last executing test programs: 3.553103922s ago: executing program 4 (id=8857): r0 = syz_mount_image$xfs(&(0x7f0000000640), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000200), 0x0, 0x965a, &(0x7f0000012c40)="$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") ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, 0x0) 3.396212501s ago: executing program 2 (id=8859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) 3.105528618s ago: executing program 3 (id=8862): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) 2.841702183s ago: executing program 3 (id=8863): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000380)={0x0, 0x1, 0x7, 0x3, 0x204, &(0x7f00000003c0)="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"}) 2.840460693s ago: executing program 2 (id=8865): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') lseek(r0, 0x2004, 0x0) 2.675495703s ago: executing program 3 (id=8866): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 2.617510676s ago: executing program 2 (id=8867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42087, 0x1034}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x200}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xd301}]}}}]}, 0x48}}, 0x0) 2.352009042s ago: executing program 3 (id=8870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2.350346402s ago: executing program 2 (id=8871): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 2.312709335s ago: executing program 0 (id=8872): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) 1.933902507s ago: executing program 2 (id=8875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0xfffffffffffffdbc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x20044000) 1.908704598s ago: executing program 0 (id=8876): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) 1.888465449s ago: executing program 2 (id=8877): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 1.843759762s ago: executing program 3 (id=8878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x178, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0xfffffff4, 0x0, 0x0, 0x8, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x0, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 1.767718896s ago: executing program 4 (id=8879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) 1.551544039s ago: executing program 3 (id=8881): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) 1.549800299s ago: executing program 0 (id=8882): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x670, 0x5, 0x13b8, 0x0, 0x1278, 0xffffffff, 0xa8, 0x0, 0x1320, 0x1320, 0xffffffff, 0x1320, 0x1320, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0xff, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x94, 0x0, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xcf, {0x6}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @icmp_id=0x65, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010101, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1418) 1.482812573s ago: executing program 1 (id=8883): creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3!{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 1.35661578s ago: executing program 1 (id=8884): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x1}, 0xfffffffffffffe7f) 1.300531114s ago: executing program 0 (id=8885): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8) 1.114300475s ago: executing program 1 (id=8886): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r0, &(0x7f0000000000)=0x2b00, 0x12) 1.010139781s ago: executing program 0 (id=8887): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) readahead(r0, 0xbf5, 0x100000001) 972.107573ms ago: executing program 4 (id=8888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x78, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0xfffffffffffffdbc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x20044000) 621.328824ms ago: executing program 0 (id=8889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0xfeff, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 330.665921ms ago: executing program 1 (id=8890): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/170, &(0x7f0000000140)=0xaa) 330.411831ms ago: executing program 4 (id=8891): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) 241.297536ms ago: executing program 1 (id=8892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x178, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0xfffffff4, 0x0, 0x0, 0x8, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x0, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 239.184676ms ago: executing program 4 (id=8893): syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf6b) 17.803649ms ago: executing program 1 (id=8894): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x0, 0x1}, 0x20) 0s ago: executing program 4 (id=8895): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=@nat={'nat\x00', 0x670, 0x5, 0x13b8, 0x0, 0x1278, 0xffffffff, 0xa8, 0x0, 0x1320, 0x1320, 0xffffffff, 0x1320, 0x1320, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0xff, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x94, 0x0, 0x1}}, @common=@ttl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x10a0, 0x10d8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0xcf, {0x6}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @icmp_id=0x65, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @private=0xa010101, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1418) kernel console output (not intermixed with test programs): 16 bytes leftover after parsing attributes in process `syz.2.7253'. [ 910.506700][ T26] audit: type=1326 audit(46768604.716:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21170 comm="syz.0.7252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 910.638645][ T26] audit: type=1326 audit(46768604.716:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21170 comm="syz.0.7252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 911.320844][T21211] loop2: detected capacity change from 0 to 1024 [ 911.349557][T21211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 911.426621][T21211] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 911.520212][T21223] loop3: detected capacity change from 0 to 512 [ 911.528210][T21223] /dev/loop3: Can't open blockdev [ 911.611049][ T4612] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 911.686540][T21211] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 911.867665][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 911.895358][T21236] autofs4:pid:21236:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 912.312136][T21253] loop2: detected capacity change from 0 to 16 [ 912.349634][T21253] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 912.570707][T21258] netlink: 'syz.0.7286': attribute type 1 has an invalid length. [ 912.848237][T21270] netlink: 'syz.0.7291': attribute type 10 has an invalid length. [ 912.898709][T21272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7292'. [ 912.942016][T21272] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7292'. [ 912.970107][T21270] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 913.536100][T21294] loop1: detected capacity change from 0 to 16 [ 913.564125][T21294] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 913.925272][T21312] binder: 21310:21312 ioctl c018620c 200000000080 returned -22 [ 914.038502][T21314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.046002][T21314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.096268][T21314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.152580][T21314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.207366][T21303] Process accounting paused [ 914.336135][T21324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7316'. [ 914.349393][T21323] loop3: detected capacity change from 0 to 512 [ 914.428175][T21323] /dev/loop3: Can't open blockdev [ 914.495104][ T5396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 914.548732][T21330] netlink: 'syz.2.7320': attribute type 4 has an invalid length. [ 914.782531][T21335] ipt_CLUSTERIP: bad local_nodes[0] 0 [ 915.037283][T21348] loop1: detected capacity change from 0 to 256 [ 915.074922][T21348] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 915.289202][T21356] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 915.317829][T21356] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 915.551446][T21366] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 915.765151][T21373] netlink: 'syz.4.7341': attribute type 6 has an invalid length. [ 915.784719][T21376] loop2: detected capacity change from 0 to 256 [ 915.814142][T21376] exfat: Deprecated parameter 'namecase' [ 915.914799][T21376] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 916.230589][T21388] sctp: [Deprecated]: syz.4.7349 (pid 21388) Use of int in maxseg socket option. [ 916.230589][T21388] Use struct sctp_assoc_value instead [ 916.248844][T21381] loop3: detected capacity change from 0 to 8192 [ 916.359736][ T5396] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 916.392901][T21394] xt_addrtype: ipv6 does not support BROADCAST matching [ 916.901360][T21413] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 916.993253][T21416] loop3: detected capacity change from 0 to 2048 [ 917.841509][T21450] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 918.633699][ T26] audit: type=1326 audit(46768613.530:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21481 comm="syz.2.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 918.663732][T21485] netlink: 'syz.1.7398': attribute type 3 has an invalid length. [ 918.729006][ T26] audit: type=1326 audit(46768613.572:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21481 comm="syz.2.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 918.834115][ T26] audit: type=1326 audit(46768613.583:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21481 comm="syz.2.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 918.915086][ T26] audit: type=1326 audit(46768613.583:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21481 comm="syz.2.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 918.964784][T21496] wg1 speed is unknown, defaulting to 1000 [ 918.996312][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.024729][ T26] audit: type=1326 audit(46768613.583:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21481 comm="syz.2.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 919.089370][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.134055][T21496] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 919.229541][T21496] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 919.404235][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.431888][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.449841][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.456112][T21514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7412'. [ 919.482721][T21496] wg1 speed is unknown, defaulting to 1000 [ 919.521754][T21496] wg1 speed is unknown, defaulting to 1000 [ 920.026682][T21537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7423'. [ 920.062793][T21537] netlink: 'syz.1.7423': attribute type 1 has an invalid length. [ 920.525880][T21557] loop1: detected capacity change from 0 to 2048 [ 920.557830][T21560] loop2: detected capacity change from 0 to 64 [ 920.587316][T21557] loop1: p1 < > p4 < > [ 921.160163][T21581] vivid-001: ================= START STATUS ================= [ 921.204238][T21581] vivid-001: Radio HW Seek Mode: Bounded [ 921.211127][T21581] vivid-001: Radio Programmable HW Seek: false [ 921.253113][T21581] vivid-001: RDS Rx I/O Mode: Block I/O [ 921.259639][T21581] vivid-001: Generate RBDS Instead of RDS: false [ 921.278608][T21581] vivid-001: RDS Reception: true [ 921.284069][T21581] vivid-001: RDS Program Type: 0 inactive [ 921.314360][T21581] vivid-001: RDS PS Name: inactive [ 921.342241][T21581] vivid-001: RDS Radio Text: inactive [ 921.360960][T21581] vivid-001: RDS Traffic Announcement: false inactive [ 921.375831][ T22] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 921.384671][T21581] vivid-001: RDS Traffic Program: false inactive [ 921.396083][T21581] vivid-001: RDS Music: false inactive [ 921.401718][T21581] vivid-001: ================== END STATUS ================== [ 921.562548][ T22] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 921.582663][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.629949][ T22] usb 2-1: config 0 has no interface number 0 [ 921.643920][ T22] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 921.671579][ T22] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.714892][ T22] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 921.739064][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.765697][ T22] usb 2-1: Product: syz [ 921.784633][ T22] usb 2-1: Manufacturer: syz [ 921.805829][T21602] Process accounting resumed [ 921.808689][ T22] usb 2-1: SerialNumber: syz [ 921.836056][ T22] usb 2-1: config 0 descriptor?? [ 921.946029][T21608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7458'. [ 922.049714][T21612] loop4: detected capacity change from 0 to 256 [ 922.117249][T21612] FAT-fs (loop4): Directory bread(block 64) failed [ 922.148980][T21612] FAT-fs (loop4): Directory bread(block 65) failed [ 922.155668][T21612] FAT-fs (loop4): Directory bread(block 66) failed [ 922.200516][T21612] FAT-fs (loop4): Directory bread(block 67) failed [ 922.232321][T21612] FAT-fs (loop4): Directory bread(block 68) failed [ 922.238762][ T22] usbtouchscreen: probe of 2-1:0.117 failed with error -71 [ 922.275074][T21612] FAT-fs (loop4): Directory bread(block 69) failed [ 922.281334][ T22] usb 2-1: USB disconnect, device number 31 [ 922.299440][T21612] FAT-fs (loop4): Directory bread(block 70) failed [ 922.320335][T21612] FAT-fs (loop4): Directory bread(block 71) failed [ 922.327039][T21612] FAT-fs (loop4): Directory bread(block 72) failed [ 922.384839][T21612] FAT-fs (loop4): Directory bread(block 73) failed [ 922.488691][T21623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7466'. [ 922.961248][T21641] loop1: detected capacity change from 0 to 512 [ 923.064806][T21641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 923.073996][T16447] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 923.179560][T21641] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 923.245130][T21641] Quota error (device loop1): write_blk: dquota write failed [ 923.270998][T21641] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 923.291279][T16447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 923.293100][T21655] loop0: detected capacity change from 0 to 1024 [ 923.307768][T21641] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.7475: Failed to acquire dquot type 1 [ 923.328999][T16447] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 923.368321][T16447] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 923.406749][T16447] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 923.441881][T16447] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 923.470010][T16447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.494751][T21655] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 923.504681][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 923.559613][T16447] usb 4-1: config 0 descriptor?? [ 923.683927][ T56] hfsplus: b-tree write err: -5, ino 4 [ 923.800346][T16447] hdpvr 4-1:0.0: firmware version 0xd dated [ 924.006918][T16447] hdpvr 4-1:0.0: device init failed [ 924.012242][T16447] hdpvr: probe of 4-1:0.0 failed with error -12 [ 924.048975][T16447] usb 4-1: USB disconnect, device number 45 [ 924.276375][T21685] libceph: resolve '0' (ret=-3): failed [ 924.308559][T21687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7496'. [ 924.342953][T21687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7496'. [ 924.361806][T21687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7496'. [ 924.625943][T21699] loop1: detected capacity change from 0 to 256 [ 924.694938][T21699] FAT-fs (loop1): Directory bread(block 64) failed [ 924.726839][T21699] FAT-fs (loop1): Directory bread(block 65) failed [ 924.769135][T21695] loop4: detected capacity change from 0 to 4096 [ 924.779341][T21699] FAT-fs (loop1): Directory bread(block 66) failed [ 924.813385][T21699] FAT-fs (loop1): Directory bread(block 67) failed [ 924.822742][T21699] FAT-fs (loop1): Directory bread(block 68) failed [ 924.849334][T21699] FAT-fs (loop1): Directory bread(block 69) failed [ 924.903837][T21699] FAT-fs (loop1): Directory bread(block 70) failed [ 924.933186][T21705] loop2: detected capacity change from 0 to 1024 [ 924.942493][T21699] FAT-fs (loop1): Directory bread(block 71) failed [ 924.980987][T21699] FAT-fs (loop1): Directory bread(block 72) failed [ 925.022983][T21699] FAT-fs (loop1): Directory bread(block 73) failed [ 925.042561][T21705] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 925.204428][ T1300] hfsplus: b-tree write err: -5, ino 4 [ 925.701943][T21730] netlink: 'syz.3.7517': attribute type 10 has an invalid length. [ 925.800613][T21730] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 926.027164][T21742] loop2: detected capacity change from 0 to 256 [ 926.088648][T21746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7525'. [ 926.153701][T21742] FAT-fs (loop2): Directory bread(block 64) failed [ 926.192606][T21742] FAT-fs (loop2): Directory bread(block 65) failed [ 926.229037][T21742] FAT-fs (loop2): Directory bread(block 66) failed [ 926.245256][T21748] netlink: 'syz.0.7537': attribute type 10 has an invalid length. [ 926.264005][T21742] FAT-fs (loop2): Directory bread(block 67) failed [ 926.289664][T21742] FAT-fs (loop2): Directory bread(block 68) failed [ 926.320035][T21742] FAT-fs (loop2): Directory bread(block 69) failed [ 926.331209][T21748] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 926.348307][T21742] FAT-fs (loop2): Directory bread(block 70) failed [ 926.369937][T21742] FAT-fs (loop2): Directory bread(block 71) failed [ 926.401904][T21742] FAT-fs (loop2): Directory bread(block 72) failed [ 926.408517][T21742] FAT-fs (loop2): Directory bread(block 73) failed [ 926.980135][T21740] loop1: detected capacity change from 0 to 32768 [ 927.010816][T21740] [ 927.010816][T21740] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 927.010816][T21740] [ 927.020952][T21772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7538'. [ 927.038670][T21772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7538'. [ 927.059313][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 927.074514][T21772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7538'. [ 927.122206][T21740] jfs_rename: dtInsert returned -EIO [ 927.268919][ T4269] [ 927.268919][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 927.268919][ T4269] [ 927.283705][ T7] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 927.302851][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.315772][ T4269] [ 927.315772][ T4269] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 927.315772][ T4269] [ 927.337176][T21778] syz.3.7542 (21778): /proc/21777/oom_adj is deprecated, please use /proc/21777/oom_score_adj instead. [ 927.344467][ T7] usb 5-1: config 0 has no interface number 0 [ 927.419596][ T7] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 927.459096][ T7] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.505642][ T7] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 927.544612][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.572907][ T7] usb 5-1: Product: syz [ 927.577187][ T7] usb 5-1: Manufacturer: syz [ 927.581820][ T7] usb 5-1: SerialNumber: syz [ 927.640793][ T7] usb 5-1: config 0 descriptor?? [ 927.713146][T21788] netlink: 'syz.0.7557': attribute type 1 has an invalid length. [ 927.741335][T21788] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7557'. [ 928.041227][ T7] usbtouchscreen: probe of 5-1:0.117 failed with error -71 [ 928.068303][ T7] usb 5-1: USB disconnect, device number 34 [ 928.258314][ T22] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 928.357597][T21804] loop2: detected capacity change from 0 to 32768 [ 928.396497][T21804] XFS (loop2): Mounting V5 Filesystem [ 928.441340][T21804] XFS (loop2): Ending clean mount [ 928.450956][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 928.461264][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 928.471321][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 928.481347][ T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 928.491431][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 928.500865][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.512329][ T22] usb 1-1: config 0 descriptor?? [ 928.611101][ T4277] XFS (loop2): Unmounting Filesystem [ 928.714308][ T22] hdpvr 1-1:0.0: firmware version 0xd dated [ 928.914203][ T22] hdpvr 1-1:0.0: device init failed [ 928.920370][ T22] hdpvr: probe of 1-1:0.0 failed with error -12 [ 928.957426][ T22] usb 1-1: USB disconnect, device number 28 [ 929.121809][T21828] loop3: detected capacity change from 0 to 256 [ 929.131422][T21829] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 929.177400][T21831] nvme_fabrics: unknown parameter or missing value '5y' in ctrl creation request [ 929.215006][ T5395] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 929.679816][ T5274] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 929.878449][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.909075][ T5274] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 929.943238][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.963396][ T5274] usb 5-1: config 0 descriptor?? [ 930.004033][T21859] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 930.168510][ T5274] ath6kl: Failed to submit usb control message: -71 [ 930.178716][ T5274] ath6kl: unable to send the bmi data to the device: -71 [ 930.185952][ T5274] ath6kl: Unable to send get target info: -71 [ 930.193203][ T5274] ath6kl: Failed to init ath6kl core: -71 [ 930.222732][ T5274] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 930.262849][ T5274] usb 5-1: USB disconnect, device number 35 [ 930.608465][T21857] loop0: detected capacity change from 0 to 32768 [ 930.641176][T21875] netlink: 'syz.1.7584': attribute type 10 has an invalid length. [ 930.655756][T21857] [ 930.655756][T21857] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 930.655756][T21857] [ 930.678871][T21877] program syz.3.7585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.688912][T21877] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 930.722145][T21857] jfs_rename: dtInsert returned -EIO [ 930.742744][T21875] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 930.873669][ T4275] [ 930.873669][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 930.873669][ T4275] [ 930.915650][ T4275] [ 930.915650][ T4275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 930.915650][ T4275] [ 931.540016][T21905] netlink: 'syz.0.7599': attribute type 3 has an invalid length. [ 931.548158][T21905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7599'. [ 931.560126][T21899] loop4: detected capacity change from 0 to 4096 [ 931.633883][T21899] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 931.712861][T21899] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 931.909050][T21909] loop2: detected capacity change from 0 to 4096 [ 932.023147][T21909] ntfs: volume version 3.1. [ 932.045155][T21909] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 932.086202][T21909] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 932.129822][T21909] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 932.171301][T21909] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 932.273193][T21909] ntfs: (device loop2): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 932.303580][T21909] ntfs: (device loop2): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 932.405714][ T26] audit: type=1326 audit(46768627.995:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.4.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 932.502907][ T26] audit: type=1326 audit(46768628.048:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.4.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 932.608491][ T26] audit: type=1326 audit(46768628.048:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.4.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 932.667641][ T26] audit: type=1326 audit(46768628.048:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.4.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 932.995114][T21945] loop4: detected capacity change from 0 to 1024 [ 933.043694][T21945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 933.151703][T21948] loop3: detected capacity change from 0 to 4096 [ 933.159192][T21948] /dev/loop3: Can't open blockdev [ 933.172159][T21945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 933.208792][ T5395] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 933.240827][T21920] loop0: detected capacity change from 0 to 32768 [ 933.276069][T21945] EXT4-fs warning (device loop4): empty_inline_dir:1884: bad inline directory (dir #12) - no `..' [ 933.312320][T21920] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7604 (21920) [ 933.393204][T21920] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 933.435565][T21920] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 933.462080][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 933.495113][T21957] loop1: detected capacity change from 0 to 2048 [ 933.510530][T21920] BTRFS info (device loop0): force zlib compression, level 3 [ 933.570122][T21920] BTRFS info (device loop0): force clearing of disk cache [ 933.577369][T21920] BTRFS info (device loop0): disabling tree log [ 933.583479][T21957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 933.621460][T21920] BTRFS info (device loop0): enabling disk space caching [ 933.671379][T21920] BTRFS info (device loop0): disk space caching is enabled [ 933.880269][T21964] loop4: detected capacity change from 0 to 4096 [ 933.920989][T21964] ntfs: volume version 3.1. [ 933.926644][T21920] BTRFS info (device loop0): enabling ssd optimizations [ 933.950605][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.956961][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.137405][ T4275] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 934.520685][T21998] loop2: detected capacity change from 0 to 2048 [ 934.642601][T21998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 934.679741][T21998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 934.867944][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 935.127530][T22019] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7645'. [ 935.866164][ T5278] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 936.074347][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 936.081491][ T5278] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 936.101984][ T5278] usb 2-1: config 0 has no interface number 0 [ 936.121489][ T5278] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.134651][ T5278] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 936.169476][T22065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7677'. [ 936.195343][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 936.217789][ T5278] usb 2-1: Product: syz [ 936.230288][ T5278] usb 2-1: SerialNumber: syz [ 936.252433][ T5278] usb 2-1: config 0 descriptor?? [ 936.274919][ T5278] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input53 [ 936.480613][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.491163][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.498465][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.511615][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.525317][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.533411][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.541016][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.559270][ T5278] usb 2-1: USB disconnect, device number 32 [ 936.569892][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 936.576910][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 936.588944][ T5278] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 936.803878][T22082] loop0: detected capacity change from 0 to 2048 [ 936.939070][T22082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 936.990750][T22082] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 937.055897][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 937.280741][T22103] sctp: [Deprecated]: syz.2.7684 (pid 22103) Use of int in maxseg socket option. [ 937.280741][T22103] Use struct sctp_assoc_value instead [ 937.506531][T22114] xt_addrtype: ipv6 does not support BROADCAST matching [ 937.725897][T22123] loop0: detected capacity change from 0 to 256 [ 937.743184][T22123] exfat: Deprecated parameter 'namecase' [ 937.759827][T22124] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7695'. [ 937.786303][T22123] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 938.100196][T22136] loop0: detected capacity change from 0 to 64 [ 938.113708][T22134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.130103][T22134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.165623][T22134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.181166][T22134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.201133][T22139] autofs4:pid:22139:autofs_fill_super: called with bogus options [ 938.325879][T22135] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (253) [ 938.641463][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7709'. [ 939.133492][T22174] loop0: detected capacity change from 0 to 8 [ 939.548405][T16447] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 939.674541][T22191] loop1: detected capacity change from 0 to 8192 [ 939.726119][T22191] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 939.738895][T16447] usb 4-1: Using ep0 maxpacket: 16 [ 939.768239][T16447] usb 4-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 939.779164][T16447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.788297][T22191] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 939.799737][T16447] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.809912][T16447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.818096][T16447] usb 4-1: Product: syz [ 939.822438][T16447] usb 4-1: Manufacturer: syz [ 939.827164][T16447] usb 4-1: SerialNumber: syz [ 939.842804][T22191] REISERFS (device loop1): using ordered data mode [ 939.901892][T22191] reiserfs: using flush barriers [ 939.960240][T22191] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 939.995936][T22191] REISERFS (device loop1): checking transaction log (loop1) [ 940.028472][T16447] usb 4-1: 0:2 : does not exist [ 940.033954][T16447] usb 4-1: unit 9 not found! [ 940.053043][T22191] REISERFS (device loop1): Using rupasov hash to sort names [ 940.080668][T22191] REISERFS (device loop1): using 3.5.x disk format [ 940.087812][T16447] usb 4-1: USB disconnect, device number 46 [ 940.105326][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.146845][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.188785][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.236219][T22191] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 940.318767][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.348770][ T4612] udevd[4612]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.348805][T22215] netlink: 'syz.2.7739': attribute type 1 has an invalid length. [ 940.373958][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.413839][T22191] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 940.575017][T22220] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 940.734567][T22225] netlink: 'syz.0.7743': attribute type 3 has an invalid length. [ 940.985633][ T22] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 941.143913][T22243] loop0: detected capacity change from 0 to 256 [ 941.164349][T22243] exfat: Deprecated parameter 'utf8' [ 941.166943][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 941.197226][ T22] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 941.215851][ T22] usb 4-1: config 0 has no interface number 0 [ 941.222038][ T22] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 941.226963][T22243] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 941.312544][ T22] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 941.335907][ T22] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 941.364628][ T22] usb 4-1: Product: syz [ 941.380388][ T22] usb 4-1: SerialNumber: syz [ 941.400925][T22248] netlink: 'syz.4.7756': attribute type 10 has an invalid length. [ 941.425112][ T22] usb 4-1: config 0 descriptor?? [ 941.440682][ T22] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input54 [ 941.663150][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 941.663747][ T5280] usb 4-1: USB disconnect, device number 47 [ 941.670203][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 941.729775][ T5280] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 941.824588][T22260] loop4: detected capacity change from 0 to 512 [ 941.947530][T22260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 942.309965][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 942.441671][T22286] loop4: detected capacity change from 0 to 256 [ 942.468624][T22288] loop1: detected capacity change from 0 to 512 [ 942.506039][T22286] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9059fefc, utbl_chksum : 0xe619d30d) [ 942.585368][T22288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 942.875655][T22304] Process accounting resumed [ 942.896250][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 943.102599][T22303] loop2: detected capacity change from 0 to 8192 [ 943.148149][T22303] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 943.194430][T22303] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 943.204018][T22303] REISERFS (device loop2): using ordered data mode [ 943.210582][T22303] reiserfs: using flush barriers [ 943.284851][T22317] loop1: detected capacity change from 0 to 1024 [ 943.303384][T22303] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 943.320456][T22303] REISERFS (device loop2): checking transaction log (loop2) [ 943.330058][T22303] REISERFS (device loop2): Using rupasov hash to sort names [ 943.338465][T22303] REISERFS (device loop2): using 3.5.x disk format [ 943.363168][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.369385][T22317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 943.400609][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.412257][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.425271][T22303] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 943.448517][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.461063][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.474106][T22323] netlink: 'syz.3.7788': attribute type 1 has an invalid length. [ 943.508433][T22303] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 943.524655][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 943.527820][T22323] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7788'. [ 944.203055][T22345] netlink: 'syz.3.7800': attribute type 5 has an invalid length. [ 944.231015][T22345] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7800'. [ 944.654232][T22355] loop4: detected capacity change from 0 to 8192 [ 944.722318][T22355] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 944.760476][T22355] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 944.780851][T22339] loop2: detected capacity change from 0 to 32768 [ 944.793914][T22355] REISERFS (device loop4): using ordered data mode [ 944.800492][T22355] reiserfs: using flush barriers [ 944.813772][T22355] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 944.830981][T22355] REISERFS (device loop4): checking transaction log (loop4) [ 944.850837][T22355] REISERFS (device loop4): Using rupasov hash to sort names [ 944.858220][T22355] REISERFS (device loop4): using 3.5.x disk format [ 944.889282][T22339] XFS (loop2): Mounting V5 Filesystem [ 944.916470][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.043821][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.107613][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.147888][T22339] XFS (loop2): Ending clean mount [ 945.184025][T22355] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 945.258703][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.308829][T22386] loop0: detected capacity change from 0 to 256 [ 945.317776][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.344794][T22386] exfat: Deprecated parameter 'namecase' [ 945.360903][T22355] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 945.398694][T22386] exfat: Deprecated parameter 'namecase' [ 945.436813][ T4277] XFS (loop2): Unmounting Filesystem [ 945.450321][T22386] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 945.672770][T22386] exFAT-fs (loop0): hint_cluster is invalid (4278190089) [ 945.724202][T22386] exFAT-fs (loop0): error, failed to bmap (inode : ffff88804cc12ee0 iblock : 8, err : -5) [ 945.788325][T22386] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 945.829444][T22386] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 945.975166][ T41] kworker/u4:2: attempt to access beyond end of device [ 945.975166][ T41] loop0: rw=1, sector=34225520825, nr_sectors = 1 limit=256 [ 946.050246][ T41] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 946.059731][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.059731][ T41] loop0: rw=1, sector=34225520826, nr_sectors = 1 limit=256 [ 946.110879][ T41] Buffer I/O error on dev loop0, logical block 34225520826, lost async page write [ 946.145652][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.145652][ T41] loop0: rw=1, sector=34225520827, nr_sectors = 1 limit=256 [ 946.184050][T22402] loop4: detected capacity change from 0 to 512 [ 946.193430][ T41] Buffer I/O error on dev loop0, logical block 34225520827, lost async page write [ 946.234893][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.234893][ T41] loop0: rw=1, sector=34225520828, nr_sectors = 1 limit=256 [ 946.279613][T22402] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 946.297908][ T41] Buffer I/O error on dev loop0, logical block 34225520828, lost async page write [ 946.307505][T22402] System zones: 0-2, 18-18, 34-34 [ 946.328316][T22402] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.7826: corrupted inode contents [ 946.337614][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.337614][ T41] loop0: rw=1, sector=34225520829, nr_sectors = 1 limit=256 [ 946.355238][ T41] Buffer I/O error on dev loop0, logical block 34225520829, lost async page write [ 946.431229][T22402] EXT4-fs error (device loop4): ext4_dirty_inode:6137: inode #3: comm syz.4.7826: mark_inode_dirty error [ 946.450167][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.450167][ T41] loop0: rw=1, sector=34225520830, nr_sectors = 1 limit=256 [ 946.503161][ T41] Buffer I/O error on dev loop0, logical block 34225520830, lost async page write [ 946.513633][T22402] EXT4-fs error (device loop4): ext4_do_update_inode:5272: inode #3: comm syz.4.7826: corrupted inode contents [ 946.547974][ T41] kworker/u4:2: attempt to access beyond end of device [ 946.547974][ T41] loop0: rw=1, sector=34225520831, nr_sectors = 1 limit=256 [ 946.584392][T22402] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.7826: mark_inode_dirty error [ 946.605334][ T41] Buffer I/O error on dev loop0, logical block 34225520831, lost async page write [ 946.617867][T22402] __quota_error: 6 callbacks suppressed [ 946.617891][T22402] Quota error (device loop4): write_blk: dquota write failed [ 946.637335][T22402] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 946.647704][T22402] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.7826: Failed to acquire dquot type 0 [ 946.671218][T22402] EXT4-fs (loop4): 1 orphan inode deleted [ 946.677848][T22402] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 946.706530][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 946.739366][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 946.965398][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 947.687422][T22452] loop1: detected capacity change from 0 to 1024 [ 947.780506][T22452] hfsplus: xattr searching failed [ 948.387319][ T26] audit: type=1326 audit(46768644.792:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.4.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 948.460866][ T26] audit: type=1326 audit(46768644.824:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.4.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 948.482987][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.605111][ T26] audit: type=1326 audit(46768644.824:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.4.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 948.627236][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.684880][T22484] loop1: detected capacity change from 0 to 4096 [ 948.765102][ T26] audit: type=1326 audit(46768644.824:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22479 comm="syz.4.7863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 948.928548][T22499] loop2: detected capacity change from 0 to 256 [ 949.362768][T16447] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 949.376639][ T26] audit: type=1326 audit(46768645.832:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.4.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 949.477190][ T26] audit: type=1326 audit(46768645.864:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.4.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 949.499396][ C1] vkms_vblank_simulate: vblank timer overrun [ 949.553485][T16447] usb 4-1: Using ep0 maxpacket: 8 [ 949.563519][T16447] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 949.585390][ T26] audit: type=1326 audit(46768645.864:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22510 comm="syz.4.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 949.607514][ C1] vkms_vblank_simulate: vblank timer overrun [ 949.617842][T16447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.639276][T16447] usb 4-1: Product: syz [ 949.643559][T16447] usb 4-1: Manufacturer: syz [ 949.648197][T16447] usb 4-1: SerialNumber: syz [ 949.698241][T16447] usb 4-1: config 0 descriptor?? [ 949.723893][T16447] gspca_main: sq930x-2.14.0 probing 2770:930c [ 950.095967][T16447] gspca_sq930x: ucbus_write failed -71 [ 950.101673][T16447] sq930x: probe of 4-1:0.0 failed with error -71 [ 950.122603][T16447] usb 4-1: USB disconnect, device number 48 [ 950.361808][T22541] netlink: 'syz.0.7892': attribute type 1 has an invalid length. [ 950.373669][T22541] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7892'. [ 950.444699][T22543] Process accounting paused [ 950.899833][T22533] loop1: detected capacity change from 0 to 32768 [ 950.944973][T22533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7888 (22533) [ 951.006286][T22533] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 951.042341][T22533] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 951.073912][T22533] BTRFS info (device loop1): using free space tree [ 951.163451][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7905'. [ 951.172555][T22573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7905'. [ 951.197242][T22573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7905'. [ 951.272504][T22581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 951.279846][T22581] IPv6: NLM_F_CREATE should be set when creating new route [ 951.287198][T22581] IPv6: NLM_F_CREATE should be set when creating new route [ 951.311363][T22565] loop3: detected capacity change from 0 to 8192 [ 951.394072][T22565] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 951.441547][T22565] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 951.474693][T22533] BTRFS info (device loop1): enabling ssd optimizations [ 951.485261][T22565] REISERFS (device loop3): using ordered data mode [ 951.572024][T22565] reiserfs: using flush barriers [ 951.581339][T22565] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 951.628095][T22565] REISERFS (device loop3): checking transaction log (loop3) [ 951.666228][T22565] REISERFS (device loop3): Using r5 hash to sort names [ 951.673787][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 951.975852][T22604] loop4: detected capacity change from 0 to 64 [ 952.114855][T22608] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 952.190954][T22611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7917'. [ 952.216564][T22611] netlink: 660 bytes leftover after parsing attributes in process `syz.2.7917'. [ 952.575048][T22621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7922'. [ 952.616998][T22621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7922'. [ 952.638897][T22621] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7922'. [ 952.698750][T22627] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 953.036255][T22632] loop4: detected capacity change from 0 to 4096 [ 953.078976][T22632] __ntfs_error: 11 callbacks suppressed [ 953.078997][T22632] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 953.144475][T22632] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 953.179886][T22632] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 953.216287][T22632] ntfs: volume version 3.1. [ 953.476898][T21230] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 953.553016][T21230] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 953.593408][ T4280] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 953.617367][T22624] loop0: detected capacity change from 0 to 32768 [ 953.652238][T22624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7923 (22624) [ 953.723564][T22624] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 953.769859][T22624] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 953.799195][T22624] BTRFS info (device loop0): using free space tree [ 953.917855][T22656] loop3: detected capacity change from 0 to 4096 [ 953.934115][T22656] /dev/loop3: Can't open blockdev [ 953.947567][T22655] loop1: detected capacity change from 0 to 4096 [ 953.974663][T22666] loop4: detected capacity change from 0 to 4096 [ 954.033993][T22655] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 954.139496][T22624] BTRFS info (device loop0): enabling ssd optimizations [ 954.179731][T22655] ntfs3: loop1: no free space to extend mft [ 954.359769][ T4269] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 954.379658][ T4275] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 954.429623][ T4269] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 954.513359][ T4269] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 954.561219][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7944'. [ 954.649257][T22690] netlink: 'syz.2.7948': attribute type 3 has an invalid length. [ 954.986232][T22698] raw_sendmsg: syz.1.7951 forgot to set AF_INET. Fix it! [ 955.585369][T22718] block device autoloading is deprecated and will be removed. [ 955.684300][ T125] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 955.857501][T16447] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 955.874929][ T125] usb 1-1: Using ep0 maxpacket: 32 [ 955.884926][ T125] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 955.942632][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.950713][ T125] usb 1-1: Product: syz [ 955.975170][ T125] usb 1-1: Manufacturer: syz [ 955.985062][ T125] usb 1-1: SerialNumber: syz [ 956.009168][ T125] usb 1-1: config 0 descriptor?? [ 956.059086][T16447] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.079870][T16447] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 956.113237][T16447] usb 5-1: config 0 interface 0 has no altsetting 0 [ 956.119945][T16447] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 956.137551][T22740] __nla_validate_parse: 2 callbacks suppressed [ 956.137588][T22740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7970'. [ 956.151235][T16447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.178086][T16447] usb 5-1: config 0 descriptor?? [ 956.204341][T16447] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55 [ 956.229131][ T125] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 956.249475][ T125] eb 2a 3b 80 9b e4 7a f0 [ 956.254534][ T125] snd-usb-6fire: probe of 1-1:0.0 failed with error -5 [ 956.268793][ T26] audit: type=1326 audit(46768653.070:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.2.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 956.291092][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.386291][ T3623] bcm5974 5-1:0.0: could not read from device [ 956.412244][T16447] usb 5-1: USB disconnect, device number 36 [ 956.418669][ T3623] bcm5974 5-1:0.0: could not read from device [ 956.441234][ T22] usb 1-1: USB disconnect, device number 29 [ 956.488358][ T26] audit: type=1326 audit(46768653.070:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.2.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 956.525440][ T26] audit: type=1326 audit(46768653.185:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.2.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 956.569431][ T26] audit: type=1326 audit(46768653.185:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.2.7972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83679bf79 code=0x7ffc0000 [ 956.591861][ C1] vkms_vblank_simulate: vblank timer overrun [ 956.621534][T22751] netlink: 'syz.2.7975': attribute type 1 has an invalid length. [ 956.630284][T22751] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7975'. [ 956.802819][T22757] loop2: detected capacity change from 0 to 16 [ 956.819251][T22757] erofs: (device loop2): mounted with root inode @ nid 36. [ 956.871278][T22757] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 956.898900][T22761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7980'. [ 957.100548][T22765] usb usb9: usbfs: process 22765 (syz.4.7982) did not claim interface 0 before use [ 957.144273][T22771] netlink: 'syz.0.7985': attribute type 25 has an invalid length. [ 957.180129][T22771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7985'. [ 957.886740][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8000'. [ 958.185577][T22812] overlayfs: missing 'lowerdir' [ 958.212405][T22815] loop4: detected capacity change from 0 to 16 [ 958.247089][T22815] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 958.729009][T22836] netlink: 'syz.3.8016': attribute type 10 has an invalid length. [ 958.775140][T22836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8016'. [ 958.913487][T22836] team0: Port device geneve0 added [ 958.920156][T22844] netlink: 'syz.0.8020': attribute type 10 has an invalid length. [ 958.928682][T22844] device netdevsim0 left promiscuous mode [ 958.989453][T22844] team0: Port device netdevsim0 added [ 959.085413][ T125] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 959.289704][T22856] SET target dimension over the limit! [ 959.302492][ T125] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 959.316758][ T125] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 959.345160][ T125] usb 3-1: Product: syz [ 959.361972][ T125] usb 3-1: Manufacturer: syz [ 959.378386][ T125] usb 3-1: SerialNumber: syz [ 959.397212][ T125] usb 3-1: config 0 descriptor?? [ 959.424442][ T125] ch341 3-1:0.0: ch341-uart converter detected [ 959.792717][ T125] usb 3-1: failed to send control message: -71 [ 959.809975][ T125] ch341-uart: probe of ttyUSB0 failed with error -71 [ 959.822225][ T125] usb 3-1: USB disconnect, device number 20 [ 959.844110][ T125] ch341 3-1:0.0: device disconnected [ 960.247671][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8047'. [ 960.885359][T22928] netlink: 'syz.3.8063': attribute type 2 has an invalid length. [ 961.081645][T22934] loop0: detected capacity change from 0 to 256 [ 961.121239][T22937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 961.165785][T22934] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 961.329562][T22944] loop1: detected capacity change from 0 to 512 [ 961.512044][T22944] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 961.669551][T22957] loop4: detected capacity change from 0 to 1764 [ 961.735916][T22944] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.8072: Attempting to read directory block (0) that is past i_size (3) [ 961.909720][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 961.960426][T22970] x_tables: ip_tables: osf match: only valid for protocol 6 [ 962.519266][T22989] loop3: detected capacity change from 0 to 4096 [ 962.548143][T22989] /dev/loop3: Can't open blockdev [ 963.023692][T23011] loop4: detected capacity change from 0 to 1764 [ 963.383470][T23028] loop4: detected capacity change from 0 to 64 [ 963.521868][T23026] loop1: detected capacity change from 0 to 4096 [ 963.547960][T23026] __ntfs_warning: 1 callbacks suppressed [ 963.547978][T23026] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 963.678668][T23026] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 963.738249][T23026] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 963.769256][T23026] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 963.814783][T23026] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 963.888763][T23026] ntfs: volume version 3.1. [ 963.913642][T23026] ntfs: (device loop1): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 963.958649][T23026] ntfs: (device loop1): map_mft_record(): Failed with error code 5. [ 963.998079][T23026] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 964.023450][T23043] loop3: detected capacity change from 0 to 164 [ 964.030060][T23026] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 964.041492][T23026] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota. [ 964.363681][T23050] loop3: detected capacity change from 0 to 512 [ 964.385977][T23031] loop2: detected capacity change from 0 to 32768 [ 964.392323][T23050] /dev/loop3: Can't open blockdev [ 964.423497][ T4356] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 964.479037][T23031] ERROR: (device loop2): dtSearch: stack overrun! [ 964.479037][T23031] [ 964.528447][T23031] ERROR: (device loop2): remounting filesystem as read-only [ 964.535852][T23031] btstack dump: [ 964.556129][T23031] bn = 0, index = 4 [ 964.584805][T23031] bn = 0, index = 4 [ 964.604612][T23031] bn = 0, index = 4 [ 964.621160][T23031] bn = 0, index = 4 [ 964.639539][T23031] bn = 0, index = 4 [ 964.649065][ T4356] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 964.657270][T23057] mmap: syz.3.8123 (23057): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 964.690676][T23031] bn = 0, index = 4 [ 964.704602][T23031] bn = 0, index = 4 [ 964.708492][T23031] bn = 0, index = 0 [ 964.738086][T23031] jfs_lookup: dtSearch returned -5 [ 964.747808][ T4356] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 964.776312][ T4356] usb 1-1: config 0 has no interface number 0 [ 964.783072][ T4356] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 964.823485][ T4356] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 964.849171][ T4356] usb 1-1: config 0 interface 52 has no altsetting 0 [ 964.859836][ T4356] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 964.923439][ T4356] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 964.956822][ T4356] usb 1-1: Manufacturer: syz [ 964.976633][ T4356] usb 1-1: config 0 descriptor?? [ 965.012799][ T4356] hub 1-1:0.52: bad descriptor, ignoring hub [ 965.026896][ T4356] hub: probe of 1-1:0.52 failed with error -5 [ 965.078313][T23069] netlink: 'syz.4.8129': attribute type 15 has an invalid length. [ 965.132190][T23069] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8129'. [ 965.191222][ T4356] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input56 [ 965.500053][ T22] usb 1-1: USB disconnect, device number 30 [ 965.512836][T23079] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8134'. [ 965.976725][T23091] loop2: detected capacity change from 0 to 4096 [ 966.036360][T23095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8142'. [ 966.058260][T23091] ntfs: volume version 3.1. [ 966.134822][T23099] loop3: detected capacity change from 0 to 8 [ 966.157222][T23099] /dev/loop3: Can't open blockdev [ 967.135884][T23139] netlink: 830 bytes leftover after parsing attributes in process `syz.0.8163'. [ 967.435806][T23156] netlink: 392 bytes leftover after parsing attributes in process `syz.1.8171'. [ 967.772829][T23169] loop1: detected capacity change from 0 to 64 [ 967.810673][T23169] Trying to free block not in datazone [ 967.824454][T23169] minix_free_block (loop1:21): bit already cleared [ 967.846152][T23169] Trying to free block not in datazone [ 968.156570][T23185] ./file0: Can't open blockdev [ 968.317176][ T4356] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 968.498675][ T4356] usb 2-1: Using ep0 maxpacket: 8 [ 968.509770][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 968.538395][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 968.557313][ T4356] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.567480][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 968.579003][ T4356] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 968.597409][ T4356] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 968.606918][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.632782][ T4356] usb 2-1: config 0 descriptor?? [ 968.656940][T23179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 968.764824][ T125] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 968.832419][T23210] loop3: detected capacity change from 0 to 256 [ 968.873132][ T5396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 968.909787][T23181] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 968.949811][ T125] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 968.989286][ T125] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 969.018328][ T125] usb 5-1: Product: syz [ 969.031838][ T125] usb 5-1: Manufacturer: syz [ 969.036621][ T125] usb 5-1: SerialNumber: syz [ 969.084648][ T125] r8152-cfgselector 5-1: config 0 descriptor?? [ 969.130161][T16447] usb 2-1: USB disconnect, device number 33 [ 969.136904][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 969.494189][ T125] r8152-cfgselector 5-1: Unknown version 0x0000 [ 969.513182][ T125] r8152-cfgselector 5-1: USB disconnect, device number 37 [ 969.662698][T23234] Cannot find del_set index 2 as target [ 969.750576][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 969.750594][ T26] audit: type=1326 audit(46768667.229:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.1.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62599bf79 code=0x7ffc0000 [ 969.789815][ T26] audit: type=1326 audit(46768667.229:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.1.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62599bf79 code=0x7ffc0000 [ 969.836863][ T26] audit: type=1326 audit(46768667.261:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.1.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fd62599bf79 code=0x7ffc0000 [ 969.863737][ T26] audit: type=1326 audit(46768667.261:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.1.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62599bf79 code=0x7ffc0000 [ 969.939094][ T26] audit: type=1326 audit(46768667.261:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23238 comm="syz.1.8213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd62599bf79 code=0x7ffc0000 [ 970.030352][T23246] loop2: detected capacity change from 0 to 1024 [ 970.043566][T23246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 970.051958][T23246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 970.058612][T23246] EXT4-fs: Ignoring removed i_version option [ 970.110269][T23246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 970.206835][T23246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 970.302563][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 971.028036][T23288] netlink: 'syz.3.8236': attribute type 4 has an invalid length. [ 971.150975][T23288] device veth1_macvtap left promiscuous mode [ 971.231179][T23296] Cannot find del_set index 2 as target [ 971.370244][T23298] loop0: detected capacity change from 0 to 1024 [ 971.431365][T23298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 971.468042][T23298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 971.516370][T23298] EXT4-fs: Ignoring removed i_version option [ 971.531880][T23302] Process accounting paused [ 971.542489][T23298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 971.606585][T23298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 971.841215][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 972.023206][T23327] netlink: 'syz.4.8254': attribute type 4 has an invalid length. [ 972.040026][T23329] netlink: 'syz.0.8253': attribute type 1 has an invalid length. [ 972.168850][T23327] device veth1_macvtap left promiscuous mode [ 972.518897][T23348] loop1: detected capacity change from 0 to 1024 [ 972.582880][T23348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 972.589610][T23348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 972.623437][T23348] EXT4-fs: Ignoring removed i_version option [ 972.640656][T23348] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 972.671684][T23348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 972.745722][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 973.039678][ T5274] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 973.087823][T23366] netlink: 'syz.0.8273': attribute type 4 has an invalid length. [ 973.122650][T23366] device veth1_macvtap left promiscuous mode [ 973.239775][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 973.246704][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 973.274729][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 973.299616][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 973.323953][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 973.376371][ T5274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 973.401264][ T5274] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 973.426938][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.429695][T23376] loop4: detected capacity change from 0 to 1024 [ 973.453999][T23376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 973.460878][ T5274] usb 3-1: config 0 descriptor?? [ 973.466872][T23355] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 973.487015][T23376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 973.499148][T23376] EXT4-fs: Ignoring removed i_version option [ 973.510607][T23376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 973.537035][T23376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 973.586780][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 973.778241][T23387] netlink: 'syz.4.8291': attribute type 1 has an invalid length. [ 973.813767][T23387] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8291'. [ 973.951897][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 973.952137][ T5274] usb 3-1: USB disconnect, device number 21 [ 974.190382][T23401] loop0: detected capacity change from 0 to 1024 [ 974.278810][T23401] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 974.437469][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 974.711079][T23419] loop2: detected capacity change from 0 to 256 [ 974.758693][T23419] exfat: Deprecated parameter 'utf8' [ 974.805321][T23419] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 974.994776][T23433] loop2: detected capacity change from 0 to 512 [ 975.091136][T23433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 975.136823][ T4356] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 975.269436][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 975.343538][ T4356] usb 1-1: Using ep0 maxpacket: 16 [ 975.350736][ T4356] usb 1-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 975.395916][ T4356] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.437434][ T4356] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.481346][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.508358][ T4356] usb 1-1: Product: syz [ 975.518072][ T4356] usb 1-1: Manufacturer: syz [ 975.527896][ T4356] usb 1-1: SerialNumber: syz [ 975.665891][T23458] loop1: detected capacity change from 0 to 256 [ 975.696673][T23458] exfat: Deprecated parameter 'utf8' [ 975.747774][ T4356] usb 1-1: 0:2 : does not exist [ 975.759558][ T4356] usb 1-1: unit 9 not found! [ 975.768425][T23458] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d) [ 975.817530][ T4356] usb 1-1: USB disconnect, device number 31 [ 975.824062][ T5274] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 976.028547][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 976.052027][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 976.063838][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 976.100964][ T5396] udevd[5396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.105271][ T5274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 976.160564][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 976.175464][ T5274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 976.186533][ T5274] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 976.199168][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.218833][ T5274] usb 5-1: config 0 descriptor?? [ 976.230790][T23452] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 976.504192][T23478] loop0: detected capacity change from 0 to 512 [ 976.564341][T23478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 976.771767][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 976.783694][ T5274] usb 5-1: USB disconnect, device number 38 [ 976.853037][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 977.091961][T23496] loop3: detected capacity change from 0 to 256 [ 977.120313][T23496] exfat: Deprecated parameter 'utf8' [ 977.126297][T23496] /dev/loop3: Can't open blockdev [ 977.169603][ T5396] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 978.102394][T23532] loop0: detected capacity change from 0 to 1024 [ 978.173149][T23532] hfsplus: xattr searching failed [ 978.719609][T23557] loop1: detected capacity change from 0 to 256 [ 978.743311][T23557] exfat: Deprecated parameter 'namecase' [ 978.749097][T23557] exfat: Deprecated parameter 'namecase' [ 978.821206][T23557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 978.906738][T23557] exFAT-fs (loop1): hint_cluster is invalid (4278190089) [ 978.944396][T23557] exFAT-fs (loop1): error, failed to bmap (inode : ffff888068a6a860 iblock : 8, err : -5) [ 978.990315][T23557] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008) [ 979.028247][T23557] exFAT-fs (loop1): error, invalid access to FAT (entry 0xff000008) [ 979.049915][T23565] Process accounting resumed [ 979.154351][T23570] loop0: detected capacity change from 0 to 512 [ 979.164790][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.164790][ T41] loop1: rw=1, sector=34225520825, nr_sectors = 1 limit=256 [ 979.202641][ T41] Buffer I/O error on dev loop1, logical block 34225520825, lost async page write [ 979.232201][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.232201][ T41] loop1: rw=1, sector=34225520826, nr_sectors = 1 limit=256 [ 979.260216][T23570] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 979.272773][T23576] loop3: detected capacity change from 0 to 1024 [ 979.301664][T23570] System zones: 0-2, 18-18, 34-34 [ 979.331629][ T41] Buffer I/O error on dev loop1, logical block 34225520826, lost async page write [ 979.377662][T23570] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #3: comm syz.0.8371: corrupted inode contents [ 979.427475][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.427475][ T41] loop1: rw=1, sector=34225520827, nr_sectors = 1 limit=256 [ 979.435500][T23570] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #3: comm syz.0.8371: mark_inode_dirty error [ 979.473155][T23570] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #3: comm syz.0.8371: corrupted inode contents [ 979.483546][ T41] Buffer I/O error on dev loop1, logical block 34225520827, lost async page write [ 979.503601][T23570] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.8371: mark_inode_dirty error [ 979.528204][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.528204][ T41] loop1: rw=1, sector=34225520828, nr_sectors = 1 limit=256 [ 979.536127][T23570] Quota error (device loop0): write_blk: dquota write failed [ 979.570100][T23570] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 979.589587][ T41] Buffer I/O error on dev loop1, logical block 34225520828, lost async page write [ 979.599334][T23570] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.8371: Failed to acquire dquot type 0 [ 979.618821][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.618821][ T41] loop1: rw=1, sector=34225520829, nr_sectors = 1 limit=256 [ 979.671828][T23570] EXT4-fs (loop0): 1 orphan inode deleted [ 979.687688][ T41] Buffer I/O error on dev loop1, logical block 34225520829, lost async page write [ 979.689399][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 979.703972][T23570] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 979.728827][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1 [ 979.740789][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.740789][ T41] loop1: rw=1, sector=34225520830, nr_sectors = 1 limit=256 [ 979.802714][ T41] Buffer I/O error on dev loop1, logical block 34225520830, lost async page write [ 979.849675][ T41] kworker/u4:2: attempt to access beyond end of device [ 979.849675][ T41] loop1: rw=1, sector=34225520831, nr_sectors = 1 limit=256 [ 979.898409][ T41] Buffer I/O error on dev loop1, logical block 34225520831, lost async page write [ 980.029023][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 980.189211][ T22] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 980.370374][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 980.385290][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 980.406624][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 980.420128][T23611] autofs4:pid:23611:autofs_fill_super: called with bogus options [ 980.439263][ T26] audit: type=1326 audit(46768678.458:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 980.461472][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.484589][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 980.504229][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 980.530181][ T22] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 980.542919][ T26] audit: type=1326 audit(46768678.458:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 980.577774][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 980.598196][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.621135][ T26] audit: type=1326 audit(46768678.458:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 980.650931][ T22] usb 4-1: config 0 descriptor?? [ 980.668011][T23593] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 980.764317][ T26] audit: type=1326 audit(46768678.458:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 980.871103][ T26] audit: type=1326 audit(46768678.458:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 980.997214][ T26] audit: type=1326 audit(46768678.458:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 981.067586][ T26] audit: type=1326 audit(46768678.458:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23612 comm="syz.4.8390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56bf9bf79 code=0x7ffc0000 [ 981.141533][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 981.150479][ T5274] usb 4-1: USB disconnect, device number 49 [ 981.630461][T23641] autofs4:pid:23641:autofs_fill_super: called with bogus options [ 981.788703][T23643] loop0: detected capacity change from 0 to 256 [ 981.795330][T23625] loop4: detected capacity change from 0 to 32768 [ 981.892307][T23625] XFS (loop4): Mounting V5 Filesystem [ 981.937758][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8410'. [ 981.948118][T23657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8410'. [ 981.957604][T23657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8410'. [ 982.152992][T23625] XFS (loop4): Ending clean mount [ 982.310218][ T4280] XFS (loop4): Unmounting Filesystem [ 982.436277][T23671] loop1: detected capacity change from 0 to 512 [ 982.515932][T23671] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 982.531279][T23671] System zones: 0-2, 18-18, 34-34 [ 982.552969][T23671] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #3: comm syz.1.8415: corrupted inode contents [ 982.565429][T23671] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #3: comm syz.1.8415: mark_inode_dirty error [ 982.618025][T23671] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #3: comm syz.1.8415: corrupted inode contents [ 982.665183][T23671] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.8415: mark_inode_dirty error [ 982.713693][T23671] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.8415: Failed to acquire dquot type 0 [ 982.816353][T23671] EXT4-fs (loop1): 1 orphan inode deleted [ 982.825284][T23671] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 982.835311][T12880] EXT4-fs error (device loop1): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 1 [ 983.096637][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 983.274074][T23689] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 983.311050][T23673] loop0: detected capacity change from 0 to 32768 [ 983.379225][T23673] XFS (loop0): Mounting V5 Filesystem [ 983.442760][T23701] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 983.527055][T23673] XFS (loop0): Ending clean mount [ 983.697546][ T4275] XFS (loop0): Unmounting Filesystem [ 983.875839][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8433'. [ 983.911313][T23719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8444'. [ 983.921020][T23716] netlink: 660 bytes leftover after parsing attributes in process `syz.4.8433'. [ 983.941213][T23719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8444'. [ 983.965186][T23719] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8444'. [ 984.122564][T23722] loop3: detected capacity change from 0 to 4096 [ 984.153649][T23722] /dev/loop3: Can't open blockdev [ 984.167121][T23721] loop1: detected capacity change from 0 to 4096 [ 984.185326][ T5396] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 984.253404][T23721] ntfs: volume version 3.1. [ 984.403548][T23726] loop2: detected capacity change from 0 to 4096 [ 984.418155][T12880] __ntfs_error: 12 callbacks suppressed [ 984.418174][T12880] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 984.491179][T12880] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 984.567847][ T4269] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 984.869151][T23731] loop0: detected capacity change from 0 to 8192 [ 984.876969][T23738] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 984.937533][T23731] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 985.032880][T23731] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 985.074702][T23731] REISERFS (device loop0): using ordered data mode [ 985.081296][T23731] reiserfs: using flush barriers [ 985.162303][T23731] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 985.210523][T23731] REISERFS (device loop0): checking transaction log (loop0) [ 985.241694][T23731] REISERFS (device loop0): Using r5 hash to sort names [ 985.498672][T23728] loop4: detected capacity change from 0 to 32768 [ 985.542923][T23728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8438 (23728) [ 985.626053][T23728] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 985.642360][T23728] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 985.655590][T23728] BTRFS info (device loop4): using free space tree [ 985.779019][T23761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 985.786329][T23761] IPv6: NLM_F_CREATE should be set when creating new route [ 985.793666][T23761] IPv6: NLM_F_CREATE should be set when creating new route [ 985.800464][T23766] netlink: 'syz.3.8453': attribute type 3 has an invalid length. [ 985.874389][T23766] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8453'. [ 986.048241][T23728] BTRFS info (device loop4): enabling ssd optimizations [ 986.110939][ T125] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 986.130510][ T4280] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 986.311005][ T125] usb 2-1: Using ep0 maxpacket: 8 [ 986.390613][ T125] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 986.405985][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.424042][ T125] usb 2-1: Product: syz [ 986.438691][ T125] usb 2-1: Manufacturer: syz [ 986.443386][ T125] usb 2-1: SerialNumber: syz [ 986.463176][ T26] audit: type=1326 audit(46768684.781:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.3.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3699bf79 code=0x7ffc0000 [ 986.471820][ T125] usb 2-1: config 0 descriptor?? [ 986.485389][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.533110][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8463'. [ 986.539546][ T26] audit: type=1326 audit(46768684.792:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.3.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3699bf79 code=0x7ffc0000 [ 986.564623][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.613206][ T125] gspca_main: sq930x-2.14.0 probing 2770:930c [ 986.649375][ T26] audit: type=1326 audit(46768684.823:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.3.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fcb3699bf79 code=0x7ffc0000 [ 986.770382][ T26] audit: type=1326 audit(46768684.823:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.3.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3699bf79 code=0x7ffc0000 [ 986.792627][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.891733][ T26] audit: type=1326 audit(46768684.823:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23794 comm="syz.3.8474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb3699bf79 code=0x7ffc0000 [ 986.914183][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.001189][ T125] gspca_sq930x: ucbus_write failed -71 [ 987.030788][ T125] sq930x: probe of 2-1:0.0 failed with error -71 [ 987.066453][ T125] usb 2-1: USB disconnect, device number 34 [ 987.167190][T23814] loop3: detected capacity change from 0 to 64 [ 987.246645][T15992] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 987.424576][T15992] usb 3-1: Using ep0 maxpacket: 32 [ 987.445403][T15992] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 987.462822][T15992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.470932][T15992] usb 3-1: Product: syz [ 987.475990][T15992] usb 3-1: Manufacturer: syz [ 987.480654][T15992] usb 3-1: SerialNumber: syz [ 987.497077][T23812] loop4: detected capacity change from 0 to 32768 [ 987.504683][T15992] usb 3-1: config 0 descriptor?? [ 987.529223][T23812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.8461 (23812) [ 987.595930][T23812] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 987.624539][T23812] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 987.641644][T23812] BTRFS info (device loop4): using free space tree [ 987.713701][T15992] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 987.776175][T15992] eb 2a 3b 80 9b e4 7a f0 [ 987.788408][T15992] snd-usb-6fire: probe of 3-1:0.0 failed with error -5 [ 987.856345][T23812] BTRFS info (device loop4): enabling ssd optimizations [ 987.918570][ T125] usb 3-1: USB disconnect, device number 22 [ 988.030018][T23842] netlink: 'syz.1.8487': attribute type 3 has an invalid length. [ 988.040414][ T4280] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 988.056142][T23842] __nla_validate_parse: 2 callbacks suppressed [ 988.056162][T23842] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8487'. [ 988.371070][T23852] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8482'. [ 988.505762][T23850] loop0: detected capacity change from 0 to 4096 [ 988.540391][T23850] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 988.646872][T23860] usb usb9: usbfs: process 23860 (syz.2.8485) did not claim interface 0 before use [ 988.675050][T23850] ntfs3: loop0: no free space to extend mft [ 988.777888][ T4275] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 988.805612][ T4275] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 988.812258][ T4275] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 988.900390][ T125] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 989.095458][ T125] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.125388][ T125] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 989.163996][ T125] usb 2-1: config 0 interface 0 has no altsetting 0 [ 989.181233][ T125] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 989.206548][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.239326][ T125] usb 2-1: config 0 descriptor?? [ 989.298710][ T125] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58 [ 989.350847][T23873] loop0: detected capacity change from 0 to 4096 [ 989.390711][T23873] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 989.422718][T23873] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 989.460044][ T3623] bcm5974 2-1:0.0: could not read from device [ 989.476697][T23873] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 989.495063][ T3623] bcm5974 2-1:0.0: could not read from device [ 989.502955][ T125] usb 2-1: USB disconnect, device number 35 [ 989.556783][T23873] ntfs: volume version 3.1. [ 989.710488][ T56] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 989.751829][ T56] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 989.783442][ T4275] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 989.887364][T23866] loop2: detected capacity change from 0 to 32768 [ 989.908577][T23866] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8490 (23866) [ 989.976150][T23866] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 990.005009][T23866] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 990.044444][T23866] BTRFS info (device loop2): using free space tree [ 990.467472][T23866] BTRFS info (device loop2): enabling ssd optimizations [ 990.634867][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 990.815471][T23922] netlink: 'syz.4.8507': attribute type 10 has an invalid length. [ 991.105640][T23922] team0: Port device netdevsim0 added [ 991.577957][T23915] loop0: detected capacity change from 0 to 32768 [ 991.596668][T23915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.8502 (23915) [ 991.631332][T23944] netlink: 'syz.3.8528': attribute type 25 has an invalid length. [ 991.657243][T23915] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 991.670657][T23944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8528'. [ 991.691202][T23915] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 991.711565][T23915] BTRFS info (device loop0): using free space tree [ 991.766218][T23948] netlink: 'syz.1.8519': attribute type 10 has an invalid length. [ 991.780971][T23948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8519'. [ 991.920916][T23948] team0: Port device geneve0 added [ 992.142700][T23915] BTRFS info (device loop0): enabling ssd optimizations [ 992.284892][ T4275] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 992.303995][T23976] SET target dimension over the limit! [ 992.440760][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.447267][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.652541][ T5396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5396) [ 992.738314][T23989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 993.279162][T23984] loop2: detected capacity change from 0 to 32768 [ 993.379894][T23984] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 993.778907][ T5395] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 993.853488][T24021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8549'. [ 993.992371][T24027] overlayfs: missing 'lowerdir' [ 994.036468][T24025] loop2: detected capacity change from 0 to 1764 [ 994.278686][T24033] loop3: detected capacity change from 0 to 16 [ 994.341190][T24033] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 994.392855][T24033] /dev/loop3: Can't open blockdev [ 994.504939][T24011] loop1: detected capacity change from 0 to 32768 [ 994.519830][T24011] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 994.987250][T24055] netlink: 'syz.4.8565': attribute type 10 has an invalid length. [ 995.036690][T24055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8565'. [ 995.127741][T24055] team0: Port device geneve0 added [ 995.276646][T24069] SET target dimension over the limit! [ 995.457581][T24073] loop2: detected capacity change from 0 to 512 [ 995.476500][T24075] loop1: detected capacity change from 0 to 64 [ 995.526748][T24073] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 995.590959][T24073] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.8573: Attempting to read directory block (0) that is past i_size (3) [ 995.788237][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 995.961176][T24092] loop1: detected capacity change from 0 to 1764 [ 996.024366][T24096] netlink: 'syz.3.8583': attribute type 10 has an invalid length. [ 996.056202][T24096] device netdevsim0 left promiscuous mode [ 996.086602][T24096] team0: Port device netdevsim0 added [ 996.130411][T24100] netlink: 'syz.0.8584': attribute type 10 has an invalid length. [ 996.138729][T24100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8584'. [ 996.243962][T24100] team0: Port device geneve0 added [ 996.441832][T24104] loop4: detected capacity change from 0 to 4096 [ 996.495047][T24104] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 996.610433][T24104] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 996.651357][T24104] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 996.677304][T24104] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 996.684284][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8592'. [ 996.738178][T24104] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 996.824701][T24104] ntfs: volume version 3.1. [ 996.829506][T24104] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt. Run chkdsk. [ 996.851931][T24124] netlink: 'syz.1.8593': attribute type 2 has an invalid length. [ 996.884592][T24104] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 996.939320][T24104] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 996.970079][T24104] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 997.008844][T24126] loop0: detected capacity change from 0 to 164 [ 997.018565][T24104] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 997.234702][T24134] xt_CT: You must specify a L4 protocol and not use inversions on it [ 997.364373][ T4330] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 997.528045][T24143] loop0: detected capacity change from 0 to 1764 [ 997.624980][ T4330] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 997.646223][ T4330] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 997.664861][ T4330] usb 4-1: Product: syz [ 997.672339][ T4330] usb 4-1: Manufacturer: syz [ 997.677219][ T4330] usb 4-1: SerialNumber: syz [ 997.706005][ T4330] usb 4-1: config 0 descriptor?? [ 997.756536][ T4330] ch341 4-1:0.0: ch341-uart converter detected [ 997.824225][T24152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8613'. [ 997.846582][T24155] netlink: 'syz.0.8612': attribute type 2 has an invalid length. [ 997.863764][T24156] netlink: 'syz.1.8614': attribute type 10 has an invalid length. [ 997.959307][T24156] team0: Port device netdevsim0 added [ 998.032451][T24162] loop4: detected capacity change from 0 to 8 [ 998.095501][T24162] SQUASHFS error: Failed to read block 0x63a: -5 [ 998.114060][T24162] SQUASHFS error: Unable to read metadata cache entry [638] [ 998.129888][ T4330] usb 4-1: failed to send control message: -71 [ 998.142127][T24162] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 998.154339][ T4330] ch341-uart: probe of ttyUSB0 failed with error -71 [ 998.196411][ T4330] usb 4-1: USB disconnect, device number 50 [ 998.218916][ T4330] ch341 4-1:0.0: device disconnected [ 998.352264][T24170] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8631'. [ 998.395889][T24172] loop4: detected capacity change from 0 to 512 [ 998.463414][T24172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 998.485598][T24172] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.8620: Attempting to read directory block (0) that is past i_size (3) [ 998.673773][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 999.336745][T24206] loop0: detected capacity change from 0 to 4096 [ 999.408491][T24206] ntfs: volume version 3.1. [ 999.424631][T24213] netlink: 'syz.2.8650': attribute type 10 has an invalid length. [ 999.484999][T24213] team0: Port device netdevsim0 added [ 999.531962][T24218] loop3: detected capacity change from 0 to 512 [ 999.623348][T24218] /dev/loop3: Can't open blockdev [ 999.650193][T24222] loop4: detected capacity change from 0 to 64 [ 999.678444][ T5395] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 999.817766][T24222] Trying to free block not in datazone [ 999.849926][T24222] minix_free_block (loop4:21): bit already cleared [ 999.856533][T24222] Trying to free block not in datazone [ 1000.076275][T24233] loop0: detected capacity change from 0 to 512 [ 1000.194849][T24231] Process accounting resumed [ 1000.215731][T24233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1000.273289][T24233] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.8659: Attempting to read directory block (0) that is past i_size (3) [ 1000.416694][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 1000.660662][T24256] loop4: detected capacity change from 0 to 256 [ 1000.709870][T24256] FAT-fs (loop4): Directory bread(block 64) failed [ 1000.730998][T24256] FAT-fs (loop4): Directory bread(block 65) failed [ 1000.748724][T24256] FAT-fs (loop4): Directory bread(block 66) failed [ 1000.765827][T24256] FAT-fs (loop4): Directory bread(block 67) failed [ 1000.790583][T24256] FAT-fs (loop4): Directory bread(block 68) failed [ 1000.814607][T24256] FAT-fs (loop4): Directory bread(block 69) failed [ 1000.821727][T24256] FAT-fs (loop4): Directory bread(block 70) failed [ 1000.828448][T24256] FAT-fs (loop4): Directory bread(block 71) failed [ 1000.852206][T24256] FAT-fs (loop4): Directory bread(block 72) failed [ 1000.892245][T24256] FAT-fs (loop4): Directory bread(block 73) failed [ 1001.290997][T24277] netlink: 'syz.2.8672': attribute type 15 has an invalid length. [ 1001.300942][T24277] netlink: 25 bytes leftover after parsing attributes in process `syz.2.8672'. [ 1001.461794][T24258] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1001.497314][T24285] loop4: detected capacity change from 0 to 164 [ 1001.724479][T24290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1001.963711][T24295] loop1: detected capacity change from 0 to 4096 [ 1001.999652][T24295] __ntfs_error: 21 callbacks suppressed [ 1001.999738][T24295] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1002.069102][T24295] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1002.142264][T24295] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1002.191503][T24295] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1002.226036][T24295] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1002.239833][T24273] loop0: detected capacity change from 0 to 32768 [ 1002.298267][T24295] ntfs: volume version 3.1. [ 1002.313701][T24295] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1002.348758][T24273] ERROR: (device loop0): dtSearch: stack overrun! [ 1002.348758][T24273] [ 1002.378819][T24273] ERROR: (device loop0): remounting filesystem as read-only [ 1002.386784][T24295] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1002.416909][T24273] btstack dump: [ 1002.427087][T24273] bn = 0, index = 4 [ 1002.431482][T24273] bn = 0, index = 4 [ 1002.435832][T24273] bn = 0, index = 4 [ 1002.444320][T24273] bn = 0, index = 4 [ 1002.450557][T24273] bn = 0, index = 4 [ 1002.455644][T24273] bn = 0, index = 4 [ 1002.456306][T24295] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1002.467021][T24273] bn = 0, index = 4 [ 1002.475471][T24273] bn = 0, index = 0 [ 1002.480846][T24295] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1002.493494][T24273] jfs_lookup: dtSearch returned -5 [ 1002.500111][T24295] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1003.051715][T24326] netlink: 392 bytes leftover after parsing attributes in process `syz.2.8693'. [ 1003.146194][ T14] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1003.257148][T24332] loop1: detected capacity change from 0 to 8 [ 1003.294403][T24332] SQUASHFS error: Failed to read block 0x63a: -5 [ 1003.313383][T24332] SQUASHFS error: Unable to read metadata cache entry [638] [ 1003.325916][T24332] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1003.365102][ T14] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1003.381958][ T14] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1003.399582][ T14] usb 4-1: config 0 has no interface number 0 [ 1003.406716][ T14] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 30768, setting to 64 [ 1003.441190][ T14] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.456426][ T14] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1003.479877][ T14] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1003.499989][ T14] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1003.508970][ T14] usb 4-1: Manufacturer: syz [ 1003.515743][ T14] usb 4-1: config 0 descriptor?? [ 1003.532661][ T14] hub 4-1:0.52: bad descriptor, ignoring hub [ 1003.548818][ T14] hub: probe of 4-1:0.52 failed with error -5 [ 1003.609262][ T4330] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1003.740950][ T14] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input60 [ 1003.782592][T24348] loop1: detected capacity change from 0 to 256 [ 1003.817657][ T4330] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1003.837319][ T4330] usb 1-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 1003.848888][ T4330] usb 1-1: Product: syz [ 1003.853120][ T4330] usb 1-1: Manufacturer: syz [ 1003.863098][ T4330] usb 1-1: SerialNumber: syz [ 1003.870736][ T4330] r8152-cfgselector 1-1: config 0 descriptor?? [ 1003.882960][T24348] FAT-fs (loop1): Directory bread(block 64) failed [ 1003.906431][T24348] FAT-fs (loop1): Directory bread(block 65) failed [ 1003.919820][T24348] FAT-fs (loop1): Directory bread(block 66) failed [ 1003.947896][T24348] FAT-fs (loop1): Directory bread(block 67) failed [ 1003.962531][T24348] FAT-fs (loop1): Directory bread(block 68) failed [ 1003.993194][T24348] FAT-fs (loop1): Directory bread(block 69) failed [ 1004.013791][T24348] FAT-fs (loop1): Directory bread(block 70) failed [ 1004.021551][T24348] FAT-fs (loop1): Directory bread(block 71) failed [ 1004.029736][T24348] FAT-fs (loop1): Directory bread(block 72) failed [ 1004.036364][T24348] FAT-fs (loop1): Directory bread(block 73) failed [ 1004.079327][T24338] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1004.105188][ T14] usb 4-1: USB disconnect, device number 51 [ 1004.251851][T24352] ./file0: Can't open blockdev [ 1004.308343][ T4330] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1004.325149][ T4330] r8152-cfgselector 1-1: USB disconnect, device number 32 [ 1004.603532][T24364] loop3: detected capacity change from 0 to 1024 [ 1004.629993][T24364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1004.647200][T24364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1004.676128][T24364] EXT4-fs: Ignoring removed i_version option [ 1004.682562][T24364] /dev/loop3: Can't open blockdev [ 1004.784113][T24368] loop2: detected capacity change from 0 to 8 [ 1004.883732][T24368] SQUASHFS error: Failed to read block 0x63a: -5 [ 1004.946232][T24368] SQUASHFS error: Unable to read metadata cache entry [638] [ 1004.969791][T24368] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1005.025701][T24377] loop0: detected capacity change from 0 to 256 [ 1005.114533][T24377] FAT-fs (loop0): Directory bread(block 64) failed [ 1005.121241][T24377] FAT-fs (loop0): Directory bread(block 65) failed [ 1005.164779][T24377] FAT-fs (loop0): Directory bread(block 66) failed [ 1005.198592][T24377] FAT-fs (loop0): Directory bread(block 67) failed [ 1005.219729][T24377] FAT-fs (loop0): Directory bread(block 68) failed [ 1005.251947][T24377] FAT-fs (loop0): Directory bread(block 69) failed [ 1005.273452][T24377] FAT-fs (loop0): Directory bread(block 70) failed [ 1005.303922][T24377] FAT-fs (loop0): Directory bread(block 71) failed [ 1005.326873][T24377] FAT-fs (loop0): Directory bread(block 72) failed [ 1005.351937][T24377] FAT-fs (loop0): Directory bread(block 73) failed [ 1005.552001][T16451] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1005.740765][T24394] loop0: detected capacity change from 0 to 1024 [ 1005.746395][T16451] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1005.765017][T16451] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1005.768534][T24394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.799525][T16451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1005.819212][T16451] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1005.852486][T16451] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1005.852868][T24394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1005.901841][T16451] usb 3-1: Product: syz [ 1005.906395][T24394] EXT4-fs: Ignoring removed i_version option [ 1005.912016][T16451] usb 3-1: Manufacturer: syz [ 1005.942203][T16451] usb 3-1: SerialNumber: syz [ 1005.957133][T24394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1005.975290][T16451] usb 3-1: config 0 descriptor?? [ 1005.997308][T16451] hub 3-1:0.0: bad descriptor, ignoring hub [ 1006.020777][T24394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1006.033053][T16451] hub: probe of 3-1:0.0 failed with error -5 [ 1006.080952][T16451] usb 3-1: selecting invalid altsetting 0 [ 1006.121729][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 1006.131275][T24378] loop1: detected capacity change from 0 to 32768 [ 1006.226081][T24378] XFS (loop1): Mounting V5 Filesystem [ 1006.257897][T24413] loop0: detected capacity change from 0 to 1024 [ 1006.341859][ T4359] hfsplus: b-tree write err: -5, ino 4 [ 1006.357845][T24378] XFS (loop1): Ending clean mount [ 1006.374353][T24378] XFS (loop1): Quotacheck needed: Please wait. [ 1006.401936][ T14] usb 3-1: USB disconnect, device number 23 [ 1006.456963][ T4586] udevd[4586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.559790][T24378] XFS (loop1): Quotacheck: Done. [ 1006.806875][ T4269] XFS (loop1): Unmounting Filesystem [ 1007.130066][T24426] loop2: detected capacity change from 0 to 256 [ 1007.159579][T24426] FAT-fs (loop2): Directory bread(block 64) failed [ 1007.176808][T24426] FAT-fs (loop2): Directory bread(block 65) failed [ 1007.215972][T24426] FAT-fs (loop2): Directory bread(block 66) failed [ 1007.238532][T24426] FAT-fs (loop2): Directory bread(block 67) failed [ 1007.245345][T24426] FAT-fs (loop2): Directory bread(block 68) failed [ 1007.262502][T24426] FAT-fs (loop2): Directory bread(block 69) failed [ 1007.308209][T24426] FAT-fs (loop2): Directory bread(block 70) failed [ 1007.325290][T24426] FAT-fs (loop2): Directory bread(block 71) failed [ 1007.331979][T24426] FAT-fs (loop2): Directory bread(block 72) failed [ 1007.341170][T24422] loop4: detected capacity change from 0 to 32768 [ 1007.370278][T24426] FAT-fs (loop2): Directory bread(block 73) failed [ 1007.497320][T24422] XFS (loop4): Mounting V5 Filesystem [ 1007.697138][T24422] XFS (loop4): Ending clean mount [ 1007.725115][T24426] Process accounting paused [ 1007.803033][T24420] loop0: detected capacity change from 0 to 32768 [ 1007.906220][T24420] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1007.920734][ T4280] XFS (loop4): Unmounting Filesystem [ 1007.959243][T24420] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1007.983385][T24420] BTRFS info (device loop0): using free space tree [ 1008.020706][T24424] loop3: detected capacity change from 0 to 32768 [ 1008.312808][T24424] XFS (loop3): Mounting V5 Filesystem [ 1008.475511][T24424] XFS (loop3): Ending clean mount [ 1008.480696][T24420] BTRFS info (device loop0): enabling ssd optimizations [ 1008.688702][ T4268] XFS (loop3): Unmounting Filesystem [ 1008.751556][ T4275] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1009.187194][T24489] CIFS: VFS: Malformed UNC in devname [ 1009.715292][T24505] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1009.721980][T24505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1009.748787][T24505] vhci_hcd vhci_hcd.0: Device attached [ 1009.798240][T24509] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 1009.804856][T24509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1009.855247][T24509] vhci_hcd vhci_hcd.0: Device attached [ 1009.873442][T24510] vhci_hcd: connection closed [ 1009.874201][T12880] vhci_hcd: stop threads [ 1009.888378][T24514] TCP: TCP_TX_DELAY enabled [ 1009.894151][T24506] vhci_hcd: connection closed [ 1009.907327][T12880] vhci_hcd: release socket [ 1009.943705][T12880] vhci_hcd: disconnect device [ 1009.950708][T12880] vhci_hcd: stop threads [ 1009.955013][T12880] vhci_hcd: release socket [ 1010.019895][T12880] vhci_hcd: disconnect device [ 1010.040590][ T125] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1010.049533][ T125] usb 39-1: enqueue for inactive port 0 [ 1010.151356][ T125] vhci_hcd: vhci_device speed not set [ 1010.464447][T16452] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1010.666431][T16452] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1010.683447][T16452] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1010.740934][T16452] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1010.756598][T16452] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1010.785077][T24548] loop4: detected capacity change from 0 to 256 [ 1010.786477][T16452] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1010.826091][T16452] usb 1-1: Product: syz [ 1010.835908][T16452] usb 1-1: Manufacturer: syz [ 1010.845303][T16452] usb 1-1: SerialNumber: syz [ 1010.881088][T16452] usb 1-1: config 0 descriptor?? [ 1010.903335][T16452] hub 1-1:0.0: bad descriptor, ignoring hub [ 1010.909316][T16452] hub: probe of 1-1:0.0 failed with error -5 [ 1010.943161][T16452] usb 1-1: selecting invalid altsetting 0 [ 1010.953427][T24548] FAT-fs (loop4): Directory bread(block 64) failed [ 1010.969111][T24548] FAT-fs (loop4): Directory bread(block 65) failed [ 1010.985685][T24548] FAT-fs (loop4): Directory bread(block 66) failed [ 1011.012618][T24548] FAT-fs (loop4): Directory bread(block 67) failed [ 1011.044915][T24548] FAT-fs (loop4): Directory bread(block 68) failed [ 1011.051538][T24548] FAT-fs (loop4): Directory bread(block 69) failed [ 1011.122428][T24548] FAT-fs (loop4): Directory bread(block 70) failed [ 1011.129066][T24548] FAT-fs (loop4): Directory bread(block 71) failed [ 1011.179150][T24548] FAT-fs (loop4): Directory bread(block 72) failed [ 1011.185760][T24548] FAT-fs (loop4): Directory bread(block 73) failed [ 1011.321598][T16451] usb 1-1: USB disconnect, device number 33 [ 1011.423274][T24536] loop1: detected capacity change from 0 to 32768 [ 1011.611462][T24536] XFS (loop1): Mounting V5 Filesystem [ 1011.656267][T24565] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1011.662839][T24565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.681299][T24565] vhci_hcd vhci_hcd.0: Device attached [ 1011.692558][T24569] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1011.699151][T24569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1011.717815][T24569] vhci_hcd vhci_hcd.0: Device attached [ 1011.758296][T24570] vhci_hcd: connection closed [ 1011.759080][ T11] vhci_hcd: stop threads [ 1011.791348][T24566] vhci_hcd: connection closed [ 1011.797077][ T11] vhci_hcd: release socket [ 1011.818010][ T11] vhci_hcd: disconnect device [ 1011.833976][ T11] vhci_hcd: stop threads [ 1011.848395][T24536] XFS (loop1): Ending clean mount [ 1011.854604][ T11] vhci_hcd: release socket [ 1011.868606][ T11] vhci_hcd: disconnect device [ 1011.926963][ T4332] kworker/dying (4332) used greatest stack depth: 15536 bytes left [ 1011.941321][T16451] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1011.948906][T16451] usb 41-1: enqueue for inactive port 0 [ 1012.003653][ T4269] XFS (loop1): Unmounting Filesystem [ 1012.045415][T16451] vhci_hcd: vhci_device speed not set [ 1012.470895][T24597] loop4: detected capacity change from 0 to 256 [ 1012.681260][T24608] loop2: detected capacity change from 0 to 256 [ 1012.746525][T24608] FAT-fs (loop2): Directory bread(block 64) failed [ 1012.782633][T24608] FAT-fs (loop2): Directory bread(block 65) failed [ 1012.806017][T24608] FAT-fs (loop2): Directory bread(block 66) failed [ 1012.822037][T24608] FAT-fs (loop2): Directory bread(block 67) failed [ 1012.848638][T24608] FAT-fs (loop2): Directory bread(block 68) failed [ 1012.874340][T24608] FAT-fs (loop2): Directory bread(block 69) failed [ 1012.900949][T24608] FAT-fs (loop2): Directory bread(block 70) failed [ 1012.929765][T24608] FAT-fs (loop2): Directory bread(block 71) failed [ 1012.958950][T24608] FAT-fs (loop2): Directory bread(block 72) failed [ 1012.985137][T24608] FAT-fs (loop2): Directory bread(block 73) failed [ 1013.263145][T24633] IPv6: Can't replace route, no match found [ 1013.378668][T24640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1013.385273][T24640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1013.435093][T24640] vhci_hcd vhci_hcd.0: Device attached [ 1013.483570][T24651] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1013.490212][T24651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1013.549102][T24651] vhci_hcd vhci_hcd.0: Device attached [ 1013.593437][T24652] vhci_hcd: connection closed [ 1013.593682][T12880] vhci_hcd: stop threads [ 1013.602964][T24643] vhci_hcd: connection closed [ 1013.620847][T12880] vhci_hcd: release socket [ 1013.636778][T12880] vhci_hcd: disconnect device [ 1013.659760][T24664] loop0: detected capacity change from 0 to 256 [ 1013.666400][T12880] vhci_hcd: stop threads [ 1013.670705][T12880] vhci_hcd: release socket [ 1013.692128][T16451] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1013.701188][T12880] vhci_hcd: disconnect device [ 1013.709961][T16451] usb 35-1: enqueue for inactive port 0 [ 1013.787103][T16451] vhci_hcd: vhci_device speed not set [ 1013.961018][T24674] loop2: detected capacity change from 0 to 4096 [ 1013.985727][T24674] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1014.320337][T24685] loop0: detected capacity change from 0 to 256 [ 1014.410793][T24685] FAT-fs (loop0): Directory bread(block 64) failed [ 1014.453385][T24685] FAT-fs (loop0): Directory bread(block 65) failed [ 1014.484274][T24685] FAT-fs (loop0): Directory bread(block 66) failed [ 1014.503362][T24685] FAT-fs (loop0): Directory bread(block 67) failed [ 1014.511983][T24685] FAT-fs (loop0): Directory bread(block 68) failed [ 1014.528492][T24685] FAT-fs (loop0): Directory bread(block 69) failed [ 1014.574060][T24685] FAT-fs (loop0): Directory bread(block 70) failed [ 1014.596376][T24685] FAT-fs (loop0): Directory bread(block 71) failed [ 1014.614155][T24685] FAT-fs (loop0): Directory bread(block 72) failed [ 1014.649313][T24685] FAT-fs (loop0): Directory bread(block 73) failed [ 1014.682710][T24668] loop3: detected capacity change from 0 to 32768 [ 1014.713636][T24668] /dev/loop3: Can't open blockdev [ 1015.053758][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1015.706684][T24696] loop1: detected capacity change from 0 to 32768 [ 1015.796545][T24696] XFS (loop1): Mounting V5 Filesystem [ 1015.977831][T24763] device geneve1 entered promiscuous mode [ 1016.002956][T24696] XFS (loop1): Ending clean mount [ 1016.096470][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8841'. [ 1016.295123][ T4269] XFS (loop1): Unmounting Filesystem [ 1016.479465][T24789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8858'. [ 1017.003903][T24806] loop0: detected capacity change from 0 to 4096 [ 1017.044970][T24806] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1017.104398][T24821] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1017.351696][T24828] device geneve1 entered promiscuous mode [ 1017.407325][T24830] IPv6: Can't replace route, no match found [ 1017.621103][T24801] loop1: detected capacity change from 0 to 32768 [ 1017.644600][T24801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.8846 (24801) [ 1017.700875][T24801] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1017.715225][T24801] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1017.740208][T24801] BTRFS info (device loop1): using free space tree [ 1017.987395][T24801] BTRFS info (device loop1): enabling ssd optimizations [ 1018.129716][ T4269] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1018.198865][T24824] loop4: detected capacity change from 0 to 32768 [ 1018.496920][T24824] XFS (loop4): Mounting V5 Filesystem [ 1018.661187][T24824] XFS (loop4): Ending clean mount [ 1018.674490][T24903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1018.857562][ T4280] XFS (loop4): Unmounting Filesystem [ 1018.907830][T24917] xt_HMARK: spi-set and port-set can't be combined [ 1019.052211][ T14] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1019.196225][T24925] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1019.271341][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 1019.278915][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1019.306615][ T14] usb 3-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1019.326811][ T14] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1019.358510][ T14] usb 3-1: config 8 interface 0 has no altsetting 0 [ 1019.401729][ T14] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1019.423244][T16452] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1019.429511][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.448020][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1019.448035][ T26] audit: type=1326 audit(46768719.432:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.0.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.487074][ T14] usb 3-1: Product: syz [ 1019.501057][ T14] usb 3-1: Manufacturer: syz [ 1019.505763][ T14] usb 3-1: SerialNumber: syz [ 1019.515355][T24943] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8879'. [ 1019.534375][ T26] audit: type=1326 audit(46768719.453:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.0.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.599445][ T26] audit: type=1326 audit(46768719.453:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.0.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.618639][T16452] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1019.666347][ T26] audit: type=1326 audit(46768719.453:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.0.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.680826][T16452] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1019.709256][ T1076] block nbd0: Attempted send on invalid socket [ 1019.711050][ T26] audit: type=1326 audit(46768719.453:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24940 comm="syz.0.8885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.715514][ T1076] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1019.756713][T24951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8888'. [ 1019.770070][T16452] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1019.779291][T16452] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1019.788865][T16452] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1019.797796][T16452] usb 4-1: Product: syz [ 1019.802104][T16452] usb 4-1: Manufacturer: syz [ 1019.807123][T16452] usb 4-1: SerialNumber: syz [ 1019.815171][T16452] usb 4-1: config 0 descriptor?? [ 1019.824251][T16452] hub 4-1:0.0: bad descriptor, ignoring hub [ 1019.830890][T16452] hub: probe of 4-1:0.0 failed with error -5 [ 1019.838791][ T14] usb 3-1: selecting invalid altsetting 0 [ 1019.906418][ T26] audit: type=1326 audit(46768719.905:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.950762][ T26] audit: type=1326 audit(46768719.937:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1019.991723][ T26] audit: type=1326 audit(46768719.937:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1020.014637][ T14] snd-usb-audio: probe of 3-1:8.0 failed with error -12 [ 1020.024259][T16452] usb 4-1: selecting invalid altsetting 0 [ 1020.051061][ T26] audit: type=1326 audit(46768719.937:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1020.084440][ T14] usb 3-1: USB disconnect, device number 24 [ 1020.113025][ T26] audit: type=1326 audit(46768719.937:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b199bf79 code=0x7ffc0000 [ 1020.178380][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.263141][T16452] usb 4-1: USB disconnect, device number 52 [ 1020.425572][T25013] loop4: detected capacity change from 0 to 64 [ 1020.468115][T25016] xt_HMARK: spi-set and port-set can't be combined [ 1020.483698][T25013] hfs: unable to locate alternate MDB [ 1020.495389][T25013] hfs: continuing without an alternate MDB [ 1020.549333][ T5395] udevd[5395]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.616611][ T56] [ 1020.619004][ T56] ====================================================== [ 1020.626057][ T56] WARNING: possible circular locking dependency detected [ 1020.633117][ T56] syzkaller #0 Not tainted [ 1020.637577][ T56] ------------------------------------------------------ [ 1020.644639][ T56] kworker/u4:4/56 is trying to acquire lock: [ 1020.650659][ T56] ffff8880775968f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1020.661607][ T56] [ 1020.661607][ T56] but task is already holding lock: [ 1020.669439][ T56] ffff88805363a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1020.679011][ T56] [ 1020.679011][ T56] which lock already depends on the new lock. [ 1020.679011][ T56] [ 1020.689449][ T56] [ 1020.689449][ T56] the existing dependency chain (in reverse order) is: [ 1020.698500][ T56] [ 1020.698500][ T56] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1020.706662][ T56] __mutex_lock+0x12d/0xaf0 [ 1020.711839][ T56] hfs_find_init+0x15b/0x1d0 [ 1020.717000][ T56] hfs_get_block+0x553/0xc50 [ 1020.722165][ T56] block_read_full_folio+0x3e6/0xf00 [ 1020.728125][ T56] filemap_read_folio+0x16b/0x770 [ 1020.733778][ T56] do_read_cache_folio+0x2a0/0x760 [ 1020.739469][ T56] do_read_cache_page+0x32/0x220 [ 1020.745001][ T56] __hfs_bnode_create+0x4ad/0x7b0 [ 1020.750581][ T56] hfs_bnode_find+0x21e/0xd40 [ 1020.755832][ T56] hfs_brec_find+0x178/0x500 [ 1020.760993][ T56] hfs_brec_read+0x20/0x100 [ 1020.766067][ T56] hfs_cat_find_brec+0x174/0x3f0 [ 1020.771573][ T56] hfs_fill_super+0xff8/0x15b0 [ 1020.776905][ T56] mount_bdev+0x287/0x3c0 [ 1020.781881][ T56] legacy_get_tree+0xe6/0x180 [ 1020.787132][ T56] vfs_get_tree+0x88/0x270 [ 1020.792149][ T56] do_new_mount+0x24a/0xa40 [ 1020.797281][ T56] __se_sys_mount+0x2e3/0x3d0 [ 1020.802543][ T56] do_syscall_64+0x4c/0xa0 [ 1020.807562][ T56] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.814043][ T56] [ 1020.814043][ T56] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1020.823310][ T56] __lock_acquire+0x2d07/0x7d10 [ 1020.828775][ T56] lock_acquire+0x1bb/0x4a0 [ 1020.833866][ T56] __mutex_lock+0x12d/0xaf0 [ 1020.838949][ T56] hfs_extend_file+0xfb/0x13f0 [ 1020.844293][ T56] hfs_bmap_reserve+0x103/0x420 [ 1020.849726][ T56] __hfs_ext_write_extent+0x1fa/0x470 [ 1020.855682][ T56] hfs_ext_write_extent+0x17b/0x200 [ 1020.861464][ T56] hfs_write_inode+0xd8/0xa20 [ 1020.866759][ T56] __writeback_single_inode+0x75b/0x1160 [ 1020.872968][ T56] writeback_sb_inodes+0xb30/0x1850 [ 1020.878738][ T56] wb_writeback+0x482/0xd50 [ 1020.883815][ T56] wb_workfn+0x423/0xee0 [ 1020.888625][ T56] process_one_work+0x8a2/0x1160 [ 1020.894193][ T56] worker_thread+0xaa2/0x1270 [ 1020.899455][ T56] kthread+0x29d/0x330 [ 1020.904149][ T56] ret_from_fork+0x1f/0x30 [ 1020.909166][ T56] [ 1020.909166][ T56] other info that might help us debug this: [ 1020.909166][ T56] [ 1020.919429][ T56] Possible unsafe locking scenario: [ 1020.919429][ T56] [ 1020.926917][ T56] CPU0 CPU1 [ 1020.932314][ T56] ---- ---- [ 1020.937706][ T56] lock(&tree->tree_lock#2/1); [ 1020.942607][ T56] lock(&HFS_I(tree->inode)->extents_lock); [ 1020.951145][ T56] lock(&tree->tree_lock#2/1); [ 1020.958572][ T56] lock(&HFS_I(tree->inode)->extents_lock); [ 1020.964584][ T56] [ 1020.964584][ T56] *** DEADLOCK *** [ 1020.964584][ T56] [ 1020.972753][ T56] 3 locks held by kworker/u4:4/56: [ 1020.977895][ T56] #0: ffff888144a55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1020.988578][ T56] #1: ffffc90001577d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 1021.000470][ T56] #2: ffff88805363a0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1021.010480][ T56] [ 1021.010480][ T56] stack backtrace: [ 1021.016398][ T56] CPU: 0 PID: 56 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1021.023801][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1021.033888][ T56] Workqueue: writeback wb_workfn (flush-7:4) [ 1021.039921][ T56] Call Trace: [ 1021.043233][ T56] [ 1021.046196][ T56] dump_stack_lvl+0x188/0x24e [ 1021.050914][ T56] ? load_image+0x400/0x400 [ 1021.055529][ T56] ? show_regs_print_info+0x12/0x12 [ 1021.060776][ T56] ? print_circular_bug+0x12b/0x1a0 [ 1021.066025][ T56] check_noncircular+0x296/0x330 [ 1021.071099][ T56] ? look_up_lock_class+0x75/0x140 [ 1021.076290][ T56] ? add_chain_block+0x940/0x940 [ 1021.081270][ T56] ? lockdep_lock+0xf1/0x1f0 [ 1021.085900][ T56] ? unwind_next_frame+0x1880/0x20b0 [ 1021.091244][ T56] ? _find_first_zero_bit+0xcf/0x100 [ 1021.096963][ T56] __lock_acquire+0x2d07/0x7d10 [ 1021.101860][ T56] ? ret_from_fork+0x1f/0x30 [ 1021.106503][ T56] ? ret_from_fork+0x1f/0x30 [ 1021.111131][ T56] ? verify_lock_unused+0x140/0x140 [ 1021.116386][ T56] ? stack_trace_save+0xa6/0xf0 [ 1021.121493][ T56] ? stack_trace_snprint+0xf0/0xf0 [ 1021.126651][ T56] ? check_noncircular+0x189/0x330 [ 1021.131999][ T56] ? add_chain_block+0x940/0x940 [ 1021.137011][ T56] lock_acquire+0x1bb/0x4a0 [ 1021.141564][ T56] ? hfs_extend_file+0xfb/0x13f0 [ 1021.146566][ T56] ? __might_sleep+0xd0/0xd0 [ 1021.151281][ T56] ? read_lock_is_recursive+0x10/0x10 [ 1021.156705][ T56] __mutex_lock+0x12d/0xaf0 [ 1021.161252][ T56] ? hfs_extend_file+0xfb/0x13f0 [ 1021.166244][ T56] ? verify_lock_unused+0x140/0x140 [ 1021.171508][ T56] ? hfs_extend_file+0xfb/0x13f0 [ 1021.176500][ T56] ? mutex_lock_nested+0x10/0x10 [ 1021.181491][ T56] ? __stack_depot_save+0x421/0x460 [ 1021.186789][ T56] hfs_extend_file+0xfb/0x13f0 [ 1021.191604][ T56] ? hfs_ext_write_extent+0x14e/0x200 [ 1021.197026][ T56] ? hfs_write_inode+0xd8/0xa20 [ 1021.201927][ T56] ? hfs_get_block+0xc50/0xc50 [ 1021.206735][ T56] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1021.213019][ T56] ? rcu_is_watching+0x11/0xa0 [ 1021.217900][ T56] ? trace_contention_end+0x5f/0x170 [ 1021.223234][ T56] ? memset+0x1e/0x40 [ 1021.227296][ T56] ? hfs_brec_find+0x197/0x500 [ 1021.232122][ T56] hfs_bmap_reserve+0x103/0x420 [ 1021.237037][ T56] __hfs_ext_write_extent+0x1fa/0x470 [ 1021.242509][ T56] hfs_ext_write_extent+0x17b/0x200 [ 1021.247762][ T56] ? verify_lock_unused+0x140/0x140 [ 1021.253103][ T56] ? hfs_ext_keycmp+0x310/0x310 [ 1021.258009][ T56] ? writeback_sb_inodes+0x46b/0x1850 [ 1021.263456][ T56] hfs_write_inode+0xd8/0xa20 [ 1021.268194][ T56] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1021.273631][ T56] ? __writeback_single_inode+0x4ae/0x1160 [ 1021.279490][ T56] ? __lock_acquire+0x7d10/0x7d10 [ 1021.284559][ T56] ? do_raw_spin_lock+0x128/0x2f0 [ 1021.289622][ T56] ? __rwlock_init+0x140/0x140 [ 1021.294434][ T56] __writeback_single_inode+0x75b/0x1160 [ 1021.300127][ T56] writeback_sb_inodes+0xb30/0x1850 [ 1021.305389][ T56] ? queue_io+0x5a0/0x5a0 [ 1021.309779][ T56] ? rcu_is_watching+0x11/0xa0 [ 1021.314596][ T56] wb_writeback+0x482/0xd50 [ 1021.319151][ T56] ? percpu_ref_tryget+0x250/0x250 [ 1021.324323][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1021.330363][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1021.335609][ T56] wb_workfn+0x423/0xee0 [ 1021.339908][ T56] ? inode_wait_for_writeback+0x220/0x220 [ 1021.345694][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1021.351733][ T56] ? read_lock_is_recursive+0x10/0x10 [ 1021.357235][ T56] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1021.363176][ T56] ? _raw_spin_unlock+0x40/0x40 [ 1021.368066][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1021.373309][ T56] ? process_one_work+0x7b0/0x1160 [ 1021.378467][ T56] process_one_work+0x8a2/0x1160 [ 1021.383457][ T56] ? worker_detach_from_pool+0x240/0x240 [ 1021.389134][ T56] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1021.394193][ T56] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1021.399794][ T56] ? kthread_data+0x4b/0xc0 [ 1021.404369][ T56] worker_thread+0xaa2/0x1270 [ 1021.409116][ T56] kthread+0x29d/0x330 [ 1021.413220][ T56] ? worker_clr_flags+0x1a0/0x1a0 [ 1021.418291][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1021.422923][ T56] ret_from_fork+0x1f/0x30 [ 1021.427393][ T56] [ 1021.482124][ T56] hfs: new node 0 already hashed? [ 1021.487604][ T56] ------------[ cut here ]------------ [ 1021.493313][ T56] WARNING: CPU: 1 PID: 56 at fs/hfs/bnode.c:520 hfs_bnode_create+0x37a/0x400 [ 1021.502195][ T56] Modules linked in: [ 1021.506130][ T56] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1021.513577][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1021.523703][ T56] Workqueue: writeback wb_workfn (flush-7:4) [ 1021.529874][ T56] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1021.535572][ T56] Code: aa a2 8a 89 ee e8 f6 39 d6 07 e9 ab fd ff ff e8 ec 4f 37 ff 48 89 df e8 a4 89 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 d6 39 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1021.555284][ T56] RSP: 0018:ffffc90001576e80 EFLAGS: 00010246 [ 1021.561421][ T56] RAX: 000000000000001f RBX: ffff88805363a0e0 RCX: 9d6591205777c900 [ 1021.569479][ T56] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1021.577521][ T56] RBP: 0000000000000000 R08: ffffc90001576b87 R09: 1ffff920002aed70 [ 1021.585572][ T56] R10: dffffc0000000000 R11: fffff520002aed71 R12: 0000000000000000 [ 1021.593583][ T56] R13: ffff88805363a000 R14: ffff888054d2d100 R15: dffffc0000000000 [ 1021.601627][ T56] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1021.610710][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1021.617354][ T56] CR2: 00007fd625be42f8 CR3: 000000005b721000 CR4: 00000000003506e0 [ 1021.625499][ T56] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1021.633522][ T56] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1021.641536][ T56] Call Trace: [ 1021.644895][ T56] [ 1021.647869][ T56] hfs_bmap_alloc+0x53d/0x5d0 [ 1021.652619][ T56] ? hfs_bmap_reserve+0x420/0x420 [ 1021.657694][ T56] ? rcu_is_watching+0x11/0xa0 [ 1021.662553][ T56] hfs_btree_inc_height+0xfd/0xac0 [ 1021.667736][ T56] ? hfs_brec_insert+0x6f6/0xbd0 [ 1021.672741][ T56] ? hfs_brec_insert+0xbd0/0xbd0 [ 1021.677724][ T56] ? do_raw_spin_unlock+0x11d/0x230 [ 1021.683014][ T56] hfs_brec_insert+0x744/0xbd0 [ 1021.687828][ T56] ? hfs_brec_keylen+0x350/0x350 [ 1021.692855][ T56] __hfs_ext_write_extent+0x2a1/0x470 [ 1021.698309][ T56] hfs_ext_write_extent+0x17b/0x200 [ 1021.703572][ T56] ? verify_lock_unused+0x140/0x140 [ 1021.708909][ T56] ? hfs_ext_keycmp+0x310/0x310 [ 1021.713803][ T56] ? writeback_sb_inodes+0x46b/0x1850 [ 1021.719246][ T56] hfs_write_inode+0xd8/0xa20 [ 1021.723972][ T56] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1021.729432][ T56] ? __writeback_single_inode+0x4ae/0x1160 [ 1021.735320][ T56] ? __lock_acquire+0x7d10/0x7d10 [ 1021.740422][ T56] ? do_raw_spin_lock+0x128/0x2f0 [ 1021.745499][ T56] ? __rwlock_init+0x140/0x140 [ 1021.750332][ T56] __writeback_single_inode+0x75b/0x1160 [ 1021.756045][ T56] writeback_sb_inodes+0xb30/0x1850 [ 1021.761295][ T56] ? queue_io+0x5a0/0x5a0 [ 1021.765704][ T56] ? rcu_is_watching+0x11/0xa0 [ 1021.770607][ T56] wb_writeback+0x482/0xd50 [ 1021.775183][ T56] ? percpu_ref_tryget+0x250/0x250 [ 1021.780333][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1021.786402][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1021.791661][ T56] wb_workfn+0x423/0xee0 [ 1021.795982][ T56] ? inode_wait_for_writeback+0x220/0x220 [ 1021.801752][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1021.807800][ T56] ? read_lock_is_recursive+0x10/0x10 [ 1021.813246][ T56] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1021.819175][ T56] ? _raw_spin_unlock+0x40/0x40 [ 1021.824094][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1021.829332][ T56] ? process_one_work+0x7b0/0x1160 [ 1021.834520][ T56] process_one_work+0x8a2/0x1160 [ 1021.839499][ T56] ? worker_detach_from_pool+0x240/0x240 [ 1021.845207][ T56] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1021.850269][ T56] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1021.855890][ T56] ? kthread_data+0x4b/0xc0 [ 1021.860485][ T56] worker_thread+0xaa2/0x1270 [ 1021.865214][ T56] kthread+0x29d/0x330 [ 1021.869296][ T56] ? worker_clr_flags+0x1a0/0x1a0 [ 1021.874442][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1021.879060][ T56] ret_from_fork+0x1f/0x30 [ 1021.883557][ T56] [ 1021.886612][ T56] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1021.893988][ T56] CPU: 1 PID: 56 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1021.901368][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1021.911484][ T56] Workqueue: writeback wb_workfn (flush-7:4) [ 1021.917513][ T56] Call Trace: [ 1021.920806][ T56] [ 1021.923759][ T56] dump_stack_lvl+0x188/0x24e [ 1021.928472][ T56] ? memcpy+0x3c/0x60 [ 1021.932486][ T56] ? show_regs_print_info+0x12/0x12 [ 1021.937713][ T56] ? load_image+0x400/0x400 [ 1021.942254][ T56] panic+0x2e5/0x730 [ 1021.946177][ T56] ? bpf_jit_dump+0xd0/0xd0 [ 1021.950715][ T56] ? ret_from_fork+0x1f/0x30 [ 1021.955369][ T56] __warn+0x2f8/0x4f0 [ 1021.959382][ T56] ? hfs_bnode_create+0x37a/0x400 [ 1021.964447][ T56] ? hfs_bnode_create+0x37a/0x400 [ 1021.969521][ T56] report_bug+0x2ba/0x4f0 [ 1021.973944][ T56] ? hfs_bnode_create+0x37a/0x400 [ 1021.978993][ T56] handle_bug+0x3a/0x70 [ 1021.983188][ T56] exc_invalid_op+0x16/0x40 [ 1021.987812][ T56] asm_exc_invalid_op+0x16/0x20 [ 1021.992677][ T56] RIP: 0010:hfs_bnode_create+0x37a/0x400 [ 1021.998331][ T56] Code: aa a2 8a 89 ee e8 f6 39 d6 07 e9 ab fd ff ff e8 ec 4f 37 ff 48 89 df e8 a4 89 eb 07 48 c7 c7 00 ab a2 8a 89 ee e8 d6 39 d6 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c b7 fc ff ff 4c [ 1022.017958][ T56] RSP: 0018:ffffc90001576e80 EFLAGS: 00010246 [ 1022.024468][ T56] RAX: 000000000000001f RBX: ffff88805363a0e0 RCX: 9d6591205777c900 [ 1022.032461][ T56] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1022.040474][ T56] RBP: 0000000000000000 R08: ffffc90001576b87 R09: 1ffff920002aed70 [ 1022.048466][ T56] R10: dffffc0000000000 R11: fffff520002aed71 R12: 0000000000000000 [ 1022.056453][ T56] R13: ffff88805363a000 R14: ffff888054d2d100 R15: dffffc0000000000 [ 1022.064712][ T56] hfs_bmap_alloc+0x53d/0x5d0 [ 1022.069625][ T56] ? hfs_bmap_reserve+0x420/0x420 [ 1022.074693][ T56] ? rcu_is_watching+0x11/0xa0 [ 1022.079505][ T56] hfs_btree_inc_height+0xfd/0xac0 [ 1022.084661][ T56] ? hfs_brec_insert+0x6f6/0xbd0 [ 1022.089721][ T56] ? hfs_brec_insert+0xbd0/0xbd0 [ 1022.094715][ T56] ? do_raw_spin_unlock+0x11d/0x230 [ 1022.099924][ T56] hfs_brec_insert+0x744/0xbd0 [ 1022.104751][ T56] ? hfs_brec_keylen+0x350/0x350 [ 1022.109799][ T56] __hfs_ext_write_extent+0x2a1/0x470 [ 1022.115193][ T56] hfs_ext_write_extent+0x17b/0x200 [ 1022.120502][ T56] ? verify_lock_unused+0x140/0x140 [ 1022.125719][ T56] ? hfs_ext_keycmp+0x310/0x310 [ 1022.130598][ T56] ? writeback_sb_inodes+0x46b/0x1850 [ 1022.136012][ T56] hfs_write_inode+0xd8/0xa20 [ 1022.140706][ T56] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 1022.146097][ T56] ? __writeback_single_inode+0x4ae/0x1160 [ 1022.151956][ T56] ? __lock_acquire+0x7d10/0x7d10 [ 1022.157002][ T56] ? do_raw_spin_lock+0x128/0x2f0 [ 1022.162139][ T56] ? __rwlock_init+0x140/0x140 [ 1022.166916][ T56] __writeback_single_inode+0x75b/0x1160 [ 1022.172577][ T56] writeback_sb_inodes+0xb30/0x1850 [ 1022.177831][ T56] ? queue_io+0x5a0/0x5a0 [ 1022.182210][ T56] ? rcu_is_watching+0x11/0xa0 [ 1022.186998][ T56] wb_writeback+0x482/0xd50 [ 1022.191535][ T56] ? percpu_ref_tryget+0x250/0x250 [ 1022.196665][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1022.202672][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1022.207897][ T56] wb_workfn+0x423/0xee0 [ 1022.212199][ T56] ? inode_wait_for_writeback+0x220/0x220 [ 1022.217975][ T56] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1022.224099][ T56] ? read_lock_is_recursive+0x10/0x10 [ 1022.229515][ T56] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1022.235418][ T56] ? _raw_spin_unlock+0x40/0x40 [ 1022.240276][ T56] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1022.245516][ T56] ? process_one_work+0x7b0/0x1160 [ 1022.250660][ T56] process_one_work+0x8a2/0x1160 [ 1022.255708][ T56] ? worker_detach_from_pool+0x240/0x240 [ 1022.261457][ T56] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1022.266492][ T56] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1022.272065][ T56] ? kthread_data+0x4b/0xc0 [ 1022.276610][ T56] worker_thread+0xaa2/0x1270 [ 1022.281310][ T56] kthread+0x29d/0x330 [ 1022.285417][ T56] ? worker_clr_flags+0x1a0/0x1a0 [ 1022.290481][ T56] ? kthread_blkcg+0xd0/0xd0 [ 1022.295085][ T56] ret_from_fork+0x1f/0x30 [ 1022.299614][ T56] [ 1022.303235][ T56] Kernel Offset: disabled [ 1022.307571][ T56] Rebooting in 86400 seconds..