed [ 411.110337][T23418] FAT-fs (loop2): Directory bread(block 70) failed [ 411.149095][T23418] FAT-fs (loop2): Directory bread(block 71) failed [ 411.191560][T23418] FAT-fs (loop2): Directory bread(block 72) failed [ 411.198151][T23418] FAT-fs (loop2): Directory bread(block 73) failed [ 411.484298][T23456] loop7: detected capacity change from 0 to 64 [ 411.511855][T23459] loop5: detected capacity change from 0 to 512 [ 411.533510][T23459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.556429][T23461] Invalid option length (1044984) for dns_resolver key [ 411.569571][T23459] EXT4-fs (loop5): Test dummy encryption mode enabled [ 411.653618][T23459] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4233: iget: bogus i_mode (0) [ 411.722486][T23459] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4233: couldn't read orphan inode 15 (err -117) [ 411.854379][T23459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.260525][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.525853][T23524] usb usb8: usbfs: process 23524 (syz.7.4248) did not claim interface 0 before use [ 412.787362][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 412.966098][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 412.988847][ T5892] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.025611][ T5892] usb 2-1: config 0 has no interface number 0 [ 413.055239][ T5892] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 413.074537][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.130673][ T5892] usb 2-1: Product: syz [ 413.148128][ T5892] usb 2-1: Manufacturer: syz [ 413.157914][ T5892] usb 2-1: SerialNumber: syz [ 413.207844][ T5892] usb 2-1: config 0 descriptor?? [ 413.257831][ T5892] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 413.343944][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 413.538215][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 413.567370][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.625566][ T9] usb 6-1: config 0 descriptor?? [ 413.644040][ T9] cp210x 6-1:0.0: cp210x converter detected [ 413.675936][ T5892] gspca_spca1528: reg_w err -71 [ 413.721428][ T5892] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 413.756290][ T5892] usb 2-1: USB disconnect, device number 14 [ 413.773253][T23599] loop6: detected capacity change from 0 to 512 [ 413.789539][ T5883] udevd[5883]: setting mode of /dev/bus/usb/002/014 to 020664 failed: No such file or directory [ 413.814890][T23600] netlink: 'syz.2.4267': attribute type 29 has an invalid length. [ 413.827313][T23599] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 413.861041][ T5883] udevd[5883]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 413.861162][T23600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4267'. [ 413.909851][T23612] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4268'. [ 413.931685][T23599] EXT4-fs (loop6): 1 truncate cleaned up [ 413.959240][T23599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.065300][ T9] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 414.077132][T23599] EXT4-fs error (device loop6): ext4_find_extent:902: inode #15: comm syz.6.4265: inode has invalid extent depth: 25964 [ 414.092515][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 414.100211][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 414.159770][T23599] EXT4-fs (loop6): Remounting filesystem read-only [ 414.206512][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 414.228950][T23599] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 414.261621][ T9] usb 6-1: USB disconnect, device number 20 [ 414.301583][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 414.371507][ T9] cp210x 6-1:0.0: device disconnected [ 414.448357][T19111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.743002][T23658] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.752278][T23658] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.831503][T23666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4278'. [ 415.026245][T23671] loop2: detected capacity change from 0 to 22 [ 415.102512][T23671] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 415.157328][T23671] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 415.199089][T23679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4282'. [ 415.259240][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4282'. [ 415.422880][T23679] vxcan3: entered promiscuous mode [ 415.452678][T23700] openvswitch: netlink: Message has 8 unknown bytes. [ 415.503892][T23679] vxcan3: entered allmulticast mode [ 415.689150][T23632] loop3: detected capacity change from 0 to 32768 [ 415.751476][T23632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4271 (23632) [ 415.764786][T23711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4288'. [ 415.836053][T23632] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 415.889388][T23632] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 415.916944][T23632] BTRFS info (device loop3): using free-space-tree [ 415.960749][ T5917] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 416.113214][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 416.172375][ T5917] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 416.198507][ T5917] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 416.235621][ T5917] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 416.281812][ T5917] usb 3-1: Product: syz [ 416.301170][ T5917] usb 3-1: Manufacturer: syz [ 416.305804][ T5917] usb 3-1: SerialNumber: syz [ 416.367430][ T5917] usb 3-1: config 0 descriptor?? [ 416.399103][ T5917] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 416.550530][ T5831] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.600926][ T5917] gspca_zc3xx: reg_w_i err -71 [ 417.209064][ T5917] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 417.260804][ T5917] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 417.340416][ T5917] usb 3-1: USB disconnect, device number 21 [ 417.360506][T23816] loop6: detected capacity change from 0 to 1024 [ 417.461197][T23826] usb usb8: usbfs: process 23826 (syz.5.4309) did not claim interface 0 before use [ 417.512941][T23816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.580701][ T30] audit: type=1800 audit(1746495674.134:2165): pid=23833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4311" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 417.687035][T23816] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.4307: reserved inode found cleared - inode=1 [ 418.070414][T19111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.458434][T23884] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4326'. [ 418.536037][T23884] IPv6: NLM_F_CREATE should be specified when creating new route [ 418.700857][T23895] netlink: 'syz.2.4329': attribute type 12 has an invalid length. [ 419.009332][T23910] netlink: 964 bytes leftover after parsing attributes in process `syz.6.4333'. [ 419.375271][T23932] loop5: detected capacity change from 0 to 128 [ 419.469594][T23926] loop3: detected capacity change from 0 to 4096 [ 419.568049][T23932] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.595511][T23932] ext4 filesystem being mounted at /733/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.616613][T23932] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:105: comm syz.5.4340: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 419.637783][T23873] loop7: detected capacity change from 0 to 32768 [ 419.684304][T23873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4323 (23873) [ 419.802740][T23873] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 419.878372][T23873] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 419.898586][T23954] loop2: detected capacity change from 0 to 8 [ 419.931794][ T5820] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.960887][T23873] BTRFS info (device loop7): using free-space-tree [ 419.995855][T23954] SQUASHFS error: Failed to read block 0x4de: -5 [ 420.028836][T23954] SQUASHFS error: Failed to read block 0x4de: -5 [ 420.077516][ T30] audit: type=1800 audit(1746495676.634:2166): pid=23954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4343" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 421.438679][T20064] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.476712][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4363'. [ 421.530892][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4363'. [ 421.848894][T24057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4369'. [ 421.935668][T24057] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4369'. [ 421.955087][T24063] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4370'. [ 421.992591][T24057] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4369'. [ 422.015007][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 422.034154][T24057] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 422.709552][T24100] netlink: 'syz.5.4380': attribute type 15 has an invalid length. [ 422.796212][T24137] loop2: detected capacity change from 0 to 128 [ 422.874207][T24137] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 422.915340][T24137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.230975][ T5892] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 423.286377][T24170] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 423.406525][ T5892] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 423.431122][ T5892] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 423.439244][ T5892] usb 6-1: config 0 has no interface number 0 [ 423.486270][T24176] netlink: 'syz.1.4396': attribute type 6 has an invalid length. [ 423.498984][ T5892] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.516606][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4395'. [ 423.523663][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 423.596180][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 423.630735][ T5892] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 423.660974][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.724241][ T5892] usb 6-1: config 0 descriptor?? [ 423.830934][ T5886] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 423.998835][ T5886] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 424.018392][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.055085][ T5886] usb 4-1: Product: syz [ 424.069582][ T5886] usb 4-1: Manufacturer: syz [ 424.083937][ T5886] usb 4-1: SerialNumber: syz [ 424.119191][ T5886] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 424.151303][ T94] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 424.181297][ T5892] usb 6-1: USB disconnect, device number 21 [ 424.250788][ T10] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 424.374356][T24165] loop7: detected capacity change from 0 to 32768 [ 424.411067][T24165] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4390 (24165) [ 424.456124][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.479276][T24165] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 424.499777][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.512186][T24165] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 424.535437][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 424.550869][ T5917] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 424.555428][T24165] BTRFS info (device loop7): disk space caching is enabled [ 424.566491][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.586839][ T10] usb 7-1: SerialNumber: syz [ 424.594491][ T9] usb 4-1: USB disconnect, device number 15 [ 424.614827][T24165] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 424.672286][ T10] usb 7-1: 0:2 : does not exist [ 424.730788][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 424.743570][ T5917] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 424.762361][ T5917] usb 3-1: config 0 has no interface number 0 [ 424.780754][ T5917] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 424.802548][ T5917] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 424.823503][ T5917] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 424.843458][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.862839][ T5917] usb 3-1: Product: syz [ 424.872295][ T5917] usb 3-1: Manufacturer: syz [ 424.884461][ T5917] usb 3-1: SerialNumber: syz [ 424.904800][ T1201] usb 7-1: USB disconnect, device number 4 [ 424.909696][ T5917] usb 3-1: config 0 descriptor?? [ 424.920508][T24228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 424.935002][T24228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.000920][ T30] audit: type=1326 audit(1746495681.554:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.1.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 425.048396][T24165] BTRFS info (device loop7): rebuilding free space tree [ 425.107588][T24165] BTRFS info (device loop7): disabling free space tree [ 425.123058][ T30] audit: type=1326 audit(1746495681.554:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.1.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 425.179840][T24228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.181134][T24165] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 425.218933][ T30] audit: type=1326 audit(1746495681.554:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.1.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 425.247595][T24228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.251717][T24165] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 425.268324][ T94] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 425.284264][ T94] ath9k_htc: Failed to initialize the device [ 425.312458][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 425.345351][ T30] audit: type=1326 audit(1746495681.554:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.1.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 425.426818][T24299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.460897][ T30] audit: type=1326 audit(1746495681.554:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24276 comm="syz.1.4409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 425.505577][ T5917] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 425.555577][ T5917] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 425.605395][ T5917] asix 3-1:0.251: probe with driver asix failed with error -5 [ 425.669157][T20064] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.721497][ T5917] usb 3-1: USB disconnect, device number 22 [ 425.928108][T24316] xt_l2tp: v2 doesn't support IP mode [ 426.331291][T24345] No such timeout policy "syz0" [ 426.481150][T20120] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 426.701159][T20120] usb 6-1: Using ep0 maxpacket: 8 [ 426.745764][T20120] usb 6-1: config 0 interface 0 has no altsetting 0 [ 426.796193][T20120] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 426.830858][T20120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.842585][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4429'. [ 426.846830][T20120] usb 6-1: Product: syz [ 426.910832][T20120] usb 6-1: Manufacturer: syz [ 426.915850][T20120] usb 6-1: SerialNumber: syz [ 426.981823][T20120] usb 6-1: config 0 descriptor?? [ 426.995863][T20120] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 427.230724][ T94] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 427.250922][T20120] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 427.258831][T20120] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 427.313026][T20120] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 427.426058][ T94] usb 3-1: Using ep0 maxpacket: 8 [ 427.447927][ T94] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 427.466076][ T94] usb 3-1: config 179 has no interface number 0 [ 427.482945][T20120] usb 6-1: USB disconnect, device number 22 [ 427.490845][T24405] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 427.500539][ T94] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 427.555522][ T94] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 427.621277][ T94] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.676684][ T94] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 427.741357][ T94] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 427.786986][ T94] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 427.798471][ T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.853755][T24375] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 428.231562][T24375] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 428.238641][T24375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 428.247526][T24446] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 428.292106][T24375] vhci_hcd vhci_hcd.0: Device attached [ 428.336481][T24442] vhci_hcd: connection closed [ 428.351345][ T5892] usb 3-1: USB disconnect, device number 23 [ 428.351417][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 428.370338][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 428.381336][T12081] vhci_hcd: stop threads [ 428.387469][T12081] vhci_hcd: release socket [ 428.446206][T12081] vhci_hcd: disconnect device [ 429.040111][ T1201] usb usb38-port1: attempt power cycle [ 429.418542][T24499] loop1: detected capacity change from 0 to 4096 [ 429.486735][T24499] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 429.666174][ T1201] usb usb38-port1: unable to enumerate USB device [ 429.690889][T24536] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 429.783107][T24499] ntfs3(loop1): ino=19, mi_enum_attr [ 429.788477][T24499] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 430.132044][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 430.326032][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 430.391190][ T5892] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 430.427691][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.480221][ T5892] usb 4-1: config 0 descriptor?? [ 430.490573][ T5892] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 430.698996][ T5892] usb 4-1: Detected FT232B [ 430.896139][ T5892] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 430.899211][T24522] loop6: detected capacity change from 0 to 32768 [ 430.953738][ T5892] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 431.000573][T24522] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 431.015191][ T5892] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 431.075641][T24522] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad chain 3966 [ 431.115370][ T5892] usb 4-1: USB disconnect, device number 16 [ 431.178764][T24522] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 431.182091][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 431.252167][ T5892] ftdi_sio 4-1:0.0: device disconnected [ 431.258652][T24522] OCFS2: File system is now read-only. [ 431.300766][T24522] (syz.6.4468,24522,0):ocfs2_search_chain:1814 ERROR: status = -30 [ 431.308783][T24522] (syz.6.4468,24522,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 431.383898][T24522] (syz.6.4468,24522,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 431.428711][T24522] (syz.6.4468,24522,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 431.479495][T24522] (syz.6.4468,24522,0):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 431.509075][T24522] (syz.6.4468,24522,0):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 431.566472][T24522] (syz.6.4468,24522,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30 [ 431.621507][T24522] (syz.6.4468,24522,1):ocfs2_block_group_alloc:709 ERROR: status = -30 [ 431.693013][T24522] (syz.6.4468,24522,1):ocfs2_block_group_alloc:762 ERROR: status = -30 [ 431.740378][T24522] (syz.6.4468,24522,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -30 [ 431.820510][T24522] (syz.6.4468,24522,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30 [ 431.870879][T24522] (syz.6.4468,24522,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -30 [ 431.930971][T24522] (syz.6.4468,24522,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -30 [ 431.940600][T24522] (syz.6.4468,24522,1):ocfs2_expand_inline_dir:2839 ERROR: status = -30 [ 431.996599][T24522] (syz.6.4468,24522,1):ocfs2_extend_dir:3203 ERROR: status = -30 [ 432.044468][T24522] (syz.6.4468,24522,1):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30 [ 432.110847][T24522] (syz.6.4468,24522,1):ocfs2_mknod:298 ERROR: status = -30 [ 432.142380][T24522] (syz.6.4468,24522,1):ocfs2_mknod:502 ERROR: status = -30 [ 432.157519][T24522] (syz.6.4468,24522,1):ocfs2_mkdir:658 ERROR: status = -30 [ 432.262553][ T1201] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 432.360033][T19111] ocfs2: Unmounting device (7,6) on (node local) [ 432.442013][ T1201] usb 3-1: Using ep0 maxpacket: 16 [ 432.452694][ T1201] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 432.479198][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.517891][ T1201] usb 3-1: Product: syz [ 432.528187][ T1201] usb 3-1: Manufacturer: syz [ 432.561362][ T1201] usb 3-1: SerialNumber: syz [ 432.616714][ T1201] r8152-cfgselector 3-1: Unknown version 0x0000 [ 432.622141][T24608] loop7: detected capacity change from 0 to 32768 [ 432.645291][ T1201] r8152-cfgselector 3-1: config 0 descriptor?? [ 432.746088][T24608] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 432.764517][T24694] loop1: detected capacity change from 0 to 1024 [ 432.942449][T24608] XFS (loop7): Ending clean mount [ 432.966017][T24608] XFS (loop7): Quotacheck needed: Please wait. [ 433.099253][ T1201] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 433.235426][T24608] XFS (loop7): Quotacheck: Done. [ 433.256775][T24649] loop3: detected capacity change from 0 to 32768 [ 433.326218][ T30] audit: type=1326 audit(1746495689.884:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.1.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 433.397762][ T30] audit: type=1326 audit(1746495689.884:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.1.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 433.422522][ T30] audit: type=1326 audit(1746495689.924:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.1.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 433.445761][ T30] audit: type=1326 audit(1746495689.924:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.1.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 433.471773][ T30] audit: type=1326 audit(1746495689.924:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24732 comm="syz.1.4508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ddf8e969 code=0x7ffc0000 [ 433.494189][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.606097][T24753] misc userio: No port type given on /dev/userio [ 433.631455][T24649] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 433.647991][T20064] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.819437][T24649] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 433.819437][T24649] allowing incompatible features above 0.0: (unknown version) [ 433.895801][T24649] bcachefs (loop3): initializing new filesystem [ 433.916987][T24649] bcachefs (loop3): going read-write [ 434.013291][T24649] bcachefs (loop3): marking superblocks [ 434.017510][T24777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4519'. [ 434.117661][T24649] bcachefs (loop3): initializing freespace [ 434.158312][T24649] bcachefs (loop3): done initializing freespace [ 434.173149][T24649] bcachefs (loop3): reading snapshots table [ 434.179182][T24649] bcachefs (loop3): reading snapshots done [ 434.211414][T24649] bcachefs (loop3): done starting filesystem [ 434.321783][ T5831] bcachefs (loop3): shutting down [ 434.326878][ T5831] bcachefs (loop3): going read-only [ 434.371460][ T5831] bcachefs (loop3): finished waiting for writes to stop [ 434.397589][ T5831] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8 [ 434.479592][T24789] loop5: detected capacity change from 0 to 1024 [ 434.521907][T24789] EXT4-fs: Ignoring removed bh option [ 434.572031][ T5831] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 434.630275][ T5831] bcachefs (loop3): clean shutdown complete, journal seq 12 [ 434.642801][T24789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.661123][T24789] ext4 filesystem being mounted at /767/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.728234][T24807] loop2: detected capacity change from 0 to 512 [ 434.779822][T24807] EXT4-fs: Ignoring removed orlov option [ 434.788017][T24789] EXT4-fs: Ignoring removed bh option [ 434.807521][ T5831] bcachefs (loop3): marking filesystem clean [ 434.845535][T24807] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.879631][T24789] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.4522: Abort forced by user [ 434.917054][T24789] EXT4-fs (loop5): Remounting filesystem read-only [ 434.930839][T24789] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 434.952560][T24807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.013921][T24807] ext4 filesystem being mounted at /762/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.047772][T24824] loop6: detected capacity change from 0 to 2048 [ 435.076972][T24824] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.181215][T24833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.235864][ T5831] bcachefs (loop3): shutdown complete [ 435.262762][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.399963][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.856350][T24866] openvswitch: netlink: Tunnel attr 130 out of range max 16 [ 436.289560][T24894] openvswitch: netlink: Flow key attr not present in new flow. [ 436.348972][T24899] loop5: detected capacity change from 0 to 256 [ 436.838667][T24928] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4553'. [ 437.255824][T24949] netlink: 'syz.6.4559': attribute type 32 has an invalid length. [ 437.705142][T24978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4568'. [ 438.470420][T25020] loop6: detected capacity change from 0 to 2048 [ 438.519740][T25024] loop1: detected capacity change from 0 to 16 [ 438.544928][T25024] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 438.589141][T25030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.649779][T25033] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.756511][T25020] syz.6.4579: attempt to access beyond end of device [ 438.756511][T25020] loop6: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048 [ 438.820203][T25020] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=1) [ 439.328031][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.641038][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 439.855331][ T9] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 439.880950][ T9] usb 7-1: config 0 has no interface number 0 [ 439.898053][ T9] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 439.933018][ T9] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.001794][ T9] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 440.019989][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4600'. [ 440.031369][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.078873][ T9] usb 7-1: Product: syz [ 440.084765][ T9] usb 7-1: Manufacturer: syz [ 440.089416][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4600'. [ 440.100895][T20120] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 440.138186][ T9] usb 7-1: SerialNumber: syz [ 440.158837][ T9] usb 7-1: config 0 descriptor?? [ 440.178737][T25072] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 440.219108][ T9] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 440.278704][T20120] usb 6-1: too many configurations: 38, using maximum allowed: 8 [ 440.297276][ T9] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 440.363741][T20120] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 440.401131][T20120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.409272][T20120] usb 6-1: Product: syz [ 440.444035][T20120] usb 6-1: Manufacturer: syz [ 440.448714][T20120] usb 6-1: SerialNumber: syz [ 440.510265][T20120] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 440.554621][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 440.698000][ T5917] usb 7-1: USB disconnect, device number 5 [ 440.771314][ T5917] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 440.814752][ T5917] cyberjack 7-1:0.69: device disconnected [ 442.906798][T25209] loop3: detected capacity change from 0 to 2048 [ 442.986189][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 443.121217][T25209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.397516][T20120] usb 6-1: USB disconnect, device number 23 [ 443.404369][ T9] ath9k_htc: Failed to initialize the device [ 443.418217][T20120] usb 6-1: ath9k_htc: USB layer deinitialized [ 443.546698][T25241] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4631'. [ 443.609773][T25241] bond0: option miimon: invalid value (18446744073709551596) [ 443.652300][T25241] bond0: option miimon: allowed values 0 - 2147483647 [ 443.728179][T25251] delete_channel: no stack [ 444.361138][T25298] dlm: Unknown command passed to DLM device : 11 [ 444.361138][T25298] [ 444.381021][T25291] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 444.412954][T25291] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.897626][T25329] CIFS mount error: No usable UNC path provided in device string! [ 444.897626][T25329] [ 444.980441][T25329] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 445.078754][T25342] tmpfs: Bad value for 'mpol' [ 445.578040][T25379] loop6: detected capacity change from 0 to 128 [ 445.629994][T25379] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.816894][T25392] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4672'. [ 445.882079][T25392] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4672'. [ 445.945867][T25392] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4672'. [ 446.106985][T25398] loop2: detected capacity change from 0 to 1764 [ 446.241082][T25398] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 447.029955][T25454] loop1: detected capacity change from 0 to 64 [ 447.481848][T25481] loop1: detected capacity change from 0 to 64 [ 447.537792][T25481] 9pnet_fd: p9_fd_create_unix (25481): problem connecting socket: ./file0: -13 [ 448.004772][T25516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 448.727877][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4720'. [ 448.783908][T25558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4720'. [ 448.932620][T25570] netlink: 'syz.3.4724': attribute type 21 has an invalid length. [ 448.981062][T25570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4724'. [ 449.525166][T25600] loop5: detected capacity change from 0 to 128 [ 449.553972][T25610] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.104747][T25643] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.427900][T25665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4752'. [ 450.494713][T25671] loop7: detected capacity change from 0 to 64 [ 450.693896][T25671] [ 450.696268][T25671] ====================================================== [ 450.703293][T25671] WARNING: possible circular locking dependency detected [ 450.710495][T25671] 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 Not tainted [ 450.717614][T25671] ------------------------------------------------------ [ 450.724642][T25671] syz.7.4754/25671 is trying to acquire lock: [ 450.730721][T25671] ffff8880573000b0 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 450.740285][T25671] [ 450.740285][T25671] but task is already holding lock: [ 450.741568][T25683] loop2: detected capacity change from 0 to 64 [ 450.747638][T25671] ffff8880299ff5f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 450.747710][T25671] [ 450.747710][T25671] which lock already depends on the new lock. [ 450.747710][T25671] [ 450.747719][T25671] [ 450.747719][T25671] the existing dependency chain (in reverse order) is: [ 450.747730][T25671] [ 450.747730][T25671] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 450.747768][T25671] lock_acquire+0x120/0x360 [ 450.747801][T25671] __mutex_lock+0x182/0xe80 [ 450.754706][ T30] audit: type=1326 audit(1746495707.254:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 450.765025][T25671] hfs_extend_file+0xda/0x1230 [ 450.765056][T25671] hfs_bmap_reserve+0x107/0x430 [ 450.836771][T25671] __hfs_ext_write_extent+0x1fa/0x470 [ 450.842842][T25671] __hfs_ext_cache_extent+0x6b/0x9b0 [ 450.848648][T25671] hfs_extend_file+0x316/0x1230 [ 450.854024][T25671] hfs_get_block+0x3d7/0xbd0 [ 450.859130][T25671] __block_write_begin_int+0x6b5/0x1900 [ 450.865208][T25671] cont_write_begin+0x789/0xb50 [ 450.870591][T25671] hfs_write_begin+0x66/0xb0 [ 450.875710][T25671] cont_write_begin+0x2fd/0xb50 [ 450.881096][T25671] hfs_write_begin+0x66/0xb0 [ 450.886228][T25671] hfs_file_truncate+0x190/0x9c0 [ 450.891690][T25671] hfs_inode_setattr+0x4a9/0x670 [ 450.897232][T25671] notify_change+0xb36/0xe40 [ 450.902338][T25671] do_truncate+0x19a/0x220 [ 450.907272][T25671] vfs_truncate+0x493/0x520 [ 450.912290][T25671] do_sys_truncate+0xdb/0x190 [ 450.917919][T25671] __x64_sys_truncate+0x5b/0x70 [ 450.923462][T25671] do_syscall_64+0xf6/0x210 [ 450.928487][T25671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.934897][T25671] [ 450.934897][T25671] -> #0 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 450.943009][T25671] validate_chain+0xb9b/0x2140 [ 450.948375][T25671] __lock_acquire+0xaac/0xd20 [ 450.953579][T25671] lock_acquire+0x120/0x360 [ 450.958611][T25671] __mutex_lock+0x182/0xe80 [ 450.963664][T25671] hfs_find_init+0x165/0x1e0 [ 450.968786][T25671] hfs_extend_file+0x2ee/0x1230 [ 450.974248][T25671] hfs_bmap_reserve+0x107/0x430 [ 450.979639][T25671] hfs_cat_create+0x1b3/0x640 [ 450.984854][T25671] hfs_create+0x66/0xe0 [ 450.989525][T25671] path_openat+0x14f4/0x3830 [ 450.994630][T25671] do_filp_open+0x1fa/0x410 [ 450.999648][T25671] do_sys_openat2+0x121/0x1c0 [ 451.004860][T25671] __x64_sys_openat+0x138/0x170 [ 451.010242][T25671] do_syscall_64+0xf6/0x210 [ 451.015263][T25671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.021672][T25671] [ 451.021672][T25671] other info that might help us debug this: [ 451.021672][T25671] [ 451.031895][T25671] Possible unsafe locking scenario: [ 451.031895][T25671] [ 451.039333][T25671] CPU0 CPU1 [ 451.044691][T25671] ---- ---- [ 451.050047][T25671] lock(&HFS_I(tree->inode)->extents_lock); [ 451.056031][T25671] lock(&tree->tree_lock#2/1); [ 451.063461][T25671] lock(&HFS_I(tree->inode)->extents_lock); [ 451.071963][T25671] lock(&tree->tree_lock#2/1); [ 451.076833][T25671] [ 451.076833][T25671] *** DEADLOCK *** [ 451.076833][T25671] [ 451.084971][T25671] 4 locks held by syz.7.4754/25671: [ 451.090162][T25671] #0: ffff8880257c0420 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 451.099449][T25671] #1: ffff8880299fd0a0 (&type->i_mutex_dir_key#14){++++}-{4:4}, at: path_openat+0x8da/0x3830 [ 451.109766][T25671] #2: ffff8880348e60b0 (&tree->tree_lock#2){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 451.119564][T25671] #3: ffff8880299ff5f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 451.130852][T25671] [ 451.130852][T25671] stack backtrace: [ 451.136755][T25671] CPU: 0 UID: 0 PID: 25671 Comm: syz.7.4754 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 451.136781][T25671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 451.136797][T25671] Call Trace: [ 451.136808][T25671] [ 451.136818][T25671] dump_stack_lvl+0x189/0x250 [ 451.136856][T25671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.136885][T25671] ? __pfx__printk+0x10/0x10 [ 451.136908][T25671] ? print_lock_name+0xde/0x100 [ 451.136944][T25671] print_circular_bug+0x2ee/0x310 [ 451.136967][T25671] check_noncircular+0x134/0x160 [ 451.136991][T25671] validate_chain+0xb9b/0x2140 [ 451.137010][T25671] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.137037][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137062][T25671] ? look_up_lock_class+0x74/0x170 [ 451.137087][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137110][T25671] ? register_lock_class+0x51/0x320 [ 451.137137][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137164][T25671] __lock_acquire+0xaac/0xd20 [ 451.137195][T25671] ? hfs_find_init+0x165/0x1e0 [ 451.137221][T25671] lock_acquire+0x120/0x360 [ 451.137249][T25671] ? hfs_find_init+0x165/0x1e0 [ 451.137282][T25671] __mutex_lock+0x182/0xe80 [ 451.137306][T25671] ? hfs_find_init+0x165/0x1e0 [ 451.137338][T25671] ? hfs_find_init+0x165/0x1e0 [ 451.137366][T25671] ? __pfx___mutex_lock+0x10/0x10 [ 451.137394][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137417][T25671] ? rcu_is_watching+0x15/0xb0 [ 451.137449][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137472][T25671] ? __kmalloc_noprof+0x29b/0x4f0 [ 451.137497][T25671] ? hfs_find_init+0x8b/0x1e0 [ 451.137526][T25671] hfs_find_init+0x165/0x1e0 [ 451.137554][T25671] hfs_extend_file+0x2ee/0x1230 [ 451.137575][T25671] ? __pfx___mutex_trylock_common+0x10/0x10 [ 451.137600][T25671] ? __pfx_hfs_extend_file+0x10/0x10 [ 451.137619][T25671] ? trace_contention_end+0x39/0x120 [ 451.137640][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137663][T25671] ? __mutex_lock+0x330/0xe80 [ 451.137696][T25671] ? hfs_find_init+0x165/0x1e0 [ 451.137724][T25671] ? __pfx___mutex_lock+0x10/0x10 [ 451.137753][T25671] hfs_bmap_reserve+0x107/0x430 [ 451.137792][T25671] hfs_cat_create+0x1b3/0x640 [ 451.137826][T25671] ? do_raw_spin_lock+0x121/0x290 [ 451.137849][T25671] ? __pfx_hfs_cat_create+0x10/0x10 [ 451.137889][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137913][T25671] ? _raw_spin_unlock+0x28/0x50 [ 451.137931][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.137955][T25671] ? hfs_new_inode+0x7c9/0xba0 [ 451.137980][T25671] hfs_create+0x66/0xe0 [ 451.137998][T25671] ? __pfx_hfs_create+0x10/0x10 [ 451.138016][T25671] path_openat+0x14f4/0x3830 [ 451.138036][T25671] ? arch_stack_walk+0xfc/0x150 [ 451.138080][T25671] ? __pfx_path_openat+0x10/0x10 [ 451.138098][T25671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.138128][T25671] do_filp_open+0x1fa/0x410 [ 451.138149][T25671] ? __pfx_do_filp_open+0x10/0x10 [ 451.138179][T25671] ? _raw_spin_unlock+0x28/0x50 [ 451.138197][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.138220][T25671] ? alloc_fd+0x64c/0x6c0 [ 451.138251][T25671] do_sys_openat2+0x121/0x1c0 [ 451.138284][T25671] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.138318][T25671] ? rcu_is_watching+0x15/0xb0 [ 451.138353][T25671] __x64_sys_openat+0x138/0x170 [ 451.138386][T25671] do_syscall_64+0xf6/0x210 [ 451.138412][T25671] ? srso_alias_return_thunk+0x5/0xfbef5 [ 451.138436][T25671] ? exc_page_fault+0x91/0x110 [ 451.138459][T25671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.138479][T25671] RIP: 0033:0x7fa1d978e969 [ 451.138498][T25671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.138516][T25671] RSP: 002b:00007fa1da5e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.138538][T25671] RAX: ffffffffffffffda RBX: 00007fa1d99b5fa0 RCX: 00007fa1d978e969 [ 451.138553][T25671] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 451.138568][T25671] RBP: 00007fa1d9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 451.138582][T25671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.138594][T25671] R13: 0000000000000000 R14: 00007fa1d99b5fa0 R15: 00007fffa3045ef8 [ 451.138617][T25671] [ 451.158128][ T30] audit: type=1326 audit(1746495707.254:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 451.189635][T25687] loop5: detected capacity change from 0 to 2048 [ 451.192643][ T30] audit: type=1326 audit(1746495707.254:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 451.263127][T25671] hfs: request for non-existent node 16777216 in B*Tree [ 451.263808][ T30] audit: type=1326 audit(1746495707.254:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 451.300284][T25671] hfs: request for non-existent node 16777216 in B*Tree [ 451.320954][ T30] audit: type=1326 audit(1746495707.254:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25680 comm="syz.3.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3add98e969 code=0x7ffc0000 [ 451.389990][T25687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.745283][T25687] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 451.819541][ T5820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.760882][ T5839] Bluetooth: hci6: command 0x0406 tx timeout